{"report_id":"0e3579ef-68f4-48d6-9d2c-0517ae7eee53","version":6,"status":"done","tags":[],"date":"2026-04-18T18:05:38Z","url":{"schema":"https","addr":"feesaver.com/","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"104.26.5.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"feesaver.com/","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"title":"Купить энергию TRON (TRX Energy) — Аренда энергии TRX для USDT транзакций — FeeSaver","dom":{"size":158,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"9b206984ad9d618bbc5880e60d73958d","sha1":"b9e921249ec34efb7b0a03ea8beb0d4709b6bf8d","sha256":"236e8e0f0bf24561612fc1a957d3dceee2377b5285a04b17a95be62377b0351e","sha512":"d74b70285ef690fb08038bb6b3ce9a4b370924795ce4a570575abbd913fa22d69a77ee69a91fc1b18354c2ddeb3fc487a8b0209cada52182ced50839cf3632aa","ssdeep":"","tlshash":"09c08c2bac0280458b30aac488f1f2ac8088f8185294dc80dad0d0d6aacc6aacc020e0","dom_hash":"domhashb1f05b34bb3cdc72adb99ad8fc515543","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"feesaver.com/","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"104.26.5.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T18:05:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"c.botfaqtor.ru","ip":{"addr":"51.250.34.127","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2018-07-17","domain_rank":1425846,"first_seen":"2024-07-09T18:41:14Z","last_seen":"2026-04-12T17:55:55.901028Z","alert_count":0,"request_count":2,"received_data":1998,"sent_data":956,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-04-15T18:07:20.758385Z","alert_count":0,"request_count":3,"received_data":23372,"sent_data":1299,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"gw.botfaqtor.ru","ip":{"addr":"84.201.145.11","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2018-07-17","domain_rank":955311,"first_seen":"2024-09-12T16:30:34Z","last_seen":"2026-04-16T13:18:20.323393Z","alert_count":0,"request_count":1,"received_data":683,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-12T22:24:43.06808Z","alert_count":0,"request_count":3,"received_data":1297860,"sent_data":1316,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-12T22:38:35.592234Z","alert_count":0,"request_count":2,"received_data":1001,"sent_data":2202,"comment":"","tags":null,"fingerprints":null},{"fqdn":"feesaver.com","ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-05-27","domain_rank":3270875,"first_seen":"2026-04-18T18:05:42.766962Z","last_seen":"2026-04-18T18:05:42.766962Z","alert_count":0,"request_count":60,"received_data":3819915,"sent_data":35624,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MODX","description":"MODX (originally MODx) is an open source content management system and web application framework for publishing content on the World Wide Web and intranets.","website":"https://modx.com/content-management-framework","common_platform_enumeration":"cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*","icon":"MODX.svg","categories":["CMS"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.botfaqtor.ru","ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2018-07-17","domain_rank":1401187,"first_seen":"2024-10-22T12:20:51.688921Z","last_seen":"2026-04-16T13:18:20.065591Z","alert_count":0,"request_count":1,"received_data":227891,"sent_data":408,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"5-182-5-41.botfaqtor.ru","ip":{"addr":"158.160.168.215","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2018-07-17","domain_rank":0,"first_seen":"2022-03-16T11:04:18Z","last_seen":"2026-04-17T02:27:11.895652Z","alert_count":0,"request_count":8,"received_data":2725,"sent_data":4143,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-04-12T22:43:52.947527Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.feesaver.com","ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-05-27","domain_rank":0,"first_seen":"2026-04-18T18:05:42.768268Z","last_seen":"2026-04-18T18:05:42.768268Z","alert_count":0,"request_count":4,"received_data":5815,"sent_data":1766,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"feesaver.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-22T17:11:05.46007Z","times_seen":310362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","size":20469,"data":"","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-22T17:02:27.624988Z","times_seen":2544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5910fc39aa0941a780bc9b438ab8f1a","sha1":"2119dc8226f0e83f02d6fe8e91516c0f65bd00e5","sha256":"81d0ec77516aefc1a3729f2fb6ff4fd8d2ad91e65c8f57ec441e71b827dd6973","sha512":"378d0412582424f905971a9dca0608f5b3808cf5bb5753b8003dd1c5ad220c3c983cd3073899d79753aac7ff560d844adf4efe3d6f91abd9fc0bafc11b92a365","ssdeep":"","tlshash":"57f00ea53cdd44258377102a27fbe148743a692f2c4afc19f94cc4812f59ead18bbd8c","size":590,"data":"","first_seen":"2026-04-18T18:05:47.43474Z","last_seen":"2026-04-18T18:06:58.431148Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e311da0e3646612c7ddc6f07a70e800","sha1":"638d9a9c1917d3c1401c247d383cc4c77e7d5a80","sha256":"b75d80283a8d76f96b3975d1e569232b100d6f813031e7c9fbddb11573c4c3a0","sha512":"ac1cee0e828ff2aea8ad9f6ed3e283f3dd89b1c89206b90f15b60004dec3c2d6cdc2403c71b187a8d93b76f85e2e154122b24f8d1faf42febdca8e760eac025a","ssdeep":"","tlshash":"d50115476edb04342906707ec67e8904b1b2156f3289c62258dca8685d00ba68619add","size":728,"data":"","first_seen":"2026-04-18T18:05:47.436657Z","last_seen":"2026-04-18T18:06:58.432266Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.botfaqtor.ru/one.js","fqdn":"cdn.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f694b7f11cd5ee29b0ab05db99c6a75","sha1":"f32f71b69f65cd0a5746761cd5f8a785a823f1c0","sha256":"114d8abb73b12da04d99ee1b7342f0d435681e765e032854c9da5627e8734040","sha512":"3dee42cc4a2cbffa0c7fc6d9f5bf473b8573f754c997a9021e7f9330037d202fa3c490f6c64ca4d49ba1152d673ba83118951bc9f05f35e7839f6c235136a96f","ssdeep":"3072:cISii1ZOxhFmHTHgniLOEJYk6BaB9vvN1:2QhFm0iLfJYk6c9nz","tlshash":"00246d9ab196303d83db635a613f531afd3a9451e9494820ea28ddd41bb4c87c23bf7c","size":227429,"data":"","first_seen":"2026-04-07T08:47:24.44811Z","last_seen":"2026-04-21T03:28:19.300704Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/components/minishop2/js/web/lib/jquery.jgrowl.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f3d7c8e11db9f6a0071a54148b35de0","sha1":"d40d732b4c7573eaae3b8469305882d12f900de8","sha256":"45118533e31429e161d03c51dd6f48bc963829f20504a7ea939ba63c2d79ca5c","sha512":"91af40b98729814a11ccd9a5e0ff261d3559d54e8f937e8946f7d1d07b3af54b93511b0f0a2d7f394891f4debb08691acd31b2e60924f8b342c65eca9414446e","ssdeep":"96:aLCpkK+Lsr6e8pDAXT0shxJKNLlhyLWPtC1ffcrYg2qn9TIyYeLvC69/dmqEIkhw:aOpkHAD1cye9n","tlshash":"3bb1cd4bb2b2578469eb1776d02f171a21332c6d4de60544f1ee87dc4e34e48a26fb35","size":5491,"data":"","first_seen":"2023-03-12T21:05:24Z","last_seen":"2026-04-21T19:53:46.522906Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/components/minishop2/js/web/default.js?v=8124027e82","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16638f9b6e7b1abb9e151639915810cb","sha1":"5e4183b1bbb70335cc8fde2fedef7aa3d9222fb3","sha256":"fa64c2255e24e1e68f679f9d2e6aed640346499991078645095c851daeaf93a1","sha512":"f18f1a5b3293ccda9ac597337cb14242facf1b8e268d511ec678adef4a67f3ed657970f052e92a65d9c60c5c2c18555c07f1af8decf4c466bddb036848afc7e8","ssdeep":"768:/91SiVTRp2+1LC2ewGgM3jx/oQY7wydax:LSipRp2+1LC2elgM3jx/oQ4rQx","tlshash":"dbc2580468f3225e5573b6aa4faf1b15262580234b0aee137e4cd280cf567287f75b5f","size":25960,"data":"","first_seen":"2025-09-20T17:40:15.66427Z","last_seen":"2026-04-18T18:06:58.430434Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/main.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7df9d025eb3a0a31ff79d0a95c04d55f","sha1":"04af18b155dc232461c1b3c74ac150843e76220d","sha256":"e410102860289a30279b93f3282dda3f46af3eb47f867d6ab48606b8436efc0a","sha512":"ccc717176462e618d8fe0244d471e569958810328067e67af31ecf73e22e3687b0536485fa6b6d2665eb154867a800da1a746abb4219bb9cd7d22904034ec560","ssdeep":"6144:gy/rz7dGTeLPfV1t6WW5XrVlcjLc9bHHr2HOsDHyU:gsrz7dGaLPfU5lrVejo9bcOzU","tlshash":"7f7419d87290b47603b361a2807f110ef23a6959b40a8551f57cc8d67f78c9e8277fba","size":350877,"data":"","first_seen":"2026-04-18T18:05:47.399738Z","last_seen":"2026-04-18T18:06:58.427116Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/423.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b3ed195801af59ecd05d91d070cb708","sha1":"058d2762ff121eecea7dae3a83bb19ba3a092b7a","sha256":"b638997e1f4982f29435414fd77ebb06a632cded202667c78b599fc84ee92aa2","sha512":"fa506d69779cba9950e1fb60d275077fc32f1c77e8e6dcd23ef29f7f6ad199a8d89473d8b9049472b66000c1bddd09b04c87a6199c3245cfa33017f0d9886819","ssdeep":"192:oLEW+bsBoRfW0G11ZZLEAQUuleIzD43oFEO:GxxxVZZLwh436","tlshash":"f5d1c8def381f423472261e0883f5217f2676849b01e089de769d1e4ac3c0de566be7a","size":6638,"data":"","first_seen":"2026-04-18T18:05:47.412812Z","last_seen":"2026-04-18T18:06:58.393398Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/pixel.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b42e329b6c2aff44d40ebf22411d397","sha1":"c93b7e83f2a77c71b9d5dc424c4626e7713f550c","sha256":"105a9cc67f620cda48148d494be7065bdca39b10b15e4890183f2040cc6f0869","sha512":"e1a6dd6622b324de377068e4cf1aea34d0564c71f709439bc1935a85b080bd452512b8d65ad69747a0a9828606df2c3847013920dda88332bbece61433d472ea","ssdeep":"","tlshash":"4531c8f1336a90ed81f220e9515f1a1bd1769b45bc188c84a063fa016434e7b0b379a9","size":1618,"data":"","first_seen":"2025-05-31T10:10:21.166016Z","last_seen":"2026-04-22T13:11:04.910687Z","times_seen":618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9adb1a20e7bd0b3a8aceb965ea09d3ef","sha1":"b0fed66c387f7696600d46d2234c05e688e9e8fe","sha256":"3e13a0e5d28e8720e567cf9d12f8376ef9bcc53b2c28e3d483808cddf46af337","sha512":"537e2233406f44abee866ad2a9d8124266e88978edef033fcee13799dc8bdef7ce364359427e98868cc3f442ae4c87bb12aafb5b62bfcddd759b66a5c57f1180","ssdeep":"","tlshash":"4de07d4d744d749d4355043b01f3f71e2051124870e62a16dc06c26da0395870807e8c","size":308,"data":"","first_seen":"2026-04-18T18:05:47.438373Z","last_seen":"2026-04-18T18:06:58.433516Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"67bc1d630b7613ab4a157972408bd182","sha1":"4d73c81a429390dcf8ef2104779aa67732e9cc6b","sha256":"6f91bbaae93ec49ce59ab01da8009805db71b116bce41ad28b3dc914068c1faf","sha512":"632b90656164ff3e1d19d077fc71bb0ef0febb20a712da07afc51d801c6c797155393b8c77c00379cfeab42877a5732b8319814020350b29cac32182d5b0b2bb","ssdeep":"","tlshash":"06e02bf5e04aa738418332c5ea792b4a1ee00f508e1ad1674a3d45d5d22aa8a10a0343","size":396,"data":"","first_seen":"2023-03-25T23:27:51Z","last_seen":"2026-04-21T19:53:46.627239Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/components/polylang/js/web/default.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79ebd3b684762268997e5ed4526304b6","sha1":"090cf32777bd1523d0766913da287db1e4fc337a","sha256":"f58c1500c841509d030d5c1ca199a0bce7bf4bc491d929c0fccc1cef09cc7f7f","sha512":"3fe6495f14dd799e5ee10c50ce7d3e2349cc3b5f5d72ef7be8b58083a86ae70d1602f822162e6dacfce43e4f0b84e783b2f9af36571e0e6543eab5df75f6e169","ssdeep":"","tlshash":"7c11d05afa012769108790b6363f38492137496c1442b8697528dfe58efac5c9e53bbc","size":899,"data":"","first_seen":"2025-09-20T17:40:15.631087Z","last_seen":"2026-04-18T18:06:58.369044Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-22T17:10:56.68927Z","times_seen":46391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/880.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93d5a66a9f097886b884e4915cc7cf3b","sha1":"825e0360d0a474772fb5488588d585646af696c1","sha256":"8a1492500e20355c999904659bcc1d39bd0ad706ff2d29163778c71b737f9fff","sha512":"f968f80bea0ea4ae39d438c01f37ea8d1f3bd96e537d616076360b3e7e5068ac77ff8500af2aaccd19219605251ea5a30356939e26c2efcc36a79ed7ab8c4ec2","ssdeep":"1536:AcXcmMupVp+ks6BM2fzMmxbTdDJHuYDrAGJP9aIk:VcmlnZMebTHuyAGJMIk","tlshash":"e163f8ddb292f066029b61a1453f0a0bf3379e98741f0958f258d4c97d3c98990bbf7a","size":69865,"data":"","first_seen":"2026-04-18T18:05:47.354595Z","last_seen":"2026-04-18T18:06:58.391407Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K2TFKBWX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaf2d65ae199dcbc1084e90f18fa7712","sha1":"69e9838d7f30ecc111b4042b65d599ffe4a8d8a5","sha256":"bc443eb8b2022ca9d5508426cde787662edb576bd1ff8220b498708720efcc69","sha512":"2d5bc8c3d6d8a741f18a146726b95cc078272dc0349ebd679bad69a991f2f95152ce490eaf1076a74baca27b7f023ccce89a06699e72e4e50b3b4e716c9d49cc","ssdeep":"6144:k4OjKpCi4MRBZtfJJPj8B3U90yIjwcH6pLYgW5uzsAJ:fT4MPfJJL8+5pV","tlshash":"828418ccb3d6706653a3b478903f018ba27a7992f44cc899f186d8e42d7469a4277f7c","size":401283,"data":"","first_seen":"2026-04-18T18:05:47.361765Z","last_seen":"2026-04-18T18:06:58.416693Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.botfaqtor.ru/i.js","fqdn":"c.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"51.250.34.127","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7711e19c8bd2fcd59b0f78e04a201cc3","sha1":"3f359435d2be89b9b5717a05688ef0b206c80758","sha256":"d6603c939bdc204fbd9c5a4304cd080dcd8b47be0fddde528b4aa03700cb4019","sha512":"c13f76c25a846e0bd32b06af8071110fe63cb87d228c2a8356fab9ad55bd8dce04c3dd8be47f96ddd9756f3247f75ea0a8b674ec8ac2a800403254457413f846","ssdeep":"","tlshash":"9621df54ebed087a583624051d1d52c9e8ad09f3c809f055bcbcdb5b2fc4e8b23a14ba","size":1303,"data":"","first_seen":"2024-04-19T01:28:22Z","last_seen":"2026-04-22T06:47:22.791277Z","times_seen":540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16844729593\u0026cx=c\u0026gtm=4e64f1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d49c3be7d0d9a1335e449ecd73d0eb4d","sha1":"4e047d4618525273c97c442dc286cda319172607","sha256":"f5686303e0fed39877face5595ad95bfc82f2f50c728d6ce79e95b5d09c98439","sha512":"5466424911ec8d8ba025b363d9ab36b8e67e1975c528a5728b80665197260e3e0d65644c98b1444b5f7ab6394456c4844840a14d0b87df8a38ee6806fe58adab","ssdeep":"6144:64OjKwCi4MRBZtfJJPj8B3U90yIjwcH6pLFgW2urr1XQ:QT4MPfJJL8u5/BA","tlshash":"079418cdb3d6746253a3b478903f018ba67a39a2b44cc899f185cce42d7469a4277f7c","size":421533,"data":"","first_seen":"2026-04-18T18:05:47.423082Z","last_seen":"2026-04-18T18:06:58.426302Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57a7c709f460bae8e14f554eaa719beb","sha1":"449b0088706010a9f468d03f41d619465d008760","sha256":"baa4766f32f62a8d3275745d5aaf459f001b94bce2426631d1d2a04868ac1c9d","sha512":"d396dee6a4115630f2cbe294a69f9b0d06cb8075023d1ac519aae1927dac4b291b5ee8193cbe1194cb7bf976adace8b8906f2898b4d52a7d2fa477780e645056","ssdeep":"","tlshash":"98b09b6735045635800d26c05d7615c755a70a5545077c76e344e75415564441c554e4","size":109,"data":"","first_seen":"2025-09-20T17:40:15.687495Z","last_seen":"2026-04-18T18:06:58.438455Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HP763EG55X","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fc71207687c390db9f0410a4533ad55","sha1":"a95a6e13caa4b1682a693ac5ecfcf6dadc736a3f","sha256":"e2105f3c90060b3fa8bd60ac48e53d873fac82fc6a2cb7b6c086bc28ca0e7f09","sha512":"ff13ce970335e26d569508cea0bff8b78abb5809986fa0b192b02a67edd173a9f130b53b3ec04f6fa9c7b71ac6bfa3c6e32e6b933d8c518ced9f4c1650dcad1e","ssdeep":"6144:jS4OjKg7CA4MRBRfrJPj8B3v0yIjwcHCpLUgW6w01V91XG:E7t4MtfrJL8p5WOW","tlshash":"c8a409ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","size":473272,"data":"","first_seen":"2026-04-18T18:05:47.433394Z","last_seen":"2026-04-18T18:06:58.411674Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/349.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d748b5bc5207adc82ad2c750b43be4c4","sha1":"575ca7760ad847345770f04414c1cac9ca2b9bce","sha256":"d35326f89e05e0e51985e80914e52873bceacaeb60cafd1695002bf0e1946544","sha512":"9db250fac821d558d304f1b58915b6a5b27cfb2f5df92d34afa7c7e6370d487b2231e71e087a5af312d57de65e2e7201925c79bbfb8e9c15b7501777e947b6d7","ssdeep":"6144:D5JhmgBtEthDGue6r2W8u+B/pyQIeZaATDqAg5L0z/DP/tSD/Zkr:Dv1BmthDGue6r2Wva/pQeZaATDqAUL0p","tlshash":"fc14f6d53342b12282e256d6583a050ae33666483547899cf2bc5ddf3c6a98b71fff38","size":205870,"data":"","first_seen":"2026-04-18T18:05:47.364206Z","last_seen":"2026-04-18T18:06:58.413562Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-22T17:11:05.46007Z","times_seen":310362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7cfdd254326fa7cd231b279b4e8506c","sha1":"14858b99c4aa9f7c5047e27cd9622adbfa3ce35f","sha256":"64bad4d4903c2408a0a3d87416b22f8d0a67c5e2d5a988f03c7b0614714a6849","sha512":"e8eb7942ea0a107fff611ae31a163db637b72297e185d4e6cda5f27559abadd979326a40fae6ec345fbf0a90b66adf1550c8744ccdf4f279c4a30562a7a80ca0","ssdeep":"","tlshash":"0fc02bcd220a0c7055fb27808b3ff600b002321494e4a9300c1d23448d30e03d758a70","size":152,"data":"","first_seen":"2026-04-18T18:05:47.443269Z","last_seen":"2026-04-18T18:06:58.439257Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"326757391e89131dda74dee2d231ac8b","sha1":"ac425a131dc64b8ec427b5ffedf4dddeeda28b78","sha256":"f718f1f0c2fb01dddcc990f89aead67a514bb440d8266b30074f9903c601531f","sha512":"a4d1e14299e6bde3cddb620a02841fb39fc72937880b53fc41cfc6563d421d20bdb885ca3f8bef31d0e39f3d42a9a53715db34d8c33475687e985abc676a322c","ssdeep":"","tlshash":"d070000882a8030000a00200ab822a002a8002028200200088880283200e00ba0820a8","size":21,"data":"","first_seen":"2026-04-18T18:05:47.445227Z","last_seen":"2026-04-18T18:06:58.441097Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/jquery.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-04-22T16:01:13.086351Z","times_seen":21987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/components/minishop2/js/web/message_settings.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f868d940a0af45c158165f2f8e2533b","sha1":"b6d2ef551b1dfa264793552f5fde3ddd0f06045d","sha256":"2ba9aa475e4fdf735d9671359b846d01c8d17c9f25747235453ac7b2f9b3b50f","sha512":"5afb662a86123b1d00a3bc8da92d820cfeee45ad28f69cea5c76979884c4e21a7631a4f62dab1bcb96cab3d3d43eb37631028ade7b95a9f9a7acd34fda962aba","ssdeep":"","tlshash":"3921d10d64f71f1e40a3b03abd4f7414253184235699bf22bd4d4291df585bcaaabf8e","size":1425,"data":"","first_seen":"2023-03-12T21:05:24Z","last_seen":"2026-04-21T19:53:46.58667Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/shared.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf3a5dfb49295dd436d0a67f6b22d52b","sha1":"643f740efc0287ab4911a1664e8d06d11ef4a86f","sha256":"53c6b021f6d2c3c5b5c9019aba1e5ace635bbdcead54bbec5da80eaa8e60a812","sha512":"70848fa4097ca190f1b6fc4b0579345aef4951f49b6561447c712e315122311b7e5450b892b1ef2d7761e8291a49b6586f6e6bed09e0a238a19952881f367582","ssdeep":"","tlshash":"ce01106031507cd172be40e2883e8783f215b8322a76a6f0eb476a719045cd76269b51","size":713,"data":"","first_seen":"2026-04-18T18:05:47.415618Z","last_seen":"2026-04-18T18:06:58.41024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#tron","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Twpgx1QTT6DGG%2F6g2AgQt9kSb%2FjZXzPjQ3Y%2ByW4AVKbyB5GtQP8ify%2FiQ091VBtdVjvQ5Im%2BxPXJIie%2FB57FydOueKnNvWvGcqWR3CwTLClFm%2Bfa2zjVCmbEAb7Ag%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c0fe710883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/staking/qr-code.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/staking/qr-code.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69b3affb-14f83\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yQI%2FUhsaAtju5zoy9mOmboZsWURWqBJZWEdM1XTJH8crn3mFAAO1L5UXkecyTqV6aIPKC0OEuVnf7B%2BVG6U3gFp%2BXM8xa72UFsAsmX0NcVmypvCaZjQQzu3RGMcGRQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c5af5d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85891,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d2679b89507635efb76f13c4f6ff4a0","sha1":"e50f3a2fce37c4dd250a8b967e49119a7f4e2c93","sha256":"e72e9bedd7979e6517bc4f51e1cd4cf3dcd730a76aed5219f3af0d1dd3cb8672","sha512":"939d166195279519749025d6ca9a5f4a51ce64bf7fba383f24344a45dc112b6235e0159fc2f73e34147646ebc6295ad199b55500f5631de359d20e98611a4ec5","ssdeep":"768:P3dK6Bqk3EroJj1SlvIQgkx0FiavcpmCcxJkJpBSzHDk8741QdEr+CsjubCP9UP:P3dK6Bqk3EroJj1SlvIQLrr+CKe","tlshash":"5883bacd02126a914e85f3ce3f2ae471ed5f6ac492818ed34018670b59c7eddbe5b90e","first_seen":"2026-04-18T18:05:47.34996Z","last_seen":"2026-04-18T18:06:58.425527Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/880.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /js/880.min.js HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 23 Mar 2026 05:52:21 GMT\r\netag: W/\"69c0d515-110e9\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5AqQTHw5kcixTTojWQUT00N1mjOu4ug02ebxMKogMweg036MCaUZzoZq9YLR8Uu0hRJs40lPkfZabcop7%2BhdEaE14%2BI0DXqjJE9nzMZWYiNfb0Exi%2FB2v%2BVeMQiRAg%3D%3D\"}]}\r\ncf-ray: 9ee598c5bf5f0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69865,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"93d5a66a9f097886b884e4915cc7cf3b","sha1":"825e0360d0a474772fb5488588d585646af696c1","sha256":"8a1492500e20355c999904659bcc1d39bd0ad706ff2d29163778c71b737f9fff","sha512":"f968f80bea0ea4ae39d438c01f37ea8d1f3bd96e537d616076360b3e7e5068ac77ff8500af2aaccd19219605251ea5a30356939e26c2efcc36a79ed7ab8c4ec2","ssdeep":"1536:AcXcmMupVp+ks6BM2fzMmxbTdDJHuYDrAGJP9aIk:VcmlnZMebTHuyAGJMIk","tlshash":"e163f8ddb292f066029b61a1453f0a0bf3379e98741f0958f258d4c97d3c98990bbf7a","first_seen":"2026-04-18T18:05:47.354595Z","last_seen":"2026-04-18T18:06:58.391407Z","times_seen":2,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/logos/logo-text-white.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/logos/logo-text-white.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05KsVJzy0rhPPH860e9XQRcqDrJshwFE7%2BcCZ48o0D4YnWpX0QZhBSm33xn1ei0Aii7q0vJapq%2FPB3H4hVrXmwNIei7rxjOx47T2uar02S3IlGDR3MKXju%2F8n56PrA%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69b3affb-2c2c\"\r\ncf-ray: 9ee598c0fe6e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11308,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c973465a5cff51fb4f5a10502c2b82c6","sha1":"4179ac71db3d68519edb8fabc275b29e543d1a7c","sha256":"c045092e4e16e570f3963034f587013a4998f00704fe716dd9397c482d3d1d29","sha512":"298cf08ef0c991770d0b14854e852a1bacacd41c0595074e0f22d7902a26e3eb19b8cf951bfb53f64ccd5ade0ae18b79b8106065c53065ff2dd0ee9c802a2bc1","ssdeep":"192:4UaqQJpBI++oonaPLeMGogXjAZuUVC/5ePeMmGYZjpZUX74UJ:MmooniqZAZBu5ePecKV03J","tlshash":"fe3252c977e452f1e68aa7f44017f9a93f1b34be3762d63dc6615ea0a64211c18dcca0","first_seen":"2026-04-18T18:05:47.35621Z","last_seen":"2026-04-18T18:06:58.415195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.botfaqtor.ru/one.js","fqdn":"cdn.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.botfaqtor.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 04:02:54 GMT","end":"Mon, 06 Jul 2026 04:02:53 GMT"},"fingerprint":{"sha1":"87:07:39:31:E2:8B:7C:7C:87:C1:63:D6:48:E9:93:5F:03:AC:CC:E2","sha256":"9E:4E:36:02:AB:F8:B2:BB:27:86:87:44:DE:CE:44:EC:6E:88:18:7A:3C:0D:68:EA:04:4B:E6:D2:A3:3E:58:04"}}},"request":{"raw":"GET /one.js HTTP/1.1\r\nHost: cdn.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"3f694b7f11cd5ee29b0ab05db99c6a75\"\r\nlast-modified: Tue, 07 Apr 2026 06:16:07 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 6d2931d1139e3d0c\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227429,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2238)","md5":"3f694b7f11cd5ee29b0ab05db99c6a75","sha1":"f32f71b69f65cd0a5746761cd5f8a785a823f1c0","sha256":"114d8abb73b12da04d99ee1b7342f0d435681e765e032854c9da5627e8734040","sha512":"3dee42cc4a2cbffa0c7fc6d9f5bf473b8573f754c997a9021e7f9330037d202fa3c490f6c64ca4d49ba1152d673ba83118951bc9f05f35e7839f6c235136a96f","ssdeep":"3072:cISii1ZOxhFmHTHgniLOEJYk6BaB9vvN1:2QhFm0iLfJYk6c9nz","tlshash":"00246d9ab196303d83db635a613f531afd3a9451e9494820ea28ddd41bb4c87c23bf7c","first_seen":"2026-04-07T08:47:24.44811Z","last_seen":"2026-04-21T03:28:19.300704Z","times_seen":47,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":133,"dns":37,"connect":60,"send":0,"wait":69,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/components/minishop2/js/web/default.js?v=8124027e82","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/components/minishop2/js/web/default.js?v=8124027e82 HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 16 Jan 2025 05:32:30 GMT\r\netag: W/\"678899ee-6568\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZqI4iMb2cAARuYvj3U9PUFqCIvux04A2h4K9%2FgjNen7ffW73QtbQQlUAAQklg6d6%2BOWnDl0xxa5bebxyZ8f2TghHcZbTcIwaGLivO7Fd59%2BNmeneRRnEBO9Jtv%2BgBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: 9ee598c10e720883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25960,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"16638f9b6e7b1abb9e151639915810cb","sha1":"5e4183b1bbb70335cc8fde2fedef7aa3d9222fb3","sha256":"fa64c2255e24e1e68f679f9d2e6aed640346499991078645095c851daeaf93a1","sha512":"f18f1a5b3293ccda9ac597337cb14242facf1b8e268d511ec678adef4a67f3ed657970f052e92a65d9c60c5c2c18555c07f1af8decf4c466bddb036848afc7e8","ssdeep":"768:/91SiVTRp2+1LC2ewGgM3jx/oQY7wydax:LSipRp2+1LC2elgM3jx/oQ4rQx","tlshash":"dbc2580468f3225e5573b6aa4faf1b15262580234b0aee137e4cd280cf567287f75b5f","first_seen":"2025-09-20T17:40:15.66427Z","last_seen":"2026-04-18T18:06:58.430434Z","times_seen":19,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#fire","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sx6gTuDt9YjZcsvT3GaCfpSzVB57zDnts%2BuldjhjZCV1mn1tceDFDfFhfVY48D3QXoBLUkdPE2nP4xlA5KJmt61XI5jxk7YPSM2e8Ch56qEuajlf6PfxGWDlIWzi1A%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c30ee20883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K2TFKBWX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:14 GMT","end":"Mon, 22 Jun 2026 08:35:13 GMT"},"fingerprint":{"sha1":"BA:9E:A9:01:73:30:25:9B:9B:28:25:39:24:13:22:55:3E:F0:57:C3","sha256":"9D:AB:4E:BD:B4:98:3A:1E:70:9C:42:A2:E1:DA:0E:18:3C:BB:D8:2A:58:08:F5:85:3D:36:0E:1A:7A:27:AC:5E"}}},"request":{"raw":"GET /gtm.js?id=GTM-K2TFKBWX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\nexpires: Sat, 18 Apr 2026 18:05:17 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 138961\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401283,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5461)","md5":"eaf2d65ae199dcbc1084e90f18fa7712","sha1":"69e9838d7f30ecc111b4042b65d599ffe4a8d8a5","sha256":"bc443eb8b2022ca9d5508426cde787662edb576bd1ff8220b498708720efcc69","sha512":"2d5bc8c3d6d8a741f18a146726b95cc078272dc0349ebd679bad69a991f2f95152ce490eaf1076a74baca27b7f023ccce89a06699e72e4e50b3b4e716c9d49cc","ssdeep":"6144:k4OjKpCi4MRBZtfJJPj8B3U90yIjwcH6pLYgW5uzsAJ:fT4MPfJJL8+5pV","tlshash":"828418ccb3d6706653a3b478903f018ba27a7992f44cc899f186d8e42d7469a4277f7c","first_seen":"2026-04-18T18:05:47.361765Z","last_seen":"2026-04-18T18:06:58.416693Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/349.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /js/349.min.js HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru; _ga_HP763EG55X=GS2.1.s1776535517$o1$g0$t1776535517$j60$l0$h0; _ga=GA1.1.341988676.1776535517\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 23 Mar 2026 05:52:21 GMT\r\netag: W/\"69c0d515-3242e\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s7Deew%2BE8yyKOp%2Fdc8v58quj%2FaXqI2A4wwWb7Lbi2pMEbsBsWGwjf2XxVClAdFX5BFRcFzEPh%2F%2F%2BIBp6elJ%2BlCthZsQmjrFL%2FvqLiMPaL%2F1B5czW5SnGHAO2oJUieQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: 9ee598c9f8070883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":205870,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"d748b5bc5207adc82ad2c750b43be4c4","sha1":"575ca7760ad847345770f04414c1cac9ca2b9bce","sha256":"d35326f89e05e0e51985e80914e52873bceacaeb60cafd1695002bf0e1946544","sha512":"9db250fac821d558d304f1b58915b6a5b27cfb2f5df92d34afa7c7e6370d487b2231e71e087a5af312d57de65e2e7201925c79bbfb8e9c15b7501777e947b6d7","ssdeep":"6144:D5JhmgBtEthDGue6r2W8u+B/pyQIeZaATDqAg5L0z/DP/tSD/Zkr:Dv1BmthDGue6r2Wva/pQeZaATDqAUL0p","tlshash":"fc14f6d53342b12282e256d6583a050ae33666483547899cf2bc5ddf3c6a98b71fff38","first_seen":"2026-04-18T18:05:47.364206Z","last_seen":"2026-04-18T18:06:58.413562Z","times_seen":2,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5-182-5-41.botfaqtor.ru/visit/248930/1","fqdn":"5-182-5-41.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"158.160.168.215","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:18.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5-182-5-41.botfaqtor.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:52:46 GMT","end":"Sun, 24 May 2026 21:52:45 GMT"},"fingerprint":{"sha1":"6F:DC:0B:E6:69:5E:5D:AC:6B:33:CA:94:BC:F9:8A:B0:C9:10:F5:DD","sha256":"E5:DE:41:10:83:4B:7A:15:95:11:E1:9B:BB:02:F8:53:58:F1:4C:0A:BF:F1:0A:88:0D:76:56:C4:A0:F2:68:68"}}},"request":{"raw":"POST /visit/248930/1 HTTP/1.1\r\nHost: 5-182-5-41.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2052\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2052,"data":"{\"f\":\"5c9bb22880d821875e455789269b310c\",\"fd\":{\"vendor\":\"\",\"productSub\":\"20100101\",\"pluginsBool\":true,\"pluginsLenght\":5,\"activeXObject\":false,\"browserName\":\"Firefox\",\"fonts\":[\"Bitstream Vera Sans Mono\",\"Bookman Old Style\",\"Century\",\"Century Schoolbook\",\"Courier\",\"Helvetica\",\"Palatino\",\"Palatino Linotype\",\"Times\"],\"language\":\"en-US\",\"colorDepth\":24,\"deviceMemory\":null,\"pixelRatio\":null,\"hardwareConcurrency\":48,\"screenResolution\":[1280,1024],\"availableScreenResolution\":[1280,1024],\"sessionStorage\":true,\"localStorage\":true,\"indexedDb\":true,\"addBehavior\":false,\"openDatabase\":false,\"cpuClass\":null,\"platform\":\"Win32\",\"plugins\":[[\"PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"Chrome PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"Chromium PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"Microsoft Edge PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"WebKit built-in PDF\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]]],\"canvas\":null,\"webgl\":null,\"webglVendorAndRenderer\":\"Mesa~llvmpipe\",\"touchSupport\":null,\"adBlock\":false,\"bodyStyle\":\"undefined\",\"buildId\":\"20181001000000\",\"clipboard\":true,\"doNotTrack\":true,\"getBattery\":false,\"hasLiedLanguages\":false,\"hasLiedResolution\":false,\"hasLiedOs\":true,\"hasLiedBrowser\":false,\"locationBar\":true,\"mozInnerScreen\":true,\"requestFileSystem\":false,\"timezone\":\"UTC\",\"timezoneOffset\":0,\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"webdriver\":false,\"phantom\":false,\"node\":false,\"coach\":false,\"rhino\":false,\"domAuto\":false,\"online\":true,\"audio\":null,\"performance\":true,\"topself\":true,\"hiddenFunc\":\"n/a\",\"hasFocus\":false,\"sendBeacon\":true,\"hasCookie\":true,\"media\":2,\"mFullScreen\":true,\"mRtci\":true,\"uaDataMobile\":null,\"uaDataPlatform\":null,\"uaDataBrands\":null,\"windowChrome\":false},\"r\":\"\",\"h\":\"https://feesaver.com/\",\"c\":\"4e26186e-d06a-4017-b7e3-da720c58484b\",\"v\":\"1.2.0\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 18:05:18 GMT\r\nContent-Type: application/json\r\nContent-Length: 91\r\nConnection: keep-alive\r\naccess-control-allow-origin: https://feesaver.com\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0570696d9d2e184af9fff8bf5766d7cd","sha1":"bf7d55a37cd1f8895469d5d9ace39b11f5b2d25c","sha256":"28f6051ccdd2818cc3936a8b34087aca546547d1e134c09ccdac18ce9b0b0903","sha512":"3142e892836e83d9b63ebc8937a5ac8007a61ce67fef281ba3e382756834656463accadd06d4162dcdf9ae161060251e10667c34b0d51fa1ab699d4b5099e39f","ssdeep":"","tlshash":"18b0124e06088690833f0847050db4404489304543de01201c8103fc54cb4088811ff6","first_seen":"2026-04-18T18:05:47.366193Z","last_seen":"2026-04-18T18:05:47.366193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=12\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Ffeesaver.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1270626102.1776535519\u0026dt=%D0%9A%D1%83%D0%BF%D0%B8%D1%82%D1%8C%20%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%B8%D1%8E%20TRON%20(TRX%20Energy)%20%E2%80%94%20%D0%90%D1%80%D0%B5%D0%BD%D0%B4%D0%B0%20%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%B8%D0%B8%20TRX%20%D0%B4%D0%BB%D1%8F%20USDT%20%D1%82%D1%80%D0%B0\u0026auid=1646133880.1776535519\u0026navt=n\u0026npa=1\u0026gtm=45be64f1v9216808665z89205524781za20gzb9205524781zd9205524781xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-16844729593\u0026tid=AW-16844729593\u0026tft=1776535518810\u0026tfd=3133","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:18.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:37:36 GMT","end":"Mon, 22 Jun 2026 08:37:35 GMT"},"fingerprint":{"sha1":"08:79:9D:7F:DB:8C:0A:9F:3E:E2:C7:8A:F2:4D:E4:E2:5B:36:28:22","sha256":"07:42:F0:13:40:B6:A1:62:31:62:8E:96:2F:96:8C:7C:C0:5B:F0:8A:DB:0B:A6:E2:44:14:41:7D:B2:7C:B9:74"}}},"request":{"raw":"POST /ccm/collect?rcb=12\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Ffeesaver.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1270626102.1776535519\u0026dt=%D0%9A%D1%83%D0%BF%D0%B8%D1%82%D1%8C%20%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%B8%D1%8E%20TRON%20(TRX%20Energy)%20%E2%80%94%20%D0%90%D1%80%D0%B5%D0%BD%D0%B4%D0%B0%20%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%B8%D0%B8%20TRX%20%D0%B4%D0%BB%D1%8F%20USDT%20%D1%82%D1%80%D0%B0\u0026auid=1646133880.1776535519\u0026navt=n\u0026npa=1\u0026gtm=45be64f1v9216808665z89205524781za20gzb9205524781zd9205524781xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-16844729593\u0026tid=AW-16844729593\u0026tft=1776535518810\u0026tfd=3133 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://feesaver.com/\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Apr 2026 18:05:18 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://feesaver.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T17:09:26.793872Z","times_seen":14067879,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":82,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#bandwidth","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRGzXz5XT7GN8wfaft14SBMm0tS4gh4RBLmT3AV5CdITUx6RDo64WasKIgs39J5ptp6mPPUqK%2BXGwQR2y4uvwk04MQISefgbeW8LA6tgOURWWMLCjyRGxYRCoI%2BJdg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c32efe0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/index/qr.png","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/index/qr.png HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 28660\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\netag: \"69ba49b7-6ff4\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=68T%2FVjN4dfcRvVThEpbf%2BNIA4fcBMswHmtOjni5fi1rKTM%2B54MxdOQpPCTePyJKOjqb6O%2BtLOJcq%2F1ncX8h%2BAPl56UfMrNQ9D4QueYnb6xPziPnviHXSsDL9aWZXog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee598c0fe6a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 556 x 556, 8-bit colormap, non-interlaced","md5":"3bd507913346e45c5f004e76565a63ce","sha1":"a7f110d125c7c65efd502c2a2ce4341d5ff6db75","sha256":"2267b59db67b847617e3cd6e98b8ef4006859205e2964b91ec1e63ef17ef135a","sha512":"ddea415af950e9f1f6ef3f10f3f9ac8d214d7cadca398da72d2c6903039f8e27c24a4b94dbc470debd52b372f9e200cfc438b2989b93227056b732393892d4b0","ssdeep":"768:1ij8sQObgWFqkmyfCYgkeoop7VA/qi0jnial3FV4h/jHY:1ioMFTmiCHkeoQ7GKiqgG","tlshash":"e0d2e13ed640e1fc820dedc7ae725958b9e70a1590379de42bf17e8539321e5444b88d","first_seen":"2026-04-18T18:05:47.369782Z","last_seen":"2026-04-18T18:06:58.427939Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/components/polylang/js/web/default.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/components/polylang/js/web/default.min.js HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/javascript\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jan 2025 05:32:30 GMT\r\netag: W/\"383-62bcc1ec7d780\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTreHNCorqQXk%2BB975%2BqXZ9hZl03ZGeZAS0Ue9FF9nurz6zwFaAYoJHbbN75Ib6NVlgN4p1aL0alEjRMD2lQsvFOdlFx48CtBLw9wGQ5rgiTmc0xmFaiCP7%2F6BHuBA%3D%3D\"}]}\r\ncf-ray: 9ee598c10e750883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":899,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (899), with no line terminators","md5":"79ebd3b684762268997e5ed4526304b6","sha1":"090cf32777bd1523d0766913da287db1e4fc337a","sha256":"f58c1500c841509d030d5c1ca199a0bce7bf4bc491d929c0fccc1cef09cc7f7f","sha512":"3fe6495f14dd799e5ee10c50ce7d3e2349cc3b5f5d72ef7be8b58083a86ae70d1602f822162e6dacfce43e4f0b84e783b2f9af36571e0e6543eab5df75f6e169","ssdeep":"","tlshash":"7c11d05afa012769108790b6363f38492137496c1442b8697528dfe58efac5c9e53bbc","first_seen":"2025-09-20T17:40:15.631087Z","last_seen":"2026-04-18T18:06:58.369044Z","times_seen":3,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#chevron","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zwc8BtNNmTH%2FgKeiq%2FPbb7nVizIWyiaX%2F%2BEOp6NsymUhuGs03ClcRtNssOeZPXTW%2FwKjU4rsF81hNAwusha5Z9Jp27Ddau%2B6gfTmAEMo2fjVl6kZ%2BWh56kdKHg2jGA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c2fedf0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#xtwitter","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EEqGYmUiFHiIcz%2Bi9d%2FR6s6VjERm2B39DwFBLOvHBhBj8W9ll%2BS8qakgkVjhVwO6yWGSxcOE3PtMfwxTHJ1mzzbkZByTTdCTRohpNAOhEeiLCIx07K%2BN9BqBxui0rQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c30eed0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/index/products-energy.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/index/products-energy.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-95f3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WklHh1fxM2mnbCSlzX72Bvr%2BkjtaLVJM1J%2BagXo5p2kdblpBz7oWHbx9MSM%2B18QHllfZtMuELWtJeJHDCSOjgqaLGWMPwANq6oWpHu05sZlbgndicu8f17BFMi4Ww%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c31ef60883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":38387,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39765d438df84bc63f044a84fbe04dcb","sha1":"655b12bbe1edf1fcf4a0ad2b169f11ebda5c3992","sha256":"5abc2f9ef927cdd05ea0761017415b6f455a702d027cc3b56ad59291502ecf40","sha512":"70e75425b1d13c226e00a1c7eb1c6f407f2700e199e777914c0446c1d651058bba69ebf901f861b723209ffcf60bf57a0bf8ac7dca3ff078a5238ede82ecd218","ssdeep":"384:v5PWbj91kzWhtO0zUOKLUqO0WH9yTcG4tlIgxtDuUUWozavPU+:0rzEUkgGelIitCqXU+","tlshash":"1b0364de87689dbbf655c7ecd9424854721ec1b3eec0c750c228bf2f185a9850c9eba1","first_seen":"2026-04-18T18:05:47.37264Z","last_seen":"2026-04-18T18:06:58.380035Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/faq/slashs-tablet.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/faq/slashs-tablet.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncf-cache-status: DYNAMIC\r\netag: W/\"385-64ce210060592\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8X215mwrlNF2zHXifaCGrTSAUdb3Z%2Bb5AfUl2Jgya1os5D%2Fkt9TaZ8SR81D5rMlRhP%2BaAddAzmum0420a9pctghr5JOU%2FpdUmrhIs3IkNSdv6G0VWLKPhHf04vzKQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c32f040883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":901,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b573d54978c2c96393b855cf114d1a3a","sha1":"98e14bf28fe1b6067b21e709f6acefcca5457321","sha256":"ab0319ca2581f44f049809a5ebe7493503ef40fa0d653548b2e45086f3655cb1","sha512":"547a6b5ae5cc355355e2a8f08151f8924d826770edcb1d19fdbe8e1c23ef4b9cca72416c39fb1ecd0d59e883a3c7e22c7f87a06d635d2b88a8bdb545628f202a","ssdeep":"","tlshash":"c4112e188b5c5c36b3b47725e788b4b8117b55a0838b38545c92b33fb41e15b787f9c8","first_seen":"2026-04-18T18:05:47.374487Z","last_seen":"2026-04-18T18:06:58.42122Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/fonts/RobotoSlab-Bold.woff2","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/fonts/RobotoSlab-Bold.woff2 HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\netag: \"69b3affb-db90\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncontent-length: 56208\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W3BOtA3Dp0UJXFjty8FN72BWWh0i4NN6gqZPz0d4tPbPcCPu9EkEGhIXQINP0isScJWg3DsPCK7iNQgGdh0twTostjn6sytSy5Go3YHkl91QmYmXgXYrFEjgWR6UXA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee598c34f100883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56208,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56208, version 1.0","md5":"e73876f39b15a0daed91fb75ef44f092","sha1":"26f5d950035b9a79b4cd9c85203ccab4d85105e7","sha256":"74748775e9cf9a609810867dada791aaa521969df8da4c69c858f374b0c49961","sha512":"2ba1ea9b722913f10cf0e984120f36f83909869d46f1ee5f2777d5638641eef7f9af5d8e79f3d59d0406a55230b5c2b4efc228b58a9c3e49f6d3bfc4305086d2","ssdeep":"1536:UGmuR/+gDzLlKrWAPkW7mXfp2OkkjbT+WqIVNaMcsV4lHAf502t:wmWgD4CwRiPpXkQb+i4YUHAh0U","tlshash":"1143025d2038f920fe0adc72bf32d809de1b0115663fdb146996afe0b67280bdd590a3","first_seen":"2026-04-18T18:05:47.380337Z","last_seen":"2026-04-18T18:06:58.403225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/components/minishop2/css/web/default.css?v=8124027e82","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/components/minishop2/css/web/default.css?v=8124027e82 HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jan 2025 05:32:30 GMT\r\netag: W/\"678899ee-9c7\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dVynotY9J%2Fn54mXtIMqfJb%2FzQnwE%2Bf8CuO0CqfA5bjA6R5BXxwk42ZEGqAij2gSzP698DRSPNbbUH6T8AoZx2i%2BayzLNUoZDbfbbqdvQdJ2iytsEieXrXq0BGlA52g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: 9ee598c0fe670883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2503,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0af14394e21fd6ac37055c24f82b1b73","sha1":"719f8e70b1e818b35e4f7137f20a3b4652693746","sha256":"d984111f301a9d2fd7b5cc7af628db8da59561e094980052ed6b6ed0dafccda7","sha512":"76ff1fff0e37a2d3ecaec51d980efa224ecb8a613fad3c29753db12b2f61b58f85da5dcf3196bdf7b4eeedebfbd812586a575ba189932c95be4e9692f048a537","ssdeep":"","tlshash":"d551009285e30b9868179d8c3f9efb13712c8033434a9a793fb1a5408f4f54d4e493a8","first_seen":"2025-04-08T23:01:42.547599Z","last_seen":"2026-04-18T18:06:58.423534Z","times_seen":34,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ee598c1197656aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-22T17:10:56.68927Z","times_seen":46391,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#plus","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VtMUs5hH72SgXCPbtr%2Br41TIn9Q0xj6msfEOYyNhFNcwdoHJ0j9ixUugGDlB%2FE8lPwRlZ%2Fcs%2F31adiTTBZo8eo5%2BUDimi1fFQqZm3LSrw1hnLPxXSLagBM04tAr5%2FA%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c31ef30883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#sell","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LvLLPSVhOBvnY6eIl61C0aEdlxaZfDZk6%2BB1Hc0UFY%2BhC0%2FwYazbgQsUrbOYgrS%2BNaGhldoB6a6a2yQ8z6xLLJBdeVYPhX1ZpvZ%2FzxhmQteSSohl25CUngIAwYS5Kw%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c32eff0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/faq/opener.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/faq/opener.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xAeUgasBsV8F9B9dp2CFnAQ8N20coWvL41arvzuG6LjkD8O9UuH5sQi4WLFXd4fq78eUXz278TaJtbq%2Bk15hUTzTxfympmKfchKGFSKz2IcRIOtTw4PFSU1Wvqg7xA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"3d0-64ce210060592\"\r\ncf-ray: 9ee598c32f030883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":976,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0276e46266e76fd7c821886403d01f89","sha1":"3731de1b6ce10f9d220c28dbd5858b84abf63824","sha256":"2c1b6fd121931005d896d0d11c28a9a024ccc0d7ee9e8a184a11cf605c80ccfd","sha512":"58f07061c3fc8f18eaaf3664d7d995f2fc645fd0d14b867c0ee5a931baaeb04dd17188134392854fecdb43ea218c56600aca7ade5c0bc4b9f238a10eee26c08c","ssdeep":"","tlshash":"c611cee8d86dcb048384a375911c69aa4372abdceb4070d0f4843a977c0bca6b1e044e","first_seen":"2026-04-18T18:05:47.387841Z","last_seen":"2026-04-18T18:06:58.412574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.feesaver.com/common/prices","fqdn":"api.feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /common/prices HTTP/1.1\r\nHost: api.feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://feesaver.com/\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGiifb00sEJyMwOb8AxIRgbAF%2F5A8Y0PMcFRy6%2F8bPF9RnC4KS2VCa9a5G1w2wuRZ%2B%2BVX%2Bg5HyWPNZmll9zIkV56XCP%2BkWHa98bmRU0ZET0p2zEsusAtMe4Ebp7q8Sy330o%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ee598c5fc998be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a28d4ff5ab3e1e9fc4ce52c418176fa2","sha1":"7c72b3d48f188b249b0f2d34edc7c3bb6eafe1d6","sha256":"5ed1b4705d36dd65bfec3f1124fd724f9c90ea4c883224573f4f494fbdb47c9b","sha512":"31d88f1000be9974db66b3f367f652a020826d61cb963e7b019eb225498b95383066d7b0fcdc4b3cebf2636294b7b1c328c8cf747d1d73580e24fc9bf44587c1","ssdeep":"","tlshash":"862106e4b81404d4eca55f2d6ba7bf2180f434bf56c44e8128fd059ca9a86ff3506a5a","first_seen":"2026-04-18T18:05:47.389472Z","last_seen":"2026-04-18T18:06:58.404572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":46,"dns":30,"connect":1,"send":0,"wait":114,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/components/minishop2/js/web/message_settings.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/components/minishop2/js/web/message_settings.js HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 16 Jan 2025 05:32:30 GMT\r\netag: W/\"678899ee-591\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o8lEnJ23avghc1XU1NzA9ulUaAAb6bua6H%2BzHtSUCuLbo7%2B6JDUkszH2fzS91btgI8GUw8CKpgkpYbayiUbEzGL94mHLDH3F8hGbCKyHeze4Ryqc%2BkErpcosS0Z57g%3D%3D\"}]}\r\ncf-ray: 9ee598c10e740883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1425,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"1f868d940a0af45c158165f2f8e2533b","sha1":"b6d2ef551b1dfa264793552f5fde3ddd0f06045d","sha256":"2ba9aa475e4fdf735d9671359b846d01c8d17c9f25747235453ac7b2f9b3b50f","sha512":"5afb662a86123b1d00a3bc8da92d820cfeee45ad28f69cea5c76979884c4e21a7631a4f62dab1bcb96cab3d3d43eb37631028ade7b95a9f9a7acd34fda962aba","ssdeep":"","tlshash":"3921d10d64f71f1e40a3b03abd4f7414253184235699bf22bd4d4291df585bcaaabf8e","first_seen":"2023-03-12T21:05:24Z","last_seen":"2026-04-21T19:53:46.58667Z","times_seen":70,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#logo","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iiCYDye3D2GHjAu6Z9BpbyenKf5JtMS%2FfHpGGUZCC3vcv07wr%2BWf1FiN87AQixhs%2BjTrrQGF7AmOVKwntNAOXT2q%2BnjijzR3VJbCW7%2FDifH%2Fr5s0ANz8HsnYjhGDYg%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c31ef50883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.botfaqtor.ru/edit.html?i=167817","fqdn":"c.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"51.250.34.127","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:18.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c.botfaqtor.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 03:53:49 GMT","end":"Sun, 21 Jun 2026 03:53:48 GMT"},"fingerprint":{"sha1":"AD:77:39:D8:C3:65:F9:5E:5B:5A:03:92:E3:22:3F:26:AC:37:B8:40","sha256":"97:52:79:1C:6A:81:65:7C:E5:84:F6:C3:5F:96:4B:EA:D6:6A:D9:85:37:A7:EE:37:2D:0A:A6:35:7F:D5:F8:34"}}},"request":{"raw":"GET /edit.html?i=167817 HTTP/1.1\r\nHost: c.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 18:05:18 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 25 Aug 2023 10:56:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"64e888c7-b1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":177,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"aca94f8802b97be5035db73337344082","sha1":"6ba3fbaaa13f75af49b7a57ad26b139a6cf20297","sha256":"b53ba5e4ffb2109d59a82e84886483ef01d072af32949884fae18a4f36ed0487","sha512":"0b52b26e8ad2bc173ec84b0bb26e4181ce0097b021cdaa83255de6ba027b49f21f47d07ff7e7ae25f3f92259cbb678edae088b71d11c0577615d77dfaa3fbc4e","ssdeep":"","tlshash":"dfc08057dc01d140476019c499e1e25c90c6f55565d4dc4446d1d0b6edcd755cd171d4","first_seen":"2023-09-17T21:48:53Z","last_seen":"2026-04-22T06:47:22.769549Z","times_seen":533,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":69,"dns":1,"connect":31,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5-182-5-41.botfaqtor.ru/visit/248930/2","fqdn":"5-182-5-41.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"158.160.168.215","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:32.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5-182-5-41.botfaqtor.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:52:46 GMT","end":"Sun, 24 May 2026 21:52:45 GMT"},"fingerprint":{"sha1":"6F:DC:0B:E6:69:5E:5D:AC:6B:33:CA:94:BC:F9:8A:B0:C9:10:F5:DD","sha256":"E5:DE:41:10:83:4B:7A:15:95:11:E1:9B:BB:02:F8:53:58:F1:4C:0A:BF:F1:0A:88:0D:76:56:C4:A0:F2:68:68"}}},"request":{"raw":"POST /visit/248930/2 HTTP/1.1\r\nHost: 5-182-5-41.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 180\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":180,"data":"{\"c\":\"4e26186e-d06a-4017-b7e3-da720c58484b\",\"u\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"t\":1,\"x\":0,\"y\":0,\"d\":\"2026-04-18T18:05:32.691Z\"}"}},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 18:05:32 GMT\r\nConnection: keep-alive\r\naccess-control-allow-origin: https://feesaver.com\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T17:09:26.793872Z","times_seen":14067879,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/index/resources-play-1.png","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/index/resources-play-1.png HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\netag: \"69ba49b7-2138b\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncontent-length: 136075\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SIRvIOszJQN733czXH6xqBtPtUT0nqwzSJeRJm5pua0EK2RzPS8BXyXmU7LmbJhb%2BvSW8xiShT8UaQXt17c%2FC1WZxkIePxydNtu9YnfG%2FB4kr07GXESxo91Ako5ZIA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee598c0fe6c0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136075,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 720, 8-bit colormap, non-interlaced","md5":"4cdc3adf5969b234ed7a7e4be7e6c3d9","sha1":"23839166d58551dac363a3e529f5706955e44a77","sha256":"080a9fa8c0c78938adccad9d3bb51c8226dacb4e5046fc1932eb2fa11bf9b39c","sha512":"94118fe94da86dd2f961ab9043bac39425242bcdfbcb255dc43b31c9845d0d09ee5f6996731ebcb3261f744c37cbe1a67ae411c5331f1c633ef31d3222ab7a94","ssdeep":"3072:J5jhZ2xc4qUcJ56dQBiyf00j71PKjHqQCn+P:JFhWc1GisPOGC+P","tlshash":"d8d3125d95e1caaa51dfbcfb2ca93ed81a4f336b2d3c85d40802795d60ca40bd26461f","first_seen":"2026-04-18T18:05:47.393228Z","last_seen":"2026-04-18T18:06:58.387019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/pixel.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/pixel.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 May 2025 16:54:55 GMT\r\netag: W/\"6823795f-652\"\r\nexpires: Wed, 22 Apr 2026 18:05:17 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1618), with no line terminators","md5":"3b42e329b6c2aff44d40ebf22411d397","sha1":"c93b7e83f2a77c71b9d5dc424c4626e7713f550c","sha256":"105a9cc67f620cda48148d494be7065bdca39b10b15e4890183f2040cc6f0869","sha512":"e1a6dd6622b324de377068e4cf1aea34d0564c71f709439bc1935a85b080bd452512b8d65ad69747a0a9828606df2c3847013920dda88332bbece61433d472ea","ssdeep":"","tlshash":"4531c8f1336a90ed81f220e9515f1a1bd1769b45bc188c84a063fa016434e7b0b379a9","first_seen":"2025-05-31T10:10:21.166016Z","last_seen":"2026-04-22T13:11:04.910687Z","times_seen":618,"resource_available":true,"data":null}},"time_used":2139,"timings":{"blocked":1054,"dns":1,"connect":21,"send":0,"wait":21,"receive":0,"ssl":1040},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#menu","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fh0mXXjS3hwNNPLhLe6u%2B7xZZcsrwgPllpp7cPJDLKmF%2BG4czCJM3IINk18Yi3OAPCOrtRs8wQTApM82D3NnfrPq5k11MsyVa8qYYOuCc8oeF5zFhBoMZtnkfx585Q%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c2feda0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#telegram","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cOlLQTTksQwyLYwlSeVZu5z0OI7Uy8i%2FVqMQB2bgoETrVd6as88UajSeLueRrsrsLmwY3YMXxgrOpDGxQAzVJnxRC3bLXLfrdBCxSfohjXVrjvHiDFmB5x8dUxYEOQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c2fedb0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#qr-code","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6fz69eRP3O9a1%2FAESpN9T0K5YDlQVc20%2FB0LrORSqWorGaKLVLvsTyNWkL5U9xr2CKhRgdCBjeJN5TBh4Z7BiPPK0csFWrdJQr1EW6%2Bapnh%2Fods53ORr5rMYa8YkjQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c31efa0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/fonts/JetBrainsMono-ExtraBold.woff2","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/fonts/JetBrainsMono-ExtraBold.woff2 HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\netag: \"69b3affb-966c\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncontent-length: 38508\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fH2sExl4esKYVhCaQFm5fxII8nYEsdoidNRCcQ1mvZjUYgUjA5pDRHEchYyyAThvUNIU3IOfmZE1qiPQBaWIEm83AhM867ulh0pP%2B%2F347y1z89YMYsR2kjULkkEssg%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee598c34f0c0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38508,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38508, version 1.0","md5":"0e0bf49bc5bb679a99c65838d6777aeb","sha1":"9277fedcac40dad54cc13455970c308660a43904","sha256":"cf372d6ccf79b417f58f3ce2e34c68f937c9b6bd76b1a315797a1efb508b653a","sha512":"89b7f91eb3d12a4560cc49158db54a1e169f7fe6ba472f019cd0e6486f34880fb3c50003e33aea3bf8a6f90d26e54dd5665079a5f87cb8d851c98a7fec498b19","ssdeep":"768:Eypr08LTNeiumDXSOYh+vt1KQt1SZsV1Tb+2rTi:EypYUT0ixDXppvt1KoIZsnyv","tlshash":"2403029e2474e5394fa3183e6e8f6480d93f43c7713681cb26e7d8a12fedaa107646c4","first_seen":"2026-04-18T18:05:47.395935Z","last_seen":"2026-04-18T18:06:58.346541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/favicon.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru; _ga_HP763EG55X=GS2.1.s1776535517$o1$g0$t1776535517$j60$l0$h0; _ga=GA1.1.341988676.1776535517\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 28 Jan 2025 10:26:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncf-cache-status: DYNAMIC\r\netag: W/\"3dd-62cc1a04d6180\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6FbY%2FGuluCH7FAsC7%2Bd%2Fdw1kry9b%2B5NWIwA888JTUbrd7lvjiTYz%2BdVdDde2osI00JUN0NzT3Z0r4cGvpWsk5eGGlqmUwyuiaDltRrkj7HBdB6iTvsMzp1I0rwneQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9ee598c8afdc0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":989,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d881dcd6f82231f760ddb0f3394fd6bb","sha1":"8f94e6ec633c3fd1bff96c76af70fb40f438e9a6","sha256":"8d73ea63305eb3972c5d7aa62b35f177948d1bb4576985b27f85894786f01f0d","sha512":"ebf6c3b0908c000ba666187ffb068118831b633934b27dc802884b9dd894fddde8da5eb78ccec3d5b61c9689d77dd8fb602d98b8c3ea1b3ec629ebdb53b8181f","ssdeep":"","tlshash":"f7110b9ede9508019f96e16bf0c000ef321f50ed3b85abb0c6243339704a5bced50a6a","first_seen":"2026-04-18T18:05:47.397851Z","last_seen":"2026-04-18T18:06:58.40541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/main.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /js/main.min.js HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 23 Mar 2026 05:52:21 GMT\r\netag: W/\"69c0d515-55a9d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lGkH%2F60%2BsrDaN1VeGfn2Autb8qv4E7iSmxjZI6PkMN4XqEJkf9ITxPI6wLqPpnhdP1HiXRiXuhyaKukU1d4n0Vw4p9gQptEN%2BrG4jwfESxDYzvNfgtEyhHpszGWJTQ%3D%3D\"}]}\r\ncf-ray: 9ee598c0fe650883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350877,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65457)","md5":"7df9d025eb3a0a31ff79d0a95c04d55f","sha1":"04af18b155dc232461c1b3c74ac150843e76220d","sha256":"e410102860289a30279b93f3282dda3f46af3eb47f867d6ab48606b8436efc0a","sha512":"ccc717176462e618d8fe0244d471e569958810328067e67af31ecf73e22e3687b0536485fa6b6d2665eb154867a800da1a746abb4219bb9cd7d22904034ec560","ssdeep":"6144:gy/rz7dGTeLPfV1t6WW5XrVlcjLc9bHHr2HOsDHyU:gsrz7dGaLPfU5lrVejo9bcOzU","tlshash":"7f7419d87290b47603b361a2807f110ef23a6959b40a8551f57cc8d67f78c9e8277fba","first_seen":"2026-04-18T18:05:47.399738Z","last_seen":"2026-04-18T18:06:58.427116Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/fonts/JetBrainsMono-Bold.woff2","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/fonts/JetBrainsMono-Bold.woff2 HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 39728\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\netag: \"69b3affb-9b30\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GjTO7a7haZAVyIGGoTrWlz6D%2BaTcZ93paLhaNN7vmWPobr3Isg1drA1dJeZuZgjr3vIm46JjbqcA2MYaBUteAGX7uDIQd3Pg9Vx%2Fb4P%2BiLgM33DK0%2BbsKlSKJVLzXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee598c33f0b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39728,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39728, version 1.0","md5":"046cba322e5e2b62acb09b94649d87cf","sha1":"d18df9f6b94118463221873f23b77eefe7e0a027","sha256":"0ec74ab198048786dc8da151f0c015b418cbe0a0c01654663c11d001aa9c13e2","sha512":"b015b6ed20a8abe498ff17c06c989ce80d5d51676c712442cb4ae9995d622db1962949d83412a7ea1e9495729010678d2b8ebc635c37bc852c20d233d79a4a06","ssdeep":"768:FjpSd8pNeRmefXfCaSLFkfBd3flRfJQ5n+81V6KEiKb3fLeaC0qW:Fj0d8pslfXfCaS0RfJg6Ksbia8W","tlshash":"c003f1070bba055d15a23e79a3b4261bddb72a48f0f3c62fe561c901b352bb109a5e93","first_seen":"2026-04-18T18:05:47.401788Z","last_seen":"2026-04-18T18:06:58.418415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T18:05:15.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: MODX Revolution, PleskLin\r\nset-cookie: PHPSESSID=jc6qte391scun7150cv78i05qb; expires=Sat, 25-Apr-2026 18:05:15 GMT; Max-Age=604800; path=/; HttpOnly\npolylang_first_visit=1; expires=Sun, 18-Apr-2027 23:54:01 GMT; Max-Age=31556926; path=/; domain=feesaver.com; HttpOnly\n4078de57ff13dff7723f56bef6f86b90:web:language=ru; expires=Sun, 18-Apr-2027 23:54:01 GMT; Max-Age=31556926; path=/; domain=feesaver.com; HttpOnly\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hpqxULH4j888CD8g32e4DZa2sTSGyiy%2F7r3PIh%2FmNZqq3x0Qkx%2BGQ1Sl8BeleCJ1sYmazhP0fyE8bo4B9o1LQH2%2FWg6FDw7VgSyfSK7PFT9di%2Bu5ehsSSlQmWRES8g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=12,cfOrigin;dur=366\r\ncontent-encoding: br\r\ncf-ray: 9ee598bd6faf568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MODX","description":"MODX (originally MODx) is an open source content management system and web application framework for publishing content on the World Wide Web and intranets.","website":"https://modx.com/content-management-framework","common_platform_enumeration":"cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*","icon":"MODX.svg","categories":["CMS"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83253,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (490)","md5":"76b0409cafe05df0a464ebaac45650bf","sha1":"729f2177fa1a8faac9dec4ba228358d172ec1298","sha256":"560c31cd8d4278a707dda016e363c9e7d2a80af43ec4f63482f31964cd8dd4a1","sha512":"364fd0dabe205522822531048d1f0f85d8b2afdc5a395731217fcba7e95294b6d9bcafb5a15d6b2c68e645be08c50af6b17815bc2629843a88025b8d6991ed78","ssdeep":"1536:CrExWjP5buDdLxVARej3nyr1L/FpxVbRej3n+SxxVpRej3nJWeQpxV9Rej3n5tQd:Eg9zMg8E444oYTVL83lugEnw","tlshash":"3783612060f514b70213d0c19a607f4abfd2d5afda5a6201b5ac1efe6fd3c92e91b50e","first_seen":"2026-04-18T18:05:47.403383Z","last_seen":"2026-04-18T18:05:47.403383Z","times_seen":1,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":42,"dns":28,"connect":1,"send":0,"wait":388,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/css/main.min.css?t=1776535515.8909932536974","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /css/main.min.css?t=1776535515.8909932536974 HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Mar 2026 09:20:36 GMT\r\netag: W/\"69ba6e64-621bf\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNkeJr4Fo6zQEmVM8ZkROZv2uwAiAJwumoCq6TpX5Bqocz2NbHCUTL8aXafy8rZOnlwPs7dkP%2FxxD3L%2BaVdIMtcZt7fBUPnPM%2FnVcuvx5VLWbjyirIJEZHAy0fAc%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: 9ee598c0ee5f0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401855,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"f33654edad43de8a3c2dd18054036104","sha1":"fe018a839273a8ea9440ace101b8d6b0279f0811","sha256":"18d81432b5bfa011847638fe6da24194193ed65066d2ba9f3f3215866b47971e","sha512":"08fd26aab30794ccc316ae70733834191d930eacc36ef9fb6d86c14d9c6e25f0f20d97710dfa0038351b472e29dd76cd71d7732f536d549727544a0d86a42114","ssdeep":"1536:6tidN8ClBqkhcsQl9an/EMky3uLIgPGsqRqbHQ+vdvwnt1HyPmKUWFr:6tidN8Cyg/pqS1UFr","tlshash":"3284f8799450927fbc33e5376beca18c4115e582ce134beee523b1214bc7be225b3a84","first_seen":"2026-04-18T18:05:47.404882Z","last_seen":"2026-04-18T18:06:58.40846Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/components/minishop2/js/web/lib/jquery.jgrowl.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/components/minishop2/js/web/lib/jquery.jgrowl.min.js HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 16 Jan 2025 05:32:30 GMT\r\netag: W/\"678899ee-1573\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LzY%2F2S0O4E0rTwD3iFDmD1nKTjcr7pCkjQ2BnXQRCMcQDfpm10b0UmTjr6awrMAOplBh9oBE5C7Nn%2B%2Bb16RsaP94roTjiUFBF8g5ScTdJby1FK8t73%2FqxJSlK1pq4A%3D%3D\"}]}\r\ncf-ray: 9ee598c10e730883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5491,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5451)","md5":"0f3d7c8e11db9f6a0071a54148b35de0","sha1":"d40d732b4c7573eaae3b8469305882d12f900de8","sha256":"45118533e31429e161d03c51dd6f48bc963829f20504a7ea939ba63c2d79ca5c","sha512":"91af40b98729814a11ccd9a5e0ff261d3559d54e8f937e8946f7d1d07b3af54b93511b0f0a2d7f394891f4debb08691acd31b2e60924f8b342c65eca9414446e","ssdeep":"96:aLCpkK+Lsr6e8pDAXT0shxJKNLlhyLWPtC1ffcrYg2qn9TIyYeLvC69/dmqEIkhw:aOpkHAD1cye9n","tlshash":"3bb1cd4bb2b2578469eb1776d02f171a21332c6d4de60544f1ee87dc4e34e48a26fb35","first_seen":"2023-03-12T21:05:24Z","last_seen":"2026-04-21T19:53:46.522906Z","times_seen":72,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/fonts/JetBrainsMono-Medium.woff2","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/fonts/JetBrainsMono-Medium.woff2 HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 39592\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\netag: \"69b3affb-9aa8\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBFAhl0Y7L1Im%2FyVyVoeHKf1HMbBg%2FXKp4qhyhC43ZITJmV6jYfshUsCX7xjWBJGv1HHQi69VcVLh8vEeqwFFrB9eF8wPWxP1OqDmQ04JWWY3Yy67%2FizMA7UDtN6pw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee598c33f0a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39592,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39592, version 1.0","md5":"4883ac3442557426df7f0ec88a36fd36","sha1":"df3b5380cb83846ad4903dc60c1c316959a732f2","sha256":"3903288c22017f5055d872456815b536826c53b4197cc1201be04e9333d0b987","sha512":"d1637f615ed33f0e78be840385d8b3f3fb6a5eec55cd98d9713dfe831e4b1ccf89cf3285b9bb22456720edebc2ff3896221469f3eed33bb897c4479cb2a46f1d","ssdeep":"768:wA2ZOFnvu1YzCaS1aEl5KSoAuXPFSbMy+H5jh8/14g0O8DOZc:wA2ZWWcC91aA5Ro5X9hyei/6BO2","tlshash":"bb03f14375e2bf7bc6ceb17da97917c09284dbe5cf98e6a976c87d4b1610130b602015","first_seen":"2026-04-18T18:05:47.407042Z","last_seen":"2026-04-18T18:06:58.371337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5-182-5-41.botfaqtor.ru/visit/248930/1","fqdn":"5-182-5-41.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"158.160.168.215","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:18.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5-182-5-41.botfaqtor.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:52:46 GMT","end":"Sun, 24 May 2026 21:52:45 GMT"},"fingerprint":{"sha1":"6F:DC:0B:E6:69:5E:5D:AC:6B:33:CA:94:BC:F9:8A:B0:C9:10:F5:DD","sha256":"E5:DE:41:10:83:4B:7A:15:95:11:E1:9B:BB:02:F8:53:58:F1:4C:0A:BF:F1:0A:88:0D:76:56:C4:A0:F2:68:68"}}},"request":{"raw":"OPTIONS /visit/248930/1 HTTP/1.1\r\nHost: 5-182-5-41.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://feesaver.com/\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 18:05:18 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: https://feesaver.com\r\naccess-control-allow-methods: GET, POST\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-headers: accept, content-type\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T17:09:26.793872Z","times_seen":14067879,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5-182-5-41.botfaqtor.ru/visit/248930/2","fqdn":"5-182-5-41.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"158.160.168.215","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:32.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5-182-5-41.botfaqtor.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:52:46 GMT","end":"Sun, 24 May 2026 21:52:45 GMT"},"fingerprint":{"sha1":"6F:DC:0B:E6:69:5E:5D:AC:6B:33:CA:94:BC:F9:8A:B0:C9:10:F5:DD","sha256":"E5:DE:41:10:83:4B:7A:15:95:11:E1:9B:BB:02:F8:53:58:F1:4C:0A:BF:F1:0A:88:0D:76:56:C4:A0:F2:68:68"}}},"request":{"raw":"OPTIONS /visit/248930/2 HTTP/1.1\r\nHost: 5-182-5-41.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://feesaver.com/\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 18:05:32 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccess-control-allow-methods: GET, POST\r\naccess-control-allow-headers: content-type, accept\r\naccess-control-allow-origin: https://feesaver.com\r\naccess-control-max-age: 3600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T17:09:26.793872Z","times_seen":14067879,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 18 Apr 2026 18:53:16 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XN1eDUfUuLgBsCC%2Bkqlk3DeZ%2B%2BZ2rn1YfbNfsmngJhBFJnJ0fXLFgn298GwGcOUlmnkNFA%2BKx3IkJeFcNPKuJhUGkbzvVzNNxGj6BhpDskS7kxhvwPzCnzFNixxuuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncf-ray: 9ee598c2eed30883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-22T17:11:05.46007Z","times_seen":310362,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#star","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2MpeErSD8GIuEQM4cfNAzXK8KHsBCZRG3gSn1W9n8R5WwCjJhkuqjPW4hiLoZ6U3Ak93D5lS8Xsm3NyvtYgpKlNW1VlhpJPtU2S6PK2d8jZL2VIkPsOQ01SYmP%2BKA%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c30eef0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#play","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6fY07gdVm6474MSNF%2FZWAMvf%2BzVsWqoNlp4i9AtHrRoIRKH40mP5ByiiQPx5PJvZtCAkZ6Q%2FyI96CHRXVDRcoF2KdvprArUC6UswjP%2FcQuvpIAEqS2uo%2FA6BOMaIdw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c32f010883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/apple-touch-icon.png","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru; _ga_HP763EG55X=GS2.1.s1776535517$o1$g0$t1776535517$j60$l0$h0; _ga=GA1.1.341988676.1776535517\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 28 Jan 2025 10:26:30 GMT\r\netag: \"6798b0d6-19e2\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncontent-length: 6626\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k7DuME%2F3gFQhGDmAjhh5tS5DeMQlGQkASbtdo8bA2qMC8BbUIaSQmN6nDRKW0eNXqZGe3m2JJMr%2FzAKxieQPaLP%2FXupY0ch%2BKDfp9ssHYbhr8%2BY7LMwwk4%2B%2F%2FNWzyQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee598c8afdb0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6626,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"ccb210e04ad1613e41d9c24c93efb6c4","sha1":"33397e1be49e22322135cea575c41888974acd43","sha256":"f84be87f8cb5519fbebfe498717fda4c8444d22d2876459dbfc1e931a21905fe","sha512":"9eb9927e607560e26089ec6e9f925f6d4911ffd2ce858576eb024b39ccf4e6fee230442d8133460c8dbc96a0fb5b588682d9f7e9fa2c19506d06ea6f05c21ec2","ssdeep":"192:1aUuv5sSmkGxPhA28Uq4QrPwB3johCcW03gCHK:1aUuvOSmkAPC2TlB3Mh/W0QCq","tlshash":"b4d1afb3b6ddc2365ea3993d381aad935c84063938378be273071759dd342341f92b54","first_seen":"2026-04-18T18:05:47.409012Z","last_seen":"2026-04-18T18:06:58.409426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/cdn-cgi/rum?","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 638\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru; _ga_HP763EG55X=GS2.1.s1776535517$o1$g0$t1776535517$j60$l0$h0; _ga=GA1.1.341988676.1776535517\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":638,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":899,\"startTime\":1776535515677,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"a23da563-81f6-4200-bdfc-6c710b54501a\",\"location\":\"https://feesaver.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":16,\"domainLookupEnd\":44,\"connectStart\":44,\"connectEnd\":64,\"requestStart\":65,\"responseStart\":453,\"responseEnd\":453,\"domInteractive\":1378,\"domComplete\":2003,\"loadEventStart\":2003,\"loadEventEnd\":2003,\"transferSize\":18218,\"decodedBodySize\":83253},\"siteToken\":\"f4100b8b126a48ef8ac0258a652bed18\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://feesaver.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AC5%2FEhwX57rZAcc6%2BuOpaqB6BhjWsbXP4UdCaf85hD3grmzGjESRMPhJSu3QCbThIVCY9gPQyG0SYJk4aK7gOYIS8IUXgyjbDxiFoEYK%2B86rXehmewd88ANWR1wW6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ee598c9e8040883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T17:09:26.793872Z","times_seen":14067879,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/components/minishop2/css/web/lib/jquery.jgrowl.min.css","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/components/minishop2/css/web/lib/jquery.jgrowl.min.css HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jan 2025 05:32:30 GMT\r\netag: W/\"678899ee-6b0\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWW7yDlPI6ULanT%2BnJ6Ts2E%2FVTigvB36rnNxd6fKnneoFbXkj%2BvozsSEq13st7IwTjv4WWbhEzhdBpJEGpcc2UjZJiUzRRnbGKoWA2islTxPxwv1yEidk8e9OwE1sQ%3D%3D\"}]}\r\ncf-ray: 9ee598c0fe680883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1712,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1711)","md5":"46220e0d7bbd29764118fb9ac7602f8f","sha1":"6f5471ec304a4d72ce236ba884e321169df0b3aa","sha256":"09a823265c6a6a4ae031f80a324bda4d94d9406170597e5fd482181cf6089523","sha512":"585f0470b066854f93ddb4e436b4084201e7f147cc53da43a21361b042314d12df87592ba18b6d6e44c77ed4576260311918afbddbdc8259d5233c788a3fce5e","ssdeep":"","tlshash":"3a31b113f5e6120dbfb38452f843aeea15056ad7b7e54bead4872316c1836a1416f300","first_seen":"2025-04-08T23:01:42.516858Z","last_seen":"2026-04-21T19:53:46.580264Z","times_seen":74,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tkgukhm2cAd4gZpcD3qJqPn0voY60cQVFLMqIRFxG2t8hfuP9tiQWYIgzKc2YT7QtvTlHiNt5gVaqWhCclCp8MbD6dP533%2Be4Syo6y6iiSYsGcevfhrNBvfgNNMG%2Fg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c2eed50883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#youtube","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jeFDbc2eQZ8UCebacD4ql%2BSFY5mcEgDHyQfuVNQFOK2u2jnBgLf9BcMx6TEpPfqCgbTAoMtiJBH0QfLrhVYAWGmuP53GBf1S0FPVxJxufqgX7T7ugiS8Z2SQLIY4g%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c30eee0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/appeal/img.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/appeal/img.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69b3affb-3cf7a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHe6KfXqjPoU4S%2FOyJunKQVWR9V6Gfd0phUKIjTvjYSHWrYNtffDQBYfHfGC7cL4wrEJD2DWipBGPZvStTgAyDqnP2uZyMbN%2B7RhgzdE3%2FYRpZV%2BRivs7Bkz91H2bA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c33f080883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249722,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb7fba851e0f23d334c77a2b98038307","sha1":"c5afd51ec3964198c537eec9e0be5fba93af5325","sha256":"d6762794452e8bab3e96b5222203e37a3cc0d029f419640b710f0a909ff6c880","sha512":"6092a77ba2debee08be2de82d7f37baa409da2f8f95e14e3617953b12309c8dc64544d067099314e71631c603352f792c1a65623ffe04868cb6b02388f8eccfa","ssdeep":"1536:eLWh4rlgaB2GJUT7jG4GUwWoj6j8Ik5setuOHUfa/jsVEeAsVLSqisRBRbTGNp8i:dtTHsRb","tlshash":"0e3473dd87745cafead8c3edef81c85436898263acc0c644e158efaf099494a1cad791","first_seen":"2026-04-18T18:05:47.411476Z","last_seen":"2026-04-18T18:06:58.406335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/423.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /js/423.min.js HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 23 Mar 2026 05:52:21 GMT\r\netag: W/\"69c0d515-19ee\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHhI%2F3GUNLxNTda5n7GfYqq1pJ6T7%2Ftz2QG4hIowq9RPn4XVLtKHQpdVOwczAhNcdlo8ceZ%2BgY7lb5wgEyncsrgi2DSHMsC6QdMgSLpLSC0ulqAUgovW0AriEgJfOQ%3D%3D\"}]}\r\ncf-ray: 9ee598c5bf600883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6638,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6573)","md5":"2b3ed195801af59ecd05d91d070cb708","sha1":"058d2762ff121eecea7dae3a83bb19ba3a092b7a","sha256":"b638997e1f4982f29435414fd77ebb06a632cded202667c78b599fc84ee92aa2","sha512":"fa506d69779cba9950e1fb60d275077fc32f1c77e8e6dcd23ef29f7f6ad199a8d89473d8b9049472b66000c1bddd09b04c87a6199c3245cfa33017f0d9886819","ssdeep":"192:oLEW+bsBoRfW0G11ZZLEAQUuleIzD43oFEO:GxxxVZZLwh436","tlshash":"f5d1c8def381f423472261e0883f5217f2676849b01e089de769d1e4ac3c0de566be7a","first_seen":"2026-04-18T18:05:47.412812Z","last_seen":"2026-04-18T18:06:58.393398Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5-182-5-41.botfaqtor.ru/visit/248930/0","fqdn":"5-182-5-41.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"158.160.168.215","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5-182-5-41.botfaqtor.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:52:46 GMT","end":"Sun, 24 May 2026 21:52:45 GMT"},"fingerprint":{"sha1":"6F:DC:0B:E6:69:5E:5D:AC:6B:33:CA:94:BC:F9:8A:B0:C9:10:F5:DD","sha256":"E5:DE:41:10:83:4B:7A:15:95:11:E1:9B:BB:02:F8:53:58:F1:4C:0A:BF:F1:0A:88:0D:76:56:C4:A0:F2:68:68"}}},"request":{"raw":"POST /visit/248930/0 HTTP/1.1\r\nHost: 5-182-5-41.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 57\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"{\"referrer\":\"\",\"url\":\"https://feesaver.com/\",\"v\":\"1.2.0\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 18:05:17 GMT\r\nContent-Type: application/json\r\nContent-Length: 53\r\nConnection: keep-alive\r\naccess-control-allow-origin: https://feesaver.com\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bc82b4db4d936a9d49de55cdd2172ef5","sha1":"4540584bc9520057c62a02956b773cd14b9cf144","sha256":"07827cd0ce0f1a83910dbf3aec302e841d58c888ba8a58cef182e00d7f608abd","sha512":"14e560a3b2e75c9aa2fcbe882818b46af7970970f8db2f804603b9322b276dbe7cdc97879242fa2421631740ed62680557a4de6125c9afa84c255a0fc71fb614","ssdeep":"","tlshash":"4e90028d17084645270f0882050a3c84454d619307e949301152873495d6015c9116a9","first_seen":"2026-04-18T18:05:47.414191Z","last_seen":"2026-04-18T18:05:47.414191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":33,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/shared.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /js/shared.min.js HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/javascript\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 23 Mar 2026 05:52:21 GMT\r\netag: W/\"2c9-64daaa36d8977\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNFKSJb91AyzYoZf7I4GUwnbQO1vvH0BwfxlSpOaHwMpIX5vVxCsIgwzz7Id56HD5101ABTxXzEBacBeyGDouZrNFWpPv8BzJoeZyeSpBkRAgtqsqs%2Fzh%2FtRtJjgFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: 9ee598c0fe660883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":713,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (713), with no line terminators","md5":"cf3a5dfb49295dd436d0a67f6b22d52b","sha1":"643f740efc0287ab4911a1664e8d06d11ef4a86f","sha256":"53c6b021f6d2c3c5b5c9019aba1e5ace635bbdcead54bbec5da80eaa8e60a812","sha512":"70848fa4097ca190f1b6fc4b0579345aef4951f49b6561447c712e315122311b7e5450b892b1ef2d7761e8291a49b6586f6e6bed09e0a238a19952881f367582","ssdeep":"","tlshash":"ce01106031507cd172be40e2883e8783f215b8322a76a6f0eb476a719045cd76269b51","first_seen":"2026-04-18T18:05:47.415618Z","last_seen":"2026-04-18T18:06:58.41024Z","times_seen":2,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 18 Apr 2026 18:53:16 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2Ba8%2FhEx1D1SwJt8mJs2VkO4DQFcsSan1FffScZyZ%2Fha6KAXxk9OW5B6oQvzPuZntORiLpACJS9mHOXO16plXUe%2FA%2FmoczdzPkX4N8X3TICSK%2B4Jr1EqSVInGZ64dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncf-ray: 9ee598c0fe6d0883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-22T17:11:05.46007Z","times_seen":310362,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#discont","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjl70gyn9McfYkvG9uERnQrdAyfL4RBJ5z%2FUBmEvsXVYC%2Blx6lXxgJsKqKKki320ALVi8ExMDJXC4RsAJX42ZvUg59BJUHEKxAJtDMCVPwKD32rI6%2FrrCqkR4aJoYA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c32efd0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/fonts/JetBrainsMono-Regular.woff2","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/fonts/JetBrainsMono-Regular.woff2 HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\netag: \"69b3affb-9640\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncontent-length: 38464\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2F7nmjmxbutm9tiUswNpGYZ1riDp9d%2BgiCRAxH1cmDUQpmvVlYrUHz2kxqew4eA1yeAJ9hJapdI78ftVzk4QANT3CpnIHBrHx91woIAHkRvGMSrdqgFeLqp2q4YdGA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee598c34f0e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38464, version 1.0","md5":"312a9854251a4a1feb7f0b7c3504e1c6","sha1":"ce2f846791c1f80b4a9cbbe729910519a4783a11","sha256":"aa28646bdb6f568a90aae7cdb1cb832231f9277d3a108805d34ef2dca811d36f","sha512":"9340f729df43428c3e4b76205c0a200d5f8356ae49692bb1296a16b058638ea02bf9d481cf93dcba16bda637e7d415cde9d2c3b96b5facd108cc0c06d8049e87","ssdeep":"768:xYxMR9tOWtR7nWfPI14o8ExHVfLKTeY3+8iFEwi2YYetL:Kxet3tR74joBxHlADuvuwi2YYM","tlshash":"bc03f1a6930830ed89a2cb390d2a15219b517e72f137a58784ef657acbd1737e122f48","first_seen":"2026-04-18T18:05:47.416969Z","last_seen":"2026-04-18T18:06:58.400047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gw.botfaqtor.ru/cfg/data/167817.json","fqdn":"gw.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"84.201.145.11","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gw.botfaqtor.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 23:54:23 GMT","end":"Sun, 07 Jun 2026 23:54:22 GMT"},"fingerprint":{"sha1":"B3:6C:A1:44:4A:03:28:7E:85:07:07:62:96:42:68:5C:43:AF:4A:46","sha256":"13:78:FF:85:1B:EE:24:5C:10:45:1F:D0:78:18:B3:B5:60:EB:20:68:AD:28:82:36:E2:AF:5A:64:77:C3:44:64"}}},"request":{"raw":"GET /cfg/data/167817.json HTTP/1.1\r\nHost: gw.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 18:05:17 GMT\r\nContent-Type: application/json\r\nContent-Length: 351\r\nConnection: keep-alive\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://feesaver.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":351,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"075845f9a6a2a2a54ae638e3a0625488","sha1":"3941bcbfb072ccc35aaa139049353b3879521c9d","sha256":"b96b5f862feb1133e527313d6af0ecce9e3037aac0094c00ec028f983a1642d7","sha512":"0f1f5a1f70ba6a30441efaf4a53c047a4e805e34056d96bbb74798242d32f01a8bb156d6a1f5ff6fd7902b408624de24c60c3450e53f068652307b0e5addbec6","ssdeep":"","tlshash":"c7e02696532816e54ee57b42d6c13a835dcd00aaf209225eeacc8e1d299e4ca1756543","first_seen":"2026-04-18T18:05:47.418302Z","last_seen":"2026-04-18T18:06:58.42209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":102,"dns":28,"connect":32,"send":0,"wait":32,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=12\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Ffeesaver.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1270626102.1776535519\u0026dt=%D0%9A%D1%83%D0%BF%D0%B8%D1%82%D1%8C%20%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%B8%D1%8E%20TRON%20(TRX%20Energy)%20%E2%80%94%20%D0%90%D1%80%D0%B5%D0%BD%D0%B4%D0%B0%20%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%B8%D0%B8%20TRX%20%D0%B4%D0%BB%D1%8F%20USDT%20%D1%82%D1%80%D0%B0\u0026auid=1646133880.1776535519\u0026navt=n\u0026npa=1\u0026gtm=45be64f1v9216808665z89205524781za20gzb9205524781zd9205524781xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-16844729593\u0026tid=AW-16844729593\u0026tft=1776535518810\u0026tfd=3133","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:18.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:37:36 GMT","end":"Mon, 22 Jun 2026 08:37:35 GMT"},"fingerprint":{"sha1":"08:79:9D:7F:DB:8C:0A:9F:3E:E2:C7:8A:F2:4D:E4:E2:5B:36:28:22","sha256":"07:42:F0:13:40:B6:A1:62:31:62:8E:96:2F:96:8C:7C:C0:5B:F0:8A:DB:0B:A6:E2:44:14:41:7D:B2:7C:B9:74"}}},"request":{"raw":"GET /ccm/collect?rcb=12\u0026frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Ffeesaver.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1270626102.1776535519\u0026dt=%D0%9A%D1%83%D0%BF%D0%B8%D1%82%D1%8C%20%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%B8%D1%8E%20TRON%20(TRX%20Energy)%20%E2%80%94%20%D0%90%D1%80%D0%B5%D0%BD%D0%B4%D0%B0%20%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%B8%D0%B8%20TRX%20%D0%B4%D0%BB%D1%8F%20USDT%20%D1%82%D1%80%D0%B0\u0026auid=1646133880.1776535519\u0026navt=n\u0026npa=1\u0026gtm=45be64f1v9216808665z89205524781za20gzb9205524781zd9205524781xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117266400~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-16844729593\u0026tid=AW-16844729593\u0026tft=1776535518810\u0026tfd=3133 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sat, 18 Apr 2026 18:05:18 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T17:09:26.793872Z","times_seen":14067879,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#copy-liner","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZQwwWOrV%2B9tSVIzeDsQtX0ld2gzeuUuPfaIDgqC2j1XnX23zrnykor%2BbSM4u044iobSG8%2BIlUA%2BmPjJC2Q8ahORwAoPVJIR5kwSzOFEsDEXOfXZYAhpeitFeKDVvg%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c31ef80883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#link-external","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lWoB7OXzh3lcin1CQTNkLcWw7FdUkE8Rix3I6kRajUL8Q8%2BlRwTUSS%2BkS7iM9i4rFnqNN5SPix8TvJYN8rHybE%2F3O5%2BswPSilsVqXJ460EuGdvhpD22tvLknFZ8g%2Fw%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c32efb0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/pxl","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"POST /pxl HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 58\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":58,"data":"p=xn5ltpdC\u0026t=1776535517679\u0026l=https%3A%2F%2Ffeesaver.com%2F"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 31\r\nset-cookie: stel_ssid=d4b6eea28a0e3eaae2_18402263922965508087; expires=Sun, 19 Apr 2026 05:11:57 GMT; path=/; samesite=None; secure; HttpOnly\r\naccess-control-allow-origin: https://feesaver.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\npragma: no-cache\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T17:09:26.793872Z","times_seen":14067879,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.feesaver.com/common/prices","fqdn":"api.feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /common/prices HTTP/1.1\r\nHost: api.feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://feesaver.com/\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KKT%2BFtnVNnF5HBqWNdOLCY15CxmRKpkjzrkeLwtv98mwi5I0XByZf%2BBSfZt2HjcEAePJ3Jb1RiHr3Gwx07j1aVhl52Bul8lY9hS9lgId1WZ9uvBVokIgGvjItUrEnTIVebM%3D\"}]}\r\ncf-ray: 9ee598c9a8020883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a28d4ff5ab3e1e9fc4ce52c418176fa2","sha1":"7c72b3d48f188b249b0f2d34edc7c3bb6eafe1d6","sha256":"5ed1b4705d36dd65bfec3f1124fd724f9c90ea4c883224573f4f494fbdb47c9b","sha512":"31d88f1000be9974db66b3f367f652a020826d61cb963e7b019eb225498b95383066d7b0fcdc4b3cebf2636294b7b1c328c8cf747d1d73580e24fc9bf44587c1","ssdeep":"","tlshash":"862106e4b81404d4eca55f2d6ba7bf2180f434bf56c44e8128fd059ca9a86ff3506a5a","first_seen":"2026-04-18T18:05:47.389472Z","last_seen":"2026-04-18T18:06:58.404572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5-182-5-41.botfaqtor.ru/b/check","fqdn":"5-182-5-41.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"158.160.168.215","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:18.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5-182-5-41.botfaqtor.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:52:46 GMT","end":"Sun, 24 May 2026 21:52:45 GMT"},"fingerprint":{"sha1":"6F:DC:0B:E6:69:5E:5D:AC:6B:33:CA:94:BC:F9:8A:B0:C9:10:F5:DD","sha256":"E5:DE:41:10:83:4B:7A:15:95:11:E1:9B:BB:02:F8:53:58:F1:4C:0A:BF:F1:0A:88:0D:76:56:C4:A0:F2:68:68"}}},"request":{"raw":"OPTIONS /b/check HTTP/1.1\r\nHost: 5-182-5-41.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://feesaver.com/\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 18:05:18 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T17:09:26.793872Z","times_seen":14067879,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/index/resources-img.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/index/resources-img.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WH6EavOhRgt6aJYJwD8xLdSkTe4jDehs2fDREhX5tfNHh%2FSX%2BEGMVAbz4RO%2Bmg7M96v4ynwtSTdtj7TJkaiSxujuWZ8gie0XIA%2FLCp0%2F%2FB7ZO7b5mGgX7Y5IUltexA%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-57a24\"\r\ncf-ray: 9ee598c0fe6b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358948,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5873cebec5c504b60468fb8ae5022eb8","sha1":"b3c272241164c0d009b1e61ef24fe78b385b4e8e","sha256":"36777a934d1131a6162f57849bc01332d76fd0082b62c8870b8d785ad09f4c97","sha512":"8ac5bcb964c890968f2b7a14c6ab36757caeddfb54f4ffc5e576512384ce3c08eb76819769781ca598a64656e409c25563b0939f3b97d7bdd56f748d22c22112","ssdeep":"1536:EVvie+omgAc34+XtVpb5g2Z2CSmDQEf6aGGv9obDNLH2ocCEddnpNlu4FA5IhewE:W+MmmJxYk8","tlshash":"fc74b6ce5b748cead6d8cbeeff0154a8351a81b3ddc58a40c128af2f18d540d5d6eb92","first_seen":"2026-04-18T18:05:47.419637Z","last_seen":"2026-04-18T18:06:58.378095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#star","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJ6WNvvZIjK6QQLmPVe%2BOs9BPprTKCE8pG9LmNPmAUYwxP%2BwUhVr9w%2BSwmOzdwRiViHqmAzX%2BMnVvJlVKiZaQhpwNGL6HvxmoURhVLHrI4obBPx2m35JSGtQF21I8A%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c0fe700883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/index/resources-play-1.webp","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/index/resources-play-1.webp HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59100\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\netag: \"69ba49b7-e6dc\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REL%2F9yBpXCfS8hMw6FRP%2Ff2XaN3QmAk723O2C7jC0V%2BFVNuNBrSRm5OBKPcXkYI49jxC4FjjnfukXXrP2%2BZLAW87tXIaFAtt%2FgAkiwQD9RvMYttn%2FQYIqYCgp7pXRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee598c66f6d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0a64e2ceffc7b714c327dc8c9fd44d76","sha1":"5a523dd7f7918477d50ac61b9f2dba2e4af20d1d","sha256":"5d448ee91fa725ddbdda5ed7418e1bf7973da53ed0516302f3594745ad3893ec","sha512":"e5786073a494da2eec4db3a8e3529edcea782f0b11e4090210ef4cb735032b38432ac33dc37ba313b6d2a3db27699cedea4a116381a4b164908208183db0614c","ssdeep":"1536:pePHzqkOlPXi+IuMqKo770+o344rPcF7Sm76XVQsqwO:4HOI+J9O4k0FOm7sg","tlshash":"764312b1391c7279c6a0ebdc30bcb69c8888d972d00f277aba7076c9c116d54b51c6ed","first_seen":"2026-04-18T18:05:47.421017Z","last_seen":"2026-04-18T18:06:58.374539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5-182-5-41.botfaqtor.ru/b/check","fqdn":"5-182-5-41.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"158.160.168.215","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:18.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5-182-5-41.botfaqtor.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:52:46 GMT","end":"Sun, 24 May 2026 21:52:45 GMT"},"fingerprint":{"sha1":"6F:DC:0B:E6:69:5E:5D:AC:6B:33:CA:94:BC:F9:8A:B0:C9:10:F5:DD","sha256":"E5:DE:41:10:83:4B:7A:15:95:11:E1:9B:BB:02:F8:53:58:F1:4C:0A:BF:F1:0A:88:0D:76:56:C4:A0:F2:68:68"}}},"request":{"raw":"POST /b/check HTTP/1.1\r\nHost: 5-182-5-41.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2050\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2050,"data":"{\"s\":248930,\"i\":\"5c9bb22880d821875e455789269b310c\",\"r\":\"\",\"u\":\"https://feesaver.com/\",\"f\":{\"vendor\":\"\",\"productSub\":\"20100101\",\"pluginsBool\":true,\"pluginsLenght\":5,\"activeXObject\":false,\"browserName\":\"Firefox\",\"fonts\":[\"Bitstream Vera Sans Mono\",\"Bookman Old Style\",\"Century\",\"Century Schoolbook\",\"Courier\",\"Helvetica\",\"Palatino\",\"Palatino Linotype\",\"Times\"],\"language\":\"en-US\",\"colorDepth\":24,\"deviceMemory\":null,\"pixelRatio\":null,\"hardwareConcurrency\":48,\"screenResolution\":[1280,1024],\"availableScreenResolution\":[1280,1024],\"sessionStorage\":true,\"localStorage\":true,\"indexedDb\":true,\"addBehavior\":false,\"openDatabase\":false,\"cpuClass\":null,\"platform\":\"Win32\",\"plugins\":[[\"PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"Chrome PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"Chromium PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"Microsoft Edge PDF Viewer\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]],[\"WebKit built-in PDF\",\"Portable Document Format\",[[\"application/pdf\",\"pdf\"],[\"text/pdf\",\"pdf\"]]]],\"canvas\":null,\"webgl\":null,\"webglVendorAndRenderer\":\"Mesa~llvmpipe\",\"touchSupport\":null,\"adBlock\":false,\"bodyStyle\":\"undefined\",\"buildId\":\"20181001000000\",\"clipboard\":true,\"doNotTrack\":true,\"getBattery\":false,\"hasLiedLanguages\":false,\"hasLiedResolution\":false,\"hasLiedOs\":true,\"hasLiedBrowser\":false,\"locationBar\":true,\"mozInnerScreen\":true,\"requestFileSystem\":false,\"timezone\":\"UTC\",\"timezoneOffset\":0,\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"webdriver\":false,\"phantom\":false,\"node\":false,\"coach\":false,\"rhino\":false,\"domAuto\":false,\"online\":true,\"audio\":null,\"performance\":true,\"topself\":true,\"hiddenFunc\":\"n/a\",\"hasFocus\":false,\"sendBeacon\":true,\"hasCookie\":true,\"media\":2,\"mFullScreen\":true,\"mRtci\":true,\"uaDataMobile\":null,\"uaDataPlatform\":null,\"uaDataBrands\":null,\"windowChrome\":false},\"c\":\"4e26186e-d06a-4017-b7e3-da720c58484b\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 18:05:18 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: Action\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":74,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f81c8ec06c9f8bb93f52fb70d303945c","sha1":"b0ad2050c5c13e34d0d56d005c036413a4d03564","sha256":"c709324dc3068924b96f26cc20bd1d8fb60fc8d37c382aa7762f3a4b88b8e2bc","sha512":"f4aa6845dcdcfaa2fda94d158e8bb1d7484b67c929f607dd214c6018439c0ded8b1976306bc797302e5ea433294c1af4fc2730d7799cab5769cbdcbc1cc9fe5a","ssdeep":"","tlshash":"5ea0027344c9013399f1834a860b5b222eecc166bac508c0b7741e555e23ae72778af2","first_seen":"2025-07-27T21:18:08.872584Z","last_seen":"2026-04-22T06:47:22.732064Z","times_seen":452,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16844729593\u0026cx=c\u0026gtm=4e64f1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:18.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:14 GMT","end":"Mon, 22 Jun 2026 08:35:13 GMT"},"fingerprint":{"sha1":"BA:9E:A9:01:73:30:25:9B:9B:28:25:39:24:13:22:55:3E:F0:57:C3","sha256":"9D:AB:4E:BD:B4:98:3A:1E:70:9C:42:A2:E1:DA:0E:18:3C:BB:D8:2A:58:08:F5:85:3D:36:0E:1A:7A:27:AC:5E"}}},"request":{"raw":"GET /gtag/js?id=AW-16844729593\u0026cx=c\u0026gtm=4e64f1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 18:05:18 GMT\r\nexpires: Sat, 18 Apr 2026 18:05:18 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143539\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":421533,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"d49c3be7d0d9a1335e449ecd73d0eb4d","sha1":"4e047d4618525273c97c442dc286cda319172607","sha256":"f5686303e0fed39877face5595ad95bfc82f2f50c728d6ce79e95b5d09c98439","sha512":"5466424911ec8d8ba025b363d9ab36b8e67e1975c528a5728b80665197260e3e0d65644c98b1444b5f7ab6394456c4844840a14d0b87df8a38ee6806fe58adab","ssdeep":"6144:64OjKwCi4MRBZtfJJPj8B3U90yIjwcH6pLFgW2urr1XQ:QT4MPfJJL8u5/BA","tlshash":"079418cdb3d6746253a3b478903f018ba67a39a2b44cc899f185cce42d7469a4277f7c","first_seen":"2026-04-18T18:05:47.423082Z","last_seen":"2026-04-18T18:06:58.426302Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#energy","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dk3bVb9sY%2FRRyakIHMcaEJ2PWzApLzLNbw6wJ%2FI%2BImizjAywAjRywl8cSrJT65xmHvlr3ToUHpUcJdXvxOcS5bzg78RWvv13bh9nXen9SE47QLUo%2B04T%2BqF1GvMipg%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c32efc0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-widget.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 11:46:12 GMT\r\netag: W/\"642abc84-4ff5\"\r\nexpires: Wed, 22 Apr 2026 18:05:17 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20469,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (423)","md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-22T17:02:27.624988Z","times_seen":2544,"resource_available":true,"data":null}},"time_used":2167,"timings":{"blocked":1063,"dns":13,"connect":21,"send":0,"wait":23,"receive":0,"ssl":1045},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/index/products-bandwidth.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/index/products-bandwidth.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-7973\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XdjSboZlaTeD2mCLhs9gxW8EeljUsKbqXkySO7oyJwSMca9daobzllgA5xksvEU12mPptPn9CPP25lrJIpQTv8un8T93mVr6cKTs%2FroLtn1ch%2F3tzC5JUrhcljvxSw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c31ef70883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31091,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ac1fad69ff671e354fecb213f00ba40","sha1":"5148598c9d4ca06719fc690ffd5c5b5bde483c64","sha256":"a54b5bb7006217091bbd0612d7458a2150f6dae740496e9ad7ed1d250369e663","sha512":"0624dc45b0bc2f588180b3b98a4df4d0003e6c3510dbe2cb4cddbc18435c7e29a1084e0d536fbd464e87a39d7a6306b38598b269c586c1dabf686547666ac2ac","ssdeep":"192:RzsInHUY4C9eL+CPCV2CPQiQco3d+OSnnxMB/QFicwDaQhqO+WQezIp3M0drmJYh:RAQ0YroCPGDSnnKWF2aQj+4zzQuQ9b","tlshash":"86d254ef87189e7bf155c7fcd94188a4321d82a3adc0c790d268ff2f19659491c9eba0","first_seen":"2026-04-18T18:05:47.424984Z","last_seen":"2026-04-18T18:06:58.382062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.feesaver.com/common/price/trx","fqdn":"api.feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /common/price/trx HTTP/1.1\r\nHost: api.feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://feesaver.com/\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bjia58kfbhWylAbmN7sKftjx2bZMP5MUnUZv1gmoqVqmPMWaKYoSCF2U2PbmMlwMstOJPOB5j5H1oBH2kvLDB0vmlYnLol9QGELnAQM3e2AVmkohyC16%2BbAozPH%2FvhsWhRk%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee598c9e8060883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"09d58691c7c3462b1dcf67a40fe4c289","sha1":"4c441322e28d510e56f0a2b40adf22b8b7e180a3","sha256":"4620c4d82b33c7c5890d21d15e7454934883a5cd002abc828108ed0f0cf6996e","sha512":"e79056042d747c86c8a7bdc813863f797c58aaccfac16efa0cb714bb6dd42e7b2d28463933dc77e9e5fd0a925b2e5a77113522fc7c82ae010e721d6de4119f66","ssdeep":"","tlshash":"2d8000e22b0000b2ec03aa02ac383ec028a82023b3a88080b00e08800228a03338b30f","first_seen":"2026-04-18T18:05:47.426386Z","last_seen":"2026-04-18T18:05:47.426386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/logos/logo-text-green.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/logos/logo-text-green.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qtpbpeaA%2F8JpjDITX857A%2FM4ghrAEXlA3%2Bq0KKrJ6gzySk6%2FlMVa4uQpfV%2FfEOv0cgLTACObYqKuHtuy%2FLM%2FHqxRT9MID%2FzGx%2FASZiKtlrt5gCI0gI6aCX91IVjbw%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69b3affb-2965\"\r\ncf-ray: 9ee598c0fe690883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10597,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a87f7af8fee26e1a61f371e1ad04418","sha1":"c0c8ccc98ba70804028a808cc6b673dd6349a197","sha256":"730bbe93a8f7980cc30f65c53c795430802a143ac5049b53df8a3095d036d05a","sha512":"2588d1f5e68eb6b62e8761a6e93277da6a5cb60cbffa3e257008c260e5b2b572625791e5e25c77230a81a4598e3b0da1b5df08b9494c23376e05b5c90ee64c18","ssdeep":"192:WZ07a6sshwwbDhdTWyu+dAiqOKa9CL9MNAM3enw/pqFCU8RQ:W3AxOl6CsAMOnw/pzRQ","tlshash":"142220e967d6b2f0f045f7e1c5216ca47e4f30be675ac7b982a2ad50a6034cc94dacc4","first_seen":"2026-04-18T18:05:47.42792Z","last_seen":"2026-04-18T18:06:58.354783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#angle-right-top","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Utfq59ALI29KHRrJ1Z2SvLVhvFME%2FEOivWNs%2BPcMYcmRc3WALuh4A4iLnLDZzcYRyS4pGpGCUDoXnH9kbTIMLhpNPpMVNuPIUjcpLOMKTyQ%2FZSJw2qIKhbuid%2F5Qvg%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c30ef00883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#minus","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCWvQdG0cgK8DVVueGeeZyjU3Uh37GcOrw0eQ3oHG8%2BNS%2BM91%2FmTmHBdrAXK9KtFGmnugoojAQ%2BPiLyatLegqUwf37rAmB1jfFCFKih1ZVVLa3Sm4Qr0c74zPzx%2B9A%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c30ef20883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/blog/slash.svg","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/blog/slash.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncf-cache-status: DYNAMIC\r\netag: W/\"b1-64ce210064412\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=92w3yfh5w%2FCfBC%2FGQTQiDuhmbpQbP05Eh7oNqaSGjEle5DI6eqLXwUumGbdzV0wOzP9xV%2BPEuH5EV4cAALjKRz0%2FpE2nHK4NRZZNY8oHKR1pN8FoDtlxPrQbTotgAw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee598c32f020883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":177,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01abdcff9648bcd5589a6298de194348","sha1":"f11ee274fc3ee95b87d357c843eaef1cfd1a8dfe","sha256":"a76a2ee16b85ccc01a3263474a4620185a757fb385da1f329896723b60c26109","sha512":"42c04d14a91a42b65a9faf2495f92133720b9daeb8e729b58682596c68e6d03db576b7ef08915ac01d4fc840c0530379b6c443e60ec0cc7bc54812d5edd41b20","ssdeep":"","tlshash":"88c0223842098c21e2248220b22860a641e650c2828a2094c8003a37f01189628779ac","first_seen":"2026-04-18T18:05:47.429618Z","last_seen":"2026-04-18T18:06:58.38958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.botfaqtor.ru/i.js","fqdn":"c.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"51.250.34.127","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.botfaqtor.ru/edit.html?i=167817","date":"2026-04-18T18:05:18.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c.botfaqtor.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 03:53:49 GMT","end":"Sun, 21 Jun 2026 03:53:48 GMT"},"fingerprint":{"sha1":"AD:77:39:D8:C3:65:F9:5E:5B:5A:03:92:E3:22:3F:26:AC:37:B8:40","sha256":"97:52:79:1C:6A:81:65:7C:E5:84:F6:C3:5F:96:4B:EA:D6:6A:D9:85:37:A7:EE:37:2D:0A:A6:35:7F:D5:F8:34"}}},"request":{"raw":"GET /i.js HTTP/1.1\r\nHost: c.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://c.botfaqtor.ru/edit.html?i=167817\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 18:05:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1303\r\nLast-Modified: Thu, 12 Mar 2026 10:55:34 GMT\r\nConnection: keep-alive\r\nETag: \"69b29ba6-517\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1303,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7711e19c8bd2fcd59b0f78e04a201cc3","sha1":"3f359435d2be89b9b5717a05688ef0b206c80758","sha256":"d6603c939bdc204fbd9c5a4304cd080dcd8b47be0fddde528b4aa03700cb4019","sha512":"c13f76c25a846e0bd32b06af8071110fe63cb87d228c2a8356fab9ad55bd8dce04c3dd8be47f96ddd9756f3247f75ea0a8b674ec8ac2a800403254457413f846","ssdeep":"","tlshash":"9621df54ebed087a583624051d1d52c9e8ad09f3c809f055bcbcdb5b2fc4e8b23a14ba","first_seen":"2024-04-19T01:28:22Z","last_seen":"2026-04-22T06:47:22.791277Z","times_seen":540,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/js/jquery.min.js","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 13 Mar 2026 06:34:35 GMT\r\netag: W/\"69b3affb-15ec3\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tpsSBVcCbgaknlJCZfM3B6VEOo79NnPW2Ll2DHmx6zUqYsPirBruxtsT3kLI3jLx6rB%2Ffwht0MMapTgHaNAie10C%2FH2btNNM%2FklCOOvANzVR4wWlFDmWrYIbIetag%3D%3D\"}]}\r\ncf-ray: 9ee598c0fe640883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-04-22T16:01:13.086351Z","times_seen":21987,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feesaver.com/assets/img/sprite.svg#web-solid","fqdn":"feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /assets/img/sprite.svg HTTP/1.1\r\nHost: feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/css/main.min.css?t=1776535515.8909932536974\r\nCookie: PHPSESSID=jc6qte391scun7150cv78i05qb; polylang_first_visit=1; 4078de57ff13dff7723f56bef6f86b90:web:language=ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Mar 2026 06:44:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmhieNRiXWPl%2FnSTSdcBkAhhJKXkswxIonFE6WEuC%2FoPxt4Z6gUXYYv4YhenbEQmUGInPfPktOCg47RQSleGMAFgqiw312I0N2yCcr2ufnToVP2nqNgQ7AWba1lpUg%3D%3D\"}]}\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69ba49b7-db3e\"\r\ncf-ray: 9ee598c2fedd0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb698b9d0e1e6a20814ebdf12d7eeb6","sha1":"0c1cfc5a9b03eb46e96263a12578f261013a0b6a","sha256":"ce5f19d0c4bfc530eae08aa2c57a9f405c64c8143744a79e9875d7cf354f34fa","sha512":"ee85e7fcb58bcb66792743f7e13a0f8048977e5d05fd042c513483012d38e4153ea3b6100cff6e56a15c6ef528cb90485331ebebdd7906e8fcfda16bfe9a5508","ssdeep":"768:eUF6Vu6aY4FTiMqVjqVxx9hV97LYQQJLO9LPIVeUN24ZHBWUrG:eUF62FTZdxHpH4JLOxSxZHBWN","tlshash":"2e4397e6971c45cc758eca74ef7f7a62403fb0e771bc0199a0ae8260e1876e6f911d90","first_seen":"2026-04-18T18:05:47.347336Z","last_seen":"2026-04-18T18:06:58.358075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.feesaver.com/api/staking/info","fqdn":"api.feesaver.com","domain":"feesaver.com","tld":"com"},"ip":{"addr":"172.67.71.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feesaver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:50:02 GMT","end":"Wed, 03 Jun 2026 06:49:48 GMT"},"fingerprint":{"sha1":"90:C9:A0:45:E0:1A:AC:F4:8C:42:66:85:75:3E:8D:6F:6F:F8:B2:03","sha256":"E3:03:ED:8D:0F:C0:4E:14:56:F5:5E:7F:24:FC:DD:0F:4D:4E:40:A3:6E:F5:D4:12:C6:F0:21:AF:3A:88:F3:16"}}},"request":{"raw":"GET /api/staking/info HTTP/1.1\r\nHost: api.feesaver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://feesaver.com/\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 18:05:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Ud%2FJuctZslWGx2T2wofkmTHEoUuUKpzjApyBdXHpi7Bq0iNPjdeYVp1CZ3TVHcuRtzZ1vQcBmm3XJbRCewZfXoPZmKZwPol%2F%2B8KN20%2F85zG0JK7SwMiD%2Fd6R98dRdZWz3Y%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ee598c65d918be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":454,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a3dd2befaaee32debc31e523a2f332c2","sha1":"a522af08a9ba850de1ca6c3c87f84326a1df579a","sha256":"e1d4ba778fabed57efa17c4db39f6541fba28d2aecea11d67e1a4c36d4123440","sha512":"846a1bfe44108d8e253c541a674db2e51f6a85629705107232287c187c56dece625ab68ba58560f60124879f02879c15c7d1adb257d91ebef0d9bc25a2210ef3","ssdeep":"","tlshash":"07f0abc1050101f9ecd0b041636e79a016ee34e752d300e8519bc1598fce06a2900b07","first_seen":"2026-04-18T18:05:47.432257Z","last_seen":"2026-04-18T18:06:58.395081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5-182-5-41.botfaqtor.ru/visit/248930/0","fqdn":"5-182-5-41.botfaqtor.ru","domain":"botfaqtor.ru","tld":"ru"},"ip":{"addr":"158.160.168.215","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:17.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5-182-5-41.botfaqtor.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:52:46 GMT","end":"Sun, 24 May 2026 21:52:45 GMT"},"fingerprint":{"sha1":"6F:DC:0B:E6:69:5E:5D:AC:6B:33:CA:94:BC:F9:8A:B0:C9:10:F5:DD","sha256":"E5:DE:41:10:83:4B:7A:15:95:11:E1:9B:BB:02:F8:53:58:F1:4C:0A:BF:F1:0A:88:0D:76:56:C4:A0:F2:68:68"}}},"request":{"raw":"OPTIONS /visit/248930/0 HTTP/1.1\r\nHost: 5-182-5-41.botfaqtor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://feesaver.com/\r\nOrigin: https://feesaver.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 18:05:17 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: https://feesaver.com\r\naccess-control-allow-methods: GET, POST\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-headers: accept, content-type\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T17:09:26.793872Z","times_seen":14067879,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":66,"dns":1,"connect":30,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HP763EG55X","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feesaver.com/","date":"2026-04-18T18:05:16.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:14 GMT","end":"Mon, 22 Jun 2026 08:35:13 GMT"},"fingerprint":{"sha1":"BA:9E:A9:01:73:30:25:9B:9B:28:25:39:24:13:22:55:3E:F0:57:C3","sha256":"9D:AB:4E:BD:B4:98:3A:1E:70:9C:42:A2:E1:DA:0E:18:3C:BB:D8:2A:58:08:F5:85:3D:36:0E:1A:7A:27:AC:5E"}}},"request":{"raw":"GET /gtag/js?id=G-HP763EG55X HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://feesaver.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 18:05:16 GMT\r\nexpires: Sat, 18 Apr 2026 18:05:16 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157083\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":473272,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"5fc71207687c390db9f0410a4533ad55","sha1":"a95a6e13caa4b1682a693ac5ecfcf6dadc736a3f","sha256":"e2105f3c90060b3fa8bd60ac48e53d873fac82fc6a2cb7b6c086bc28ca0e7f09","sha512":"ff13ce970335e26d569508cea0bff8b78abb5809986fa0b192b02a67edd173a9f130b53b3ec04f6fa9c7b71ac6bfa3c6e32e6b933d8c518ced9f4c1650dcad1e","ssdeep":"6144:jS4OjKg7CA4MRBRfrJPj8B3v0yIjwcHCpLUgW6w01V91XG:E7t4MtfrJL8p5WOW","tlshash":"c8a409ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","first_seen":"2026-04-18T18:05:47.433394Z","last_seen":"2026-04-18T18:06:58.411674Z","times_seen":2,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":127,"dns":0,"connect":16,"send":0,"wait":56,"receive":52,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}