{"report_id":"881b8ae2-9466-4eb5-9c24-06f9735c476c","version":6,"status":"done","tags":[],"date":"2026-05-29T18:13:44Z","url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":0,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"title":"ГЛАВНАЯ - МЕГАСЕРВИС","dom":{"size":16965,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"b944078d348929640e42033e738ec2ee","sha1":"19a6e5c1380917a07adaede08909b37977285edf","sha256":"936325b6406d6f4374922cf0dce0046d3e069519458c6e4a20f8e6e7ea38b44c","sha512":"5087ffdec12d07b9fa819c08ea52c12956ac00ce9c9e23ffdcf23de8be49393c35984f6481362b6eef995c0946fb836ca62b01a96dc5941a85109ef41d0dedcf","ssdeep":"384:mjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/A:mFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+v","tlshash":"48720e50041744009b835ce223ce7f34fe4e92517242d0b1abfd9b6beedbda6926939d","dom_hash":"domhash08ae0081c1574fe7e013785c60b9d7d5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":0,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-03T18:13:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-05-29","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"www.gosuslugi.ru/__jsch/static/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":10,"received_data":357589,"sent_data":5484,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gu-st.ru","ip":{"addr":"46.235.185.9","port":443,"asn":34879,"as":"OOO Sovremennye setevye tekhnologii","country":"Russia","country_code":"RU"},"domain_registered":"2016-05-30","domain_rank":22418,"first_seen":"2017-01-30T19:09:12Z","last_seen":"2026-05-22T04:37:38.31667Z","alert_count":0,"request_count":2,"received_data":213444,"sent_data":1067,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"securepayments.sberbank.ru","ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"domain_registered":"2008-07-24","domain_rank":2529316,"first_seen":"2013-12-17T08:18:45Z","last_seen":"2026-05-12T16:21:26.835816Z","alert_count":0,"request_count":87,"received_data":4006788,"sent_data":96182,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.12.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-05-24T22:41:50.23946Z","alert_count":0,"request_count":10,"received_data":226187,"sent_data":6852,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-05-24T22:52:50.654314Z","alert_count":0,"request_count":14,"received_data":9269495,"sent_data":6598,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gosuslugi.ru","ip":{"addr":"213.59.254.7","port":443,"asn":12389,"as":"Rostelecom","country":"Russia","country_code":"RU"},"domain_registered":"2008-09-01","domain_rank":12507,"first_seen":"2017-01-29T20:56:07Z","last_seen":"2026-05-23T06:01:29.370685Z","alert_count":1,"request_count":2,"received_data":53756,"sent_data":953,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":3,"received_data":15296,"sent_data":1381,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"megaservis.com","ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-06-27","domain_rank":0,"first_seen":"2026-05-29T18:13:56.835179Z","last_seen":"2026-05-29T18:13:56.835179Z","alert_count":0,"request_count":79,"received_data":3894075,"sent_data":68388,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cookie Notice","description":"Cookie Notice provides a simple, customizable website banner that can be used to help your website comply with certain cookie consent requirements under the EU GDPR cookie law and CCPA regulations and includes seamless integration with Cookie Compliance to help your site comply with the latest updates to existing consent laws.","website":"https://wordpress.org/plugins/cookie-notice","common_platform_enumeration":"","icon":"Cookie Notice.png","categories":["Cookie compliance","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Ninja Forms","description":"Ninja Forms is the WordPress form builder.","website":"https://ninjaforms.com","common_platform_enumeration":"","icon":"Ninja Forms.svg","categories":["WordPress plugins","Form builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Backbone.js","description":"BackboneJS is a JavaScript library that allows to develop and structure the client side applications that run in a web browser.","website":"https://backbonejs.org","common_platform_enumeration":"cpe:2.3:a:backbone_project:backbone:*:*:*:*:*:*:*:*","icon":"Backbone.js.png","categories":["JavaScript frameworks"]},{"name":"prettyPhoto","description":"","website":"https://no-margin-for-errors.com/projects/prettyphoto-jquery-lightbox-clone/","common_platform_enumeration":"","icon":"prettyPhoto.png","categories":["JavaScript libraries"]},{"name":"Yoast SEO Premium:13.2","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/bootstrap.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed69cf59ee487638489ff8742a469e43","sha1":"8cf4186ce86777b4b408ce308ca9f66dd421f509","sha256":"defc39740ac1859d8e2785ed473208409627e87addd5f78f2deaacb93a12d51d","sha512":"cf1c9af1a6ae1477c31bcfd2bc5e19a2382f71d2a8ed879d99aa62e5a1e1fc8cdbc52d762e99411ab58b9f51ae266108241b826cba0082b84b5854dccd49ea63","ssdeep":"768:YctqAC7ZRl92TibveNCf0SIVXx4oBkRmJnrsBdw9W5+A:uZXizXx4GsbYWoA","tlshash":"6c634f167bb820618b5b30ba8cdf514c7238951b554bd4283cad97d06f50b38a2abffd","size":68954,"data":"","first_seen":"2023-03-07T01:17:24Z","last_seen":"2026-06-07T16:26:05.64918Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/modules/bank-info/get-bank-info.js","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b342292255b5206e7ae2269342d63993","sha1":"7fe56ff2aa9cce9dea2375f0b567fa0108f77b14","sha256":"513717c5ec45ef530f2a6ceacb7d86acbe09d149128e7dc7ee58f90c8a8fa004","sha512":"b9f2182e872d581634c56de7170208cd39ffd492671bb10e785b0e5d5d6e37ac920d3be007676b39ee169693b3ef3eb1d6b0e64c42fca6068b20a9eac680df22","ssdeep":"1536:vnJ9n7H20MEmzgNRC3UsQYgky1BH8SUly0GHiIjJ2yArNUVsU9wjFxPZGvpi+2hs:3aFHE","tlshash":"2a34c835e5140d77a42985c850e23a67ea441503be49f40af35c2b8c1f6e35f9cbaeee","size":241759,"data":"","first_seen":"2026-05-29T18:14:08.312636Z","last_seen":"2026-05-29T18:17:03.993999Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a979b4ea72b16a82d37f422a0d7c7ae","sha1":"237786764444f0355cd87f3ae287cc845a3e4175","sha256":"aea58ab04b1133f116931ae0e5edee938053e3a939248475568f340726d687c9","sha512":"79c8da5f650ff75755fdeeff122d684460dc859a6e64b85845473520567f0d81c474983e2f19fb8ef684fa15026f225d63b0930556fc74eaa17a10929c4240ff","ssdeep":"","tlshash":"ece04f15f0da51548433132a27f794006f2b603b1a43aa027e1d58b04f55e67b645394","size":389,"data":"","first_seen":"2026-05-29T18:14:08.408091Z","last_seen":"2026-05-29T18:17:04.128714Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"b7ad20df1afd9543f14761c94cdaa718","sha1":"9f4d2ed56ea1a626136aa198317066ababefc256","sha256":"1821d04a2ec5d991ddb56bb602cecf4f808e77658099b479d4515e2e2d19d912","sha512":"167802d49ade9f52e9231792aa116efc52a3aac416e49c6e7f2c8d576cc328cdba9e6ab41396a7b0b60bde0f2b8ebb75960f2375de652e6ff9cf5299c72f7843","ssdeep":"","tlshash":"03f0dd2934e5b47a028708b0330e7447d209e51f43a84040b93d4bf16ffeb724e2d1ba","size":641,"data":"","first_seen":"2025-01-22T14:21:26.721743Z","last_seen":"2026-06-07T13:15:28.189648Z","times_seen":2655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=2b605kektb65","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T18:32:06.929169Z","times_seen":464035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/jquery.flexslider-min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf048f54c2775dcfd953ab117f720ad0","sha1":"850314a78decd5a735cef0ef5e9fc793b7fd5576","sha256":"a6cf3e715755f08df5fc5db8c2be738ed0d154479d6e90dfc52a0f8f00fcdd9e","sha512":"d2a5fd19312549fabbea5234bc1c688f10d8b82bfed2a5072c575a5ba77f581da1bebb5ab49a573dd44302856b46f737f8458a463d7700b3605276a57a126e0a","ssdeep":"384:CmE4TjopcnfxNiYK0E8g8MXromIsnBscyVTnmhrpb0SXEk9EVe6:Jr86npNx3sro5sjG+tbjUJVh","tlshash":"81a28325f2503972cfe722ae7e0fd406a9b3d441e816c83d3a3d574a2d641859b33ee9","size":21430,"data":"","first_seen":"2025-09-29T02:03:04.620806Z","last_seen":"2026-05-29T18:17:04.101101Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.validation.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c906f4b4f8118bf368bcaaeecd4ee9fe","sha1":"293b9165ea0f157c459b79951ecf5622d5a6fb8f","sha256":"34a25e04b6fd19ddefe62c356c3e371c7633d7c405e1a701d31e1c8f48489860","sha512":"988f3effaebab0f42d4271e1f43ba2732f04b5ebcc9f047b2f46cadfe0512b37f34f3a48327db3ac310982dec7e0ebb29d8a7912095baaa6a6e10a87f33fbfc1","ssdeep":"","tlshash":"1021468e7de325444bafb26d47af804973794417244cdd05f87cb2412fa1ea861faacd","size":1202,"data":"","first_seen":"2026-05-29T18:14:08.31859Z","last_seen":"2026-05-29T18:17:04.016429Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/ditty-news-ticker-js-extra","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f6e71ae159dc6fbb2a1a3cfafba3fd9","sha1":"297eb5a3c2a43d9e2bc182824994d28d12f3ae84","sha256":"e0b5cc4b5ba629ef1683a93d8f52332337dcc42ce7b185433ede21c6bd5e1a30","sha512":"cde1204b143db4b398436fe5c94036c49dbf1194867899c1906ac035dd0535a1eb1801b38259f26a7435a519883d005b46c3dcd2de28b7fd5621729cbad103ba","ssdeep":"","tlshash":"09311259c0dd2cc376620c7d539d5273aac3a1c5d5241d389b8dc5421f32d81c1c5a0e","size":1461,"data":"","first_seen":"2026-05-29T18:14:08.410171Z","last_seen":"2026-05-29T18:17:04.15319Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"839220eb0777cef98113d738c44584df","sha1":"166200658bcb515cb6b2dafb0c8aee17e623c71e","sha256":"6396ce67b62d733998533b571b9037462e0b53685c81809cb99997159dd38ae7","sha512":"8f761f10722e8159cfe11b94776d775302c2f4532b4e9d337da964bcabad0cd4cc88a2fd29f539fed2c2028c8523bb64ae6e80f8e1d4d0cb640d2bd4f3962c70","ssdeep":"","tlshash":"5a317afc62ee10ecb55861e0754d83338e96e87a43870249e2b95d74b6b95b43e3032f","size":1491,"data":"","first_seen":"2025-10-28T16:31:31.080483Z","last_seen":"2026-06-07T13:15:28.189185Z","times_seen":1273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"839220eb0777cef98113d738c44584df","sha1":"166200658bcb515cb6b2dafb0c8aee17e623c71e","sha256":"6396ce67b62d733998533b571b9037462e0b53685c81809cb99997159dd38ae7","sha512":"8f761f10722e8159cfe11b94776d775302c2f4532b4e9d337da964bcabad0cd4cc88a2fd29f539fed2c2028c8523bb64ae6e80f8e1d4d0cb640d2bd4f3962c70","ssdeep":"","tlshash":"5a317afc62ee10ecb55861e0754d83338e96e87a43870249e2b95d74b6b95b43e3032f","size":1491,"data":"","first_seen":"2025-10-28T16:31:31.080483Z","last_seen":"2026-06-07T13:15:28.189185Z","times_seen":1273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"ffd68da4f5b031fdcfbcfb9db10fced4","sha1":"330d04a86b71193355646894127c2eab04e1790c","sha256":"20afcc48a5d2f7d5c2defaaf7b94a10e182e141f3c53886549e55cb8fc4c4205","sha512":"ef08e9b1f1bd7275da6123fa93424e3f3c3ac0cf7051ede97aa059ffe3930ca07ffdcd292d5da0297d1312fa8e5590b6a94a1b17edd0e17eafdcc8881343b9b7","ssdeep":"","tlshash":"2ff059b835e810bdb14540d81829860e0745eb3bc9070f46737ccaf053fadb4ec2211e","size":493,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.187117Z","times_seen":4020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/local_storage_wrapper.js?v=20200327","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1278c5d07ec36a3634a17681bdcb8a3","sha1":"9b89205b29dd24e50d7ce0c634e71b4dab866736","sha256":"b6d3062d765276bc9436c09509707d08b9c69890de11e88c0d32271283ff7e6a","sha512":"189ac41f8db44d5cd76438901052aa2def58640a1085989d19c1965f8baa7443857e48939c4bf44b14cddeb7ddf14d14a992d96c0e2d6271ee0d87b5bbaf8bef","ssdeep":"","tlshash":"1d41bf485cf325d440eb70ad276f4074b63b94537a1cdb95b98c6a013facd2882a5bf8","size":2324,"data":"","first_seen":"2026-05-29T18:14:08.34919Z","last_seen":"2026-05-29T18:17:04.01907Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/cookie-notice-front-js-before","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3226db2f24cee440efccba3a1ab36e14","sha1":"96161b0fe6ef32c0b442b6510caa957d96a5d746","sha256":"deb7c738d81e43a79310bdec3380e60bd0a620deb553f6fa6f0eb2f6d0a4e5c2","sha512":"e91d52d6a93db6c6b9078f589f8336d2f01a4983179c11d16516158559625d27c7639d290fc6a727178e784bb575a80c2aac2c92bb469f6b8402694f4486cf73","ssdeep":"","tlshash":"4cf02708f29d4a9d91a547f881562f92c6782135e9a0ac98c85f68782cf78d3e946407","size":574,"data":"","first_seen":"2026-05-29T18:14:08.412238Z","last_seen":"2026-05-29T18:17:04.145498Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"6eaeb32bb596e7bd463f0377d61c0bfa","sha1":"765c55a898b7001580d0ede57d231aca42fde6d4","sha256":"ca2b2249273551d16b64de8f0500d7f063c3c8c7a34da3ffbba2bf7c98299ec5","sha512":"2c71fc60431af28494127f0b0a9701f04d3dd5a0ed428b16cd1550f4f01dd33e7e5a5c5a613b079960a0697aa4813de4a3474917ed1d59a32179013fe4aa296a","ssdeep":"","tlshash":"fcc0c088f4dc10ec412a3538202f548c4224e92c10802800760cde782bbffa10806e3c","size":186,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.187608Z","times_seen":1331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=wl4y3j3q5nsy","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T18:32:06.929169Z","times_seen":464035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.utils.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cd03e1c6fec4e76555f86505d2011ef","sha1":"910c380fd148d88edcc7f837795a5eca99c7d55b","sha256":"9228482d0d7a78164ddb0f4fe116f1c3ab25c529465faf443dbf8887fd7cf43c","sha512":"34e15d41f4a02d3ba37b746e32b8bc5e360fcfd285348a73d0ab3829ef2e6691fc3847eee11d57f6a27c39f0c3d6ed7a904c74f03d1aec09cae76e618ef68166","ssdeep":"384:OPaFicra9rZ1iAXCCdoiw719PpvxhgIs0Xl9Q5kgufRno1AdDrrN:OPaOwzrgts3Q5kgufRno1AdB","tlshash":"a6b254f46de708971502b12f564e7804b476007fbe19ba517c8e2b782fde63c86b1ab4","size":23527,"data":"","first_seen":"2026-05-29T18:14:08.34452Z","last_seen":"2026-05-29T18:17:03.891556Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/bootstrap.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed69cf59ee487638489ff8742a469e43","sha1":"8cf4186ce86777b4b408ce308ca9f66dd421f509","sha256":"defc39740ac1859d8e2785ed473208409627e87addd5f78f2deaacb93a12d51d","sha512":"cf1c9af1a6ae1477c31bcfd2bc5e19a2382f71d2a8ed879d99aa62e5a1e1fc8cdbc52d762e99411ab58b9f51ae266108241b826cba0082b84b5854dccd49ea63","ssdeep":"768:YctqAC7ZRl92TibveNCf0SIVXx4oBkRmJnrsBdw9W5+A:uZXizXx4GsbYWoA","tlshash":"6c634f167bb820618b5b30ba8cdf514c7238951b554bd4283cad97d06f50b38a2abffd","size":68954,"data":"","first_seen":"2023-03-07T01:17:24Z","last_seen":"2026-06-07T16:26:05.64918Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"fb0ed7c151c40e2e53406d3de39a48d5","sha1":"339a10bbe2be49c586d400399f85b871f7bfe446","sha256":"fbcbd60e9c26e0bb461e179d9eaabe7311877a0dc4be511baf77dd5cd996214e","sha512":"0ec77a8a627629b74ef3551f09e8a99e9a7e764f5de6510f307240878096d35fb51d7dbd027cd8026d9a2902403c13c62db269661b412fdab1beeee8fadcadce","ssdeep":"","tlshash":"a9d023e874e910dc43095530511f45564314f52d11401481d93cc9b8a9bab77091553e","size":196,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.183397Z","times_seen":4039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.easing.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"601d2c28c96e8fca5511bc7d12bd49f5","sha1":"fd856f36e1b03d7ef9842e2dece8148ca81e8619","sha256":"95577ab82ae6298380cdbd69ecc41d5b6895cbc107b7b996e03a96673e3470ae","sha512":"271c7c20ed5e8b53d072bda98a43490d56f7cf7f8c605e4684c34b0371f57307cd7386da4c7d301cf3cf27079ab12abf9c36f24e8fbe989dd0ec7397ee34fef5","ssdeep":"","tlshash":"2f813994b6fea10657223570490b400f62ad7a42ccacbd6fcc0c5c947d68a37a6a7f7c","size":4092,"data":"","first_seen":"2023-03-07T12:04:52Z","last_seen":"2026-05-29T18:17:04.127905Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA6VZkWJ9-dHC3qR3jYzpm72zYpllzffAxTSUI2nyxKfWYUbgaxe3yxbOz6v11am7hjpnfJSHeZaNd-qIULPbrqpdZavRA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T18:32:06.929169Z","times_seen":464035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.input.js?v=20200219","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"57780dbf88bf3b53b4636baf2bb5816f","sha1":"fe3359194997d2c11e336cfad974285289912685","sha256":"04a5dc1289057f5318835b65d6426c278929ec33fd328da0385afc458782f616","sha512":"afa26b5b1e401342029b957ee47d4396ec994d6c5547147a816e1470d982ca2fc801cc988befeb518a82aaff9f628b725eef687c7e17fdefb20b0bffd5b3f0f5","ssdeep":"192:+/hg0S6hvHVG47rGw7NdreZZrET54gaSHC7aO+HhT+Hf1awXssa5pMwaT/oQQDO2:UiI/LOZZrwc0p","tlshash":"86122e58bdf700564a67723d4bef52043a7540a3180bee25bc2c2b95bf92d2842f2fe5","size":9160,"data":"","first_seen":"2026-05-29T18:14:08.321297Z","last_seen":"2026-05-29T18:17:03.89756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/jquery-1.12.1.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"62f69d29b6f01c8d477a547cedd922f2","sha1":"73d15ef036af1980629bcde3f32cc5869654ad4c","sha256":"56e843a66b2bf7188ac2f4c81df61608843ce144bd5aa66c2df4783fba85e8ef","sha512":"32f27590828812ffc810a151aea003aee4408ad4f2caaae1425074763edbd00d986091e59ecba6d51ca77d6ca7501dc3b78a81cffb009bce6795056c12f7ebda","ssdeep":"6144:k1Lfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOhPns8kVLkIVfz5AKW+1hC:kgw4mDiTFyi6TVfVAKlfC","tlshash":"b054a4d8f78d112e4232316aed2f52cdbb7cd1b1561054aebd8d497c24a083d42baf7a","size":294199,"data":"","first_seen":"2023-03-08T14:22:12Z","last_seen":"2026-06-06T04:17:21.287385Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"839220eb0777cef98113d738c44584df","sha1":"166200658bcb515cb6b2dafb0c8aee17e623c71e","sha256":"6396ce67b62d733998533b571b9037462e0b53685c81809cb99997159dd38ae7","sha512":"8f761f10722e8159cfe11b94776d775302c2f4532b4e9d337da964bcabad0cd4cc88a2fd29f539fed2c2028c8523bb64ae6e80f8e1d4d0cb640d2bd4f3962c70","ssdeep":"","tlshash":"5a317afc62ee10ecb55861e0754d83338e96e87a43870249e2b95d74b6b95b43e3032f","size":1491,"data":"","first_seen":"2025-10-28T16:31:31.080483Z","last_seen":"2026-06-07T13:15:28.189185Z","times_seen":1273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.validation.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c906f4b4f8118bf368bcaaeecd4ee9fe","sha1":"293b9165ea0f157c459b79951ecf5622d5a6fb8f","sha256":"34a25e04b6fd19ddefe62c356c3e371c7633d7c405e1a701d31e1c8f48489860","sha512":"988f3effaebab0f42d4271e1f43ba2732f04b5ebcc9f047b2f46cadfe0512b37f34f3a48327db3ac310982dec7e0ebb29d8a7912095baaa6a6e10a87f33fbfc1","ssdeep":"","tlshash":"1021468e7de325444bafb26d47af804973794417244cdd05f87cb2412fa1ea861faacd","size":1202,"data":"","first_seen":"2026-05-29T18:14:08.31859Z","last_seen":"2026-05-29T18:17:04.016429Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"58af24ec8b52a0e2cb08ebc364dabca7","sha1":"f911e3bc5fbe3a319b043ba0747dc9ba7dd6d9d9","sha256":"752a5ff9408e520059568cc560c248f934e1e80c6cd09aa7dc19a1036e0fc473","sha512":"994431a7617264d1a8c585859167c01204a25740fec8ac9346dd9a76f0e6170ff2383fb3bf2af5878c35522f4d0aa948fb9ee86533fca83d71bc1d90070c89f7","ssdeep":"","tlshash":"33c0228074e020ac411215a0002f844e2304ee3c58802500770cae782baeab1280683c","size":188,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.183861Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","size":900499,"data":"","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/19b6be62ddcb08e7957bff3a8c5473a9.js?defer\u0026generated=1779829961","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f337f30de5cbd75e85d25fcc43910bde","sha1":"4a977d81a9f324c57044dba5cdfb8f71368c9091","sha256":"ae453bbfd8cc4d79a59fd36bf4552479884b516089d360e2cf3b2fb09ee8079e","sha512":"6e90d95b208af2e494863f335aa38ca3bb9d4081b154b065b13a1e36c30472477f860df788beb4c70109c44ad4826d7ac2da2970aa886a6c155b60a4adb0ab18","ssdeep":"768:SXfINKFGp4Cop+L7dS2c5/xVrYm+BhAfkjTCZV6mk2Jt00ynDQmhg6iaI8OV:SPa4ComS2c5/wvhm5Fn00y0mhIaI8o","tlshash":"69530a8d7d90b69241ff7168616f170ea333882924069c50b968c8b57fbde8f9127f6c","size":62590,"data":"","first_seen":"2026-05-29T18:14:08.361316Z","last_seen":"2026-05-29T18:17:04.021991Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.input.js?v=20200219","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"57780dbf88bf3b53b4636baf2bb5816f","sha1":"fe3359194997d2c11e336cfad974285289912685","sha256":"04a5dc1289057f5318835b65d6426c278929ec33fd328da0385afc458782f616","sha512":"afa26b5b1e401342029b957ee47d4396ec994d6c5547147a816e1470d982ca2fc801cc988befeb518a82aaff9f628b725eef687c7e17fdefb20b0bffd5b3f0f5","ssdeep":"192:+/hg0S6hvHVG47rGw7NdreZZrET54gaSHC7aO+HhT+Hf1awXssa5pMwaT/oQQDO2:UiI/LOZZrwc0p","tlshash":"86122e58bdf700564a67723d4bef52043a7540a3180bee25bc2c2b95bf92d2842f2fe5","size":9160,"data":"","first_seen":"2026-05-29T18:14:08.321297Z","last_seen":"2026-05-29T18:17:03.89756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"b7ad20df1afd9543f14761c94cdaa718","sha1":"9f4d2ed56ea1a626136aa198317066ababefc256","sha256":"1821d04a2ec5d991ddb56bb602cecf4f808e77658099b479d4515e2e2d19d912","sha512":"167802d49ade9f52e9231792aa116efc52a3aac416e49c6e7f2c8d576cc328cdba9e6ab41396a7b0b60bde0f2b8ebb75960f2375de652e6ff9cf5299c72f7843","ssdeep":"","tlshash":"03f0dd2934e5b47a028708b0330e7447d209e51f43a84040b93d4bf16ffeb724e2d1ba","size":641,"data":"","first_seen":"2025-01-22T14:21:26.721743Z","last_seen":"2026-06-07T13:15:28.189648Z","times_seen":2655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2231d6e8d067a5cd22231e45e01e55de","sha1":"c9853ded0a5ac22d145c255b7e82f4c68e551a88","sha256":"a96d6ca55569b0fb36fb7b9bfc2378f8c0cb651f41ea58af668175d44756fc50","sha512":"cbeba81a944fc52d7e7ae26eec826029b7cdc36e5e37e67a950561fdc0e628be4dff7b804ecc9c4462dc246566cfcdb3721932b0ce9344c9e4cbf001e68ef7f2","ssdeep":"","tlshash":"f0b092f2200995a407d31146f4b0b39cba36208934427216d41ca0123014aac5b56904","size":108,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-06-07T17:43:15.087201Z","times_seen":2969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","size":900499,"data":"","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"839220eb0777cef98113d738c44584df","sha1":"166200658bcb515cb6b2dafb0c8aee17e623c71e","sha256":"6396ce67b62d733998533b571b9037462e0b53685c81809cb99997159dd38ae7","sha512":"8f761f10722e8159cfe11b94776d775302c2f4532b4e9d337da964bcabad0cd4cc88a2fd29f539fed2c2028c8523bb64ae6e80f8e1d4d0cb640d2bd4f3962c70","ssdeep":"","tlshash":"5a317afc62ee10ecb55861e0754d83338e96e87a43870249e2b95d74b6b95b43e3032f","size":1491,"data":"","first_seen":"2025-10-28T16:31:31.080483Z","last_seen":"2026-06-07T13:15:28.189185Z","times_seen":1273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"58af24ec8b52a0e2cb08ebc364dabca7","sha1":"f911e3bc5fbe3a319b043ba0747dc9ba7dd6d9d9","sha256":"752a5ff9408e520059568cc560c248f934e1e80c6cd09aa7dc19a1036e0fc473","sha512":"994431a7617264d1a8c585859167c01204a25740fec8ac9346dd9a76f0e6170ff2383fb3bf2af5878c35522f4d0aa948fb9ee86533fca83d71bc1d90070c89f7","ssdeep":"","tlshash":"33c0228074e020ac411215a0002f844e2304ee3c58802500770cae782baeab1280683c","size":188,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.183861Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ninja-forms-layout-styles/layouts/assets/js/min/front-end.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bcc345f6c2386193d24714fac0b9b12","sha1":"114457c29d0b99bca921c60fc0e62a31852756dc","sha256":"dc228e912765cf8289347e62db1643b7efd84f84483d4e550ae97649f882dc0d","sha512":"981b7bee7203336badb94011e82ce31d0733143ee8813c9a955b60df0c43a2fd41dc50db7be9a032c11077d3a07f9cbd4081570fc532e431a467bba9edf0e03b","ssdeep":"96:1pTcIgbYbpJnu1Ln0LmSZKMI800OMqVEvV+zyoTy2eo9uEvcnZrQE4MfA:HoIgbQgLhEDbX8zykyjmvY0","tlshash":"9ef1a6ccb1a23b5d0abfb4b061ff7209933558956c095024f465f5e6acf865a1223f3d","size":7967,"data":"","first_seen":"2023-03-07T12:56:46Z","last_seen":"2026-06-07T05:57:02.094866Z","times_seen":1116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"fb0ed7c151c40e2e53406d3de39a48d5","sha1":"339a10bbe2be49c586d400399f85b871f7bfe446","sha256":"fbcbd60e9c26e0bb461e179d9eaabe7311877a0dc4be511baf77dd5cd996214e","sha512":"0ec77a8a627629b74ef3551f09e8a99e9a7e764f5de6510f307240878096d35fb51d7dbd027cd8026d9a2902403c13c62db269661b412fdab1beeee8fadcadce","ssdeep":"","tlshash":"a9d023e874e910dc43095530511f45564314f52d11401481d93cc9b8a9bab77091553e","size":196,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.183397Z","times_seen":4039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"58af24ec8b52a0e2cb08ebc364dabca7","sha1":"f911e3bc5fbe3a319b043ba0747dc9ba7dd6d9d9","sha256":"752a5ff9408e520059568cc560c248f934e1e80c6cd09aa7dc19a1036e0fc473","sha512":"994431a7617264d1a8c585859167c01204a25740fec8ac9346dd9a76f0e6170ff2383fb3bf2af5878c35522f4d0aa948fb9ee86533fca83d71bc1d90070c89f7","ssdeep":"","tlshash":"33c0228074e020ac411215a0002f844e2304ee3c58802500770cae782baeab1280683c","size":188,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.183861Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/nf-front-end-js-extra","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdd7e17c46077d133fcb9f813977c66c","sha1":"159e25f65b17b783ea0f7bb2635cf0c0cb61ad84","sha256":"ee8bf32c7f907ff15593e881db9e4cb4fef16419ac901b47fecfe46e332702b3","sha512":"ce928a8fb51943eb60e55f7063c25776d6d61d0c5fa3dae40aa20a639f675ff1885cf7038f4764dde8197906813da7535d968e769f2455cf8d439e6ee4ebddb6","ssdeep":"768:sOwt9n90909yOwt9n90909yOwt9n90909E:sO09n90909yO09n90909yO09n90909E","tlshash":"6bc287f6d5a50f6d1eee32a3d57a5e8f3888a842e104db3acd7def4bd348600915170a","size":26677,"data":"","first_seen":"2026-05-29T18:14:08.417021Z","last_seen":"2026-05-29T18:17:04.149168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.user-agent.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc2273c858f0626e64e8a6983f1dcd31","sha1":"e8f436f4478a7c3607a1413dedd84ca15de3ddd7","sha256":"30ef21e28206803e992d3e9c5afa30a8dbdd6bacf860d1b95073f59855c9c4cd","sha512":"af0b29f65543ace3ea483cc0b83c4044babd8edcfc2944285487917d231b36f7778e43203f32bf9b2a659af8d303870e8e37be9a3b7f0fc8b5d2677aa9e09a8b","ssdeep":"","tlshash":"b201a79db9f6b004462374be985b9104753a444ba82d1d40fc684fe0ef7583a4193eac","size":677,"data":"","first_seen":"2026-05-29T18:14:08.324949Z","last_seen":"2026-05-29T18:17:03.943597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"fb0ed7c151c40e2e53406d3de39a48d5","sha1":"339a10bbe2be49c586d400399f85b871f7bfe446","sha256":"fbcbd60e9c26e0bb461e179d9eaabe7311877a0dc4be511baf77dd5cd996214e","sha512":"0ec77a8a627629b74ef3551f09e8a99e9a7e764f5de6510f307240878096d35fb51d7dbd027cd8026d9a2902403c13c62db269661b412fdab1beeee8fadcadce","ssdeep":"","tlshash":"a9d023e874e910dc43095530511f45564314f52d11401481d93cc9b8a9bab77091553e","size":196,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.183397Z","times_seen":4039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"a69de8c4f55590dc5fd05f72d54e8bf3","sha1":"8174fc70b60afefda9ed05747f45a8237793326c","sha256":"1fdce8c606ad40a974e50fc416a9ca19017c935b755171278b84cae301b6a351","sha512":"d974dd6e4f34631e1eea3f8d6f2356107addaed677f4d23a6390748dd0c32677b15d0a8bc58a5641411427ccd360b965b666398c8b0b3f86426aa3d6a96ad9bd","ssdeep":"","tlshash":"f811cced25e832fd710c05e0b00cc66b622dd56a8b850542bebcd976737e6b15e2825f","size":989,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.18617Z","times_seen":3941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"04e08aaf2a73d9a90bef3cb6eddbf77a","sha1":"ae7a4b9f7e5b75fd330f94da8177ac243ed91af5","sha256":"bb8df4faf32ff77f4f96cebc7370364bf830e2116e4c5e088f8531089238e12f","sha512":"9dd87b60ddacae055940c2ed5a7876eecca9e277e2e4679d1b38f8ea0e2f0b9942a4c1d528135671fcb7173afec18f6deb68c59ba022d98ed3b09ac084915069","ssdeep":"","tlshash":"1b11e6bc3aed50fdf24841e4542d86138249f67a45c2018af9fd89b0777e6f9297422f","size":1009,"data":"","first_seen":"2025-01-30T13:36:05.103409Z","last_seen":"2026-06-07T13:15:28.228022Z","times_seen":952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"d7b4ae5a8ad0b7b89d62b6b208c3224a","sha1":"4bedbff3cf603ad139b2a178e20f7798d01ea691","sha256":"601a205fd87b18888bec6e9785b3015bdb1f1cc44d5bf6436038d88594bfa5cb","sha512":"3c7d6cc08fb90b0b80c7de19bf4cff5523208f8d9685a0a44e66bd46718f230a8df2acef4dc347884ebcd6c0f6451206dbe07e29842b8f8247c156afdc82513d","ssdeep":"","tlshash":"81f02bbd31e410bd518545d0102e861f5205ea3ac84b070777bccdf1637aeb4ed2512f","size":525,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.225125Z","times_seen":3088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/underscore.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","size":18905,"data":"","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-06-07T18:34:32.519086Z","times_seen":114009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/SketchBoard/functions/shortcodes/js/shrotcodes.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f0e343a9239528929a44511e8d5eb0c","sha1":"25584267dd69b494ea24e58e6acab0a78e1416d1","sha256":"077bbe0b569685de219a502e4913be6e44be0623686267c2359ace942f8f2d76","sha512":"cdb0b7240d9bacfd5e796ec14458134b42d2b9c4f7fd5abe2304dc6fac98cb0fa93f965efb0a9e9bc5273049d86041a8c126212ee2d84b4e66185345a7d8b77c","ssdeep":"48:kMOzPM5/pMt2+Ia9/MWlgPH+8BOdP0fE4eB0QvaHS86v2G4JNZhejkmWIwmioBxf:RaJ6HBlVkvh4JDpmNwmioHGLQ","tlshash":"b491221db046a4ec47f56863e13f22b624a34870bc4b0161747ae1a94cbdcae0573beb","size":4614,"data":"","first_seen":"2023-03-14T14:52:50Z","last_seen":"2026-05-29T18:17:03.940589Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"84ae169c58a1b84db9f1e4a18452624f","sha1":"0955d9bf2b2e5fa9af88c0108934e19697bb3922","sha256":"83f86fb85333afe87afddc54735b464dd72a7fe7059318deec806d1462cc089b","sha512":"43a2b642ff5daf442d98d325b659d79040e568a5dc7a95694effb012742551c32b4c25773acd4527a3654d7a0513b28e040811a39aec0291449fcaceac1b6846","ssdeep":"","tlshash":"21f046bc3af850ada64452e0104ed422831dce3bc945478ae7b48e706379af4392612f","size":571,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.200114Z","times_seen":2607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.utils.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cd03e1c6fec4e76555f86505d2011ef","sha1":"910c380fd148d88edcc7f837795a5eca99c7d55b","sha256":"9228482d0d7a78164ddb0f4fe116f1c3ab25c529465faf443dbf8887fd7cf43c","sha512":"34e15d41f4a02d3ba37b746e32b8bc5e360fcfd285348a73d0ab3829ef2e6691fc3847eee11d57f6a27c39f0c3d6ed7a904c74f03d1aec09cae76e618ef68166","ssdeep":"384:OPaFicra9rZ1iAXCCdoiw719PpvxhgIs0Xl9Q5kgufRno1AdDrrN:OPaOwzrgts3Q5kgufRno1AdB","tlshash":"a6b254f46de708971502b12f564e7804b476007fbe19ba517c8e2b782fde63c86b1ab4","size":23527,"data":"","first_seen":"2026-05-29T18:14:08.34452Z","last_seen":"2026-05-29T18:17:03.891556Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.validation.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c906f4b4f8118bf368bcaaeecd4ee9fe","sha1":"293b9165ea0f157c459b79951ecf5622d5a6fb8f","sha256":"34a25e04b6fd19ddefe62c356c3e371c7633d7c405e1a701d31e1c8f48489860","sha512":"988f3effaebab0f42d4271e1f43ba2732f04b5ebcc9f047b2f46cadfe0512b37f34f3a48327db3ac310982dec7e0ebb29d8a7912095baaa6a6e10a87f33fbfc1","ssdeep":"","tlshash":"1021468e7de325444bafb26d47af804973794417244cdd05f87cb2412fa1ea861faacd","size":1202,"data":"","first_seen":"2026-05-29T18:14:08.31859Z","last_seen":"2026-05-29T18:17:04.016429Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/backbone.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b5c2ebb1043a2089f38b2471b881395","sha1":"bab51f7bf5f98e554f4b7a445664344f810f4d79","sha256":"a69b2b7f72b1b54c21af59b45da481c18dac7d98b0971c8688503dd0ca75b364","sha512":"e2a52b399fcf1f2e45410a3d60f5c16a62a8674723e439acaa15dad5c2a3bb5f77a2706bbe43aabf22ee4c23cd76193214aaf9f29b79a86a3b5b552e356e2b7a","ssdeep":"384:P+wdhm6Smn9N8Tc1WsP8b/GXlPDFXYEk0NTo/bYybx9ZP0AyCEolSdO6zCBk:oraRuZW6ywq","tlshash":"74b2b7e9739269624aba70b0453f1207e23b59893409815cf6bcd4d7bc7c98d607bf78","size":24301,"data":"","first_seen":"2025-04-17T08:01:27.169384Z","last_seen":"2026-06-07T14:38:27.347563Z","times_seen":11773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"58af24ec8b52a0e2cb08ebc364dabca7","sha1":"f911e3bc5fbe3a319b043ba0747dc9ba7dd6d9d9","sha256":"752a5ff9408e520059568cc560c248f934e1e80c6cd09aa7dc19a1036e0fc473","sha512":"994431a7617264d1a8c585859167c01204a25740fec8ac9346dd9a76f0e6170ff2383fb3bf2af5878c35522f4d0aa948fb9ee86533fca83d71bc1d90070c89f7","ssdeep":"","tlshash":"33c0228074e020ac411215a0002f844e2304ee3c58802500770cae782baeab1280683c","size":188,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.183861Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b043cd9c3e97724f87c357a48ec16a5","sha1":"35318f961c18ed6c997af8ca0ffa75fd72a4d76e","sha256":"1fc8ac63cfa8a03541ad94e4211e13a47bc6cf1fb15a1f811c70226580665dd8","sha512":"0faa40598930dc0174610ba21a0968fbeb50b8bd638aa0a4f079549099cb864782912be721c0a24b81dc70ce75776bde18f837c7f94f47452e3e8a8dd4972c0a","ssdeep":"","tlshash":"11f05c08b29d4a9d91e547c8c1562f92c638213569a0dc9cc85f78782cf7cd3e946407","size":461,"data":"","first_seen":"2026-05-29T18:14:08.419926Z","last_seen":"2026-05-29T18:17:04.125176Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?hl=ru\u0026onload=nfRenderRecaptcha\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69bbe703ac1a3ced50b2e4cc292729d7","sha1":"ceff5d592c03779f6eb5a3f09996ea9084db910b","sha256":"05f4d7a198e3f5c480f405acfee18bd7015f36b0178c82b3ec66fb8d546c9439","sha512":"4785d1a86bbaf0e721561ca9bbb2a218b1d6702fb2cae76aa788c7c56bfa2d0bb8a793101055a069f68f86ef886058cec283b1eca2682e0d3d0fd09233394fd0","ssdeep":"","tlshash":"62111fbb1a08f0390e7218d0e2fecab1e452701da11845d8a511d6942e7adcbce05599","size":1038,"data":"","first_seen":"2026-05-29T18:14:08.398371Z","last_seen":"2026-05-29T18:17:04.0823Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0afaecef6bddaf6892fd1b74b2b83af","sha1":"338aa19f050d1a5b374dd8e456f85f748b0f3174","sha256":"43667532ea1b721c2c7224a5dc122a0d31b1d1905a04964ffa8cd70153fa9acd","sha512":"1bf39f3a4b519268c373e341d652c30eb7e9f869d02fb4636713c0d4a8075f49aba60728d18b3da0b10f6122973f2d8a4c89bec3f0f124fb58b5eb1de7c0b9af","ssdeep":"768:MOwt9n90909yOwt9n90909yOwt9n90909E:MO09n90909yO09n90909yO09n90909E","tlshash":"e9c297f695a50f6d1eee3293d57a5e8f3888a842e104db3acd7def4bd348700919170a","size":26553,"data":"","first_seen":"2026-05-29T18:14:08.420713Z","last_seen":"2026-05-29T18:17:04.126485Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.user-agent.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc2273c858f0626e64e8a6983f1dcd31","sha1":"e8f436f4478a7c3607a1413dedd84ca15de3ddd7","sha256":"30ef21e28206803e992d3e9c5afa30a8dbdd6bacf860d1b95073f59855c9c4cd","sha512":"af0b29f65543ace3ea483cc0b83c4044babd8edcfc2944285487917d231b36f7778e43203f32bf9b2a659af8d303870e8e37be9a3b7f0fc8b5d2677aa9e09a8b","ssdeep":"","tlshash":"b201a79db9f6b004462374be985b9104753a444ba82d1d40fc684fe0ef7583a4193eac","size":677,"data":"","first_seen":"2026-05-29T18:14:08.324949Z","last_seen":"2026-05-29T18:17:03.943597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/popup-maker-site-js-extra","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e3c97f758ba7d36ab7c3d218d37e1b7","sha1":"8484fcaa9e3b53f7e683161fd90ff876b10fcd1c","sha256":"5938d6eee91329c76589a35c7a890e680470a2639332c82f4bd4272de02be98d","sha512":"57016d2327fc6f2fceae61f9785a5beb618bfc19208e3589d2bb9b204b638156ef64ba0eb7234ba72a27bd63e7a6ba5ca2f0749c1ba3036e210f27592bfa28f7","ssdeep":"192:fouuHRSRS33l7qnchPpaYSIvpiYSI0pCYSIfpsYSIPpkYSIZpsUYSIwpyfSIXpL3:AuuR/hRZ","tlshash":"49a2fdb5ca0112ad81d7b3b2d0bc6d4ed76d5122e208db7dcd5c072b96cb6e62123b4b","size":22704,"data":"","first_seen":"2026-05-29T18:14:08.421929Z","last_seen":"2026-05-29T18:17:04.141957Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.user-agent.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc2273c858f0626e64e8a6983f1dcd31","sha1":"e8f436f4478a7c3607a1413dedd84ca15de3ddd7","sha256":"30ef21e28206803e992d3e9c5afa30a8dbdd6bacf860d1b95073f59855c9c4cd","sha512":"af0b29f65543ace3ea483cc0b83c4044babd8edcfc2944285487917d231b36f7778e43203f32bf9b2a659af8d303870e8e37be9a3b7f0fc8b5d2677aa9e09a8b","ssdeep":"","tlshash":"b201a79db9f6b004462374be985b9104753a444ba82d1d40fc684fe0ef7583a4193eac","size":677,"data":"","first_seen":"2026-05-29T18:14:08.324949Z","last_seen":"2026-05-29T18:17:03.943597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/bootstrap.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed69cf59ee487638489ff8742a469e43","sha1":"8cf4186ce86777b4b408ce308ca9f66dd421f509","sha256":"defc39740ac1859d8e2785ed473208409627e87addd5f78f2deaacb93a12d51d","sha512":"cf1c9af1a6ae1477c31bcfd2bc5e19a2382f71d2a8ed879d99aa62e5a1e1fc8cdbc52d762e99411ab58b9f51ae266108241b826cba0082b84b5854dccd49ea63","ssdeep":"768:YctqAC7ZRl92TibveNCf0SIVXx4oBkRmJnrsBdw9W5+A:uZXizXx4GsbYWoA","tlshash":"6c634f167bb820618b5b30ba8cdf514c7238951b554bd4283cad97d06f50b38a2abffd","size":68954,"data":"","first_seen":"2023-03-07T01:17:24Z","last_seen":"2026-06-07T16:26:05.64918Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","size":900499,"data":"","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"4d0098c254f913357ec7433d1eb1ed9c","sha1":"4f7d908dc26e1d08cf772efbe5c13680bf3f6d81","sha256":"469b40a7bf46790dbe4c2f043ff733862c63be22abb70dae10e8e034993e59de","sha512":"0c2ec1000b2fac0e5e505dd91ac4b15b69e9921084f5b7ed7eb0e87fac40f8c9e58ff5312a50ec7567decc15c2bf8c796b1c59e53df3301d581aae2a5156a2a1","ssdeep":"","tlshash":"a9c022e879f810dc46095630502f899a535ce93e12402841996ceab8a8babb20911a3e","size":192,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.208855Z","times_seen":4037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.touchSwipe.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"91d00123eb72c7cacc3fbdd03d83762b","sha1":"6b0fcd06196374d8a8f742d5e1663433adbc3b6c","sha256":"f65f3aeed46b79940849fa2022f2cbdf368288de9046f2b3da075c42f9dde8f6","sha512":"34c2ef048bbf51ea56c4f6b4c61f3fc33eb5ad1b4bc31945e81e9ea8a61f80382009176936d78abcc4eed733c47e39af1b40089617efcbd5102a7fbfc9c037e6","ssdeep":"192:sWeHv/p4PUT2uN9MEzdA4KSuAAWF5apIOAJ7j0D0JXYiTlBzT4NYVBgVB7l7lNlk:HQp4PK2uN9GnAAWFcWOAWD0JXYiZBzTp","tlshash":"1f32958e7781b417eadc2274e24f4743253eac9b0a0a84b5e055fda4f9340b4817afcd","size":11576,"data":"","first_seen":"2023-03-07T12:04:52Z","last_seen":"2026-06-04T09:47:19.022105Z","times_seen":511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.user-agent.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc2273c858f0626e64e8a6983f1dcd31","sha1":"e8f436f4478a7c3607a1413dedd84ca15de3ddd7","sha256":"30ef21e28206803e992d3e9c5afa30a8dbdd6bacf860d1b95073f59855c9c4cd","sha512":"af0b29f65543ace3ea483cc0b83c4044babd8edcfc2944285487917d231b36f7778e43203f32bf9b2a659af8d303870e8e37be9a3b7f0fc8b5d2677aa9e09a8b","ssdeep":"","tlshash":"b201a79db9f6b004462374be985b9104753a444ba82d1d40fc684fe0ef7583a4193eac","size":677,"data":"","first_seen":"2026-05-29T18:14:08.324949Z","last_seen":"2026-05-29T18:17:03.943597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"839220eb0777cef98113d738c44584df","sha1":"166200658bcb515cb6b2dafb0c8aee17e623c71e","sha256":"6396ce67b62d733998533b571b9037462e0b53685c81809cb99997159dd38ae7","sha512":"8f761f10722e8159cfe11b94776d775302c2f4532b4e9d337da964bcabad0cd4cc88a2fd29f539fed2c2028c8523bb64ae6e80f8e1d4d0cb640d2bd4f3962c70","ssdeep":"","tlshash":"5a317afc62ee10ecb55861e0754d83338e96e87a43870249e2b95d74b6b95b43e3032f","size":1491,"data":"","first_seen":"2025-10-28T16:31:31.080483Z","last_seen":"2026-06-07T13:15:28.189185Z","times_seen":1273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.utils.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cd03e1c6fec4e76555f86505d2011ef","sha1":"910c380fd148d88edcc7f837795a5eca99c7d55b","sha256":"9228482d0d7a78164ddb0f4fe116f1c3ab25c529465faf443dbf8887fd7cf43c","sha512":"34e15d41f4a02d3ba37b746e32b8bc5e360fcfd285348a73d0ab3829ef2e6691fc3847eee11d57f6a27c39f0c3d6ed7a904c74f03d1aec09cae76e618ef68166","ssdeep":"384:OPaFicra9rZ1iAXCCdoiw719PpvxhgIs0Xl9Q5kgufRno1AdDrrN:OPaOwzrgts3Q5kgufRno1AdB","tlshash":"a6b254f46de708971502b12f564e7804b476007fbe19ba517c8e2b782fde63c86b1ab4","size":23527,"data":"","first_seen":"2026-05-29T18:14:08.34452Z","last_seen":"2026-05-29T18:17:03.891556Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/waypoints.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"836d0126dd6fe5125a48d87dd4eda12e","sha1":"81e8d2da7748245d174569b4180e299000810a09","sha256":"54c7e25da334be758c942a477fd475223d4e24cbfd29a8430db2baba35b91a9e","sha512":"1d9daf3d7989a52c6121a3b555acd44f6dae13cd3da5db31389202dcf275d0876ae62eb8d90673b31e81cfc9e3a659bbdbcfe21785e67fd411939aed84b29e70","ssdeep":"96:5BzBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:5B3G3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"b0f1eac9b4c7b4221befa0b5d43f160bb33a9d4571098064f194e4da3db4a2da567f38","size":8058,"data":"","first_seen":"2023-09-20T18:24:27Z","last_seen":"2026-05-29T18:17:04.015596Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/jquery.easing.1.3.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c31e0ab2407ce5ec9744b3a0ccfc623a","sha1":"3460aeda0c7b060545b1106532517b62fd3c2cea","sha256":"88f1017f9690505f251d53d15ffb890075133f460b59a5dba88663ed3f35b381","sha512":"c97d411470567e616d72c2f3fb5ea701048766ae528ab01661204401ccb4b39b7700c7ec62c239e3886b2d293ebd6578fd7f3aa7ee06d02e38b51e46001aecf6","ssdeep":"","tlshash":"18616bceb9f3b51e639833f4265a231732593da6104d5881f89548d83c7a278e33edac","size":3443,"data":"","first_seen":"2023-03-07T01:42:35Z","last_seen":"2026-06-04T11:02:19.251921Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"fb0ed7c151c40e2e53406d3de39a48d5","sha1":"339a10bbe2be49c586d400399f85b871f7bfe446","sha256":"fbcbd60e9c26e0bb461e179d9eaabe7311877a0dc4be511baf77dd5cd996214e","sha512":"0ec77a8a627629b74ef3551f09e8a99e9a7e764f5de6510f307240878096d35fb51d7dbd027cd8026d9a2902403c13c62db269661b412fdab1beeee8fadcadce","ssdeep":"","tlshash":"a9d023e874e910dc43095530511f45564314f52d11401481d93cc9b8a9bab77091553e","size":196,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.183397Z","times_seen":4039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"b7ad20df1afd9543f14761c94cdaa718","sha1":"9f4d2ed56ea1a626136aa198317066ababefc256","sha256":"1821d04a2ec5d991ddb56bb602cecf4f808e77658099b479d4515e2e2d19d912","sha512":"167802d49ade9f52e9231792aa116efc52a3aac416e49c6e7f2c8d576cc328cdba9e6ab41396a7b0b60bde0f2b8ebb75960f2375de652e6ff9cf5299c72f7843","ssdeep":"","tlshash":"03f0dd2934e5b47a028708b0330e7447d209e51f43a84040b93d4bf16ffeb724e2d1ba","size":641,"data":"","first_seen":"2025-01-22T14:21:26.721743Z","last_seen":"2026-06-07T13:15:28.189648Z","times_seen":2655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"b7ad20df1afd9543f14761c94cdaa718","sha1":"9f4d2ed56ea1a626136aa198317066ababefc256","sha256":"1821d04a2ec5d991ddb56bb602cecf4f808e77658099b479d4515e2e2d19d912","sha512":"167802d49ade9f52e9231792aa116efc52a3aac416e49c6e7f2c8d576cc328cdba9e6ab41396a7b0b60bde0f2b8ebb75960f2375de652e6ff9cf5299c72f7843","ssdeep":"","tlshash":"03f0dd2934e5b47a028708b0330e7447d209e51f43a84040b93d4bf16ffeb724e2d1ba","size":641,"data":"","first_seen":"2025-01-22T14:21:26.721743Z","last_seen":"2026-06-07T13:15:28.189648Z","times_seen":2655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a979b4ea72b16a82d37f422a0d7c7ae","sha1":"237786764444f0355cd87f3ae287cc845a3e4175","sha256":"aea58ab04b1133f116931ae0e5edee938053e3a939248475568f340726d687c9","sha512":"79c8da5f650ff75755fdeeff122d684460dc859a6e64b85845473520567f0d81c474983e2f19fb8ef684fa15026f225d63b0930556fc74eaa17a10929c4240ff","ssdeep":"","tlshash":"ece04f15f0da51548433132a27f794006f2b603b1a43aa027e1d58b04f55e67b645394","size":389,"data":"","first_seen":"2026-05-29T18:14:08.408091Z","last_seen":"2026-05-29T18:17:04.128714Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"6eaeb32bb596e7bd463f0377d61c0bfa","sha1":"765c55a898b7001580d0ede57d231aca42fde6d4","sha256":"ca2b2249273551d16b64de8f0500d7f063c3c8c7a34da3ffbba2bf7c98299ec5","sha512":"2c71fc60431af28494127f0b0a9701f04d3dd5a0ed428b16cd1550f4f01dd33e7e5a5c5a613b079960a0697aa4813de4a3474917ed1d59a32179013fe4aa296a","ssdeep":"","tlshash":"fcc0c088f4dc10ec412a3538202f548c4224e92c10802800760cde782bbffa10806e3c","size":186,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.187608Z","times_seen":1331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/jquery.prettyPhoto.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d78cc8e0da06abf11f683c1f0730f70","sha1":"d60bb3989f333830f624e79c4ac8d7b5757f2a43","sha256":"c430b0bd598913fd6fc5f34c17aa7e48d0ffc9ee8029c5d5daae736e9e223ae5","sha512":"59f870d705914a354e3125202a0ba2c68fc508c3d803045a61cce56ad1c256703fd5b8f5617aa3cb7d77d453ff3a28089d3b8fa2990e0e2ac9a55a987bacf7ef","ssdeep":"384:AucafoPmRXyO5kUoMCJ/0G6GhcGIyqQBryD2m9viCz0CYi7f7l8MuzmsMDPojJRD:gaAPmF35OBBhsyqgdYxgGaN7S8","tlshash":"cbd286247d10716bc1d7e2aae4479718d2328a13ab56d524f27c8c741fe1a86a83ffcd","size":28988,"data":"","first_seen":"2025-08-10T07:22:14.337209Z","last_seen":"2026-05-29T18:17:04.04264Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.validation.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c906f4b4f8118bf368bcaaeecd4ee9fe","sha1":"293b9165ea0f157c459b79951ecf5622d5a6fb8f","sha256":"34a25e04b6fd19ddefe62c356c3e371c7633d7c405e1a701d31e1c8f48489860","sha512":"988f3effaebab0f42d4271e1f43ba2732f04b5ebcc9f047b2f46cadfe0512b37f34f3a48327db3ac310982dec7e0ebb29d8a7912095baaa6a6e10a87f33fbfc1","ssdeep":"","tlshash":"1021468e7de325444bafb26d47af804973794417244cdd05f87cb2412fa1ea861faacd","size":1202,"data":"","first_seen":"2026-05-29T18:14:08.31859Z","last_seen":"2026-05-29T18:17:04.016429Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"58af24ec8b52a0e2cb08ebc364dabca7","sha1":"f911e3bc5fbe3a319b043ba0747dc9ba7dd6d9d9","sha256":"752a5ff9408e520059568cc560c248f934e1e80c6cd09aa7dc19a1036e0fc473","sha512":"994431a7617264d1a8c585859167c01204a25740fec8ac9346dd9a76f0e6170ff2383fb3bf2af5878c35522f4d0aa948fb9ee86533fca83d71bc1d90070c89f7","ssdeep":"","tlshash":"33c0228074e020ac411215a0002f844e2304ee3c58802500770cae782baeab1280683c","size":188,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.183861Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"ffd68da4f5b031fdcfbcfb9db10fced4","sha1":"330d04a86b71193355646894127c2eab04e1790c","sha256":"20afcc48a5d2f7d5c2defaaf7b94a10e182e141f3c53886549e55cb8fc4c4205","sha512":"ef08e9b1f1bd7275da6123fa93424e3f3c3ac0cf7051ede97aa059ffe3930ca07ffdcd292d5da0297d1312fa8e5590b6a94a1b17edd0e17eafdcc8881343b9b7","ssdeep":"","tlshash":"2ff059b835e810bdb14540d81829860e0745eb3bc9070f46737ccaf053fadb4ec2211e","size":493,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.187117Z","times_seen":4020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/local_storage_wrapper.js?v=20200327","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1278c5d07ec36a3634a17681bdcb8a3","sha1":"9b89205b29dd24e50d7ce0c634e71b4dab866736","sha256":"b6d3062d765276bc9436c09509707d08b9c69890de11e88c0d32271283ff7e6a","sha512":"189ac41f8db44d5cd76438901052aa2def58640a1085989d19c1965f8baa7443857e48939c4bf44b14cddeb7ddf14d14a992d96c0e2d6271ee0d87b5bbaf8bef","ssdeep":"","tlshash":"1d41bf485cf325d440eb70ad276f4074b63b94537a1cdb95b98c6a013facd2882a5bf8","size":2324,"data":"","first_seen":"2026-05-29T18:14:08.34919Z","last_seen":"2026-05-29T18:17:04.01907Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"58af24ec8b52a0e2cb08ebc364dabca7","sha1":"f911e3bc5fbe3a319b043ba0747dc9ba7dd6d9d9","sha256":"752a5ff9408e520059568cc560c248f934e1e80c6cd09aa7dc19a1036e0fc473","sha512":"994431a7617264d1a8c585859167c01204a25740fec8ac9346dd9a76f0e6170ff2383fb3bf2af5878c35522f4d0aa948fb9ee86533fca83d71bc1d90070c89f7","ssdeep":"","tlshash":"33c0228074e020ac411215a0002f844e2304ee3c58802500770cae782baeab1280683c","size":188,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.183861Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/modules/bank-info/get-bank-info.js","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b342292255b5206e7ae2269342d63993","sha1":"7fe56ff2aa9cce9dea2375f0b567fa0108f77b14","sha256":"513717c5ec45ef530f2a6ceacb7d86acbe09d149128e7dc7ee58f90c8a8fa004","sha512":"b9f2182e872d581634c56de7170208cd39ffd492671bb10e785b0e5d5d6e37ac920d3be007676b39ee169693b3ef3eb1d6b0e64c42fca6068b20a9eac680df22","ssdeep":"1536:vnJ9n7H20MEmzgNRC3UsQYgky1BH8SUly0GHiIjJ2yArNUVsU9wjFxPZGvpi+2hs:3aFHE","tlshash":"2a34c835e5140d77a42985c850e23a67ea441503be49f40af35c2b8c1f6e35f9cbaeee","size":241759,"data":"","first_seen":"2026-05-29T18:14:08.312636Z","last_seen":"2026-05-29T18:17:03.993999Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/jquery-1.12.1.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"62f69d29b6f01c8d477a547cedd922f2","sha1":"73d15ef036af1980629bcde3f32cc5869654ad4c","sha256":"56e843a66b2bf7188ac2f4c81df61608843ce144bd5aa66c2df4783fba85e8ef","sha512":"32f27590828812ffc810a151aea003aee4408ad4f2caaae1425074763edbd00d986091e59ecba6d51ca77d6ca7501dc3b78a81cffb009bce6795056c12f7ebda","ssdeep":"6144:k1Lfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOhPns8kVLkIVfz5AKW+1hC:kgw4mDiTFyi6TVfVAKlfC","tlshash":"b054a4d8f78d112e4232316aed2f52cdbb7cd1b1561054aebd8d497c24a083d42baf7a","size":294199,"data":"","first_seen":"2023-03-08T14:22:12Z","last_seen":"2026-06-06T04:17:21.287385Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/localization.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fbc88954025ff448567cfbbc66835b4","sha1":"7e9d5351b19c9792fc847e80ef13eb44c56c9f8e","sha256":"e205dfe1008d498942e9fed6a9f47db31aad166335618334ce97af6ebcb65650","sha512":"f06e7b6ace710db1c80e1692a8262f2de57cbed0cdca80e1330e9ae0234a962cb39f91790d8200fe413c25714d1ca226fd6f8837af81e684a39c63b5ccbe7334","ssdeep":"192:064yFeClzVVjVIY1bDB+tMGmHWjzT+vq+FW1uRIl8HIdnQQyiQCyiIqyi2Bym:0RyFeGzVVqYB9+tEoP+0uRs8HnQkCsqY","tlshash":"e42222f318a310621146e07a984e9842b47600fb2a5dbe3974a8356c7fcf76c72bf657","size":10390,"data":"","first_seen":"2026-05-29T18:14:08.30193Z","last_seen":"2026-05-29T18:17:04.004892Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.input.js?v=20200219","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"57780dbf88bf3b53b4636baf2bb5816f","sha1":"fe3359194997d2c11e336cfad974285289912685","sha256":"04a5dc1289057f5318835b65d6426c278929ec33fd328da0385afc458782f616","sha512":"afa26b5b1e401342029b957ee47d4396ec994d6c5547147a816e1470d982ca2fc801cc988befeb518a82aaff9f628b725eef687c7e17fdefb20b0bffd5b3f0f5","ssdeep":"192:+/hg0S6hvHVG47rGw7NdreZZrET54gaSHC7aO+HhT+Hf1awXssa5pMwaT/oQQDO2:UiI/LOZZrwc0p","tlshash":"86122e58bdf700564a67723d4bef52043a7540a3180bee25bc2c2b95bf92d2842f2fe5","size":9160,"data":"","first_seen":"2026-05-29T18:14:08.321297Z","last_seen":"2026-05-29T18:17:03.89756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/localization.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fbc88954025ff448567cfbbc66835b4","sha1":"7e9d5351b19c9792fc847e80ef13eb44c56c9f8e","sha256":"e205dfe1008d498942e9fed6a9f47db31aad166335618334ce97af6ebcb65650","sha512":"f06e7b6ace710db1c80e1692a8262f2de57cbed0cdca80e1330e9ae0234a962cb39f91790d8200fe413c25714d1ca226fd6f8837af81e684a39c63b5ccbe7334","ssdeep":"192:064yFeClzVVjVIY1bDB+tMGmHWjzT+vq+FW1uRIl8HIdnQQyiQCyiIqyi2Bym:0RyFeGzVVqYB9+tEoP+0uRs8HnQkCsqY","tlshash":"e42222f318a310621146e07a984e9842b47600fb2a5dbe3974a8356c7fcf76c72bf657","size":10390,"data":"","first_seen":"2026-05-29T18:14:08.30193Z","last_seen":"2026-05-29T18:17:04.004892Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"e44871faf7d18cca7e7e05417c6bd772","sha1":"c697c05a2786acff9bf8955c9d6d97d908e91765","sha256":"542f08e967bd118b85a59705504d5dffd0a7d93860e00f7d735aa94d20542b3f","sha512":"c22c796be0318fa49fee257c461605be81471d2558294ef78cb6fa95cc02cbd297d93779111a8f6428153ec0fe0d8ed72b1d45023737631a285eb09b495a0688","ssdeep":"","tlshash":"94e02bec38e950fd661d51e0141a40e7c66cf93a404101c9a97dcab4f578b749a3162f","size":389,"data":"","first_seen":"2023-04-26T20:18:23Z","last_seen":"2026-06-07T07:23:58.425017Z","times_seen":1152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/local_storage_wrapper.js?v=20200327","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1278c5d07ec36a3634a17681bdcb8a3","sha1":"9b89205b29dd24e50d7ce0c634e71b4dab866736","sha256":"b6d3062d765276bc9436c09509707d08b9c69890de11e88c0d32271283ff7e6a","sha512":"189ac41f8db44d5cd76438901052aa2def58640a1085989d19c1965f8baa7443857e48939c4bf44b14cddeb7ddf14d14a992d96c0e2d6271ee0d87b5bbaf8bef","ssdeep":"","tlshash":"1d41bf485cf325d440eb70ad276f4074b63b94537a1cdb95b98c6a013facd2882a5bf8","size":2324,"data":"","first_seen":"2026-05-29T18:14:08.34919Z","last_seen":"2026-05-29T18:17:04.01907Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"6eaeb32bb596e7bd463f0377d61c0bfa","sha1":"765c55a898b7001580d0ede57d231aca42fde6d4","sha256":"ca2b2249273551d16b64de8f0500d7f063c3c8c7a34da3ffbba2bf7c98299ec5","sha512":"2c71fc60431af28494127f0b0a9701f04d3dd5a0ed428b16cd1550f4f01dd33e7e5a5c5a613b079960a0697aa4813de4a3474917ed1d59a32179013fe4aa296a","ssdeep":"","tlshash":"fcc0c088f4dc10ec412a3538202f548c4224e92c10802800760cde782bbffa10806e3c","size":186,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.187608Z","times_seen":1331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"ffd68da4f5b031fdcfbcfb9db10fced4","sha1":"330d04a86b71193355646894127c2eab04e1790c","sha256":"20afcc48a5d2f7d5c2defaaf7b94a10e182e141f3c53886549e55cb8fc4c4205","sha512":"ef08e9b1f1bd7275da6123fa93424e3f3c3ac0cf7051ede97aa059ffe3930ca07ffdcd292d5da0297d1312fa8e5590b6a94a1b17edd0e17eafdcc8881343b9b7","ssdeep":"","tlshash":"2ff059b835e810bdb14540d81829860e0745eb3bc9070f46737ccaf053fadb4ec2211e","size":493,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.187117Z","times_seen":4020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"a69de8c4f55590dc5fd05f72d54e8bf3","sha1":"8174fc70b60afefda9ed05747f45a8237793326c","sha256":"1fdce8c606ad40a974e50fc416a9ca19017c935b755171278b84cae301b6a351","sha512":"d974dd6e4f34631e1eea3f8d6f2356107addaed677f4d23a6390748dd0c32677b15d0a8bc58a5641411427ccd360b965b666398c8b0b3f86426aa3d6a96ad9bd","ssdeep":"","tlshash":"f811cced25e832fd710c05e0b00cc66b622dd56a8b850542bebcd976737e6b15e2825f","size":989,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.18617Z","times_seen":3941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/modules/bank-info/get-bank-info.js","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b342292255b5206e7ae2269342d63993","sha1":"7fe56ff2aa9cce9dea2375f0b567fa0108f77b14","sha256":"513717c5ec45ef530f2a6ceacb7d86acbe09d149128e7dc7ee58f90c8a8fa004","sha512":"b9f2182e872d581634c56de7170208cd39ffd492671bb10e785b0e5d5d6e37ac920d3be007676b39ee169693b3ef3eb1d6b0e64c42fca6068b20a9eac680df22","ssdeep":"1536:vnJ9n7H20MEmzgNRC3UsQYgky1BH8SUly0GHiIjJ2yArNUVsU9wjFxPZGvpi+2hs:3aFHE","tlshash":"2a34c835e5140d77a42985c850e23a67ea441503be49f40af35c2b8c1f6e35f9cbaeee","size":241759,"data":"","first_seen":"2026-05-29T18:14:08.312636Z","last_seen":"2026-05-29T18:17:03.993999Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.modal.js?v=20200317","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"05eb4fec26b95822c3ab730976a5f9c6","sha1":"a3891bb7dfb79fb81df21ab2f362034d65c2614d","sha256":"7d8d3b5b6d77588ac205e85b2d95c9a161c63653ebb7b1c4cc470d53b0db0020","sha512":"987079b91b43477bd33eff71df6846cdbf3f1ce628d9e93a06372c0e695e980d7406aeeb0e547b636f74fd306fd1add00a90ef47e42d59829e9bc3fc4f98784e","ssdeep":"384:I7Da15ZGiRjxN2KCT/8G+zqlovCQhE+ZDQxEH2dVV1N5LOTHFA2DnM1iNQXpohFO:I7Dizqlovi+ZDQx/V1N5LWND4UPE","tlshash":"08037308b8f710950923b07e9bffa10533ba10572415ee20fdac1b566fe0e6856f5be4","size":38603,"data":"","first_seen":"2026-05-29T18:14:08.308176Z","last_seen":"2026-05-29T18:17:03.902065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/bootstrap.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed69cf59ee487638489ff8742a469e43","sha1":"8cf4186ce86777b4b408ce308ca9f66dd421f509","sha256":"defc39740ac1859d8e2785ed473208409627e87addd5f78f2deaacb93a12d51d","sha512":"cf1c9af1a6ae1477c31bcfd2bc5e19a2382f71d2a8ed879d99aa62e5a1e1fc8cdbc52d762e99411ab58b9f51ae266108241b826cba0082b84b5854dccd49ea63","ssdeep":"768:YctqAC7ZRl92TibveNCf0SIVXx4oBkRmJnrsBdw9W5+A:uZXizXx4GsbYWoA","tlshash":"6c634f167bb820618b5b30ba8cdf514c7238951b554bd4283cad97d06f50b38a2abffd","size":68954,"data":"","first_seen":"2023-03-07T01:17:24Z","last_seen":"2026-06-07T16:26:05.64918Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"fb0ed7c151c40e2e53406d3de39a48d5","sha1":"339a10bbe2be49c586d400399f85b871f7bfe446","sha256":"fbcbd60e9c26e0bb461e179d9eaabe7311877a0dc4be511baf77dd5cd996214e","sha512":"0ec77a8a627629b74ef3551f09e8a99e9a7e764f5de6510f307240878096d35fb51d7dbd027cd8026d9a2902403c13c62db269661b412fdab1beeee8fadcadce","ssdeep":"","tlshash":"a9d023e874e910dc43095530511f45564314f52d11401481d93cc9b8a9bab77091553e","size":196,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.183397Z","times_seen":4039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a979b4ea72b16a82d37f422a0d7c7ae","sha1":"237786764444f0355cd87f3ae287cc845a3e4175","sha256":"aea58ab04b1133f116931ae0e5edee938053e3a939248475568f340726d687c9","sha512":"79c8da5f650ff75755fdeeff122d684460dc859a6e64b85845473520567f0d81c474983e2f19fb8ef684fa15026f225d63b0930556fc74eaa17a10929c4240ff","ssdeep":"","tlshash":"ece04f15f0da51548433132a27f794006f2b603b1a43aa027e1d58b04f55e67b645394","size":389,"data":"","first_seen":"2026-05-29T18:14:08.408091Z","last_seen":"2026-05-29T18:17:04.128714Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"fb0ed7c151c40e2e53406d3de39a48d5","sha1":"339a10bbe2be49c586d400399f85b871f7bfe446","sha256":"fbcbd60e9c26e0bb461e179d9eaabe7311877a0dc4be511baf77dd5cd996214e","sha512":"0ec77a8a627629b74ef3551f09e8a99e9a7e764f5de6510f307240878096d35fb51d7dbd027cd8026d9a2902403c13c62db269661b412fdab1beeee8fadcadce","ssdeep":"","tlshash":"a9d023e874e910dc43095530511f45564314f52d11401481d93cc9b8a9bab77091553e","size":196,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.183397Z","times_seen":4039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=wl4y3j3q5nsy","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"11b4a01cc4f581a9802b1d86fb971ff9","sha1":"0c0d6c0efa382d72decd009f8f2b6404291f6fb5","sha256":"cd878819f1c61987fb10cf081be69aa57f5c837cfc81c1f2395db8895207fc8d","sha512":"7304adef4cde6e2efe4b878fc6d5ec4fd46f71499e3e2427c1729ed75f5e36a2a8747b9801f0ad5131438784e626260ab2be248c61252c36781c3fa3a124b630","ssdeep":"768:nmxoyVSPMUnHUTTwsOJMYJzndRgaGE5CxTFMfr/zty7J3MhR4wEJBljN:nmuyErsOJRJzdRgFxqj/57fYB7","tlshash":"aff29e0ee81538afeeae07e12ae517c5127c818d094b117d3abe04c379b65cb395e1dc","size":36389,"data":"","first_seen":"2026-05-29T18:14:08.423804Z","last_seen":"2026-05-29T18:14:08.423804Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/superfish.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f098e529c3adff2d34f710284c013983","sha1":"ca2a3664cadd083e751feb16c0a3d8a8142f1d9c","sha256":"c184b6014fb804a6da2c6b86ac87bb3beb68fea74faddda0ce5cebdfd1d8d926","sha512":"3b4e0b13bf73f0922585c46d80bcc680cd108248fa87035e92138757d13e3e380ef1c2a4453754d772579a96cfa3b8273950693ec9dfcf3352a4cc78c24bbdc0","ssdeep":"48:JyH+z5MPCO+jKKH8XEkfp4YIDZ2r5Uv0vAgd+RbIlg/OEisyyu7BP+BPeKC3Yq9q:e2erSKKH+EIOOryvgB4zUWkEBNC3YMq","tlshash":"bb91518cb38bb1f383d765ba106f4206f2769a9df4984018b53299691e7d9086233f3d","size":4321,"data":"","first_seen":"2026-01-08T07:04:23.136155Z","last_seen":"2026-05-29T18:17:03.97386Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"320cda5fbe04a650082f5312efac16c2","sha1":"f05f7819b0199eac73c8eedcb981e84c7d2f677e","sha256":"54613c660f66adfb447b055b3f1df48dc5f2b3e889b539a35ef1bd9e82ad1f39","sha512":"7bd93eee6223df6ea366ee5907ca96ef1012d5804de59ad96ce601482c25088ce63ae60ed8d21b9d86ec30b6177c7d95970aabc748459ba2e17d1ef4cf95b1bc","ssdeep":"","tlshash":"7f01a9bc2ae950fcb28951e4101d4613821de96a45420289b6fd8974b77d7f83d3151f","size":815,"data":"","first_seen":"2025-02-27T16:44:45.439938Z","last_seen":"2026-06-04T10:15:15.75417Z","times_seen":368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"ebd707dd1501a8e2fcd9420013c46674","sha1":"f3755fa42effd9a98f3c99c243ecf895d31e2cb8","sha256":"4e6442a622b28de7d7a30e44d311b8ea48c0f89dbbe421f048f40a6b50aacab8","sha512":"b3f45713b0437565f546521a9aca557b7ac39c906dab080359781788da02a52a259f85238222467fa8657f0886ed7402afa5599a30fc4690f93e161fbcfc225a","ssdeep":"","tlshash":"f811ecbc36ed54edb64d81e4514c8613820de56a4582028be5f58970b57e7f82d7411f","size":991,"data":"","first_seen":"2025-01-30T13:36:05.092018Z","last_seen":"2026-06-07T07:23:58.439458Z","times_seen":1037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"b7ad20df1afd9543f14761c94cdaa718","sha1":"9f4d2ed56ea1a626136aa198317066ababefc256","sha256":"1821d04a2ec5d991ddb56bb602cecf4f808e77658099b479d4515e2e2d19d912","sha512":"167802d49ade9f52e9231792aa116efc52a3aac416e49c6e7f2c8d576cc328cdba9e6ab41396a7b0b60bde0f2b8ebb75960f2375de652e6ff9cf5299c72f7843","ssdeep":"","tlshash":"03f0dd2934e5b47a028708b0330e7447d209e51f43a84040b93d4bf16ffeb724e2d1ba","size":641,"data":"","first_seen":"2025-01-22T14:21:26.721743Z","last_seen":"2026-06-07T13:15:28.189648Z","times_seen":2655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=8j78faht51yj","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T18:32:06.929169Z","times_seen":464035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.input.js?v=20200219","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"57780dbf88bf3b53b4636baf2bb5816f","sha1":"fe3359194997d2c11e336cfad974285289912685","sha256":"04a5dc1289057f5318835b65d6426c278929ec33fd328da0385afc458782f616","sha512":"afa26b5b1e401342029b957ee47d4396ec994d6c5547147a816e1470d982ca2fc801cc988befeb518a82aaff9f628b725eef687c7e17fdefb20b0bffd5b3f0f5","ssdeep":"192:+/hg0S6hvHVG47rGw7NdreZZrET54gaSHC7aO+HhT+Hf1awXssa5pMwaT/oQQDO2:UiI/LOZZrwc0p","tlshash":"86122e58bdf700564a67723d4bef52043a7540a3180bee25bc2c2b95bf92d2842f2fe5","size":9160,"data":"","first_seen":"2026-05-29T18:14:08.321297Z","last_seen":"2026-05-29T18:17:03.89756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"ffd68da4f5b031fdcfbcfb9db10fced4","sha1":"330d04a86b71193355646894127c2eab04e1790c","sha256":"20afcc48a5d2f7d5c2defaaf7b94a10e182e141f3c53886549e55cb8fc4c4205","sha512":"ef08e9b1f1bd7275da6123fa93424e3f3c3ac0cf7051ede97aa059ffe3930ca07ffdcd292d5da0297d1312fa8e5590b6a94a1b17edd0e17eafdcc8881343b9b7","ssdeep":"","tlshash":"2ff059b835e810bdb14540d81829860e0745eb3bc9070f46737ccaf053fadb4ec2211e","size":493,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.187117Z","times_seen":4020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e6b4cb1c5849f38e78c176e7cecf818","sha1":"a7e2ca2e63a6f645a361aa81ee2b3a9b3ab25ad9","sha256":"6e3601a2089cd42320f0eaf387a5f6964f4578b5e604ffb4f567356d6049fbff","sha512":"9360f24e4f62c6a72ce32dc86ac92263d7934064b24c8ec5b45222efdb41c706a0aeab97b437c66ca91b3ef30005ad66654f17f9bd47bfb975542a1b2802060b","ssdeep":"96:kvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3Sj:xN0LE0+1lfYsvSY","tlshash":"d0918696e77a38dbb2f900f2697a0d47eb614435d6c8d438c9bda3141cb5893c274b46","size":4386,"data":"","first_seen":"2026-05-29T18:14:08.426038Z","last_seen":"2026-05-29T18:17:04.15443Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA5wdt4sZI8izRwpCW76icUr8Z2TbZ7iIzw27xSdQ5tpEgT-0IKbD1JhKwbj-A48Qr_Z733nZ2_9N3esjPw_F7c5eJBwyw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T18:32:06.929169Z","times_seen":464035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"e44871faf7d18cca7e7e05417c6bd772","sha1":"c697c05a2786acff9bf8955c9d6d97d908e91765","sha256":"542f08e967bd118b85a59705504d5dffd0a7d93860e00f7d735aa94d20542b3f","sha512":"c22c796be0318fa49fee257c461605be81471d2558294ef78cb6fa95cc02cbd297d93779111a8f6428153ec0fe0d8ed72b1d45023737631a285eb09b495a0688","ssdeep":"","tlshash":"94e02bec38e950fd661d51e0141a40e7c66cf93a404101c9a97dcab4f578b749a3162f","size":389,"data":"","first_seen":"2023-04-26T20:18:23Z","last_seen":"2026-06-07T07:23:58.425017Z","times_seen":1152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b62292adb599a1b9a31c9268be3eeb7a","sha1":"0adab1f4fed3236865a445ff9b9d8328d731b48b","sha256":"96c5ba5af3e90cc7b8c5ecb6a308decdbc2bfafd49e1bcd66d2542bd0b1d893b","sha512":"31b1cb8fb0365a46dc2dda9303e6fd38385db6e2386fbedfc48daacb17c64371a62488f7e9ef598493b8d64358e9928b939ba4b2be905a2732c648851dac9d47","ssdeep":"","tlshash":"99b0926c64aa908d10ba24a4f87bda6cb61bb82826062a0a4aa894a0094843c19a601c","size":108,"data":"","first_seen":"2024-08-20T07:56:47.223216Z","last_seen":"2026-05-29T18:17:04.130684Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"04e08aaf2a73d9a90bef3cb6eddbf77a","sha1":"ae7a4b9f7e5b75fd330f94da8177ac243ed91af5","sha256":"bb8df4faf32ff77f4f96cebc7370364bf830e2116e4c5e088f8531089238e12f","sha512":"9dd87b60ddacae055940c2ed5a7876eecca9e277e2e4679d1b38f8ea0e2f0b9942a4c1d528135671fcb7173afec18f6deb68c59ba022d98ed3b09ac084915069","ssdeep":"","tlshash":"1b11e6bc3aed50fdf24841e4542d86138249f67a45c2018af9fd89b0777e6f9297422f","size":1009,"data":"","first_seen":"2025-01-30T13:36:05.103409Z","last_seen":"2026-06-07T13:15:28.228022Z","times_seen":952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d0a865fb5adec5833b2196c1a3c6c59","sha1":"c71d1eb321038140fe9b0ec62a90dd04b1f1c529","sha256":"9f989af26a22a05bfe8d4242c3075bf05f4379de0aa32aac214b7b05b49de55d","sha512":"0d890191d321cf454d37682565e24b884966ebad117ceab9d8cac54772783a5eafe47d90f03469c36eda53e2713b2ff9583fcbec27f5b243594bd93f77589c96","ssdeep":"","tlshash":"1ef0971b1d9628340a8a96b593bfaa086062204348149c01bc8dd4dd5f60faa8f38bfd","size":563,"data":"","first_seen":"2023-03-11T10:06:33Z","last_seen":"2026-06-05T08:51:53.053977Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/SketchBoard/functions/shortcodes/js/jquery.tipTip.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5eed60723d4bf9f4623a8f47c2351add","sha1":"1b6d9ad16fd0535907bca92f1d06dde704dc6927","sha256":"8d0b1c707f61886d3be8e1b39a10dfb7e2fe675909cae213dd3b08cc07e1c800","sha512":"3a24ac05d3f39d88b25ccd4d3246d36e7d47dd53937712c0b60020ffde47a9caf5e952163b146d00f059d50320e1f5f491496de85d9d6f9abd9041b7a2d932a6","ssdeep":"96:nQVOkSE4l8xMPfD+z5IKxKs74/Y0dAM4F:rkSE4l8xMC6KxKs7v01A","tlshash":"e9912e2f3058f2be23e37ce3821f41197429eeffc502b513316096681466edb44979ad","size":4397,"data":"","first_seen":"2026-05-29T18:14:08.384226Z","last_seen":"2026-05-29T18:17:03.914128Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ditty-news-ticker/inc/static/js/ditty-news-ticker.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"51cd64270e8165b6bf4ef5601368257f","sha1":"ac521a77f05f58ae3a15ee0436913fd2dfef2fa6","sha256":"6fb8cc17983d6f0c0545d7adb4977979e5409423cda63e8f6fe1e42856f9fb2e","sha512":"d0e2d803d84a7f2d29ab23f2395d436606659e420bb15dfcc8cbbc77e596fadb8775c255694943aa3b50f0c887873190a7023a1b9afdc557b97d51c41ae8d86f","ssdeep":"384:pfRlGa+jdsGI2FYnz9g9a8mc4NyG58FVB4M:zehU2F+HE","tlshash":"c95285583701f05499d320fb94afd1196061a451ae0b8850e2bae3757c3ae3d3bdbe6d","size":13247,"data":"","first_seen":"2025-10-27T07:56:01.997492Z","last_seen":"2026-05-29T18:17:04.098578Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/cookie-notice/js/front.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"73f7534d35cab74662c1b51911245436","sha1":"fedfbfa833397d36251235f1b8824ff4b1a58b87","sha256":"0a65b0a2f930ac72138c36aea669a3c760c93ce1093e52fb2c542d46f8d1ec61","sha512":"9a27c144315bdcda134066bda559192bc7fc426c0a3bbddbbfa43043d3c31d0411698ef679499b9442c52e5ec4db4f0c54c4cd0aeeba25f0407bc7c04ad5ad37","ssdeep":"96:c7FZY7Qu0zRHEFjedGgfxW+06CwuEUKj4vZPT4pExVfHBgRV9Qfd/Pn0W:uYezRHIJgfY+06lj4BPkExFuRVwP","tlshash":"bf1232dc7b341b7809c781ff25cf65907a331adad89414283436ecd28bb9cd616226b6","size":9144,"data":"","first_seen":"2026-02-11T02:27:55.993129Z","last_seen":"2026-06-07T19:11:49.698926Z","times_seen":4240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ninja-forms/assets/js/min/front-end-deps.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"800f9018920b9caf506b4e3d1618b062","sha1":"d72cfd3ef5cdacc7cb375f373f79a6d7ebc18180","sha256":"1bc4057f60d9210be767a211286f2daf025038069b947793973792b8a39906e2","sha512":"c36383ed6c624e529c47a196cf444dad9b1dbedf4ebcd66be88dd4c461302af97fc845a6939c1dd5d63402b788d03284ef6cbe09ff6e075c3b62b02ba4591982","ssdeep":"1536:0AMnOLmtROGzaOS8SupeAamoxfLBeVyTZUvX1I0VrZyI+M2jFYNR7lmi4Yo4:0AutxzaOS8SuYqP1I0V8zXhS","tlshash":"8b53088cb6c675668aefb074503f220be1370865354a8448faade4eabd7c90d5137f78","size":66590,"data":"","first_seen":"2025-08-12T04:13:32.136667Z","last_seen":"2026-06-07T14:38:27.347904Z","times_seen":1779,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/easy-responsive-tabs/assets/js/bootstrap-dropdown.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"19f52038ca355ba4f960268d0d6631ee","sha1":"938efdae4354f58a8709855fad4a287750158602","sha256":"25126d6417df361a1fd84dfd1f9f7a1b3a22de24076744391094c7f61dee044f","sha512":"f46708e079a6a427e04dd5558e6a7fa4f1d8c1d638ef249256da351089272c308fce008576616d488373f69ffe7989afb6abdd9ba6126bd65e3f0f1b3997c05e","ssdeep":"96:y4S/XHFCBOTegblOZgbyQmp8iIdM6UxbyRHh:yfXHUWNLyQyq9eoB","tlshash":"6fa1ed55f4e630761a5f39b91e9b8049ba6f481b4106c220786c93c87fd473887aaffc","size":5087,"data":"","first_seen":"2023-03-07T12:11:14Z","last_seen":"2026-05-29T18:17:03.900435Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/comment-reply.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","size":3026,"data":"","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-06-07T18:26:58.143392Z","times_seen":79667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"e44871faf7d18cca7e7e05417c6bd772","sha1":"c697c05a2786acff9bf8955c9d6d97d908e91765","sha256":"542f08e967bd118b85a59705504d5dffd0a7d93860e00f7d735aa94d20542b3f","sha512":"c22c796be0318fa49fee257c461605be81471d2558294ef78cb6fa95cc02cbd297d93779111a8f6428153ec0fe0d8ed72b1d45023737631a285eb09b495a0688","ssdeep":"","tlshash":"94e02bec38e950fd661d51e0141a40e7c66cf93a404101c9a97dcab4f578b749a3162f","size":389,"data":"","first_seen":"2023-04-26T20:18:23Z","last_seen":"2026-06-07T07:23:58.425017Z","times_seen":1152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/dist/hooks.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-06-07T18:24:13.069347Z","times_seen":193162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA49V58iaPeRooIKbahFbNzNmpZ0HfQT-fhLKDCByweYHKOE3sDQ0et7yEFYW-LoU96m5dH2GvMEdgl1WRQbZSx5RW_7XQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T18:32:06.929169Z","times_seen":464035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=2b605kektb65","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b6d585c8454e1f32ac273d60d9b5823","sha1":"aac246132483b34891977a1161173d2a14aaedf7","sha256":"8d51895f0e5a36387c52f623d823553fad167169d92567d281258ddbd63a6e0d","sha512":"0a8b1829cc87a11caa6200e4ac435d9c6866e8db3cad50fbec12fd1158bea943b2297cb5bcd957ddd76b4e026885f846adca1f9742027c29a81a1d6c440cfb35","ssdeep":"768:lmjUDX3Dolf1Ym2Yv7Py6SMjVNmhWx2PO4W483Nc8gqX7jL:aA3pmNeAVEhWE+3/r","tlshash":"62f29f1dd91628abcd6f96f21fe03b8411ac8294454d297d70ff14d36a7a28b784b4ec","size":36310,"data":"","first_seen":"2026-05-29T18:14:08.427941Z","last_seen":"2026-05-29T18:14:08.427941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"bfcf76d28e80cbef46a588801baae8e3","sha1":"7453a7df67d234ee192b477905a86f355a0fe838","sha256":"6ebcda226bda40e62bff26724955179c93760034aa297ed889b8bb952f10d362","sha512":"89a3aace3021cdf0a9a957f34be953d99aa8ce417bc537fa5257edc6fdb6933b41bd211146d5aa47b584e1e8803898b7b33b0080683c2f57af63e201bd3cd031","ssdeep":"","tlshash":"bd012bba14b404ed161a16e1a0fe431e2986da5b80831e5b1b7886b477eddb1fc413a7","size":694,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.188129Z","times_seen":3644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"a69de8c4f55590dc5fd05f72d54e8bf3","sha1":"8174fc70b60afefda9ed05747f45a8237793326c","sha256":"1fdce8c606ad40a974e50fc416a9ca19017c935b755171278b84cae301b6a351","sha512":"d974dd6e4f34631e1eea3f8d6f2356107addaed677f4d23a6390748dd0c32677b15d0a8bc58a5641411427ccd360b965b666398c8b0b3f86426aa3d6a96ad9bd","ssdeep":"","tlshash":"f811cced25e832fd710c05e0b00cc66b622dd56a8b850542bebcd976737e6b15e2825f","size":989,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.18617Z","times_seen":3941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"e44871faf7d18cca7e7e05417c6bd772","sha1":"c697c05a2786acff9bf8955c9d6d97d908e91765","sha256":"542f08e967bd118b85a59705504d5dffd0a7d93860e00f7d735aa94d20542b3f","sha512":"c22c796be0318fa49fee257c461605be81471d2558294ef78cb6fa95cc02cbd297d93779111a8f6428153ec0fe0d8ed72b1d45023737631a285eb09b495a0688","ssdeep":"","tlshash":"94e02bec38e950fd661d51e0141a40e7c66cf93a404101c9a97dcab4f578b749a3162f","size":389,"data":"","first_seen":"2023-04-26T20:18:23Z","last_seen":"2026-06-07T07:23:58.425017Z","times_seen":1152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/localization.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fbc88954025ff448567cfbbc66835b4","sha1":"7e9d5351b19c9792fc847e80ef13eb44c56c9f8e","sha256":"e205dfe1008d498942e9fed6a9f47db31aad166335618334ce97af6ebcb65650","sha512":"f06e7b6ace710db1c80e1692a8262f2de57cbed0cdca80e1330e9ae0234a962cb39f91790d8200fe413c25714d1ca226fd6f8837af81e684a39c63b5ccbe7334","ssdeep":"192:064yFeClzVVjVIY1bDB+tMGmHWjzT+vq+FW1uRIl8HIdnQQyiQCyiIqyi2Bym:0RyFeGzVVqYB9+tEoP+0uRs8HnQkCsqY","tlshash":"e42222f318a310621146e07a984e9842b47600fb2a5dbe3974a8356c7fcf76c72bf657","size":10390,"data":"","first_seen":"2026-05-29T18:14:08.30193Z","last_seen":"2026-05-29T18:17:04.004892Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/isotope.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f10b3c815a0a3bea2ba32829766186a","sha1":"256fb80cf6e1439857b248c830fea200b0c0ee42","sha256":"1ce5ba351270d600f38372c570382fed75ba5c74aa19ef9ce76c0793446d08b1","sha512":"6cf09778e57f04e61fc0cb1bbaacf39042230fd39d00dc2ed7b12aeb7d0661de68e0f8dbf08e94e66ad6ef71b826c93fa3c245fbe4610c0c7fb3cdcfe87df1f3","ssdeep":"192:ZUXI5jKo/JY2eXKk9uJ8J7MLQE3ITCU+rEqsofylnPWX+y1eQPn7TnF:DjKBlKk9A8JhAI3+/sofEPY7RPPF","tlshash":"cf62848d738132248197b26540bf110f3137aaa56a468cacb23bc6dbde7954d207be7d","size":14689,"data":"","first_seen":"2026-05-29T18:14:08.351595Z","last_seen":"2026-05-29T18:17:04.055899Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA6VZkWJ9-dHC3qR3jYzpm72zYpllzffAxTSUI2nyxKfWYUbgaxe3yxbOz6v11am7hjpnfJSHeZaNd-qIULPbrqpdZavRA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7417a8d96ff35adb23ad4477d5191169","sha1":"dc1f097a88f51280e84abd60ad360ac37263fa3e","sha256":"1c89500f6df5c9f97e79c142b2dfa2c124446ed174cde12bc8edd95f436aafdf","sha512":"14ed04243a5bd4965d37ead52b0e996d563b3a2a1deb2f2d1d25ce89b18cfaa4c39cebc99408606780017425a37e892f59f3b614bd3dccc59ae280f5c3e1b231","ssdeep":"","tlshash":"bed0a9a322022cf74c12acb4096100aa1c890823a033c3f0bace7c68bfa0d047900aa8","size":219,"data":"","first_seen":"2026-05-29T18:14:08.429391Z","last_seen":"2026-05-29T18:17:04.133717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"a69de8c4f55590dc5fd05f72d54e8bf3","sha1":"8174fc70b60afefda9ed05747f45a8237793326c","sha256":"1fdce8c606ad40a974e50fc416a9ca19017c935b755171278b84cae301b6a351","sha512":"d974dd6e4f34631e1eea3f8d6f2356107addaed677f4d23a6390748dd0c32677b15d0a8bc58a5641411427ccd360b965b666398c8b0b3f86426aa3d6a96ad9bd","ssdeep":"","tlshash":"f811cced25e832fd710c05e0b00cc66b622dd56a8b850542bebcd976737e6b15e2825f","size":989,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.18617Z","times_seen":3941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"b7ad20df1afd9543f14761c94cdaa718","sha1":"9f4d2ed56ea1a626136aa198317066ababefc256","sha256":"1821d04a2ec5d991ddb56bb602cecf4f808e77658099b479d4515e2e2d19d912","sha512":"167802d49ade9f52e9231792aa116efc52a3aac416e49c6e7f2c8d576cc328cdba9e6ab41396a7b0b60bde0f2b8ebb75960f2375de652e6ff9cf5299c72f7843","ssdeep":"","tlshash":"03f0dd2934e5b47a028708b0330e7447d209e51f43a84040b93d4bf16ffeb724e2d1ba","size":641,"data":"","first_seen":"2025-01-22T14:21:26.721743Z","last_seen":"2026-06-07T13:15:28.189648Z","times_seen":2655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.modal.js?v=20200317","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"05eb4fec26b95822c3ab730976a5f9c6","sha1":"a3891bb7dfb79fb81df21ab2f362034d65c2614d","sha256":"7d8d3b5b6d77588ac205e85b2d95c9a161c63653ebb7b1c4cc470d53b0db0020","sha512":"987079b91b43477bd33eff71df6846cdbf3f1ce628d9e93a06372c0e695e980d7406aeeb0e547b636f74fd306fd1add00a90ef47e42d59829e9bc3fc4f98784e","ssdeep":"384:I7Da15ZGiRjxN2KCT/8G+zqlovCQhE+ZDQxEH2dVV1N5LOTHFA2DnM1iNQXpohFO:I7Dizqlovi+ZDQx/V1N5LWND4UPE","tlshash":"08037308b8f710950923b07e9bffa10533ba10572415ee20fdac1b566fe0e6856f5be4","size":38603,"data":"","first_seen":"2026-05-29T18:14:08.308176Z","last_seen":"2026-05-29T18:17:03.902065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f78d49643395199db74ee9531c1f735","sha1":"7825c5ee6ef072b854caf4a5e508c88f0383f39c","sha256":"e0585b10ec91f96fd5f391189c75250c9913e2bc8757bccd82eafba6820fcde2","sha512":"39755920340094939d25a4ea6446704de88047ef6f6db3d7ecf4d6a9ed2db13a4716800cf7d6c818dffd61508b8717232d142f2be4e8c61b19788890b25e8744","ssdeep":"","tlshash":"d8e0f8e6bcc85139c3b61225a223b02d765a293a584c2c31c20e8823387acae082b50c","size":399,"data":"","first_seen":"2026-05-29T18:14:08.430216Z","last_seen":"2026-05-29T18:17:04.136465Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"6eaeb32bb596e7bd463f0377d61c0bfa","sha1":"765c55a898b7001580d0ede57d231aca42fde6d4","sha256":"ca2b2249273551d16b64de8f0500d7f063c3c8c7a34da3ffbba2bf7c98299ec5","sha512":"2c71fc60431af28494127f0b0a9701f04d3dd5a0ed428b16cd1550f4f01dd33e7e5a5c5a613b079960a0697aa4813de4a3474917ed1d59a32179013fe4aa296a","ssdeep":"","tlshash":"fcc0c088f4dc10ec412a3538202f548c4224e92c10802800760cde782bbffa10806e3c","size":186,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.187608Z","times_seen":1331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"a69de8c4f55590dc5fd05f72d54e8bf3","sha1":"8174fc70b60afefda9ed05747f45a8237793326c","sha256":"1fdce8c606ad40a974e50fc416a9ca19017c935b755171278b84cae301b6a351","sha512":"d974dd6e4f34631e1eea3f8d6f2356107addaed677f4d23a6390748dd0c32677b15d0a8bc58a5641411427ccd360b965b666398c8b0b3f86426aa3d6a96ad9bd","ssdeep":"","tlshash":"f811cced25e832fd710c05e0b00cc66b622dd56a8b850542bebcd976737e6b15e2825f","size":989,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.18617Z","times_seen":3941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/custom.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bd00ae1fd487b378aefe6d3100ee98f","sha1":"bd546378dfb34ad76f86864ff3e6182b85a0b032","sha256":"c29f58c1f34715f38b29208b36ddf68b9b3d54fd2990b6b95e62640f9016308f","sha512":"a9fa50ed0170d0a503477df07f3b57325b386b82645e0cde2c41aab7ee5409a3f3e4a3982ec164cb6f6f7b1268d67b5f91ee9a074b5131014b51181eee167e97","ssdeep":"96:d1ENVBiV0L8GU8i8rL8lJW2rT1JET1GX360HP1YXUDA:d+0dGUGrLw1r4l0HPyXiA","tlshash":"bbd1444cbc5895bd41b3e769f43f8368fe3f60367b866004a8ae90623844098657fd7e","size":6299,"data":"","first_seen":"2026-05-29T18:14:08.309706Z","last_seen":"2026-05-29T18:17:04.080692Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"30da82b2807e480572042bf301fb1c33","sha1":"accd626319358db39cee260916624c0cc9cb2feb","sha256":"159a9d6a8fe24b1d1d95038fd09e4e0e6308c9db01d0752166ca33043dd50632","sha512":"66d66780d29799ac36753414f5e96c3f116d0b5a3cf5feb671fa2ae04a7579863af6ea8dcb5a7dcdd5f997e2fa6cffde4f1fcc348aafe10604089e28b13a3916","ssdeep":"384:XoWGM+BM1VICF8+uG79UUi3i08dU++uOzn:YUr8+4UKBV++uOj","tlshash":"f9a2ebf3ea694a3e698e31cac9bb9e5f34c47881d728c76edc78dd57c2146006360389","size":22217,"data":"","first_seen":"2026-05-29T18:14:08.431054Z","last_seen":"2026-05-29T18:17:04.140776Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"58af24ec8b52a0e2cb08ebc364dabca7","sha1":"f911e3bc5fbe3a319b043ba0747dc9ba7dd6d9d9","sha256":"752a5ff9408e520059568cc560c248f934e1e80c6cd09aa7dc19a1036e0fc473","sha512":"994431a7617264d1a8c585859167c01204a25740fec8ac9346dd9a76f0e6170ff2383fb3bf2af5878c35522f4d0aa948fb9ee86533fca83d71bc1d90070c89f7","ssdeep":"","tlshash":"33c0228074e020ac411215a0002f844e2304ee3c58802500770cae782baeab1280683c","size":188,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.183861Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0932ca5c99bb6829d27c3ad3627ee63","sha1":"602087b918606eff3c7c6f7bc5c65b470da0649f","sha256":"70f814cf3c9cd1b2ff5b28d2933a3ac74394b0223a101fab584c77ea3b40e9ee","sha512":"db6e4040e5e943f48ed8e96736c78e5e713e73789519fd42a985a7ecae6df7dca37a0fa89b1fc90cc9afeb606cb509a6a8a2a1c008d4302d05393934bcfe6f23","ssdeep":"192:1WGyp+2ZkLQ2pXQVji+CeRrOIFb8J78S08WM9N9p7jFSJ77VwmtfGFb:1WGM+BAAICF8Snp7I7vf6","tlshash":"d882adb3eb694a2dad8f318ad5bbce1f30c46891d72cd76acd78cd1bc254a047350289","size":17936,"data":"","first_seen":"2026-05-29T18:14:08.431917Z","last_seen":"2026-05-29T18:17:04.143964Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qoopler.ru/index.php?ref=\u0026cookie=wt_geo_data%3D%257B%2522country%2522%253A%2522%255Cu041d%255Cu043e%255Cu0440%255Cu0432%255Cu0435%255Cu0433%255Cu0438%255Cu044f%2522%252C%2522district%2522%253Anull%252C%2522region%2522%253A%2522Oslo%2520County%2522%252C%2522city%2522%253A%2522%255Cu041e%255Cu0441%255Cu043b%255Cu043e%2522%252C%2522lat%2522%253A59.91329999999999955662133288569748401641845703125%252C%2522lng%2522%253A10.7388999999999992240873325499705970287322998046875%257D%3B%20PHPSESSID%3Dbccac8705b9efdeb2954005561a3380b","fqdn":"qoopler.ru","domain":"qoopler.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"23bed757b9a612d436292ad2988a3935","sha1":"bfbf1776d058af326f9e32945b70c0105857ecf7","sha256":"4a59a393e2531cca2f16de2933a9a0c78497da6498409fb1d769a3bd1484e8d3","sha512":"b1cfca77342f64cd22ef45350841b5b3e8c882549f93d94f5712481bbf32cf42be19dd3c240c7ce48a3a534318b0b935fec263075021223725663212d09b1ef4","ssdeep":"384:dI+3heM7JXckPr1vHNWEOfD80sJSPv6hq:dNhesXckPr1KD80Ezk","tlshash":"c052da946b8ea52391ae3119dd1f9acdb4bcd8339c0c8c2bbc1c959514a4c3f429ef75","size":13232,"data":"","first_seen":"2026-05-17T12:59:36.027949Z","last_seen":"2026-06-05T08:51:53.049523Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/local_storage_wrapper.js?v=20200327","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1278c5d07ec36a3634a17681bdcb8a3","sha1":"9b89205b29dd24e50d7ce0c634e71b4dab866736","sha256":"b6d3062d765276bc9436c09509707d08b9c69890de11e88c0d32271283ff7e6a","sha512":"189ac41f8db44d5cd76438901052aa2def58640a1085989d19c1965f8baa7443857e48939c4bf44b14cddeb7ddf14d14a992d96c0e2d6271ee0d87b5bbaf8bef","ssdeep":"","tlshash":"1d41bf485cf325d440eb70ad276f4074b63b94537a1cdb95b98c6a013facd2882a5bf8","size":2324,"data":"","first_seen":"2026-05-29T18:14:08.34919Z","last_seen":"2026-05-29T18:17:04.01907Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=8j78faht51yj","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c40dfda09b51f778064d05200e69e5ef","sha1":"0dd18853ac020b8026ee3de6d4debb25863bc42a","sha256":"2a058d18d2e55e7eaee8846ffbd15c633c08c074f73d03181a025518ee315f73","sha512":"e94a6afb5bcea6852ca24e316e256ea5573868d3c8d8a4837d5c45dc7da4eab71a043738e9acd8347af80d56be505b642284957ab602fa7828fb529233fd4113","ssdeep":"768:6Ii/oXjVS4PiTqkrPAF8s3jTZVye4WWdfrsf8/SFHFsv0JpjC:1XjfsqynsfZmlg8/EHFsvZ","tlshash":"dff29d9dac2724ebde7e87e21ae023c815bc4244569b147c34fb15d35fa2697a44b4cc","size":36208,"data":"","first_seen":"2026-05-29T18:14:08.433583Z","last_seen":"2026-05-29T18:14:08.433583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"a69de8c4f55590dc5fd05f72d54e8bf3","sha1":"8174fc70b60afefda9ed05747f45a8237793326c","sha256":"1fdce8c606ad40a974e50fc416a9ca19017c935b755171278b84cae301b6a351","sha512":"d974dd6e4f34631e1eea3f8d6f2356107addaed677f4d23a6390748dd0c32677b15d0a8bc58a5641411427ccd360b965b666398c8b0b3f86426aa3d6a96ad9bd","ssdeep":"","tlshash":"f811cced25e832fd710c05e0b00cc66b622dd56a8b850542bebcd976737e6b15e2825f","size":989,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.18617Z","times_seen":3941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"55891cb96a91ce7e647559cb993c73fe","sha1":"c72984ee14eeb8981f7638a01f43eae411461db1","sha256":"39269538296b6be7049eaa571e146fe479caaa7881ed592a5b7de4aaa53c8394","sha512":"c39a5863c88efb98d1208d25af488da8799a5909572fb056a9fd40849d56e2dba4fc0da283c91d7f9b2407de936405af8062fd577a1433d9b54ae0ed939aa598","ssdeep":"","tlshash":"8701dbfd31fd50ec764981d0200d9627c218f63ec5410185a6b5ca70e6b9bf93e2061f","size":771,"data":"","first_seen":"2023-04-12T04:59:49Z","last_seen":"2026-06-07T03:08:48.27223Z","times_seen":312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.modal.js?v=20200317","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"05eb4fec26b95822c3ab730976a5f9c6","sha1":"a3891bb7dfb79fb81df21ab2f362034d65c2614d","sha256":"7d8d3b5b6d77588ac205e85b2d95c9a161c63653ebb7b1c4cc470d53b0db0020","sha512":"987079b91b43477bd33eff71df6846cdbf3f1ce628d9e93a06372c0e695e980d7406aeeb0e547b636f74fd306fd1add00a90ef47e42d59829e9bc3fc4f98784e","ssdeep":"384:I7Da15ZGiRjxN2KCT/8G+zqlovCQhE+ZDQxEH2dVV1N5LOTHFA2DnM1iNQXpohFO:I7Dizqlovi+ZDQx/V1N5LWND4UPE","tlshash":"08037308b8f710950923b07e9bffa10533ba10572415ee20fdac1b566fe0e6856f5be4","size":38603,"data":"","first_seen":"2026-05-29T18:14:08.308176Z","last_seen":"2026-05-29T18:17:03.902065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.modal.js?v=20200317","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"05eb4fec26b95822c3ab730976a5f9c6","sha1":"a3891bb7dfb79fb81df21ab2f362034d65c2614d","sha256":"7d8d3b5b6d77588ac205e85b2d95c9a161c63653ebb7b1c4cc470d53b0db0020","sha512":"987079b91b43477bd33eff71df6846cdbf3f1ce628d9e93a06372c0e695e980d7406aeeb0e547b636f74fd306fd1add00a90ef47e42d59829e9bc3fc4f98784e","ssdeep":"384:I7Da15ZGiRjxN2KCT/8G+zqlovCQhE+ZDQxEH2dVV1N5LOTHFA2DnM1iNQXpohFO:I7Dizqlovi+ZDQx/V1N5LWND4UPE","tlshash":"08037308b8f710950923b07e9bffa10533ba10572415ee20fdac1b566fe0e6856f5be4","size":38603,"data":"","first_seen":"2026-05-29T18:14:08.308176Z","last_seen":"2026-05-29T18:17:03.902065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","size":900499,"data":"","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ccaff4aa304ceeddb42b065d621b06a4","sha1":"2c2b232fe6f6b8dea7c8da00bd044c593780649e","sha256":"74fd5321a04ecff6623a109fd80869aadecd4210863e1c4fc9f60950351876db","sha512":"3eb14dc5bb25e04b91b78e930de8c51bb983cf1f87bcd131f37aa819d1c92b29d8ea409caf960c4bef82e53791573978b1dfe0b61166b16226bfacb8ee35965a","ssdeep":"384:3oWGM+BM1VICF8+oG79iUi3i08dU++GOzX:4Ur8+AUKBV++GOT","tlshash":"59a2eaf3ea694a3e698e71cac9bb9e5f34c47881d728c76edc78dd57c2146006360389","size":22243,"data":"","first_seen":"2026-05-29T18:14:08.435139Z","last_seen":"2026-05-29T18:17:04.147416Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA49V58iaPeRooIKbahFbNzNmpZ0HfQT-fhLKDCByweYHKOE3sDQ0et7yEFYW-LoU96m5dH2GvMEdgl1WRQbZSx5RW_7XQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7417a8d96ff35adb23ad4477d5191169","sha1":"dc1f097a88f51280e84abd60ad360ac37263fa3e","sha256":"1c89500f6df5c9f97e79c142b2dfa2c124446ed174cde12bc8edd95f436aafdf","sha512":"14ed04243a5bd4965d37ead52b0e996d563b3a2a1deb2f2d1d25ce89b18cfaa4c39cebc99408606780017425a37e892f59f3b614bd3dccc59ae280f5c3e1b231","ssdeep":"","tlshash":"bed0a9a322022cf74c12acb4096100aa1c890823a033c3f0bace7c68bfa0d047900aa8","size":219,"data":"","first_seen":"2026-05-29T18:14:08.429391Z","last_seen":"2026-05-29T18:17:04.133717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ninja-forms/assets/js/min/front-end.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4948e2854697ab5d75e5395c2f54520b","sha1":"e59012b492ab4b899581693aeb921cbcb5b17fe6","sha256":"8b9c2e16f6e88b83b23454a92b6804b7b6fd901267a956f3ac6f67cf5b0c57da","sha512":"3ca8547587604f2e1e2eb6408350bdfb7b72c508b111df3958a5a46768200635337c3db61009b60f71cef1924e6177b815dcde2eec6b55a483968b0974ac669d","ssdeep":"1536:9gO3b7auQohf+3qgnBjEqMMZENVujuwZwtwn67cpOlNOOfNh5WfY7ti5JOIKoWGy:+7jQYfbST8zGC1o","tlshash":"d0b309dab15529e30ff720a0a0ab52267335aa54dc084554ff2495d7ae7ce83e623f3c","size":115974,"data":"","first_seen":"2026-03-24T03:45:16.223299Z","last_seen":"2026-06-07T03:08:48.132546Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/jquery/ui/core.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-07T18:34:26.230413Z","times_seen":298409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/easy-responsive-tabs/assets/js/bootstrap-tab.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"42765889d9b0986088c5a3a3c5a53397","sha1":"a5742efb2db546c0b5c9481184f5ed22f3c899e5","sha256":"1bcb6be625a29a75c24077d062ab43668fb2e32eb31a2256848119df05f0afb1","sha512":"a3e3c2e5dd243a0d61f182fe0a07df283027b8f25636486faedb2eb8107054f77b493d1d56531a248763fea116d29a39565c1a766d359623abe8a960641ef0ca","ssdeep":"","tlshash":"8271762937d434b00753a4bf58cf5589bb2ae09b210b0a543c8d51945f203b863f6ffa","size":3498,"data":"","first_seen":"2023-03-07T12:11:14Z","last_seen":"2026-05-29T18:17:03.916454Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.utils.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cd03e1c6fec4e76555f86505d2011ef","sha1":"910c380fd148d88edcc7f837795a5eca99c7d55b","sha256":"9228482d0d7a78164ddb0f4fe116f1c3ab25c529465faf443dbf8887fd7cf43c","sha512":"34e15d41f4a02d3ba37b746e32b8bc5e360fcfd285348a73d0ab3829ef2e6691fc3847eee11d57f6a27c39f0c3d6ed7a904c74f03d1aec09cae76e618ef68166","ssdeep":"384:OPaFicra9rZ1iAXCCdoiw719PpvxhgIs0Xl9Q5kgufRno1AdDrrN:OPaOwzrgts3Q5kgufRno1AdB","tlshash":"a6b254f46de708971502b12f564e7804b476007fbe19ba517c8e2b782fde63c86b1ab4","size":23527,"data":"","first_seen":"2026-05-29T18:14:08.34452Z","last_seen":"2026-05-29T18:17:03.891556Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/jquery-1.12.1.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"62f69d29b6f01c8d477a547cedd922f2","sha1":"73d15ef036af1980629bcde3f32cc5869654ad4c","sha256":"56e843a66b2bf7188ac2f4c81df61608843ce144bd5aa66c2df4783fba85e8ef","sha512":"32f27590828812ffc810a151aea003aee4408ad4f2caaae1425074763edbd00d986091e59ecba6d51ca77d6ca7501dc3b78a81cffb009bce6795056c12f7ebda","ssdeep":"6144:k1Lfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOhPns8kVLkIVfz5AKW+1hC:kgw4mDiTFyi6TVfVAKlfC","tlshash":"b054a4d8f78d112e4232316aed2f52cdbb7cd1b1561054aebd8d497c24a083d42baf7a","size":294199,"data":"","first_seen":"2023-03-08T14:22:12Z","last_seen":"2026-06-06T04:17:21.287385Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/jquery-1.12.1.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"62f69d29b6f01c8d477a547cedd922f2","sha1":"73d15ef036af1980629bcde3f32cc5869654ad4c","sha256":"56e843a66b2bf7188ac2f4c81df61608843ce144bd5aa66c2df4783fba85e8ef","sha512":"32f27590828812ffc810a151aea003aee4408ad4f2caaae1425074763edbd00d986091e59ecba6d51ca77d6ca7501dc3b78a81cffb009bce6795056c12f7ebda","ssdeep":"6144:k1Lfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOhPns8kVLkIVfz5AKW+1hC:kgw4mDiTFyi6TVfVAKlfC","tlshash":"b054a4d8f78d112e4232316aed2f52cdbb7cd1b1561054aebd8d497c24a083d42baf7a","size":294199,"data":"","first_seen":"2023-03-08T14:22:12Z","last_seen":"2026-06-06T04:17:21.287385Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"6eaeb32bb596e7bd463f0377d61c0bfa","sha1":"765c55a898b7001580d0ede57d231aca42fde6d4","sha256":"ca2b2249273551d16b64de8f0500d7f063c3c8c7a34da3ffbba2bf7c98299ec5","sha512":"2c71fc60431af28494127f0b0a9701f04d3dd5a0ed428b16cd1550f4f01dd33e7e5a5c5a613b079960a0697aa4813de4a3474917ed1d59a32179013fe4aa296a","ssdeep":"","tlshash":"fcc0c088f4dc10ec412a3538202f548c4224e92c10802800760cde782bbffa10806e3c","size":186,"data":"","first_seen":"2023-04-16T01:39:26Z","last_seen":"2026-06-07T13:15:28.187608Z","times_seen":1331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/hoverIntent.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3f2cdc3e51d13e5030b619a72d83153","sha1":"171cf97b1fa373555e0aeec8f55bbcc039974071","sha256":"23af8b9f5598696c1021bcbed01264e894b10517810af499f256f6e704385834","sha512":"8ee64d4c762e3b3e1f12e58aba8d53d2ed336a7a96a28dba16eef835c046c2c578b957e756fd1979d32549a98616d9ca7e7780686d2c5d4dbfdfd9d250632208","ssdeep":"96:3Rd7rR4GD9qFGDfbuej1h22EwdIwCeNmH:nHHqEbuu1h22EwdBFYH","tlshash":"4aa1cf4d324a15525b33a325d75ab83efb21469b9a44518437be774c2fb84384323fde","size":5053,"data":"","first_seen":"2026-01-08T07:04:23.093944Z","last_seen":"2026-05-29T18:17:04.026745Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-07T18:34:32.513268Z","times_seen":824183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/wp-emoji-release.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-07T18:34:26.186123Z","times_seen":262320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"1e679d73e9e15af3ff07798619ed1912","sha1":"28a45cb21d1ac0ddcbe70bdf9df0dff3cf374ca9","sha256":"a879a9dfb5d493c58aef42f144dbd2cc5e43ab26bf9466bd2fe320a41aee5726","sha512":"fc456e109407ea11b7166ee0d6354d58ee0e603902f7796b1fc176adc567d78e906ae6675bab1743e68e820c8db3a959942f8024a5b744976967f349bc71dd96","ssdeep":"","tlshash":"35e0d17534d000fc12225a91507e625e6547cb2fc0811d5756a445f896e6e65ec427db","size":364,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.226129Z","times_seen":3904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/easy-responsive-tabs/assets/js/bootstrap-tabdrop.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d1c4ad866296e401c1104cd44f50620","sha1":"6740432ce1ddfd36af8f28d5854f7148363142d4","sha256":"30e5f643379c9ecd6c5986891069f2365c11936502d4f91873129f81c3482763","sha512":"93527f8ea00ea959188790c00e34558f19aa933b633829ca9b06a39ce56dbdb683ece41b12603609d8bcd421ed62077592a5514f14a73dc09b8971f9d5f00e27","ssdeep":"","tlshash":"885131edf3fe60634ab230ad7c1f20c8557f51729406846fbc2551f81db4b29a15ae38","size":3139,"data":"","first_seen":"2023-03-07T12:11:14Z","last_seen":"2026-06-04T19:11:06.76881Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/localization.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fbc88954025ff448567cfbbc66835b4","sha1":"7e9d5351b19c9792fc847e80ef13eb44c56c9f8e","sha256":"e205dfe1008d498942e9fed6a9f47db31aad166335618334ce97af6ebcb65650","sha512":"f06e7b6ace710db1c80e1692a8262f2de57cbed0cdca80e1330e9ae0234a962cb39f91790d8200fe413c25714d1ca226fd6f8837af81e684a39c63b5ccbe7334","ssdeep":"192:064yFeClzVVjVIY1bDB+tMGmHWjzT+vq+FW1uRIl8HIdnQQyiQCyiIqyi2Bym:0RyFeGzVVqYB9+tEoP+0uRs8HnQkCsqY","tlshash":"e42222f318a310621146e07a984e9842b47600fb2a5dbe3974a8356c7fcf76c72bf657","size":10390,"data":"","first_seen":"2026-05-29T18:14:08.30193Z","last_seen":"2026-05-29T18:17:04.004892Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/jquery/jquery.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-07T18:34:26.220101Z","times_seen":894101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","size":900499,"data":"","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/cbpAnimatedHeader.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2330a149413e7d6b542a75f588eadef","sha1":"39aeff9f629add6bc7cdb64056d526dba8d227f7","sha256":"ce9d174b20bf2f2e1994895404d28430a00ac7ce0e849781120f62d66be5ddcf","sha512":"68b71997edd388a0eb790eb557af276dc9b4d7c00107f48296c21647ce6ba8f5b60dc919fd634aad98b4f7ea7c66963d9eeb0eb5a1868dcd32e3f26e941472e3","ssdeep":"","tlshash":"4c61cecc300764bb4bf36399ad3b6c1cf768d063e509116574fa874a2a344a951e5fec","size":3262,"data":"","first_seen":"2026-05-29T18:14:08.381885Z","last_seen":"2026-05-29T18:17:04.035939Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"b7ad20df1afd9543f14761c94cdaa718","sha1":"9f4d2ed56ea1a626136aa198317066ababefc256","sha256":"1821d04a2ec5d991ddb56bb602cecf4f808e77658099b479d4515e2e2d19d912","sha512":"167802d49ade9f52e9231792aa116efc52a3aac416e49c6e7f2c8d576cc328cdba9e6ab41396a7b0b60bde0f2b8ebb75960f2375de652e6ff9cf5299c72f7843","ssdeep":"","tlshash":"03f0dd2934e5b47a028708b0330e7447d209e51f43a84040b93d4bf16ffeb724e2d1ba","size":641,"data":"","first_seen":"2025-01-22T14:21:26.721743Z","last_seen":"2026-06-07T13:15:28.189648Z","times_seen":2655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"839220eb0777cef98113d738c44584df","sha1":"166200658bcb515cb6b2dafb0c8aee17e623c71e","sha256":"6396ce67b62d733998533b571b9037462e0b53685c81809cb99997159dd38ae7","sha512":"8f761f10722e8159cfe11b94776d775302c2f4532b4e9d337da964bcabad0cd4cc88a2fd29f539fed2c2028c8523bb64ae6e80f8e1d4d0cb640d2bd4f3962c70","ssdeep":"","tlshash":"5a317afc62ee10ecb55861e0754d83338e96e87a43870249e2b95d74b6b95b43e3032f","size":1491,"data":"","first_seen":"2025-10-28T16:31:31.080483Z","last_seen":"2026-06-07T13:15:28.189185Z","times_seen":1273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a979b4ea72b16a82d37f422a0d7c7ae","sha1":"237786764444f0355cd87f3ae287cc845a3e4175","sha256":"aea58ab04b1133f116931ae0e5edee938053e3a939248475568f340726d687c9","sha512":"79c8da5f650ff75755fdeeff122d684460dc859a6e64b85845473520567f0d81c474983e2f19fb8ef684fa15026f225d63b0930556fc74eaa17a10929c4240ff","ssdeep":"","tlshash":"ece04f15f0da51548433132a27f794006f2b603b1a43aa027e1d58b04f55e67b645394","size":389,"data":"","first_seen":"2026-05-29T18:14:08.408091Z","last_seen":"2026-05-29T18:17:04.128714Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"ffd68da4f5b031fdcfbcfb9db10fced4","sha1":"330d04a86b71193355646894127c2eab04e1790c","sha256":"20afcc48a5d2f7d5c2defaaf7b94a10e182e141f3c53886549e55cb8fc4c4205","sha512":"ef08e9b1f1bd7275da6123fa93424e3f3c3ac0cf7051ede97aa059ffe3930ca07ffdcd292d5da0297d1312fa8e5590b6a94a1b17edd0e17eafdcc8881343b9b7","ssdeep":"","tlshash":"2ff059b835e810bdb14540d81829860e0745eb3bc9070f46737ccaf053fadb4ec2211e","size":493,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.187117Z","times_seen":4020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"dd4f3e093efe82a292820d71d61bca27","sha1":"baf47682ec57ba13afd1cf4e96f3d3201daf3b85","sha256":"dd48a009c4491bec3b256be71bbc6c602edf97d3fa5dbe5d65b5f84a92c3b3bb","sha512":"0646a558225874c712cd497b7486c61ff2a928b079c69399e7d8fe28043cd0735c509fdf276e00deefa3d17c51ecbcb882886f5c0be1644e75c3eae947b870cf","ssdeep":"","tlshash":"7c110abd26f951fcb28841e0140d9517820ee97a4486024afabc8ab4b77d7f93d3012f","size":883,"data":"","first_seen":"2025-02-15T20:35:33.711136Z","last_seen":"2026-06-07T07:23:58.449662Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/modules/bank-info/get-bank-info.js","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b342292255b5206e7ae2269342d63993","sha1":"7fe56ff2aa9cce9dea2375f0b567fa0108f77b14","sha256":"513717c5ec45ef530f2a6ceacb7d86acbe09d149128e7dc7ee58f90c8a8fa004","sha512":"b9f2182e872d581634c56de7170208cd39ffd492671bb10e785b0e5d5d6e37ac920d3be007676b39ee169693b3ef3eb1d6b0e64c42fca6068b20a9eac680df22","ssdeep":"1536:vnJ9n7H20MEmzgNRC3UsQYgky1BH8SUly0GHiIjJ2yArNUVsU9wjFxPZGvpi+2hs:3aFHE","tlshash":"2a34c835e5140d77a42985c850e23a67ea441503be49f40af35c2b8c1f6e35f9cbaeee","size":241759,"data":"","first_seen":"2026-05-29T18:14:08.312636Z","last_seen":"2026-05-29T18:17:03.993999Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"7cfdb0261089316c3a34eb24af49c0cb","sha1":"6b3ba0c7cadf45ac86ea7e5b2f7c29145f789003","sha256":"8f2515d66dc8c7f4c51db76a297659abaa15538f5cc434b391261fc292cc33ec","sha512":"0d1aff9a24fc6f0c4d754c921842c60088f015e01a7126247e6e511fd729483fd42c733ee8334836e6acafedb0f320c0decd625ba10322ded0cd34e4fa536464","ssdeep":"","tlshash":"7de026e832f911ec520845e0503b461b5306f22a42450586dbb896f86abaeb16e10a2e","size":310,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.209496Z","times_seen":4007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"e44871faf7d18cca7e7e05417c6bd772","sha1":"c697c05a2786acff9bf8955c9d6d97d908e91765","sha256":"542f08e967bd118b85a59705504d5dffd0a7d93860e00f7d735aa94d20542b3f","sha512":"c22c796be0318fa49fee257c461605be81471d2558294ef78cb6fa95cc02cbd297d93779111a8f6428153ec0fe0d8ed72b1d45023737631a285eb09b495a0688","ssdeep":"","tlshash":"94e02bec38e950fd661d51e0141a40e7c66cf93a404101c9a97dcab4f578b749a3162f","size":389,"data":"","first_seen":"2023-04-26T20:18:23Z","last_seen":"2026-06-07T07:23:58.425017Z","times_seen":1152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA5wdt4sZI8izRwpCW76icUr8Z2TbZ7iIzw27xSdQ5tpEgT-0IKbD1JhKwbj-A48Qr_Z733nZ2_9N3esjPw_F7c5eJBwyw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7417a8d96ff35adb23ad4477d5191169","sha1":"dc1f097a88f51280e84abd60ad360ac37263fa3e","sha256":"1c89500f6df5c9f97e79c142b2dfa2c124446ed174cde12bc8edd95f436aafdf","sha512":"14ed04243a5bd4965d37ead52b0e996d563b3a2a1deb2f2d1d25ce89b18cfaa4c39cebc99408606780017425a37e892f59f3b614bd3dccc59ae280f5c3e1b231","ssdeep":"","tlshash":"bed0a9a322022cf74c12acb4096100aa1c890823a033c3f0bace7c68bfa0d047900aa8","size":219,"data":"","first_seen":"2026-05-29T18:14:08.429391Z","last_seen":"2026-05-29T18:17:04.133717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","size":900499,"data":"","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"ffd68da4f5b031fdcfbcfb9db10fced4","sha1":"330d04a86b71193355646894127c2eab04e1790c","sha256":"20afcc48a5d2f7d5c2defaaf7b94a10e182e141f3c53886549e55cb8fc4c4205","sha512":"ef08e9b1f1bd7275da6123fa93424e3f3c3ac0cf7051ede97aa059ffe3930ca07ffdcd292d5da0297d1312fa8e5590b6a94a1b17edd0e17eafdcc8881343b9b7","ssdeep":"","tlshash":"2ff059b835e810bdb14540d81829860e0745eb3bc9070f46737ccaf053fadb4ec2211e","size":493,"data":"","first_seen":"2023-04-12T02:22:35Z","last_seen":"2026-06-07T13:15:28.187117Z","times_seen":4020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ditty-news-ticker/inc/static/js/imagesloaded.pkgd.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5594,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-06-07T17:59:27.640737Z","times_seen":21017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/css/portfolioStyle.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/css/portfolioStyle.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Mar 2026 19:44:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b70c17-da2\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3490,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0861485c304aec4f88b8dd1ae3c104a0","sha1":"2b731c91ad2c08b433f52d62a2db8aa031e24ac7","sha256":"ad1207112d95de53f5b8d91462f46631c8fd26b93a48cee6825900f6a3712296","sha512":"1833a5acea48c9981feaa4dd41cc1f7cd615956295670157c292740c893f28d9d5b2b385441b304bdf5feb18491bfed15101812f22f3129258f157df94bc4236","ssdeep":"","tlshash":"96710f750f205d18e263fb0ad2c79d48fa26e0a3ebe230e436487501c58f7496c3e792","first_seen":"2026-05-29T18:14:08.300845Z","last_seen":"2026-05-29T18:17:03.911886Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/localization.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/localization.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-2896\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 4282\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7fbc88954025ff448567cfbbc66835b4","sha1":"7e9d5351b19c9792fc847e80ef13eb44c56c9f8e","sha256":"e205dfe1008d498942e9fed6a9f47db31aad166335618334ce97af6ebcb65650","sha512":"f06e7b6ace710db1c80e1692a8262f2de57cbed0cdca80e1330e9ae0234a962cb39f91790d8200fe413c25714d1ca226fd6f8837af81e684a39c63b5ccbe7334","ssdeep":"192:064yFeClzVVjVIY1bDB+tMGmHWjzT+vq+FW1uRIl8HIdnQQyiQCyiIqyi2Bym:0RyFeGzVVqYB9+tEoP+0uRs8HnQkCsqY","tlshash":"e42222f318a310621146e07a984e9842b47600fb2a5dbe3974a8356c7fcf76c72bf657","first_seen":"2026-05-29T18:14:08.30193Z","last_seen":"2026-05-29T18:17:04.004892Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/SeroPro-Medium.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/SeroPro-Medium.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: font/woff\r\nContent-Length: 97104\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-17b50\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97104,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 97104, version 0.0","md5":"33d575f732f1ddd18bba76d918e91e02","sha1":"55e66c782959bc8741423cd473d4bd196bf82200","sha256":"94b5735c8e351033b00d8c5d9a5c3bcf0485de3995f943ac83a9efe3086eb2da","sha512":"8bf5858b0e66aa5a6324da70946c8ed04e54632b806c4bf72761e10d018449781908fe3ee053e5bfab5ccc35dd97b532249a9f2f1bec9fe1468539f83fc9a758","ssdeep":"1536:7PO4LmEoJv//xPCiw07Gi4oP25Z4cbsvJqu2QyixC6+7EXf3t7P2e6Z5ltJ:7P5mdv//xPtn7GpoSggu2Q1Z+7EXf3J+","tlshash":"ec9312209f267a357cbdce319a317421928e6b3aab616c62ced849735140df33de9d34","first_seen":"2026-05-29T18:14:08.302869Z","last_seen":"2026-05-29T18:17:03.977166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":38,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/doc/RST-2.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/doc/RST-2.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 233219\r\nlast-modified: Mon, 12 Aug 2019 12:37:05 GMT\r\netag: \"5d515d71-38f03\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":233219,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x1131, components 3","md5":"e7c453b76ba00701d61d530e2a5ca551","sha1":"4dab24ef647a865484538bbde01f46050929c1b0","sha256":"d7ff5a97a004221888f71b1615c27c2f4d53f919d5111eae6336b268be73aeca","sha512":"34ea27c9b874ad1d50877e24e2e783455720b643ce7fd751ef618ad2ca80b2f748f15ab80e65702a9c9cb5d8de634fc9d44a0880da9158b967bf5d1ca558325f","ssdeep":"6144:aWt1nlXSwyw0caN+XJFcFrN1LfVSgPah1uIjXHpqTR7iAav1:FdSDNFdIoIjXHcTRuAav1","tlshash":"373423b76a004f28c25bd99e145f2c475ae65fe3d23c01bb8fe9255cc6298f4f188c5a","first_seen":"2026-05-29T18:14:08.303887Z","last_seen":"2026-05-29T18:17:03.894277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/bootstrap.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/js/bootstrap.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4c-10d5a\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 22676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68954,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"ed69cf59ee487638489ff8742a469e43","sha1":"8cf4186ce86777b4b408ce308ca9f66dd421f509","sha256":"defc39740ac1859d8e2785ed473208409627e87addd5f78f2deaacb93a12d51d","sha512":"cf1c9af1a6ae1477c31bcfd2bc5e19a2382f71d2a8ed879d99aa62e5a1e1fc8cdbc52d762e99411ab58b9f51ae266108241b826cba0082b84b5854dccd49ea63","ssdeep":"768:YctqAC7ZRl92TibveNCf0SIVXx4oBkRmJnrsBdw9W5+A:uZXizXx4GsbYWoA","tlshash":"6c634f167bb820618b5b30ba8cdf514c7238951b554bd4283cad97d06f50b38a2abffd","first_seen":"2023-03-07T01:17:24Z","last_seen":"2026-06-07T16:26:05.64918Z","times_seen":997,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":162,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/SeroPro-Medium.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/SeroPro-Medium.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":97104,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 97104, version 0.0","md5":"33d575f732f1ddd18bba76d918e91e02","sha1":"55e66c782959bc8741423cd473d4bd196bf82200","sha256":"94b5735c8e351033b00d8c5d9a5c3bcf0485de3995f943ac83a9efe3086eb2da","sha512":"8bf5858b0e66aa5a6324da70946c8ed04e54632b806c4bf72761e10d018449781908fe3ee053e5bfab5ccc35dd97b532249a9f2f1bec9fe1468539f83fc9a758","ssdeep":"1536:7PO4LmEoJv//xPCiw07Gi4oP25Z4cbsvJqu2QyixC6+7EXf3t7P2e6Z5ltJ:7P5mdv//xPtn7GpoSggu2Q1Z+7EXf3J+","tlshash":"ec9312209f267a357cbdce319a317421928e6b3aab616c62ced849735140df33de9d34","first_seen":"2026-05-29T18:14:08.302869Z","last_seen":"2026-05-29T18:17:03.977166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/css/dashicons.min.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Mar 2026 08:51:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f278-e67c\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59004,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-06-07T18:38:04.006605Z","times_seen":52205,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ditty-news-ticker/inc/static/js/imagesloaded.pkgd.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ditty-news-ticker/inc/static/js/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 24 Jan 2020 04:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e2a6ebe-15da\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5594,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-06-07T17:59:27.640737Z","times_seen":21017,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=wl4y3j3q5nsy","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:15.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=wl4y3j3q5nsy HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 May 2026 18:13:15 GMT\r\ncontent-security-policy: script-src 'nonce-WCcNscc6sF8-Lr0iYICbYw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54799,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36383)","md5":"5805e8f067cf68994fc96d8f5ecea77e","sha1":"14a49281660523e9d0aa77bfdc9e53d9c5c68660","sha256":"48ab1ceb37c43516deedb8c586a193dbbdad89a9ba2fed65c66c4112c86a4b60","sha512":"e2143ba91d4143f03d77eea9e31a208267b75ecde21bbccbd50550eca1bce10350325a1066ea6a30dadd2bba928a4a5c2bb125a1a713c309c407736917bcfa52","ssdeep":"1536:A+kCDcrGmuyErsOJRJzdRgFxqj/57fYBS:A+kCnmu9LPaHqz5jYBS","tlshash":"91336b0448171445ef9708e223ca3f70fa5d8248214680b9bbfd9697beebd97626d3dc","first_seen":"2026-05-29T18:14:08.306719Z","last_seen":"2026-05-29T18:14:08.306719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ","date":"2026-05-29T18:13:17.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 388300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 17:57:17 GMT\r\nexpires: Sat, 29 May 2027 17:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 960\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":900499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (684)","md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.modal.js?v=20200317","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/jquery.payment.modal.js?v=20200317 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-96ed\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 14251\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38637,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"05eb4fec26b95822c3ab730976a5f9c6","sha1":"a3891bb7dfb79fb81df21ab2f362034d65c2614d","sha256":"7d8d3b5b6d77588ac205e85b2d95c9a161c63653ebb7b1c4cc470d53b0db0020","sha512":"987079b91b43477bd33eff71df6846cdbf3f1ce628d9e93a06372c0e695e980d7406aeeb0e547b636f74fd306fd1add00a90ef47e42d59829e9bc3fc4f98784e","ssdeep":"384:I7Da15ZGiRjxN2KCT/8G+zqlovCQhE+ZDQxEH2dVV1N5LOTHFA2DnM1iNQXpohFO:I7Dizqlovi+ZDQx/V1N5LWND4UPE","tlshash":"08037308b8f710950923b07e9bffa10533ba10572415ee20fdac1b566fe0e6856f5be4","first_seen":"2026-05-29T18:14:08.308176Z","last_seen":"2026-05-29T18:17:03.902065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":44,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/underscore.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/js/underscore.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Mar 2026 08:51:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f279-49d9\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18905,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (18870)","md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-06-07T18:34:32.519086Z","times_seen":114009,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/custom.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/js/custom.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Dec 2019 10:25:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5de789a3-189b\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9bd00ae1fd487b378aefe6d3100ee98f","sha1":"bd546378dfb34ad76f86864ff3e6182b85a0b032","sha256":"c29f58c1f34715f38b29208b36ddf68b9b3d54fd2990b6b95e62640f9016308f","sha512":"a9fa50ed0170d0a503477df07f3b57325b386b82645e0cde2c41aab7ee5409a3f3e4a3982ec164cb6f6f7b1268d67b5f91ee9a074b5131014b51181eee167e97","ssdeep":"96:d1ENVBiV0L8GU8i8rL8lJW2rT1JET1GX360HP1YXUDA:d+0dGUGrLw1r4l0HPyXiA","tlshash":"bbd1444cbc5895bd41b3e769f43f8368fe3f60367b866004a8ae90623844098657fd7e","first_seen":"2026-05-29T18:14:08.309706Z","last_seen":"2026-05-29T18:17:04.080692Z","times_seen":2,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/shortlink/AOn9gwbh","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.594Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /shortlink/AOn9gwbh HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":176,"dns":0,"connect":35,"send":0,"wait":0,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/jquery-1.12.1.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/js/jquery-1.12.1.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4c-47d37\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 134050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":294199,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"62f69d29b6f01c8d477a547cedd922f2","sha1":"73d15ef036af1980629bcde3f32cc5869654ad4c","sha256":"56e843a66b2bf7188ac2f4c81df61608843ce144bd5aa66c2df4783fba85e8ef","sha512":"32f27590828812ffc810a151aea003aee4408ad4f2caaae1425074763edbd00d986091e59ecba6d51ca77d6ca7501dc3b78a81cffb009bce6795056c12f7ebda","ssdeep":"6144:k1Lfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOhPns8kVLkIVfz5AKW+1hC:kgw4mDiTFyi6TVfVAKlfC","tlshash":"b054a4d8f78d112e4232316aed2f52cdbb7cd1b1561054aebd8d497c24a083d42baf7a","first_seen":"2023-03-08T14:22:12Z","last_seen":"2026-06-06T04:17:21.287385Z","times_seen":196,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/modules/bank-info/get-bank-info.js","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/modules/bank-info/get-bank-info.js HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-3b05f\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 53342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":241759,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b342292255b5206e7ae2269342d63993","sha1":"7fe56ff2aa9cce9dea2375f0b567fa0108f77b14","sha256":"513717c5ec45ef530f2a6ceacb7d86acbe09d149128e7dc7ee58f90c8a8fa004","sha512":"b9f2182e872d581634c56de7170208cd39ffd492671bb10e785b0e5d5d6e37ac920d3be007676b39ee169693b3ef3eb1d6b0e64c42fca6068b20a9eac680df22","ssdeep":"1536:vnJ9n7H20MEmzgNRC3UsQYgky1BH8SUly0GHiIjJ2yArNUVsU9wjFxPZGvpi+2hs:3aFHE","tlshash":"2a34c835e5140d77a42985c850e23a67ea441503be49f40af35c2b8c1f6e35f9cbaeee","first_seen":"2026-05-29T18:14:08.312636Z","last_seen":"2026-05-29T18:17:03.993999Z","times_seen":2,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":85,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/fontawesome-webfont.woff2?v=4.3.0","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/css/font-awesome.min.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 56780\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-ddcc\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56780, version 4.197","md5":"97493d3f11c0a3bd5cbd959f5d19b699","sha1":"1075231650f579955905bb2f6527148a8e2b4b16","sha256":"aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c","sha512":"bfe4679bbe5d1db21f6ecb2d6c2810dd02d3b698efdd50004cc355c1d0bc51de8dd102707c796b26e8250c600b4b64db88b67d3f28157777b68e36ad7930bfc0","ssdeep":"1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE","tlshash":"eb430269f84b577202275a0509ee0d34ef804962eef247fbb1fb90c5d6309ac1ea1b56","first_seen":"2023-04-05T09:41:17Z","last_seen":"2026-06-07T08:08:43.548915Z","times_seen":27309,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/rouble.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:21.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/rouble.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:21 GMT\r\nContent-Type: font/woff\r\nContent-Length: 5932\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-172c\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5932,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 5932, version 1.0","md5":"5f303e6538185a119f4f14249c4865cd","sha1":"6dba0640a12b8ed556cb58ef7400436ee62c5e4f","sha256":"d7817d2ffa4053fedde57d8e9e822a59dd7e0def9f74c5691de3f29ddbd5340a","sha512":"b1765f7977d4e857ce3d039dc898db90a2568d29f89dcf789e79903bc756a5ca197233f7b39db7eea861d7e03484353b0a5adde417e507d4b613dbabd21c1b5f","ssdeep":"96:UB0NEjzSGrOryFO70lIGad0rLe8CAFTBYuMLFijI05AUaWk4PMtSx1gr2KcA9eRi:fN2eGrSyFk0OpOrntCLFiE05jRktSjKb","tlshash":"f1c19f79af18e871d0b08cb87115ef4b3787d79aa3065697acf186c13515204e2707af","first_seen":"2026-05-29T18:14:08.314134Z","last_seen":"2026-05-29T18:17:03.919354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ditty-news-ticker/inc/static/libs/fontastic/styles.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ditty-news-ticker/inc/static/libs/fontastic/styles.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 24 Jan 2020 04:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e2a6ebe-1421\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5153,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"15a5edb399271f812847871978ee6cf5","sha1":"03d42a7b988399cadec75568c8e2bc1f67755a74","sha256":"578332cd14c1c8f1c9ea7cc966ca50ae73945b7de3055e07f06dc099d4feeee0","sha512":"6edb85d5a959ebf2e78346eb506f50655bcc8f602f2068963ae77d61d902beec849489e2bfdf5847e1ef12d48634b66ebd74829b16192915e878f3f4aa1e0ef7","ssdeep":"48:U+RNQkrHJBaMx9BMgG4awppuJL4tdnJUbnjV7+uv0JVjqERDL6AA11Aku06NcWg2:U+RNrrHJBaMGIMytYbhKXFe2","tlshash":"e4b1cef0957d044c9303d4d662567730ab1be216ccc93c29f2a1b87c69f227697922fe","first_seen":"2023-04-07T03:25:04Z","last_seen":"2026-06-06T22:54:31.177478Z","times_seen":764,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ninja-forms/assets/css/display-opinions-light.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ninja-forms/assets/css/display-opinions-light.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 18:34:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0fda8-b095\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45205,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45149)","md5":"4d5b5379d9d1d13425cd0641144379d9","sha1":"8163b66f59e1218c6ecc6c9a94c31f548d16d422","sha256":"dfff041b7dcf9eae8404316dd0e53fba2e864ca2679ed7baa425fae6f7ef7a6d","sha512":"7988afebcc4f67247d79e9a3b56a2456792ad577a6a2e3ba4ce4f22692f03a0a1f30e2331e9b0505ce2a5b0d242739bb42d61324c45367b3b106ffc040d6b178","ssdeep":"192:HLoHND4O13T/fGKwgsN0kTAnJQtSUH27SR6dHhSVmtdH1Q51boOvvfTvPtvjGR8C:j4/fGKwjN0yoUKBxHO8Sn7P5HhltA","tlshash":"5e136216a610230bb1b7c1f611cda0097e25def0ed970b6df286ad6a4bedc72109b7d4","first_seen":"2026-02-07T12:44:02.252303Z","last_seen":"2026-06-07T07:23:58.326051Z","times_seen":291,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/backbone.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/js/backbone.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Mar 2026 08:51:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f278-5eed\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24301,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (24266)","md5":"5b5c2ebb1043a2089f38b2471b881395","sha1":"bab51f7bf5f98e554f4b7a445664344f810f4d79","sha256":"a69b2b7f72b1b54c21af59b45da481c18dac7d98b0971c8688503dd0ca75b364","sha512":"e2a52b399fcf1f2e45410a3d60f5c16a62a8674723e439acaa15dad5c2a3bb5f77a2706bbe43aabf22ee4c23cd76193214aaf9f29b79a86a3b5b552e356e2b7a","ssdeep":"384:P+wdhm6Smn9N8Tc1WsP8b/GXlPDFXYEk0NTo/bYybx9ZP0AyCEolSdO6zCBk:oraRuZW6ywq","tlshash":"74b2b7e9739269624aba70b0453f1207e23b59893409815cf6bcd4d7bc7c98d607bf78","first_seen":"2025-04-17T08:01:27.169384Z","last_seen":"2026-06-07T14:38:27.347563Z","times_seen":11773,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://megaservis.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:24:58 GMT\r\nexpires: Sat, 29 May 2027 14:24:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 13696\r\nlast-modified: Wed, 10 Sep 2025 16:48:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28864, version 1.0","md5":"4b6dbec2924c348ec965e2ad24ab0f71","sha1":"ca4b40df4c0179bd79b393b176f2d5d19b0f97b4","sha256":"952fba48c212d73793dddc1a4b0589dd8098a335b58babe50dd3e9e03c223c51","sha512":"545845c2a371a1f68dc6ec589d9b87c843099fb8c2e8e1adf1a66cb36538b29969fd3db888e4ea41b011afec0b1959e89f72f8b201c7aedea7a0c9ec0a4b96ac","ssdeep":"768:eTZgucvPHL8H3nJuHrxvedCtA0CueYja6D+LlM2:e+lPr8XJuke6uZWr+2","tlshash":"e2d2f1bf8f08eafaa6efa674958c71f9cc805b3ac904624811133960475c580a7fe4cb","first_seen":"2025-05-29T21:26:20.484128Z","last_seen":"2026-06-07T06:05:05.687977Z","times_seen":4434,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":31,"receive":6,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/jquery.prettyPhoto.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/js/jquery.prettyPhoto.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Dec 2019 10:25:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5de789a5-713c\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28988,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3572), with CRLF line terminators","md5":"0d78cc8e0da06abf11f683c1f0730f70","sha1":"d60bb3989f333830f624e79c4ac8d7b5757f2a43","sha256":"c430b0bd598913fd6fc5f34c17aa7e48d0ffc9ee8029c5d5daae736e9e223ae5","sha512":"59f870d705914a354e3125202a0ba2c68fc508c3d803045a61cce56ad1c256703fd5b8f5617aa3cb7d77d453ff3a28089d3b8fa2990e0e2ac9a55a987bacf7ef","ssdeep":"384:AucafoPmRXyO5kUoMCJ/0G6GhcGIyqQBryD2m9viCz0CYi7f7l8MuzmsMDPojJRD:gaAPmF35OBBhsyqgdYxgGaN7S8","tlshash":"cbd286247d10716bc1d7e2aae4479718d2328a13ab56d524f27c8c741fe1a86a83ffcd","first_seen":"2025-08-10T07:22:14.337209Z","last_seen":"2026-05-29T18:17:04.04264Z","times_seen":46,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/SeroPro-Medium.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:21.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/SeroPro-Medium.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:21 GMT\r\nContent-Type: font/woff\r\nContent-Length: 97104\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-17b50\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97104,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 97104, version 0.0","md5":"33d575f732f1ddd18bba76d918e91e02","sha1":"55e66c782959bc8741423cd473d4bd196bf82200","sha256":"94b5735c8e351033b00d8c5d9a5c3bcf0485de3995f943ac83a9efe3086eb2da","sha512":"8bf5858b0e66aa5a6324da70946c8ed04e54632b806c4bf72761e10d018449781908fe3ee053e5bfab5ccc35dd97b532249a9f2f1bec9fe1468539f83fc9a758","ssdeep":"1536:7PO4LmEoJv//xPCiw07Gi4oP25Z4cbsvJqu2QyixC6+7EXf3t7P2e6Z5ltJ:7P5mdv//xPtn7GpoSggu2Q1Z+7EXf3J+","tlshash":"ec9312209f267a357cbdce319a317421928e6b3aab616c62ced849735140df33de9d34","first_seen":"2026-05-29T18:14:08.302869Z","last_seen":"2026-05-29T18:17:03.977166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/easy-responsive-tabs/assets/css/bootstrap_tab.min.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/easy-responsive-tabs/assets/css/bootstrap_tab.min.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2019 12:38:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515dac-1a62\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6754,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (309)","md5":"13d11a01211591a7eb13b9cafe783d80","sha1":"55f52137de63dc154a759d6b3b0fd36f20adf04e","sha256":"1ad8f7ada6bd18932e995ec64303774970dbe84a1b19ecfaf89bdab2a0751fc8","sha512":"ccb5680cdba4243afc295319a6b2d9cb209d7fadedb86a55fffdecdef61b577825931944fb4fa553406a1e0013144286385fac7e17a838ef32494108561b8d1f","ssdeep":"96:ZmEC1gCojxEaq5mmIPmHuYHbVFCi4uZFIK3ScWRGB1l2+US:sEC1gCojxEaTwuqxFCcP3ScfL/n","tlshash":"6bd1da29a243205b9a59f24cbebdf7c11af75343930566e7f9e31128de6b1c84842e0b","first_seen":"2023-04-19T04:39:17Z","last_seen":"2026-06-04T07:04:10.427884Z","times_seen":94,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.validation.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.validation.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-4b2\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 657\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"c906f4b4f8118bf368bcaaeecd4ee9fe","sha1":"293b9165ea0f157c459b79951ecf5622d5a6fb8f","sha256":"34a25e04b6fd19ddefe62c356c3e371c7633d7c405e1a701d31e1c8f48489860","sha512":"988f3effaebab0f42d4271e1f43ba2732f04b5ebcc9f047b2f46cadfe0512b37f34f3a48327db3ac310982dec7e0ebb29d8a7912095baaa6a6e10a87f33fbfc1","ssdeep":"","tlshash":"1021468e7de325444bafb26d47af804973794417244cdd05f87cb2412fa1ea861faacd","first_seen":"2026-05-29T18:14:08.31859Z","last_seen":"2026-05-29T18:17:04.016429Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/merchants/megaservis/custom/footer.html","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/merchants/megaservis/custom/footer.html HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nLast-Modified: Mon, 20 Feb 2023 09:24:18 GMT\r\nConnection: keep-alive\r\nETag: \"63f33c42-0\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA49V58iaPeRooIKbahFbNzNmpZ0HfQT-fhLKDCByweYHKOE3sDQ0et7yEFYW-LoU96m5dH2GvMEdgl1WRQbZSx5RW_7XQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:18.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA49V58iaPeRooIKbahFbNzNmpZ0HfQT-fhLKDCByweYHKOE3sDQ0et7yEFYW-LoU96m5dH2GvMEdgl1WRQbZSx5RW_7XQ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 May 2026 18:13:18 GMT\r\ncontent-security-policy: script-src 'nonce-smBFVVDGMmBrZ-8Nbq5Zlg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"2a2f8eed64193ed22b1176542c91dec9","sha1":"de4fcb24e843957648a08da8e7cf2d5cb470a53e","sha256":"e46d24f2e1b881c1e152a01c5ba1658c3db7cfcabcedb50c83121a2518855dc9","sha512":"9ae889f54e9eeeb2dba8a3e55991958653fab4e7f5f4725d9daa8c734161d97a39e155c76383113e91268c49feba20932e2fd346ffa3ce90c97c9c0342361b7d","ssdeep":"384:6jfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/s:6FkD/OE/hkc3+bsIO7/KbzbK3YcOX/+J","tlshash":"bd72ed50041744009b835ce223ce7f34fe4e92517242d0b1abfd9b6beedbda6926939d","first_seen":"2026-05-29T18:14:08.319615Z","last_seen":"2026-05-29T18:14:08.319615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gosuslugi.ru/__jsch/static/script.js","fqdn":"www.gosuslugi.ru","domain":"gosuslugi.ru","tld":"ru"},"ip":{"addr":"213.59.254.7","port":443,"asn":12389,"as":"Rostelecom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gosuslugi.ru/crt","date":"2026-05-29T18:13:15.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gosuslugi.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 11 Nov 2025 11:42:01 GMT","end":"Sat, 12 Dec 2026 14:20:04 GMT"},"fingerprint":{"sha1":"A3:D3:5E:A6:90:5D:F0:DE:DD:79:A8:66:CC:9B:BC:E6:3B:B1:A1:19","sha256":"0E:05:92:F5:EF:99:07:CA:8F:D8:90:11:FB:0A:98:EC:79:FF:C5:DF:BB:0D:B0:93:18:C3:82:FF:44:C4:87:05"}}},"request":{"raw":"GET /__jsch/static/script.js HTTP/1.1\r\nHost: www.gosuslugi.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gosuslugi.ru/crt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx\r\ndate: Fri, 29 May 2026 18:13:15 GMT\r\ncontent-type: application/javascript\r\ntransfer-encoding: chunked\r\nkeep-alive: timeout=10\r\nlast-modified: Wed, 16 Mar 2022 14:01:46 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6231edca-a88f\"\r\nexpires: Fri, 29 May 2026 18:13:14 GMT\r\ncache-control: no-cache\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Origin, Accept, Authorization, srcUrl, DNT, X-Mx-ReqToken, Keep-Alive, User-Agent, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, X-Cache-Date, X-Atmosphere-tracking-id, X-Atmosphere-Framework, X-TimeZone-Offset, X-Atmosphere-Transport, test-scope, schema, *\r\naccess-control-expose-headers: X-Cache-Date,Authorization,Accept\r\ncontent-encoding: gzip\r\nStrict-Transport-Security: max-age=16070400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43151,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43151), with no line terminators","md5":"9dd1a66703c49f6edf01634cc1c4c576","sha1":"56639202c042d29277de4ebd6cebbe9de418703f","sha256":"4672adf4946dc86afd8517cf7af5c73fc6458e60ffa4270fa699c1242006117b","sha512":"82d37c9e95f5381e1db8f2336daeb23869882b0bb1ee4c0b7b70c9775e9c4d95c0a29f08e3ffe8c41b971049e1bfb7359a3c8e66dfe1cf07d1691523c514d1d7","ssdeep":"768:pC2hJHy1TCucKIGEDYYcptcFE98iV6Hg6KjTWwffeCTgWd5+nGRvKYX40OdHW1Ij:d0EDYYcptcFE9B84FkkU9","tlshash":"0e13a74167809c889617effe371ab0f5d0050dbeb7904adfbb003975fda5a289ad4a31","first_seen":"2023-05-20T13:08:37Z","last_seen":"2026-05-29T18:17:03.936128Z","times_seen":118,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-05-29","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"www.gosuslugi.ru/__jsch/static/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/shortlink/vBzDUycQ","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:16.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /shortlink/vBzDUycQ HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaservis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:16 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nContent-Language: en-US\r\nLocation: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cookiesession1=678B28F37307D9DBF5AA70CA26AF28C3;Expires=Sat, 29 May 2027 18:13:16 GMT;Path=/;HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":148,"dns":1,"connect":50,"send":0,"wait":87,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/shortlink/PeEhHEGs","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:16.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /shortlink/PeEhHEGs HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaservis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:16 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nContent-Language: en-US\r\nLocation: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cookiesession1=678B28F3DEFA746C3B1F25340FACD1F0;Expires=Sat, 29 May 2027 18:13:16 GMT;Path=/;HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":153,"dns":1,"connect":46,"send":0,"wait":67,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.input.js?v=20200219","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/jquery.payment.input.js?v=20200219 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-23c8\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 3529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9160,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"57780dbf88bf3b53b4636baf2bb5816f","sha1":"fe3359194997d2c11e336cfad974285289912685","sha256":"04a5dc1289057f5318835b65d6426c278929ec33fd328da0385afc458782f616","sha512":"afa26b5b1e401342029b957ee47d4396ec994d6c5547147a816e1470d982ca2fc801cc988befeb518a82aaff9f628b725eef687c7e17fdefb20b0bffd5b3f0f5","ssdeep":"192:+/hg0S6hvHVG47rGw7NdreZZrET54gaSHC7aO+HhT+Hf1awXssa5pMwaT/oQQDO2:UiI/LOZZrwc0p","tlshash":"86122e58bdf700564a67723d4bef52043a7540a3180bee25bc2c2b95bf92d2842f2fe5","first_seen":"2026-05-29T18:14:08.321297Z","last_seen":"2026-05-29T18:17:03.89756Z","times_seen":2,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/easy-responsive-tabs/assets/css/bootstrap_dropdown.min.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/easy-responsive-tabs/assets/css/bootstrap_dropdown.min.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2019 12:38:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515dac-9ba\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2490,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (461)","md5":"7664e5eb914fea568d60c3e0a0430e1e","sha1":"0a30ae234c1fb3bb683bfb96a1f151c531df8947","sha256":"17fbebea86836c23ae8f9b06bd2c19ba3e6b524d95d180464c3986bac589d21e","sha512":"388c04ca2f7fe7794367464d28bce4a43765a396a1718ff2f1fa7dcd8e68786b59de81832c003d63ce59c3384fa8dfb233f7de2a14155882d5833663df1b93f0","ssdeep":"","tlshash":"d751f19dc1d71002aa99d24d78e4ad481edb6d82a31286bbf5b2903c9fe704049c3b3e","first_seen":"2023-04-19T04:39:17Z","last_seen":"2026-06-04T07:04:10.42341Z","times_seen":97,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.easing.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.easing.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 24 Jan 2020 04:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e2a6ebe-ffa\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4090,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"a8017648e7b7b3ef6867cc0db5ac73bb","sha1":"8488d89b6fd1e4acbaf1b1ce4aa340767f4831ea","sha256":"1b7f2dc65e2f97d78525449b2995120210c44aa010beb5ce81d871e5ccca82f4","sha512":"315d9c64b6bb7ebf43a436bc5dedbad50f0de90d35b3f2228f6c1d369f5ae7abb911c59d6337c0db49130fa2d6f927cdbc8923c28fca7b7b243477d92a238dcf","ssdeep":"","tlshash":"bf813a94b6fea106532235b0490b400f62ad7642ccacbd6fcc0c5c947d68a37a6a7f7c","first_seen":"2025-06-25T14:38:48.010323Z","last_seen":"2026-05-29T18:17:04.078926Z","times_seen":32,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/localization.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/localization.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-2896\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 4282\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7fbc88954025ff448567cfbbc66835b4","sha1":"7e9d5351b19c9792fc847e80ef13eb44c56c9f8e","sha256":"e205dfe1008d498942e9fed6a9f47db31aad166335618334ce97af6ebcb65650","sha512":"f06e7b6ace710db1c80e1692a8262f2de57cbed0cdca80e1330e9ae0234a962cb39f91790d8200fe413c25714d1ca226fd6f8837af81e684a39c63b5ccbe7334","ssdeep":"192:064yFeClzVVjVIY1bDB+tMGmHWjzT+vq+FW1uRIl8HIdnQQyiQCyiIqyi2Bym:0RyFeGzVVqYB9+tEoP+0uRs8HnQkCsqY","tlshash":"e42222f318a310621146e07a984e9842b47600fb2a5dbe3974a8356c7fcf76c72bf657","first_seen":"2026-05-29T18:14:08.30193Z","last_seen":"2026-05-29T18:17:04.004892Z","times_seen":2,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/2019/07/steering-wheel-801994_1280-250x165.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/steering-wheel-801994_1280-250x165.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18397\r\nlast-modified: Fri, 13 Sep 2019 11:06:35 GMT\r\netag: \"5d7b783b-47dd\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18397,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x165, components 3","md5":"d9bc701c2102a2506b4d7a4dca730eec","sha1":"6d6cb7623d6a9d60cd83ce3feafcb99c28bb8e66","sha256":"1c45657719fb40cacb1a734b02666b225b5cc93b2dafbcd6c520924ccc53716e","sha512":"267d0405d314710d00ad3d81772476dfdf035564dd8a1d10aa2bb862abcfc7d3b57aeb9c77443c6a057fd0100fb1e00953eb475f3fa5fe2fdff5b83eba64d0da","ssdeep":"384:kHG6bRVknSIcPQaVD7cSm+HT/AOykOt6Q7IBZ8fxR5vU:km6biShPQwkx+HMR36/HgR58","tlshash":"4482c0afdf1ea91387bf6db1a9c11a3cc6447a069922d0b903702f3da951191cc66a94","first_seen":"2026-05-29T18:14:08.323939Z","last_seen":"2026-05-29T18:17:04.037516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/easy-responsive-tabs/assets/js/ert_js.php","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/easy-responsive-tabs/assets/js/ert_js.php HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 0\r\nx-powered-by: PHP/7.4.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.user-agent.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.user-agent.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-2a5\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 266\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":677,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"fc2273c858f0626e64e8a6983f1dcd31","sha1":"e8f436f4478a7c3607a1413dedd84ca15de3ddd7","sha256":"30ef21e28206803e992d3e9c5afa30a8dbdd6bacf860d1b95073f59855c9c4cd","sha512":"af0b29f65543ace3ea483cc0b83c4044babd8edcfc2944285487917d231b36f7778e43203f32bf9b2a659af8d303870e8e37be9a3b7f0fc8b5d2677aa9e09a8b","ssdeep":"","tlshash":"b201a79db9f6b004462374be985b9104753a444ba82d1d40fc684fe0ef7583a4193eac","first_seen":"2026-05-29T18:14:08.324949Z","last_seen":"2026-05-29T18:17:03.943597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/img/ps-logos@3x.png","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/img/ps-logos@3x.png HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-84c7\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\ncontent-length: 32411\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33991,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 762 x 129, 8-bit/color RGBA, non-interlaced","md5":"05a262267334de94fae3105e93701fc2","sha1":"ce0aeba7134d8874bc746bddf374daa8fbb8eaa1","sha256":"487b038d87cb1a3d2b2212e2e55560752efd5971e807d150a9ab0a39f441514c","sha512":"13ebdfc8f328721cb0617806e8baa3fcde48629b1d17253a28f78a57036220430a8682a45fb5a76e2db891d3eb9910f942eeedfae9253f8ce940812375993c8c","ssdeep":"768:5vdR9qpLQFIh++pUH6NNxlsfP46KVgJMAvUVKyhsSL5jyvVP3ry:5vM2c++6Hq4QTIMAviyAyt/ry","tlshash":"3ee2e10dcc5eadea7b48c0705088b82d1f7376cb67d36b727c598a828ca99d99c424c7","first_seen":"2026-05-29T18:14:08.32575Z","last_seen":"2026-05-29T18:17:03.966459Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA49V58iaPeRooIKbahFbNzNmpZ0HfQT-fhLKDCByweYHKOE3sDQ0et7yEFYW-LoU96m5dH2GvMEdgl1WRQbZSx5RW_7XQ","date":"2026-05-29T18:13:18.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42542\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 25 May 2026 19:59:23 GMT\r\nexpires: Tue, 25 May 2027 19:59:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 339235\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bd80a84e0df8f52ee85cca1108cb4ed9","sha1":"367bf472f729c83febd67da9e47cd1f791495fc1","sha256":"2be4e8d1c17075e750149c6b3334cc76b190e1e6e10a95db910cdf444a9c91b3","sha512":"00e3cd881c07fda21032fd80708de378110589cf702ac03cea75d257b127f3e122f194a0cd6db6d03415fec3c3f27094a840703b2cc77f6f673dd5fbe8d7e300","ssdeep":"1536:D7Rpgh9C9ToL9gTNfWNfK4RxrD9ZzhXwWxd1bx7:D7ArC9ULiTYNC4RJ9Xt","tlshash":"8f837e7338513a1afc2b8b616196b9fdf11cc923e5515bfaa5497a20c3cb0a78223747","first_seen":"2026-05-25T19:10:06.905054Z","last_seen":"2026-06-07T12:40:45.778713Z","times_seen":10794,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/css/dist/block-editor/style.min.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/css/dist/block-editor/style.min.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Mar 2026 08:51:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f278-1d094\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118932,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8e853b4002c818547ffce9d17ae2bd39","sha1":"5b337259f8adbe5490937076a8eacde09003c416","sha256":"af436f8c07bbb4d15f59f67d0f1684d03a8ff55cea49dee9df16b0bc24a11b2d","sha512":"8a5671452be16d9032da028dc7637971fe05672d82d24fe77299f277f65f773a2fc2d6817e529cbb23ca843e23ff5435b2eac8c339e8d7cf6d85001727339352","ssdeep":"768:mvbUDEbwumjbfU+pBHLP5ITyN148SM0QaUmHuquQFGtpsJqjuomCZGXoZMyMisda:VbfxmH7uQ3gCnPTvoT","tlshash":"3dc32c267d3f19ee62b6513fcda1a0c6e1ca8401fa52aec9e895dd54a0cf0870f57237","first_seen":"2026-02-03T19:40:42.480379Z","last_seen":"2026-06-07T18:11:46.032114Z","times_seen":6633,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/popup-maker/dist/packages/block-library-style.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/popup-maker/dist/packages/block-library-style.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Mar 2026 09:07:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f63b-1ada\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6874,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5035)","md5":"9963176ef6137ecf4405a5ccd36aa797","sha1":"0138ff5476e23d1aa559d37fe0671adadf551d79","sha256":"689988a155295dd0a03c78ee8a7d31e27d12f39d3f71d2f4734e38c035186e9f","sha512":"2e77c8c1772b13960169048785558182dd57d64df0022e543ee6c8940f6bf84801e1b461f8cf6cbfe6580e7652bb2c96d40e302c9480d5ff52f1f277df393ddf","ssdeep":"48:1C5YCBS0/oE7MIzfS5vuP2K5igELRvrPtkWg:1C5Zp/oE7dLn+IZArg","tlshash":"c5e1b981926cbff8d65d6734c686c64473117190a75a28acd071d8fc22ce98b89fdb2f","first_seen":"2025-09-16T08:52:04.555083Z","last_seen":"2026-06-07T05:19:14.598632Z","times_seen":12863,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/css/font-awesome.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/css/font-awesome.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2019 12:45:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515f61-68a3\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26787,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"04602e6e73542af5d5f3da9861e39f77","sha1":"e1fc13ed9b50f199dabeee68754c8f25d47ee5f8","sha256":"50aa0385b4f032e478acc2671c713e01ba2ed4e462ed28e11b8eeb7de8071259","sha512":"172e3c07357511e0826a2560933a0994e54a691fdaea3bf907c5a3ac0443bcbbd57faa2d05d499588730e1c30982a282eebd433964d4b9abdbaac763f404fd1f","ssdeep":"192:nxaqbb/A0R69aOPVC3jC4NCe/1w2XlYxUm6sxi0xxUQk2eYv31W7+Siv8Y+MGQK/:xi/Y3lNCwlsiQZvlWRiHhm+TXAzrxl","tlshash":"4ec24efcd51f00a24f32da41af426229df25e23fee465e54f2a2368c95c1666618f3cd","first_seen":"2026-05-29T18:14:08.328217Z","last_seen":"2026-05-29T18:17:04.060106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/2019/07/page-1_img05.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/page-1_img05.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19887\r\nlast-modified: Fri, 13 Sep 2019 11:06:42 GMT\r\netag: \"5d7b7842-4daf\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19887,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x165, components 3","md5":"380054c4331439b81b18267e486ed9a1","sha1":"d54b913975301151e34c7e50857e229b04cf80f0","sha256":"115a39880c58b9ae306d2a7927e95a18a349f83c34b6fa742faec36544f927bc","sha512":"32294eda9fc525f3509f563f590ef4b2a7db849e461a56624297d89c3a175b6cce1296fc2009747a6fcd2bc987df34b7341482a7b80a77909c06a7333890037c","ssdeep":"384:vRFlsFnKt+WkmZoW2SGk9Z41IN/CYy4iDdqbb:vuct+DmhPaIKhpDU","tlshash":"3692d0c58b514bc9b805c1682179bff8a0e5c88ef7f260e564e42addcf814dc13ce699","first_seen":"2026-05-29T18:14:08.329082Z","last_seen":"2026-05-29T18:17:04.105809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:16.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaservis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 3399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.12.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"42036ef261134c246cd6bae0de08a7b6","sha1":"1e23ed4d7f95dfa43af1087e96ed5f495792f287","sha256":"2b9e2b34d7c3219707945ec52af51a3bd662fc9fcb5b4a8a468d64a4261cc004","sha512":"e84fee11726ce21e75fc0e3c77eabf12a25313aa6bcf625c450446f34aca38bc67693d8aaf884626d8fa794d1fecfcff22c13bcc179603875268b26a65233fa7","ssdeep":"96:TuzR1RCigWi/REeQnyb3oRtl1qWh8ykIowo5o0ixyixgqYaJ1:41pG/mxRvMWBowo5oZTXnX","tlshash":"08220f1158f088b6409680a46ef1aa1b2f90d717db0b564476ec4be81fc3ec2de97a79","first_seen":"2026-05-29T18:14:08.329949Z","last_seen":"2026-05-29T18:17:03.941464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/localization.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/localization.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-2896\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 4282\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7fbc88954025ff448567cfbbc66835b4","sha1":"7e9d5351b19c9792fc847e80ef13eb44c56c9f8e","sha256":"e205dfe1008d498942e9fed6a9f47db31aad166335618334ce97af6ebcb65650","sha512":"f06e7b6ace710db1c80e1692a8262f2de57cbed0cdca80e1330e9ae0234a962cb39f91790d8200fe413c25714d1ca226fd6f8837af81e684a39c63b5ccbe7334","ssdeep":"192:064yFeClzVVjVIY1bDB+tMGmHWjzT+vq+FW1uRIl8HIdnQQyiQCyiIqyi2Bym:0RyFeGzVVqYB9+tEoP+0uRs8HnQkCsqY","tlshash":"e42222f318a310621146e07a984e9842b47600fb2a5dbe3974a8356c7fcf76c72bf657","first_seen":"2026-05-29T18:14:08.30193Z","last_seen":"2026-05-29T18:17:04.004892Z","times_seen":2,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.user-agent.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.user-agent.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-2a5\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 266\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":677,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"fc2273c858f0626e64e8a6983f1dcd31","sha1":"e8f436f4478a7c3607a1413dedd84ca15de3ddd7","sha256":"30ef21e28206803e992d3e9c5afa30a8dbdd6bacf860d1b95073f59855c9c4cd","sha512":"af0b29f65543ace3ea483cc0b83c4044babd8edcfc2944285487917d231b36f7778e43203f32bf9b2a659af8d303870e8e37be9a3b7f0fc8b5d2677aa9e09a8b","ssdeep":"","tlshash":"b201a79db9f6b004462374be985b9104753a444ba82d1d40fc684fe0ef7583a4193eac","first_seen":"2026-05-29T18:14:08.324949Z","last_seen":"2026-05-29T18:17:03.943597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/css/dist/preferences/style.min.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/css/dist/preferences/style.min.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Mar 2026 08:51:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f278-3eb\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1003,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1003), with no line terminators","md5":"c81d9fa2057d32137bd1911cc6aee467","sha1":"e23ddd0dc49bd495095be09a08d95d9110369e52","sha256":"6d7f1873151523933c43ddd6324ccf685feaf07dafd5caae98f1d4d1eb153a2b","sha512":"09fe40cdbf064b59b9d374ad054314df3606a9e8c62972ad71b5153481ac4c1d20a6ac5476a40ee726c59e14b2bc49f92350abf154c73ccb5f0e3e46622ad784","ssdeep":"","tlshash":"8111273089bb60bd437f80a778731b0e289256a2537aaad64c306d0c9e44ff144136e7","first_seen":"2025-10-29T18:16:10.482307Z","last_seen":"2026-06-07T07:50:47.175838Z","times_seen":10146,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/css/skt-animation.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/css/skt-animation.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2019 12:45:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515f63-15b9\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (410), with CRLF line terminators","md5":"6c599c7ba12bb1aa44877f541b22271f","sha1":"462a144be5d814da21ae7d0961825d13b0cbf99f","sha256":"cf2da4d9cb740c1dd5d31bd962adcf903b2a6eec1d829158f8ba756017722a74","sha512":"9c8e82361033a59ac03d92f7ad4040ce436c8a97968afba5ae1a1933c1c06c5df48ff4f3a951ca5d87f80872cba8cd387c4b734eeaf64fca4c76d43dd9d4cf2a","ssdeep":"96:oJyGyaaXV0vXVdXoXNV0fVR60XV0XXVFXwXGV0nVZCMV0kVitVHy1ANhqp42B8xr:UaGHY2ufggy1ANhqp42B8xJOlU","tlshash":"8eb1559a4d8600884177878de7cae7b40e2ddfa238755cce3291b99e93133d862e6d16","first_seen":"2025-08-10T07:22:14.352469Z","last_seen":"2026-05-29T18:17:03.996159Z","times_seen":46,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/SketchBoard/functions/shortcodes/css/shortcodes.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/SketchBoard/functions/shortcodes/css/shortcodes.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2019 12:46:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515f9b-5702\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22274,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1660), with CRLF line terminators","md5":"8e31c2d6e86f4b17bda52f2ceb839743","sha1":"2ef4651f1984cd4db1dd853cc685480ff3272131","sha256":"41a20f4faf80c965890127df7396f4b1aa2991344683bb7e5174a33f15670db9","sha512":"3e8b23398ef1bfb1a4dd3b0c987989819d38ba8c2174ff7cd6278c7227ce346e079656e9db9d9c62f339a88467eb1723ee75effc2ed1f888bbbf1d29c903c7c5","ssdeep":"192:FCE96rioR1eF55bqENmv2mf78Fff3PvvC6Afu/BJiN2kpudkrNUc751O:+1e35BG2mkhAfuSDdrNUcd1O","tlshash":"f8a260319e93143f6a1bc370f956da89c633b260ea02257c79927168d0df6de005ebce","first_seen":"2026-05-29T18:14:08.332415Z","last_seen":"2026-05-29T18:17:04.020329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.touchSwipe.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.touchSwipe.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 24 Jan 2020 04:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e2a6ebe-2d38\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11576,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (11576), with no line terminators","md5":"91d00123eb72c7cacc3fbdd03d83762b","sha1":"6b0fcd06196374d8a8f742d5e1663433adbc3b6c","sha256":"f65f3aeed46b79940849fa2022f2cbdf368288de9046f2b3da075c42f9dde8f6","sha512":"34c2ef048bbf51ea56c4f6b4c61f3fc33eb5ad1b4bc31945e81e9ea8a61f80382009176936d78abcc4eed733c47e39af1b40089617efcbd5102a7fbfc9c037e6","ssdeep":"192:sWeHv/p4PUT2uN9MEzdA4KSuAAWF5apIOAJ7j0D0JXYiTlBzT4NYVBgVB7l7lNlk:HQp4PK2uN9GnAAWFcWOAWD0JXYiZBzTp","tlshash":"1f32958e7781b417eadc2274e24f4743253eac9b0a0a84b5e055fda4f9340b4817afcd","first_seen":"2023-03-07T12:04:52Z","last_seen":"2026-06-04T09:47:19.022105Z","times_seen":511,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.input.js?v=20200219","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/jquery.payment.input.js?v=20200219 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-23c8\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 3529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9160,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"57780dbf88bf3b53b4636baf2bb5816f","sha1":"fe3359194997d2c11e336cfad974285289912685","sha256":"04a5dc1289057f5318835b65d6426c278929ec33fd328da0385afc458782f616","sha512":"afa26b5b1e401342029b957ee47d4396ec994d6c5547147a816e1470d982ca2fc801cc988befeb518a82aaff9f628b725eef687c7e17fdefb20b0bffd5b3f0f5","ssdeep":"192:+/hg0S6hvHVG47rGw7NdreZZrET54gaSHC7aO+HhT+Hf1awXssa5pMwaT/oQQDO2:UiI/LOZZrwc0p","tlshash":"86122e58bdf700564a67723d4bef52043a7540a3180bee25bc2c2b95bf92d2842f2fe5","first_seen":"2026-05-29T18:14:08.321297Z","last_seen":"2026-05-29T18:17:03.89756Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=wl4y3j3q5nsy","date":"2026-05-29T18:13:17.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 14:42:11 GMT\r\nexpires: Thu, 27 May 2027 14:42:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 185466\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T08:20:47.127655Z","times_seen":872407,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/doc/FSB-2.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/doc/FSB-2.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 206029\r\nlast-modified: Mon, 12 Aug 2019 12:36:58 GMT\r\netag: \"5d515d6a-324cd\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206029,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, baseline, precision 8, 800x1100, components 3","md5":"425c73957a8256fb0828528af07fb353","sha1":"a265bfc1bea598d0fd9ae5077610518005e70c22","sha256":"da7f72351915600b9804fec0ae29864c9db0b9d50505e02042ad0c2a6c95ed79","sha512":"2ec2adb4e35c7361192dc1fd2ff41a4d98f146d5190d52a516e8b26a99a46819a2c78ce59d76fcf656a55dfb0fbaaf3c814df910dcb95968ef6710f9a7d14441","ssdeep":"3072:eKvzn7DitoH8uKooA1zPFpOZobvgJOjrpBCLTzriNomkMmzRHkL7fTO6nW:n7t8hE1z9CobvJPckL7q","tlshash":"07142284ff450785884c8a90cf038cac7505dfeae36c6e22d7722d99066467dec59adf","first_seen":"2026-05-29T18:14:08.334342Z","last_seen":"2026-05-29T18:17:04.031205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/SketchBoard/functions/shortcodes/css/tipTip.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/SketchBoard/functions/shortcodes/css/tipTip.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2019 12:46:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515f9b-81c\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, CR line terminators","md5":"774e03acb5e8f9a70cef4c3b209a29aa","sha1":"e007fcc7702705ab70bb962738cbee8c0872e3d5","sha256":"a3962a88142baf37d7065473e9d52a70cae8fc40c8beb79f456cc64d5da06e59","sha512":"087cc7ac7387f2f9ba2f71984f58a032ea302f46eafa5db9e6b266ab4eaca133285eea539f486307b91d84d9d95c48a7811e20cb5c07745936ad650952e26b62","ssdeep":"","tlshash":"3d415b1faa66612890d3e94cd89fdfed93b72371a2037335b3529944c984eccac0a18c","first_seen":"2026-05-29T18:14:08.335295Z","last_seen":"2026-05-29T18:17:04.034411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/doc/MCHS-1.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/doc/MCHS-1.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 254161\r\nlast-modified: Mon, 12 Aug 2019 12:37:00 GMT\r\netag: \"5d515d6c-3e0d1\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":254161,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, baseline, precision 8, 800x1100, components 3","md5":"9d74c8aa9829d1ab9c864e4f6654f22e","sha1":"17f17849fb7a38527663bd9f5b72d5e0c2da8478","sha256":"5df948539518f00f5442c36e97429715900fcf02b89d0b76d56e2ae29cf1b9e0","sha512":"e6fd1f47c97313490cebe8228a122d0b688f37384342d793dc3e0f3f8697fa345d83526819a16085e31d04596840964a2191a3ee6da53819241f5bef07848f6e","ssdeep":"6144:4fChhzXHpmBJKF6Ird0mzMbXlE+fV10KOPOvLCIn3A:4fC/rHpKKzc6wKPOD53A","tlshash":"014423c5ea595921c8b7d93db876fa1b247426cd88716c34a39d24fdcf281bc7b0c286","first_seen":"2026-05-29T18:14:08.336843Z","last_seen":"2026-05-29T18:17:04.054289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css?family=Montserrat:100 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 May 2026 18:13:14 GMT\r\ndate: Fri, 29 May 2026 18:13:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"342b6e3cf7a2fc088f9095d9ddbc97dc","sha1":"af269ac7fde1bd025c2cb1db44dcc454997febc6","sha256":"744aefd1b5a8aa0c50a3c2033fe9f9bb35f2299a495ca15b9de8e1a2f6c1857f","sha512":"2492a2a81bf188378af307f45abdc9d972559f36020c0f8a79247bec010af0a86e2cd26cbe24d42c4feaf463dee4f4512d7cba90feb0319cdff00b15fce8888e","ssdeep":"","tlshash":"3e3189412616e500a7431cca23ce7d26ce8f61627490c47abffd5ca8ade5c271735b6d","first_seen":"2025-09-05T02:19:47.02263Z","last_seen":"2026-06-07T07:50:47.226555Z","times_seen":12717,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/shortlink/obCrLDGA","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:16.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /shortlink/obCrLDGA HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaservis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:16 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nContent-Language: en-US\r\nLocation: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cookiesession1=678B28F3EE7ABB5C2748E32AB66266BB;Expires=Sat, 29 May 2027 18:13:16 GMT;Path=/;HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":149,"dns":1,"connect":42,"send":0,"wait":75,"receive":1,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/modules/bank-info/get-bank-info.js","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/modules/bank-info/get-bank-info.js HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-3b05f\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 53342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241759,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b342292255b5206e7ae2269342d63993","sha1":"7fe56ff2aa9cce9dea2375f0b567fa0108f77b14","sha256":"513717c5ec45ef530f2a6ceacb7d86acbe09d149128e7dc7ee58f90c8a8fa004","sha512":"b9f2182e872d581634c56de7170208cd39ffd492671bb10e785b0e5d5d6e37ac920d3be007676b39ee169693b3ef3eb1d6b0e64c42fca6068b20a9eac680df22","ssdeep":"1536:vnJ9n7H20MEmzgNRC3UsQYgky1BH8SUly0GHiIjJ2yArNUVsU9wjFxPZGvpi+2hs:3aFHE","tlshash":"2a34c835e5140d77a42985c850e23a67ea441503be49f40af35c2b8c1f6e35f9cbaeee","first_seen":"2026-05-29T18:14:08.312636Z","last_seen":"2026-05-29T18:17:03.993999Z","times_seen":2,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":294,"dns":0,"connect":0,"send":0,"wait":86,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA5wdt4sZI8izRwpCW76icUr8Z2TbZ7iIzw27xSdQ5tpEgT-0IKbD1JhKwbj-A48Qr_Z733nZ2_9N3esjPw_F7c5eJBwyw","date":"2026-05-29T18:13:18.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 388300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 17:57:17 GMT\r\nexpires: Sat, 29 May 2027 17:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 961\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":900499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (684)","md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/css/flexslider.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/css/flexslider.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2019 12:45:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515f60-1281\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4737,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (312), with CRLF line terminators","md5":"63ac495bef24bfa0fbdeabb5e8203927","sha1":"3b461e28be772ed932258991b8e2820420c385f7","sha256":"11e4fda60f37979473a53fe8d5b27ec38b44596fe8141861ea3c9226c277760f","sha512":"23dc3325950baa857643b60e445d5ff9f7abd6efb5a5e1af0337f2a77c3d67fe63667fb3186ec5ec9cffec1b8f2d3be2f5112923eba7a945531699e8eb797a10","ssdeep":"48:MntybKEaR+TnxlsKtb9TyQJJL/OORAdRb2JOk6PNRooiLRAUIZYceQQxJeX1eXk1:upAxlsYeeJL5RZqPsLRHImKKeHTTLH75","tlshash":"6da10e341aa43e94d0a7d358e592cbcddf6ac115e226a0acf5f63d30c24f449097f9da","first_seen":"2026-01-08T07:04:23.087353Z","last_seen":"2026-05-29T18:17:04.102007Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/SketchBoard/functions/shortcodes/js/shrotcodes.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/SketchBoard/functions/shortcodes/js/shrotcodes.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Mon, 12 Aug 2019 12:46:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515fa1-1206\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4614,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4614), with no line terminators","md5":"9f0e343a9239528929a44511e8d5eb0c","sha1":"25584267dd69b494ea24e58e6acab0a78e1416d1","sha256":"077bbe0b569685de219a502e4913be6e44be0623686267c2359ace942f8f2d76","sha512":"cdb0b7240d9bacfd5e796ec14458134b42d2b9c4f7fd5abe2304dc6fac98cb0fa93f965efb0a9e9bc5273049d86041a8c126212ee2d84b4e66185345a7d8b77c","ssdeep":"48:kMOzPM5/pMt2+Ia9/MWlgPH+8BOdP0fE4eB0QvaHS86v2G4JNZhejkmWIwmioBxf:RaJ6HBlVkvh4JDpmNwmioHGLQ","tlshash":"b491221db046a4ec47f56863e13f22b624a34870bc4b0161747ae1a94cbdcae0573beb","first_seen":"2023-03-14T14:52:50Z","last_seen":"2026-05-29T18:17:03.940589Z","times_seen":12,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.modal.js?v=20200317","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/jquery.payment.modal.js?v=20200317 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-96ed\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 14251\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38637,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"05eb4fec26b95822c3ab730976a5f9c6","sha1":"a3891bb7dfb79fb81df21ab2f362034d65c2614d","sha256":"7d8d3b5b6d77588ac205e85b2d95c9a161c63653ebb7b1c4cc470d53b0db0020","sha512":"987079b91b43477bd33eff71df6846cdbf3f1ce628d9e93a06372c0e695e980d7406aeeb0e547b636f74fd306fd1add00a90ef47e42d59829e9bc3fc4f98784e","ssdeep":"384:I7Da15ZGiRjxN2KCT/8G+zqlovCQhE+ZDQxEH2dVV1N5LOTHFA2DnM1iNQXpohFO:I7Dizqlovi+ZDQx/V1N5LWND4UPE","tlshash":"08037308b8f710950923b07e9bffa10533ba10572415ee20fdac1b566fe0e6856f5be4","first_seen":"2026-05-29T18:14:08.308176Z","last_seen":"2026-05-29T18:17:03.902065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":282,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/rest/merchantInfo.do?token=p72neuruvapmfn547c6rts1ne7","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/rest/merchantInfo.do?token=p72neuruvapmfn547c6rts1ne7 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/json;charset=utf-8\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nX-Frame-Options: DENY\r\ncontent-length: 374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"38dc4c6fb1c6dc2e6df971424a2773f8","sha1":"88505bfad90882e8b8d8bd0a64602942f5672756","sha256":"779292a9cb4e7c5354d49d60defec6107f4fbd5c8b02eb4e2a0f7c1a058421d3","sha512":"3c0bbf3b2dc90693ae5d9a435b777a0e1bb571652c67220b8a9d7651d0367d11dbef12fd1502b5bae270e591ac43901657e85d492ff242df3f89e71c85417370","ssdeep":"","tlshash":"1ae0684ce48e5a7e06a671f48e883e24047c09575048d8d1cdfa083e0ad33099337a2c","first_seen":"2026-05-29T18:14:08.339523Z","last_seen":"2026-05-29T18:17:04.048352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/fontawesome-webfont.woff2?v=4.3.0","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/css/font-awesome.min.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 56780\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-ddcc\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56780, version 4.197","md5":"97493d3f11c0a3bd5cbd959f5d19b699","sha1":"1075231650f579955905bb2f6527148a8e2b4b16","sha256":"aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c","sha512":"bfe4679bbe5d1db21f6ecb2d6c2810dd02d3b698efdd50004cc355c1d0bc51de8dd102707c796b26e8250c600b4b64db88b67d3f28157777b68e36ad7930bfc0","ssdeep":"1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE","tlshash":"eb430269f84b577202275a0509ee0d34ef804962eef247fbb1fb90c5d6309ac1ea1b56","first_seen":"2023-04-05T09:41:17Z","last_seen":"2026-06-07T08:08:43.548915Z","times_seen":27309,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Condensed%3A400%2C400italic%2C300italic%2C300","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css?family=Roboto+Condensed%3A400%2C400italic%2C300italic%2C300 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 May 2026 18:13:14 GMT\r\ndate: Fri, 29 May 2026 18:13:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9816,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9ba540e3776ed9955d55e232914ad946","sha1":"3f5cdb4f0fce6a9b9f42a463b525f28719835261","sha256":"d7877214b88e375cd98aa1e7a1298447d1b5ac697b357b07fe37c5ee852c2d32","sha512":"0736ec9c609ed4bf0531fb506135f46ae9e095d2c91dd3c2cb93b07bde9d7d09727a3708e69796bcdd3f8c1e00f62ced5fcb4ae2e5fa60b9e38d8d9823349252","ssdeep":"192:flNgFPlNgelNgDlNgA3ylNgglNg65lNgPkNgFPkNgekNgDkNgA3ykNggkNg65kN1:fLAPLlLAL1yL9LdLGiAPiliAi1yi9id4","tlshash":"d2128e91482aa404a7931dc62bcf7d31dd4e62147088c5b5dffd1c69acf2e26236879f","first_seen":"2025-10-10T02:09:27.025007Z","last_seen":"2026-05-29T18:17:04.066727Z","times_seen":26,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":305,"dns":1,"connect":15,"send":0,"wait":36,"receive":0,"ssl":373},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/cookie-notice/js/front.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/cookie-notice/js/front.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 28 Apr 2026 18:33:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0fd80-23b8\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9144,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (9144), with no line terminators","md5":"73f7534d35cab74662c1b51911245436","sha1":"fedfbfa833397d36251235f1b8824ff4b1a58b87","sha256":"0a65b0a2f930ac72138c36aea669a3c760c93ce1093e52fb2c542d46f8d1ec61","sha512":"9a27c144315bdcda134066bda559192bc7fc426c0a3bbddbbfa43043d3c31d0411698ef679499b9442c52e5ec4db4f0c54c4cd0aeeba25f0407bc7c04ad5ad37","ssdeep":"96:c7FZY7Qu0zRHEFjedGgfxW+06CwuEUKj4vZPT4pExVfHBgRV9Qfd/Pn0W:uYezRHIJgfY+06lj4BPkExFuRVwP","tlshash":"bf1232dc7b341b7809c781ff25cf65907a331adad89414283436ecd28bb9cd616226b6","first_seen":"2026-02-11T02:27:55.993129Z","last_seen":"2026-06-07T19:11:49.698926Z","times_seen":4240,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/jquery.flexslider-min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/js/jquery.flexslider-min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Dec 2019 10:25:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5de789a4-53b6\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21430,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (21327), with CRLF, CR line terminators","md5":"cf048f54c2775dcfd953ab117f720ad0","sha1":"850314a78decd5a735cef0ef5e9fc793b7fd5576","sha256":"a6cf3e715755f08df5fc5db8c2be738ed0d154479d6e90dfc52a0f8f00fcdd9e","sha512":"d2a5fd19312549fabbea5234bc1c688f10d8b82bfed2a5072c575a5ba77f581da1bebb5ab49a573dd44302856b46f737f8458a463d7700b3605276a57a126e0a","ssdeep":"384:CmE4TjopcnfxNiYK0E8g8MXromIsnBscyVTnmhrpb0SXEk9EVe6:Jr86npNx3sro5sjG+tbjUJVh","tlshash":"81a28325f2503972cfe722ae7e0fd406a9b3d441e816c83d3a3d574a2d641859b33ee9","first_seen":"2025-09-29T02:03:04.620806Z","last_seen":"2026-05-29T18:17:04.101101Z","times_seen":3,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/shortlink/vBzDUycQ","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.590Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /shortlink/vBzDUycQ HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":173,"dns":0,"connect":31,"send":0,"wait":0,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=2b605kektb65","date":"2026-05-29T18:13:16.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 388300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 17:57:17 GMT\r\nexpires: Sat, 29 May 2027 17:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 959\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":900499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (684)","md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.utils.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.utils.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-5ce8\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 9709\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23784,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1cd03e1c6fec4e76555f86505d2011ef","sha1":"910c380fd148d88edcc7f837795a5eca99c7d55b","sha256":"9228482d0d7a78164ddb0f4fe116f1c3ab25c529465faf443dbf8887fd7cf43c","sha512":"34e15d41f4a02d3ba37b746e32b8bc5e360fcfd285348a73d0ab3829ef2e6691fc3847eee11d57f6a27c39f0c3d6ed7a904c74f03d1aec09cae76e618ef68166","ssdeep":"384:OPaFicra9rZ1iAXCCdoiw719PpvxhgIs0Xl9Q5kgufRno1AdDrrN:OPaOwzrgts3Q5kgufRno1AdB","tlshash":"a6b254f46de708971502b12f564e7804b476007fbe19ba517c8e2b782fde63c86b1ab4","first_seen":"2026-05-29T18:14:08.34452Z","last_seen":"2026-05-29T18:17:03.891556Z","times_seen":2,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/img/question.svg","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/img/question.svg HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-17b\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\ncontent-length: 257\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":379,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18e203ae49a452ba4b329579c24eb083","sha1":"6f30241f1204ace7b4906c173db2480804d0373b","sha256":"66229fababe643001982f18ad4b8c4a81193c19b0f680e16466738d9f60960d1","sha512":"3522c9d218aaa2fc0f56a58d86247f627395fc5da442cfdce3b286b4de419e635b6c992c359006b719c5a10b1c02602fa1449a75217c169b4ecb1c9a6e2afe9b","ssdeep":"","tlshash":"5de0ca9409fc490947058115d65d71502a1f65d7230c094a715c2e30ff145de3c4f0dc","first_seen":"2026-05-29T18:14:08.345571Z","last_seen":"2026-05-29T18:17:04.044459Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/hoverIntent.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/js/hoverIntent.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Dec 2019 10:25:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5de789a3-13bd\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5053,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f3f2cdc3e51d13e5030b619a72d83153","sha1":"171cf97b1fa373555e0aeec8f55bbcc039974071","sha256":"23af8b9f5598696c1021bcbed01264e894b10517810af499f256f6e704385834","sha512":"8ee64d4c762e3b3e1f12e58aba8d53d2ed336a7a96a28dba16eef835c046c2c578b957e756fd1979d32549a98616d9ca7e7780686d2c5d4dbfdfd9d250632208","ssdeep":"96:3Rd7rR4GD9qFGDfbuej1h22EwdIwCeNmH:nHHqEbuu1h22EwdBFYH","tlshash":"4aa1cf4d324a15525b33a325d75ab83efb21469b9a44518437be774c2fb84384323fde","first_seen":"2026-01-08T07:04:23.093944Z","last_seen":"2026-05-29T18:17:04.026745Z","times_seen":5,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:16.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaservis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 3399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.12.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":10191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"42036ef261134c246cd6bae0de08a7b6","sha1":"1e23ed4d7f95dfa43af1087e96ed5f495792f287","sha256":"2b9e2b34d7c3219707945ec52af51a3bd662fc9fcb5b4a8a468d64a4261cc004","sha512":"e84fee11726ce21e75fc0e3c77eabf12a25313aa6bcf625c450446f34aca38bc67693d8aaf884626d8fa794d1fecfcff22c13bcc179603875268b26a65233fa7","ssdeep":"96:TuzR1RCigWi/REeQnyb3oRtl1qWh8ykIowo5o0ixyixgqYaJ1:41pG/mxRvMWBowo5oZTXnX","tlshash":"08220f1158f088b6409680a46ef1aa1b2f90d717db0b564476ec4be81fc3ec2de97a79","first_seen":"2026-05-29T18:14:08.329949Z","last_seen":"2026-05-29T18:17:03.941464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/superfish.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/js/superfish.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Dec 2019 10:25:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5de789a5-10e1\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4321,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4086), with CRLF line terminators","md5":"f098e529c3adff2d34f710284c013983","sha1":"ca2a3664cadd083e751feb16c0a3d8a8142f1d9c","sha256":"c184b6014fb804a6da2c6b86ac87bb3beb68fea74faddda0ce5cebdfd1d8d926","sha512":"3b4e0b13bf73f0922585c46d80bcc680cd108248fa87035e92138757d13e3e380ef1c2a4453754d772579a96cfa3b8273950693ec9dfcf3352a4cc78c24bbdc0","ssdeep":"48:JyH+z5MPCO+jKKH8XEkfp4YIDZ2r5Uv0vAgd+RbIlg/OEisyyu7BP+BPeKC3Yq9q:e2erSKKH+EIOOryvgB4zUWkEBNC3YMq","tlshash":"bb91518cb38bb1f383d765ba106f4206f2769a9df4984018b53299691e7d9086233f3d","first_seen":"2026-01-08T07:04:23.136155Z","last_seen":"2026-05-29T18:17:03.97386Z","times_seen":5,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/jquery/ui/core.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Mar 2026 08:51:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f279-53d8\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-07T18:34:26.230413Z","times_seen":298409,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/local_storage_wrapper.js?v=20200327","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/local_storage_wrapper.js?v=20200327 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-914\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nSet-Cookie: cookiesession1=678B28F393B9B5F67AD3BDC4CA290896;Expires=Sat, 29 May 2027 18:13:17 GMT;Path=/;HttpOnly\r\nContent-Length: 916\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2324,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"b1278c5d07ec36a3634a17681bdcb8a3","sha1":"9b89205b29dd24e50d7ce0c634e71b4dab866736","sha256":"b6d3062d765276bc9436c09509707d08b9c69890de11e88c0d32271283ff7e6a","sha512":"189ac41f8db44d5cd76438901052aa2def58640a1085989d19c1965f8baa7443857e48939c4bf44b14cddeb7ddf14d14a992d96c0e2d6271ee0d87b5bbaf8bef","ssdeep":"","tlshash":"1d41bf485cf325d440eb70ad276f4074b63b94537a1cdb95b98c6a013facd2882a5bf8","first_seen":"2026-05-29T18:14:08.34919Z","last_seen":"2026-05-29T18:17:04.01907Z","times_seen":2,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":39,"dns":1,"connect":29,"send":0,"wait":46,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/jquery-1.12.1.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/js/jquery-1.12.1.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4c-47d37\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 134050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":294199,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"62f69d29b6f01c8d477a547cedd922f2","sha1":"73d15ef036af1980629bcde3f32cc5869654ad4c","sha256":"56e843a66b2bf7188ac2f4c81df61608843ce144bd5aa66c2df4783fba85e8ef","sha512":"32f27590828812ffc810a151aea003aee4408ad4f2caaae1425074763edbd00d986091e59ecba6d51ca77d6ca7501dc3b78a81cffb009bce6795056c12f7ebda","ssdeep":"6144:k1Lfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOhPns8kVLkIVfz5AKW+1hC:kgw4mDiTFyi6TVfVAKlfC","tlshash":"b054a4d8f78d112e4232316aed2f52cdbb7cd1b1561054aebd8d497c24a083d42baf7a","first_seen":"2023-03-08T14:22:12Z","last_seen":"2026-06-06T04:17:21.287385Z","times_seen":196,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":81,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/rouble.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:23.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/rouble.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:23 GMT\r\nContent-Type: font/woff\r\nContent-Length: 5932\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-172c\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5932,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 5932, version 1.0","md5":"5f303e6538185a119f4f14249c4865cd","sha1":"6dba0640a12b8ed556cb58ef7400436ee62c5e4f","sha256":"d7817d2ffa4053fedde57d8e9e822a59dd7e0def9f74c5691de3f29ddbd5340a","sha512":"b1765f7977d4e857ce3d039dc898db90a2568d29f89dcf789e79903bc756a5ca197233f7b39db7eea861d7e03484353b0a5adde417e507d4b613dbabd21c1b5f","ssdeep":"96:UB0NEjzSGrOryFO70lIGad0rLe8CAFTBYuMLFijI05AUaWk4PMtSx1gr2KcA9eRi:fN2eGrSyFk0OpOrntCLFiE05jRktSjKb","tlshash":"f1c19f79af18e871d0b08cb87115ef4b3787d79aa3065697acf186c13515204e2707af","first_seen":"2026-05-29T18:14:08.314134Z","last_seen":"2026-05-29T18:17:03.919354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://megaservis.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 14:42:15 GMT\r\nexpires: Thu, 27 May 2027 14:42:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:47 GMT\r\ncontent-type: font/woff2\r\nage: 185459\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51412, version 1.0","md5":"9e5e97447fcc00eca79e97de3b337831","sha1":"efafc4ef0f1ac7fefb6e22be4ea9c681a53d415a","sha256":"8d230115e58faa2ed303bee567b91d1a792e0c958a0118998b53648b2ab7c057","sha512":"ff66693e0a9dfcf51c16540c713de433c308e0b4afb31b48aab7fc7b46684e24494468826219fcd82e0cb26a40ec4addb8db741553e66e496d6cb1d7c9513055","ssdeep":"768:18/PyhTHe3I1xDq5OqDPcdn9jxYzJ2LEWPf4FPkEsSfR7vpNfyB4dnzoQub:rr1HAcnlxwJ2LJwFfHuyNub","tlshash":"ac3302a818f688a9d57e19446f2b0d908566123731a2037bcb524f8b12e96e332ddb77","first_seen":"2025-05-29T18:08:33.81349Z","last_seen":"2026-06-07T08:05:20.09856Z","times_seen":26049,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":186,"dns":4,"connect":35,"send":0,"wait":22,"receive":10,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.validation.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.validation.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-4b2\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 657\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"c906f4b4f8118bf368bcaaeecd4ee9fe","sha1":"293b9165ea0f157c459b79951ecf5622d5a6fb8f","sha256":"34a25e04b6fd19ddefe62c356c3e371c7633d7c405e1a701d31e1c8f48489860","sha512":"988f3effaebab0f42d4271e1f43ba2732f04b5ebcc9f047b2f46cadfe0512b37f34f3a48327db3ac310982dec7e0ebb29d8a7912095baaa6a6e10a87f33fbfc1","ssdeep":"","tlshash":"1021468e7de325444bafb26d47af804973794417244cdd05f87cb2412fa1ea861faacd","first_seen":"2026-05-29T18:14:08.31859Z","last_seen":"2026-05-29T18:17:04.016429Z","times_seen":2,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":290,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ","date":"2026-05-29T18:13:17.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 388300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 17:57:17 GMT\r\nexpires: Sat, 29 May 2027 17:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 960\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":900499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (684)","md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/style.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/style.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Mar 2020 10:24:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e7499d8-ecd6\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (664), with CRLF line terminators","md5":"9886b10ca5a0277658e952b9232833be","sha1":"2fb3a4f46d3905edc5830109eeb769b0b19d611d","sha256":"915865266d57e9b35e1badcdce52987346d7c21e6954277ad1b4b5c7cb17dbc0","sha512":"f90ddfae2e5b9b427bfbfc2a47cff3f5f787859e1ef72ae70f3f54c6dd85027f364a5fb0f7df81984a2878584ca3874077dfd37030e7c51a71f7041279b81f34","ssdeep":"768:wWQ49kWBiemTnVh26lu49r51nM9MME1hy8Y9fhovQ2:1QUiemTV6u51q1fhkQ2","tlshash":"d54362251e202108e223e36df6d3eb19ef3d9112f65714fd65976a20c18f6ad013fb8a","first_seen":"2026-05-29T18:14:08.350652Z","last_seen":"2026-05-29T18:17:04.099466Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/isotope.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/js/isotope.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Dec 2019 10:25:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5de789a4-3961\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14689,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (14512), with CRLF, CR line terminators","md5":"8f10b3c815a0a3bea2ba32829766186a","sha1":"256fb80cf6e1439857b248c830fea200b0c0ee42","sha256":"1ce5ba351270d600f38372c570382fed75ba5c74aa19ef9ce76c0793446d08b1","sha512":"6cf09778e57f04e61fc0cb1bbaacf39042230fd39d00dc2ed7b12aeb7d0661de68e0f8dbf08e94e66ad6ef71b826c93fa3c245fbe4610c0c7fb3cdcfe87df1f3","ssdeep":"192:ZUXI5jKo/JY2eXKk9uJ8J7MLQE3ITCU+rEqsofylnPWX+y1eQPn7TnF:DjKBlKk9A8JhAI3+/sofEPY7RPPF","tlshash":"cf62848d738132248197b26540bf110f3137aaa56a468cacb23bc6dbde7954d207be7d","first_seen":"2026-05-29T18:14:08.351595Z","last_seen":"2026-05-29T18:17:04.055899Z","times_seen":2,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://megaservis.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:24:58 GMT\r\nexpires: Sat, 29 May 2027 14:24:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 13696\r\nlast-modified: Wed, 10 Sep 2025 16:48:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28864, version 1.0","md5":"4b6dbec2924c348ec965e2ad24ab0f71","sha1":"ca4b40df4c0179bd79b393b176f2d5d19b0f97b4","sha256":"952fba48c212d73793dddc1a4b0589dd8098a335b58babe50dd3e9e03c223c51","sha512":"545845c2a371a1f68dc6ec589d9b87c843099fb8c2e8e1adf1a66cb36538b29969fd3db888e4ea41b011afec0b1959e89f72f8b201c7aedea7a0c9ec0a4b96ac","ssdeep":"768:eTZgucvPHL8H3nJuHrxvedCtA0CueYja6D+LlM2:e+lPr8XJuke6uZWr+2","tlshash":"e2d2f1bf8f08eafaa6efa674958c71f9cc805b3ac904624811133960475c580a7fe4cb","first_seen":"2025-05-29T21:26:20.484128Z","last_seen":"2026-06-07T06:05:05.687977Z","times_seen":4434,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":157,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/img/logo/logo.svg","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/img/logo/logo.svg HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-1f17\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\ncontent-length: 2791\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7959,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd5a0230a809bf891c9b1777c25b52cd","sha1":"818e78c2cacbc3c5b8f166bde6a51458efbf0b9a","sha256":"ba0fe3a12b87ddce5c8d064c154f0e6b1a60eec3ad0232845d55f192ae2fc221","sha512":"f5d67abef1f371977e2202bdfb6c36039a7415cf98eb24e2555e3b08097c74ecfa9d5fc4ce8806437a2d0c5a827b3cfa5d0682385028b6985b68bb29d210faf5","ssdeep":"192:+NAOtxcVY4tcBTTfvXm4hIMFfU7xMopvlG10R9MLo+CjrHBBYL:eAOtxdecB5ISfU7xMopvlGmR9M8+CXhq","tlshash":"b6f198bab6e898b7d10dd399d5355066392d10d773b4c604f2ae8f872f2604a4c1ffa2","first_seen":"2026-05-29T18:14:08.352398Z","last_seen":"2026-05-29T18:17:04.017731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/fontawesome-webfont.woff2?v=4.3.0","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:21.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/css/font-awesome.min.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:21 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 56780\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-ddcc\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56780, version 4.197","md5":"97493d3f11c0a3bd5cbd959f5d19b699","sha1":"1075231650f579955905bb2f6527148a8e2b4b16","sha256":"aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c","sha512":"bfe4679bbe5d1db21f6ecb2d6c2810dd02d3b698efdd50004cc355c1d0bc51de8dd102707c796b26e8250c600b4b64db88b67d3f28157777b68e36ad7930bfc0","ssdeep":"1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE","tlshash":"eb430269f84b577202275a0509ee0d34ef804962eef247fbb1fb90c5d6309ac1ea1b56","first_seen":"2023-04-05T09:41:17Z","last_seen":"2026-06-07T08:08:43.548915Z","times_seen":27309,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gu-st.ru/portal-st/lib-assets/fonts/Lato-Regular.woff2","fqdn":"gu-st.ru","domain":"gu-st.ru","tld":"ru"},"ip":{"addr":"46.235.185.9","port":443,"asn":34879,"as":"OOO Sovremennye setevye tekhnologii","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gosuslugi.ru/crt","date":"2026-05-29T18:13:15.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gu-st.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 07 May 2025 11:42:01 GMT","end":"Mon, 08 Jun 2026 10:09:08 GMT"},"fingerprint":{"sha1":"24:AB:74:E2:D7:3D:AB:D6:77:8B:23:F5:46:57:98:D9:24:BA:AB:0A","sha256":"8F:6F:96:11:E6:AE:D6:5F:BC:A2:4E:C5:46:16:C9:18:DC:26:37:AE:A0:C0:03:FD:ED:0D:E8:B5:49:AC:DD:D3"}}},"request":{"raw":"GET /portal-st/lib-assets/fonts/Lato-Regular.woff2 HTTP/1.1\r\nHost: gu-st.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gosuslugi.ru/\r\nOrigin: https://www.gosuslugi.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 May 2026 18:13:15 GMT\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 25 May 2026 21:00:49 GMT\r\nexpires: Fri, 29 May 2026 19:06:08 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Origin, Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-TimeZone-Offset, X-Origin, Accept, Authorization, srcUrl, DNT, X-Mx-ReqToken, Keep-Alive, User-Agent, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, X-Cache-Date, X-Atmosphere-tracking-id, X-B3-Spanid, X-Atmosphere-Framework, X-TimeZone-Offset, X-Atmosphere-Transport, test-scope, schema, x-order-id, x-form-id, X-B3-TraceId, X-B3-SpanId, X-B3-ParentSpanId, X-B3-Sampled, X-B3-Podname, *\r\naccess-control-expose-headers: X-Cache-Date,Authorization,Accept\r\nstrict-transport-security: max-age=157680000\r\naccess-control-allow-origin: *\r\nx-ngenix-cache: HIT, HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182708,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 182708, version 2.983","md5":"bd03a2cc277bbbc338d464e679fe9942","sha1":"cbff48bce12e71565156bb331b0c9979746a5680","sha256":"983b0caf336e8542214fc17019a4fc5e0360864b92806ca14d55c1fc1c2c5a0f","sha512":"a8fbc47aca9c6875fc54983439687323d8e8db4ca8f244ed3c77ca91893a23d3cfbd62857b1e6591f2bc570c47342eed1f4a6010e349ef1ac100045ef89cbfd0","ssdeep":"3072:a+zq/3zkl+ciohnxbjroiZ/XPHi8Mo/Oqh/J41RZ7E/Aur2mmxuN/y424XqtjiJy:aYq/IlDfcipXf9h/sTE9lwuN524Xq9i4","tlshash":"c0041258a194dee5fe761a3a03b7c540ea8e7ab041dbc6f6f0b994497e211210fcd5cc","first_seen":"2023-04-13T01:33:41Z","last_seen":"2026-06-07T08:13:33.268356Z","times_seen":5199,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":76,"dns":15,"connect":26,"send":0,"wait":26,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=2b605kektb65","date":"2026-05-29T18:13:17.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=2b605kektb65\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Fri, 29 May 2026 18:13:16 GMT\r\ndate: Fri, 29 May 2026 18:13:16 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ff4213aeb4cda8b5250563ccd10c39b0","sha1":"c4cfc89c6595b02bc68eebcbe1e6317c57527ff5","sha256":"5be0c0e7f8125bfefe1b91f994b7875e6575714a5df85f69ee34c051a1ebf7bd","sha512":"b155810f0f0b9266311946358c3c6b62f3b36c137a970ac9ae385ffe5b590ccab3f4bc6a5890355e86c497024c0c62b5f5d8a5ef1dcb9fe5631d9d20ddb6ae71","ssdeep":"","tlshash":"3db0126f1ba0d01c1c100042c92be7f8e016d028e75080e445748fb415135f34515450","first_seen":"2026-05-28T05:22:58.148745Z","last_seen":"2026-06-05T07:12:05.490992Z","times_seen":38,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/SeroPro.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:21.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/SeroPro.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:21 GMT\r\nContent-Type: font/woff\r\nContent-Length: 96764\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-179fc\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96764,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 96764, version 0.0","md5":"8c23216e3ba0a73df3171649668b23e7","sha1":"4b7eda5ce830c186230c4f910bd77acbfd2465fb","sha256":"b9f2009499ad4a7c2f3b160f6f0fdd8a6fee484837e78ccbc8e694a8fdf6bc5b","sha512":"e71459b71e748be5d10cf89b2bfd423b55e7306f17184d9236ceaadf61a441820d17f4bb02debf1fb2112c8f7a5346f1233c8ef017e93554f0a9a7ac628f6ff6","ssdeep":"1536:m8z0f+mlYERUxqfw1Vppyv4+LTj44NHxT/yefyglXTwriGaifBQpoEepm5XCBaLV:mc4L+R04B63pFRll8rSiJ2oEepmVCaoy","tlshash":"5093129b94ee5670e488c13f9a7884dd362eca474aa4859c17c4c2c47bfe69dc6f301e","first_seen":"2026-05-29T18:14:08.354426Z","last_seen":"2026-05-29T18:17:03.921135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/2019/07/glaz.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:15.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/glaz.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\npragma: no-cache\r\nlink: \u003chttps://megaservis.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cookie Notice","description":"Cookie Notice provides a simple, customizable website banner that can be used to help your website comply with certain cookie consent requirements under the EU GDPR cookie law and CCPA regulations and includes seamless integration with Cookie Compliance to help your site comply with the latest updates to existing consent laws.","website":"https://wordpress.org/plugins/cookie-notice","common_platform_enumeration":"","icon":"Cookie Notice.png","categories":["Cookie compliance","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Ninja Forms","description":"Ninja Forms is the WordPress form builder.","website":"https://ninjaforms.com","common_platform_enumeration":"","icon":"Ninja Forms.svg","categories":["WordPress plugins","Form builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Backbone.js","description":"BackboneJS is a JavaScript library that allows to develop and structure the client side applications that run in a web browser.","website":"https://backbonejs.org","common_platform_enumeration":"cpe:2.3:a:backbone_project:backbone:*:*:*:*:*:*:*:*","icon":"Backbone.js.png","categories":["JavaScript frameworks"]},{"name":"prettyPhoto","description":"","website":"https://no-margin-for-errors.com/projects/prettyphoto-jquery-lightbox-clone/","common_platform_enumeration":"","icon":"prettyPhoto.png","categories":["JavaScript libraries"]},{"name":"Yoast SEO Premium:13.2","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":234464,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832), with CRLF, LF line terminators","md5":"41b72111b8fe746602b1a4aaedd6b9d3","sha1":"9f103716873a1e9f72d73eb4bd8b7d53edbe0964","sha256":"7c8dfa115c3c8332eca75e42914660caf461930b251c63fef3fd2bd127521582","sha512":"eb338549258e68922412b0d403e3a7053394aa91eda27a28f3a0f4388a739c8f1c4272b3834adfa65223646f9895736c37b10812a7bacf56a544f9d217cc6f50","ssdeep":"3072:k2SA3Ylrv+AA0tISiYql6hHp2h6Az8MOS6OTf1oHmDK/+7MPIcA2vAwQsqH+L6GO:PAA0i96hHp2h6Az8VS6OTf1Sk","tlshash":"6c34b47299760a3e059e3289c0b99f0ea287d323d704d7f9fdbc5d2bd788a142653349","first_seen":"2026-05-29T18:14:08.357227Z","last_seen":"2026-05-29T18:17:03.949649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=8j78faht51yj","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:15.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=8j78faht51yj HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 May 2026 18:13:15 GMT\r\ncontent-security-policy: script-src 'nonce-M2KsjdD5GnTlUM0QdHmvGQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54618,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36202)","md5":"9a7041b2a374003f5c50b52c558a3afe","sha1":"3da56860238b5237627b922617c5b1e20bfe6ea6","sha256":"d320d0ebf527d2e48ab2b970680909a5f42d766950660674cffe446303761575","sha512":"42a0d1ee5e770a743debf4bd577e38b4d617785b4f3894896f37c8c74065e5e5b63cd5f9d27bc6f2f951bf61ac4b6cd06914ee2a106d3bafb59cca088632a6f6","ssdeep":"768:SFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/c5FpvHo/SIi/oXjVS4PiTqkrPAF8s3N:A+kz5vw/NXjfsqynsfZmlg8/EHFsvw","tlshash":"99337c88082710469f978ee213c93fb4fd6e8240714690b877fe57a3aed7d93915a38c","first_seen":"2026-05-29T18:14:08.358255Z","last_seen":"2026-05-29T18:14:08.358255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/merchants/megaservis/custom/logo.png?timeNow=1780078397871","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/merchants/megaservis/custom/logo.png?timeNow=1780078397871 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 20 Feb 2023 09:24:18 GMT\r\nConnection: keep-alive\r\nETag: W/\"63f33c42-3ba\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\ncontent-length: 593\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit colormap, interlaced","md5":"12a0b8389607b37211fb4278262258a7","sha1":"8967cd210f11b8a5952e844cd3e0d60792ee5c0a","sha256":"2511073165b2e0007d961c2d592053e00415514e1112347274e537e66bdc4883","sha512":"a601b9a5ada058c069820d300ad9b0646e1caa226367fafc008f708658854d7fbed965ff775d3b44217b02466e5d9b04ec582b43d660f8d1e8ae98d8bcb6bca6","ssdeep":"","tlshash":"f311106af6001c61e608d5d214f35423a92b4980ead4f6b168cfcb0a0d702f9c58b5db","first_seen":"2025-10-15T08:56:19.450223Z","last_seen":"2026-05-29T18:17:03.905868Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/SeroPro-Medium.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:23.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/SeroPro-Medium.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:23 GMT\r\nContent-Type: font/woff\r\nContent-Length: 97104\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-17b50\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97104,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 97104, version 0.0","md5":"33d575f732f1ddd18bba76d918e91e02","sha1":"55e66c782959bc8741423cd473d4bd196bf82200","sha256":"94b5735c8e351033b00d8c5d9a5c3bcf0485de3995f943ac83a9efe3086eb2da","sha512":"8bf5858b0e66aa5a6324da70946c8ed04e54632b806c4bf72761e10d018449781908fe3ee053e5bfab5ccc35dd97b532249a9f2f1bec9fe1468539f83fc9a758","ssdeep":"1536:7PO4LmEoJv//xPCiw07Gi4oP25Z4cbsvJqu2QyixC6+7EXf3t7P2e6Z5ltJ:7P5mdv//xPtn7GpoSggu2Q1Z+7EXf3J+","tlshash":"ec9312209f267a357cbdce319a317421928e6b3aab616c62ced849735140df33de9d34","first_seen":"2026-05-29T18:14:08.302869Z","last_seen":"2026-05-29T18:17:03.977166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/wp-emoji-release.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:15.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:15 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Mar 2026 08:51:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f279-58ea\"\r\nexpires: Fri, 05 Jun 2026 18:13:15 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-07T18:34:26.186123Z","times_seen":262320,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.modal.js?v=20200317","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/jquery.payment.modal.js?v=20200317 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-96ed\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 14251\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38637,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"05eb4fec26b95822c3ab730976a5f9c6","sha1":"a3891bb7dfb79fb81df21ab2f362034d65c2614d","sha256":"7d8d3b5b6d77588ac205e85b2d95c9a161c63653ebb7b1c4cc470d53b0db0020","sha512":"987079b91b43477bd33eff71df6846cdbf3f1ce628d9e93a06372c0e695e980d7406aeeb0e547b636f74fd306fd1add00a90ef47e42d59829e9bc3fc4f98784e","ssdeep":"384:I7Da15ZGiRjxN2KCT/8G+zqlovCQhE+ZDQxEH2dVV1N5LOTHFA2DnM1iNQXpohFO:I7Dizqlovi+ZDQx/V1N5LWND4UPE","tlshash":"08037308b8f710950923b07e9bffa10533ba10572415ee20fdac1b566fe0e6856f5be4","first_seen":"2026-05-29T18:14:08.308176Z","last_seen":"2026-05-29T18:17:03.902065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=2b605kektb65","date":"2026-05-29T18:13:17.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 24 May 2026 10:06:23 GMT\r\nexpires: Sun, 31 May 2026 10:06:23 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 461214\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-07T08:20:47.188151Z","times_seen":647953,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/rest/merchantInfo.do?token=p72neuruvapmfn547c6rts1ne7","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/rest/merchantInfo.do?token=p72neuruvapmfn547c6rts1ne7 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/json;charset=utf-8\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nX-Frame-Options: DENY\r\ncontent-length: 374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"38dc4c6fb1c6dc2e6df971424a2773f8","sha1":"88505bfad90882e8b8d8bd0a64602942f5672756","sha256":"779292a9cb4e7c5354d49d60defec6107f4fbd5c8b02eb4e2a0f7c1a058421d3","sha512":"3c0bbf3b2dc90693ae5d9a435b777a0e1bb571652c67220b8a9d7651d0367d11dbef12fd1502b5bae270e591ac43901657e85d492ff242df3f89e71c85417370","ssdeep":"","tlshash":"1ae0684ce48e5a7e06a671f48e883e24047c09575048d8d1cdfa083e0ad33099337a2c","first_seen":"2026-05-29T18:14:08.339523Z","last_seen":"2026-05-29T18:17:04.048352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/19b6be62ddcb08e7957bff3a8c5473a9.js?defer\u0026generated=1779829961","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/19b6be62ddcb08e7957bff3a8c5473a9.js?defer\u0026generated=1779829961 HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 26 May 2026 21:12:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a160cc9-f481\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62593,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62447)","md5":"f337f30de5cbd75e85d25fcc43910bde","sha1":"4a977d81a9f324c57044dba5cdfb8f71368c9091","sha256":"ae453bbfd8cc4d79a59fd36bf4552479884b516089d360e2cf3b2fb09ee8079e","sha512":"6e90d95b208af2e494863f335aa38ca3bb9d4081b154b065b13a1e36c30472477f860df788beb4c70109c44ad4826d7ac2da2970aa886a6c155b60a4adb0ab18","ssdeep":"768:SXfINKFGp4Cop+L7dS2c5/xVrYm+BhAfkjTCZV6mk2Jt00ynDQmhg6iaI8OV:SPa4ComS2c5/wvhm5Fn00y0mhIaI8o","tlshash":"69530a8d7d90b69241ff7168616f170ea333882924069c50b968c8b57fbde8f9127f6c","first_seen":"2026-05-29T18:14:08.361316Z","last_seen":"2026-05-29T18:17:04.021991Z","times_seen":2,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/bootstrap.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/js/bootstrap.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4c-10d5a\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 22676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68954,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"ed69cf59ee487638489ff8742a469e43","sha1":"8cf4186ce86777b4b408ce308ca9f66dd421f509","sha256":"defc39740ac1859d8e2785ed473208409627e87addd5f78f2deaacb93a12d51d","sha512":"cf1c9af1a6ae1477c31bcfd2bc5e19a2382f71d2a8ed879d99aa62e5a1e1fc8cdbc52d762e99411ab58b9f51ae266108241b826cba0082b84b5854dccd49ea63","ssdeep":"768:YctqAC7ZRl92TibveNCf0SIVXx4oBkRmJnrsBdw9W5+A:uZXizXx4GsbYWoA","tlshash":"6c634f167bb820618b5b30ba8cdf514c7238951b554bd4283cad97d06f50b38a2abffd","first_seen":"2023-03-07T01:17:24Z","last_seen":"2026-06-07T16:26:05.64918Z","times_seen":997,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":46,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/merchants/megaservis/custom/footer.html","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/merchants/megaservis/custom/footer.html HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nLast-Modified: Mon, 20 Feb 2023 09:24:18 GMT\r\nConnection: keep-alive\r\nETag: \"63f33c42-0\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/cookie-notice/css/front.min.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/cookie-notice/css/front.min.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 18:33:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0fd80-16c6\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5830), with no line terminators","md5":"c0164c196dbb5a3d9b210ee73f2159c6","sha1":"c9d16c3a08ac5174679084c2f630b970334362f1","sha256":"63b48438278c5dfb73dd5bb3cbf8310caccd91457201debe4cff4dec4410d96c","sha512":"9a725a44fc5cf73247333f7a20299a1c4207bbde48a87bac0c39fcb895eb38b7cd41abca3cf0defd3b516b623d76da73f27b81401467e1ff18c02cc56b901311","ssdeep":"96:HP7YUc6W/NOajfBnlCc7KDd6NtWd/k93ik8oLrWrzrsrZ0:v7JOnlCc7KZ63c","tlshash":"b9c1305ffe89031c91e7851197c84a99662ac876e0b20ccdb24ab52a8fc7fcf3758157","first_seen":"2026-02-11T02:27:55.998612Z","last_seen":"2026-06-07T07:21:17.926608Z","times_seen":4228,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=8j78faht51yj","date":"2026-05-29T18:13:17.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 14:42:11 GMT\r\nexpires: Thu, 27 May 2027 14:42:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 185466\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T08:20:47.127655Z","times_seen":872407,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.modal.js?v=20200317","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/jquery.payment.modal.js?v=20200317 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-96ed\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 14251\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38637,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"05eb4fec26b95822c3ab730976a5f9c6","sha1":"a3891bb7dfb79fb81df21ab2f362034d65c2614d","sha256":"7d8d3b5b6d77588ac205e85b2d95c9a161c63653ebb7b1c4cc470d53b0db0020","sha512":"987079b91b43477bd33eff71df6846cdbf3f1ce628d9e93a06372c0e695e980d7406aeeb0e547b636f74fd306fd1add00a90ef47e42d59829e9bc3fc4f98784e","ssdeep":"384:I7Da15ZGiRjxN2KCT/8G+zqlovCQhE+ZDQxEH2dVV1N5LOTHFA2DnM1iNQXpohFO:I7Dizqlovi+ZDQx/V1N5LWND4UPE","tlshash":"08037308b8f710950923b07e9bffa10533ba10572415ee20fdac1b566fe0e6856f5be4","first_seen":"2026-05-29T18:14:08.308176Z","last_seen":"2026-05-29T18:17:03.902065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.user-agent.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.user-agent.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-2a5\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 266\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":677,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"fc2273c858f0626e64e8a6983f1dcd31","sha1":"e8f436f4478a7c3607a1413dedd84ca15de3ddd7","sha256":"30ef21e28206803e992d3e9c5afa30a8dbdd6bacf860d1b95073f59855c9c4cd","sha512":"af0b29f65543ace3ea483cc0b83c4044babd8edcfc2944285487917d231b36f7778e43203f32bf9b2a659af8d303870e8e37be9a3b7f0fc8b5d2677aa9e09a8b","ssdeep":"","tlshash":"b201a79db9f6b004462374be985b9104753a444ba82d1d40fc684fe0ef7583a4193eac","first_seen":"2026-05-29T18:14:08.324949Z","last_seen":"2026-05-29T18:17:03.943597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/rest/merchantInfo.do?token=p72neuruvapmfn547c6rts1ne7","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/rest/merchantInfo.do?token=p72neuruvapmfn547c6rts1ne7 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/json;charset=utf-8\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nX-Frame-Options: DENY\r\ncontent-length: 374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"38dc4c6fb1c6dc2e6df971424a2773f8","sha1":"88505bfad90882e8b8d8bd0a64602942f5672756","sha256":"779292a9cb4e7c5354d49d60defec6107f4fbd5c8b02eb4e2a0f7c1a058421d3","sha512":"3c0bbf3b2dc90693ae5d9a435b777a0e1bb571652c67220b8a9d7651d0367d11dbef12fd1502b5bae270e591ac43901657e85d492ff242df3f89e71c85417370","ssdeep":"","tlshash":"1ae0684ce48e5a7e06a671f48e883e24047c09575048d8d1cdfa083e0ad33099337a2c","first_seen":"2026-05-29T18:14:08.339523Z","last_seen":"2026-05-29T18:17:04.048352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/2019/07/sistemy-bezopasnosti-e1542195617713.png","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/sistemy-bezopasnosti-e1542195617713.png HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 98951\r\nlast-modified: Fri, 13 Sep 2019 11:05:23 GMT\r\netag: \"5d7b77f3-18287\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 700 x 408, 8-bit colormap, non-interlaced","md5":"5526f7b8159172c954241d55444a3548","sha1":"cae49980968ba5625e5e25a55c49eb27d776c314","sha256":"443134c0c3d79244ce1d9cfa98c2de010bffb410cfe8a5de303337ce8fb3c811","sha512":"585aca849cc437f79670e06dcfce679695131bed742df6a20b3c4963ae999524b11863fe9ac0693f0f353785a816e8ac116f82fa201d6eb40099a5be8d1b8ab5","ssdeep":"3072:0AeV4lmuEUCGAWIK/KPpcYpA3RBfT7Z3Q:0A25GQK/K6h3Pu","tlshash":"9da312ec9400cec3db8c827d5942c1e4ff5927e71a1279166b83e2dba1f7c416a8271c","first_seen":"2026-05-29T18:14:08.363042Z","last_seen":"2026-05-29T18:17:03.93889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/modules/bank-info/get-bank-info.js","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/modules/bank-info/get-bank-info.js HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-3b05f\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 53342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":241759,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b342292255b5206e7ae2269342d63993","sha1":"7fe56ff2aa9cce9dea2375f0b567fa0108f77b14","sha256":"513717c5ec45ef530f2a6ceacb7d86acbe09d149128e7dc7ee58f90c8a8fa004","sha512":"b9f2182e872d581634c56de7170208cd39ffd492671bb10e785b0e5d5d6e37ac920d3be007676b39ee169693b3ef3eb1d6b0e64c42fca6068b20a9eac680df22","ssdeep":"1536:vnJ9n7H20MEmzgNRC3UsQYgky1BH8SUly0GHiIjJ2yArNUVsU9wjFxPZGvpi+2hs:3aFHE","tlshash":"2a34c835e5140d77a42985c850e23a67ea441503be49f40af35c2b8c1f6e35f9cbaeee","first_seen":"2026-05-29T18:14:08.312636Z","last_seen":"2026-05-29T18:17:03.993999Z","times_seen":2,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":80,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA6VZkWJ9-dHC3qR3jYzpm72zYpllzffAxTSUI2nyxKfWYUbgaxe3yxbOz6v11am7hjpnfJSHeZaNd-qIULPbrqpdZavRA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:18.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA6VZkWJ9-dHC3qR3jYzpm72zYpllzffAxTSUI2nyxKfWYUbgaxe3yxbOz6v11am7hjpnfJSHeZaNd-qIULPbrqpdZavRA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 May 2026 18:13:18 GMT\r\ncontent-security-policy: script-src 'nonce-q39ggqqfua9rkEmVMHv9kQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"92cf59e1d686953bf917b7ad27494450","sha1":"99aba7cd655580bcccf7ca6dfda4293255c254c9","sha256":"2ec675b06de640311fe5c8dd9def60c9ca11e49321b4dcb76944547618af7212","sha512":"9c4d7a85b90cf6eb02afae2b17e93fb50847a9ba29d0da984709659ca998c458c4bf1da321a33c7fba7ec895c2b495e945a654f83cd9dd1975d09241c3ded1cc","ssdeep":"384:6jfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/S:6FkD/OE/hkc3+bsIO7/KbzbK3YcOX/+D","tlshash":"0d720e50041744009b835ce223ce7f34fe4e92517242d0b1abfd9b6beedbda6926939d","first_seen":"2026-05-29T18:14:08.364049Z","last_seen":"2026-05-29T18:14:08.364049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/css/superfish.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/css/superfish.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2019 12:45:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515f63-107c\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4220,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"10ec843ca7aea7c59b1b70371b533697","sha1":"e74a3a04b087fc995f133464505a550024b7492f","sha256":"a9d62258d73bdc8ca8e9c7cff163c2a6d98be7bc29b391d2667f3b1073a5769f","sha512":"4e8dadcc5b80b47ef5cb50fb942ea0ccf560a39e55f2c0f6c89896ea5bd0ddad56cac8af332d5777b5f74074b8c56ca2a0d745c5b37275262b7960075e7cca04","ssdeep":"96:rOjAAjGETyJAxPUAzE9DYYnRFojdyYFBQD35Hcx/zcx/+:rq5/uJAxP3EKOCZ","tlshash":"54917577a2c260045327c7a6e2ebab7d7ffe4114ff0712947517a630ee8b4e842b6584","first_seen":"2026-05-04T18:50:14.019455Z","last_seen":"2026-05-29T18:17:04.06168Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/doc/RST-1.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/doc/RST-1.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 233633\r\nlast-modified: Mon, 12 Aug 2019 12:37:03 GMT\r\netag: \"5d515d6f-390a1\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":233633,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x1131, components 3","md5":"f7bcfe2b3baeb9d38fd28f4819a87397","sha1":"d01b99948ae67e24017138a6002934b54a24e068","sha256":"9ae102acdd6c3b6a8359663136cec385171988b6cca23b9872a4bbcf28f04452","sha512":"655b0f2a1034d3913348a94a57a53cfb7af5d685512f401900e4f9364445ed6116ace3efaad65dabfa29606fac3d6f720980507b68c1cd2eb9fdb32deb187b8d","ssdeep":"6144:E3FjMgJT431RYJkG3Jsw+ZOIYe9o7QyLuOXRA1:sDk316JkG3JEZOgwVA1","tlshash":"3234234496327a34ee809d7b6c6444dbf79498f80b2853be036523add1d4d2ccf86aec","first_seen":"2026-05-29T18:14:08.366313Z","last_seen":"2026-05-29T18:17:03.908073Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/jquery.easing.1.3.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/js/jquery.easing.1.3.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Dec 2019 10:25:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5de789a4-d73\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3443,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (526), with CRLF line terminators","md5":"c31e0ab2407ce5ec9744b3a0ccfc623a","sha1":"3460aeda0c7b060545b1106532517b62fd3c2cea","sha256":"88f1017f9690505f251d53d15ffb890075133f460b59a5dba88663ed3f35b381","sha512":"c97d411470567e616d72c2f3fb5ea701048766ae528ab01661204401ccb4b39b7700c7ec62c239e3886b2d293ebd6578fd7f3aa7ee06d02e38b51e46001aecf6","ssdeep":"","tlshash":"18616bceb9f3b51e639833f4265a231732593da6104d5881f89548d83c7a278e33edac","first_seen":"2023-03-07T01:42:35Z","last_seen":"2026-06-04T11:02:19.251921Z","times_seen":99,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ninja-forms/assets/fonts/fontawesome-webfont.woff2?v=4.5.0","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ninja-forms/assets/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/wp-content/plugins/ninja-forms/assets/css/font-awesome.min.css\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:14 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 66624\r\nlast-modified: Tue, 28 Apr 2026 18:34:16 GMT\r\netag: \"69f0fda8-10440\"\r\nexpires: Sun, 28 Jun 2026 18:13:14 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66624,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66624, version 4.262","md5":"db812d8a70a4e88e888744c1c9a27e89","sha1":"638c652d623280a58144f93e7b552c66d1667a11","sha256":"ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995","sha512":"17222f02957b3335849e3fe277b17c21c4aaf0c76cd3da01a4ca39c035629695d29645913865b78e097066492f9cee5618af5159560363d2723bed7c3b9cf2a8","ssdeep":"1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ","tlshash":"ae5302303406ab26ecdf0e8776b888f2b4da91d37b5f22c753aa84115dc91d5d94ca3e","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-06-07T08:13:41.333732Z","times_seen":31238,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/shortlink/PeEhHEGs","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.596Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /shortlink/PeEhHEGs HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":154,"dns":2,"connect":43,"send":0,"wait":0,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA5wdt4sZI8izRwpCW76icUr8Z2TbZ7iIzw27xSdQ5tpEgT-0IKbD1JhKwbj-A48Qr_Z733nZ2_9N3esjPw_F7c5eJBwyw","date":"2026-05-29T18:13:18.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42542\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 25 May 2026 19:59:23 GMT\r\nexpires: Tue, 25 May 2027 19:59:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 339235\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bd80a84e0df8f52ee85cca1108cb4ed9","sha1":"367bf472f729c83febd67da9e47cd1f791495fc1","sha256":"2be4e8d1c17075e750149c6b3334cc76b190e1e6e10a95db910cdf444a9c91b3","sha512":"00e3cd881c07fda21032fd80708de378110589cf702ac03cea75d257b127f3e122f194a0cd6db6d03415fec3c3f27094a840703b2cc77f6f673dd5fbe8d7e300","ssdeep":"1536:D7Rpgh9C9ToL9gTNfWNfK4RxrD9ZzhXwWxd1bx7:D7ArC9ULiTYNC4RJ9Xt","tlshash":"8f837e7338513a1afc2b8b616196b9fdf11cc923e5515bfaa5497a20c3cb0a78223747","first_seen":"2026-05-25T19:10:06.905054Z","last_seen":"2026-06-07T12:40:45.778713Z","times_seen":10794,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Mar 2026 08:51:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f279-3509\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-07T18:34:32.513268Z","times_seen":824183,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/merchants/megaservis/custom/footer.html","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/merchants/megaservis/custom/footer.html HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nLast-Modified: Mon, 20 Feb 2023 09:24:18 GMT\r\nConnection: keep-alive\r\nETag: \"63f33c42-0\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/rest/merchantInfo.do?token=p72neuruvapmfn547c6rts1ne7","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/rest/merchantInfo.do?token=p72neuruvapmfn547c6rts1ne7 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/json;charset=utf-8\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache, no-store, max-age=0, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nX-Frame-Options: DENY\r\ncontent-length: 374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"496e5d585f5f8d9f7459c1828683e3a3","sha1":"e1f5133c2d8c4c624b07a2063b03552e3a054847","sha256":"3a0330999d51ca5584e9f918dd7784794a39de90c9005d6a24a980e21b5a76a7","sha512":"b9626232c13470f5aaef005767c05de1d1bb372a80dd25e1fb8f0ec253ac447fc99426077eda1b217077f4c9d4c52ea9654c0e9f93766da9ddb8f6872b9c5d39","ssdeep":"","tlshash":"89e0684ce48e567a06a671f48e883e24047c09575048d8d1cdfa083e0ad33098337a2c","first_seen":"2026-05-29T18:14:08.368782Z","last_seen":"2026-05-29T18:17:04.028957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/merchants/megaservis/custom/logo.png?timeNow=1780078397919","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/merchants/megaservis/custom/logo.png?timeNow=1780078397919 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 20 Feb 2023 09:24:18 GMT\r\nConnection: keep-alive\r\nETag: W/\"63f33c42-3ba\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\ncontent-length: 593\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit colormap, interlaced","md5":"12a0b8389607b37211fb4278262258a7","sha1":"8967cd210f11b8a5952e844cd3e0d60792ee5c0a","sha256":"2511073165b2e0007d961c2d592053e00415514e1112347274e537e66bdc4883","sha512":"a601b9a5ada058c069820d300ad9b0646e1caa226367fafc008f708658854d7fbed965ff775d3b44217b02466e5d9b04ec582b43d660f8d1e8ae98d8bcb6bca6","ssdeep":"","tlshash":"f311106af6001c61e608d5d214f35423a92b4980ead4f6b168cfcb0a0d702f9c58b5db","first_seen":"2025-10-15T08:56:19.450223Z","last_seen":"2026-05-29T18:17:03.905868Z","times_seen":4,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://megaservis.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 14:42:15 GMT\r\nexpires: Thu, 27 May 2027 14:42:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:47 GMT\r\ncontent-type: font/woff2\r\nage: 185459\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51412, version 1.0","md5":"9e5e97447fcc00eca79e97de3b337831","sha1":"efafc4ef0f1ac7fefb6e22be4ea9c681a53d415a","sha256":"8d230115e58faa2ed303bee567b91d1a792e0c958a0118998b53648b2ab7c057","sha512":"ff66693e0a9dfcf51c16540c713de433c308e0b4afb31b48aab7fc7b46684e24494468826219fcd82e0cb26a40ec4addb8db741553e66e496d6cb1d7c9513055","ssdeep":"768:18/PyhTHe3I1xDq5OqDPcdn9jxYzJ2LEWPf4FPkEsSfR7vpNfyB4dnzoQub:rr1HAcnlxwJ2LJwFfHuyNub","tlshash":"ac3302a818f688a9d57e19446f2b0d908566123731a2037bcb524f8b12e96e332ddb77","first_seen":"2025-05-29T18:08:33.81349Z","last_seen":"2026-06-07T08:05:20.09856Z","times_seen":26049,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":177,"dns":4,"connect":16,"send":0,"wait":19,"receive":19,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=2b605kektb65","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:15.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=2b605kektb65 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 May 2026 18:13:15 GMT\r\ncontent-security-policy: script-src 'nonce-y9DToHCLe_1l87DO8JbVLQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54720,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36304)","md5":"9ae410ca57587d1f6c7d192b7c03b713","sha1":"715193e98e6760ab26a20e6bf64feee91181fa33","sha256":"701a2a2a17a28320c8b08e4beeed450035c19f93317030c7854c16da96bb0fd8","sha512":"e3f73b804e809a5472b3f5c082a69a3dc3c1d2cbe9f43e1b2810802c44d3e2255ab43250b771d5fc443e55e6aace92212add8d66dccd73fe884bba481c1e9298","ssdeep":"768:SFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/fU22mmjUDX3Dolf1Ym2Yv7Py6SMjVNS:A+kcU31A3pmNeAVEhWE+3/i","tlshash":"80338c1048071446cf9b48f227d93f20fd5e82506106a0b973fe57a7beebd9b915a2dc","first_seen":"2026-05-29T18:14:08.36952Z","last_seen":"2026-05-29T18:14:08.36952Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/jquery-1.12.1.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/js/jquery-1.12.1.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4c-47d37\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 134050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":294199,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"62f69d29b6f01c8d477a547cedd922f2","sha1":"73d15ef036af1980629bcde3f32cc5869654ad4c","sha256":"56e843a66b2bf7188ac2f4c81df61608843ce144bd5aa66c2df4783fba85e8ef","sha512":"32f27590828812ffc810a151aea003aee4408ad4f2caaae1425074763edbd00d986091e59ecba6d51ca77d6ca7501dc3b78a81cffb009bce6795056c12f7ebda","ssdeep":"6144:k1Lfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOhPns8kVLkIVfz5AKW+1hC:kgw4mDiTFyi6TVfVAKlfC","tlshash":"b054a4d8f78d112e4232316aed2f52cdbb7cd1b1561054aebd8d497c24a083d42baf7a","first_seen":"2023-03-08T14:22:12Z","last_seen":"2026-06-06T04:17:21.287385Z","times_seen":196,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":221,"dns":0,"connect":0,"send":0,"wait":76,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/rouble.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/rouble.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: font/woff\r\nContent-Length: 5932\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-172c\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5932,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 5932, version 1.0","md5":"5f303e6538185a119f4f14249c4865cd","sha1":"6dba0640a12b8ed556cb58ef7400436ee62c5e4f","sha256":"d7817d2ffa4053fedde57d8e9e822a59dd7e0def9f74c5691de3f29ddbd5340a","sha512":"b1765f7977d4e857ce3d039dc898db90a2568d29f89dcf789e79903bc756a5ca197233f7b39db7eea861d7e03484353b0a5adde417e507d4b613dbabd21c1b5f","ssdeep":"96:UB0NEjzSGrOryFO70lIGad0rLe8CAFTBYuMLFijI05AUaWk4PMtSx1gr2KcA9eRi:fN2eGrSyFk0OpOrntCLFiE05jRktSjKb","tlshash":"f1c19f79af18e871d0b08cb87115ef4b3787d79aa3065697acf186c13515204e2707af","first_seen":"2026-05-29T18:14:08.314134Z","last_seen":"2026-05-29T18:17:03.919354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/SeroPro.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:23.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/SeroPro.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:23 GMT\r\nContent-Type: font/woff\r\nContent-Length: 96764\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-179fc\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96764,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 96764, version 0.0","md5":"8c23216e3ba0a73df3171649668b23e7","sha1":"4b7eda5ce830c186230c4f910bd77acbfd2465fb","sha256":"b9f2009499ad4a7c2f3b160f6f0fdd8a6fee484837e78ccbc8e694a8fdf6bc5b","sha512":"e71459b71e748be5d10cf89b2bfd423b55e7306f17184d9236ceaadf61a441820d17f4bb02debf1fb2112c8f7a5346f1233c8ef017e93554f0a9a7ac628f6ff6","ssdeep":"1536:m8z0f+mlYERUxqfw1Vppyv4+LTj44NHxT/yefyglXTwriGaifBQpoEepm5XCBaLV:mc4L+R04B63pFRll8rSiJ2oEepmVCaoy","tlshash":"5093129b94ee5670e488c13f9a7884dd362eca474aa4859c17c4c2c47bfe69dc6f301e","first_seen":"2026-05-29T18:14:08.354426Z","last_seen":"2026-05-29T18:17:03.921135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/bootstrap.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/js/bootstrap.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4c-10d5a\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 22676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68954,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"ed69cf59ee487638489ff8742a469e43","sha1":"8cf4186ce86777b4b408ce308ca9f66dd421f509","sha256":"defc39740ac1859d8e2785ed473208409627e87addd5f78f2deaacb93a12d51d","sha512":"cf1c9af1a6ae1477c31bcfd2bc5e19a2382f71d2a8ed879d99aa62e5a1e1fc8cdbc52d762e99411ab58b9f51ae266108241b826cba0082b84b5854dccd49ea63","ssdeep":"768:YctqAC7ZRl92TibveNCf0SIVXx4oBkRmJnrsBdw9W5+A:uZXizXx4GsbYWoA","tlshash":"6c634f167bb820618b5b30ba8cdf514c7238951b554bd4283cad97d06f50b38a2abffd","first_seen":"2023-03-07T01:17:24Z","last_seen":"2026-06-07T16:26:05.64918Z","times_seen":997,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ninja-forms-layout-styles/layouts/assets/css/display-structure.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ninja-forms-layout-styles/layouts/assets/css/display-structure.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Jan 2020 09:45:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e296b55-619\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4caa84b233fbe7b93801366dc06abfc3","sha1":"04c44b55b52dc5d2ba82e9ab08bbcfe06230bd61","sha256":"a23c48b5ab60ced83c945fbdf25255b946fc5373c04c328b78342baf2a06f04e","sha512":"44dfb8654418315e3a0df659bd277b8485e0fe72950a085e8bceb98aab175ea9865477125b32d9f4a2d802e96180a23eb71cb45c48c2af9429efbe0db61d183f","ssdeep":"","tlshash":"0d315a1dee65765f220d3848b8f782c0114f0092dd6a68d8e3aab1af83cd3ce74711c6","first_seen":"2023-04-11T21:00:11Z","last_seen":"2026-06-07T05:57:02.04897Z","times_seen":460,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/doc/RST-3.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/doc/RST-3.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 238806\r\nlast-modified: Mon, 12 Aug 2019 12:37:06 GMT\r\netag: \"5d515d72-3a4d6\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":238806,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x1131, components 3","md5":"43240530466cbce727f52c1016cd55e1","sha1":"966a0f91ebdd98c51765504e0a93d5b4e158581a","sha256":"0945fe7d3ac92dd77a9d8d06e74188fd364756b5502d42e8924d37527ae18010","sha512":"b8ed54cc74aaec83f785600b288560b1ec6a0a0fa27f94594945f72dcb11f5d3f9e9d1515817653a85864ba612a0c45b1575c975ef17e8db8bc4eb97c4a363fe","ssdeep":"6144:jizD0Qoh6NmhBTywa+uvALSEGe6X2EiFGkuggYVQNbsEAv:jizIskLJp6GEiuggYW5sEI","tlshash":"dc3423cfe562167bec9c7c142067ef2741e20b9a56bcd2aaf244ca12052d1d3bf915e3","first_seen":"2026-05-29T18:14:08.371033Z","last_seen":"2026-05-29T18:17:03.984598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=wl4y3j3q5nsy","date":"2026-05-29T18:13:16.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 388300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 17:57:17 GMT\r\nexpires: Sat, 29 May 2027 17:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 959\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":900499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (684)","md5":"07b9b68135391954abe80eb2cefceb9c","sha1":"ea2ea46f66ac0c0ce4ab2ac3e77fc55ed1d0b071","sha256":"da47930c9b5dd7cfd068f5d6e8ce59ac80d018464669a3478986072926aeab4b","sha512":"5918a4af1c0acbfb3fd1180c39b50b8e534c66dcc329e01ca444a17705cb54fa47767784392989f81a5a2af8dc26a9e999fb5074c75ed1555a6f24587bc110d3","ssdeep":"12288:CgkErFb1FQuLSM0DWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQuLSM05dOTv1aIDqDqQIhBb","tlshash":"29155bd8bc627da25222b4f164a7215dbb3ea5aac44c0c1e7198c5f03ef48496077ef7","first_seen":"2026-05-29T18:14:08.371871Z","last_seen":"2026-05-29T18:14:08.371871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:16.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaservis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 3399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.12.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"42036ef261134c246cd6bae0de08a7b6","sha1":"1e23ed4d7f95dfa43af1087e96ed5f495792f287","sha256":"2b9e2b34d7c3219707945ec52af51a3bd662fc9fcb5b4a8a468d64a4261cc004","sha512":"e84fee11726ce21e75fc0e3c77eabf12a25313aa6bcf625c450446f34aca38bc67693d8aaf884626d8fa794d1fecfcff22c13bcc179603875268b26a65233fa7","ssdeep":"96:TuzR1RCigWi/REeQnyb3oRtl1qWh8ykIowo5o0ixyixgqYaJ1:41pG/mxRvMWBowo5oZTXnX","tlshash":"08220f1158f088b6409680a46ef1aa1b2f90d717db0b564476ec4be81fc3ec2de97a79","first_seen":"2026-05-29T18:14:08.329949Z","last_seen":"2026-05-29T18:17:03.941464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/merchants/megaservis/custom/footer.html","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/merchants/megaservis/custom/footer.html HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nLast-Modified: Mon, 20 Feb 2023 09:24:18 GMT\r\nConnection: keep-alive\r\nETag: \"63f33c42-0\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/jquery-1.12.1.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/js/jquery-1.12.1.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4c-47d37\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 134050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":294199,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"62f69d29b6f01c8d477a547cedd922f2","sha1":"73d15ef036af1980629bcde3f32cc5869654ad4c","sha256":"56e843a66b2bf7188ac2f4c81df61608843ce144bd5aa66c2df4783fba85e8ef","sha512":"32f27590828812ffc810a151aea003aee4408ad4f2caaae1425074763edbd00d986091e59ecba6d51ca77d6ca7501dc3b78a81cffb009bce6795056c12f7ebda","ssdeep":"6144:k1Lfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOhPns8kVLkIVfz5AKW+1hC:kgw4mDiTFyi6TVfVAKlfC","tlshash":"b054a4d8f78d112e4232316aed2f52cdbb7cd1b1561054aebd8d497c24a083d42baf7a","first_seen":"2023-03-08T14:22:12Z","last_seen":"2026-06-06T04:17:21.287385Z","times_seen":196,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":70,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/css/bootstrap-responsive.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/css/bootstrap-responsive.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 17:18:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a717f4-76ea\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30442,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b11d1b4739533561be2c40c512920abb","sha1":"2a7cd63e1b13ec624b220a80c9ac9a1d21f6c641","sha256":"24e2211e7402a25afbdf9666391bb74f64e4d0ccaf35e05687c0ca974cde2b9f","sha512":"8301cdab88b0d5948e8be93a21a53b5a5c96d0ae45ea06e469fa2bfc72ec39e564db04bb7c0acf6c658c1b34de3b58a75cedc91f65d7d47c341db10791dbec3b","ssdeep":"384:LCXRabQ6IuziuJejmTNiLj0Q6ou5ToIsZGMom7sx+xoh2Ak:iPjjjcToIsZvom7sxyoI","tlshash":"75d203eb89c2101cd7229b666fed4e192d5d68a3df7b72e151dc8188c387a0d2939fc1","first_seen":"2026-05-29T18:14:08.372696Z","last_seen":"2026-05-29T18:17:04.000885Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.utils.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.utils.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-5ce8\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 9709\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23784,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1cd03e1c6fec4e76555f86505d2011ef","sha1":"910c380fd148d88edcc7f837795a5eca99c7d55b","sha256":"9228482d0d7a78164ddb0f4fe116f1c3ab25c529465faf443dbf8887fd7cf43c","sha512":"34e15d41f4a02d3ba37b746e32b8bc5e360fcfd285348a73d0ab3829ef2e6691fc3847eee11d57f6a27c39f0c3d6ed7a904c74f03d1aec09cae76e618ef68166","ssdeep":"384:OPaFicra9rZ1iAXCCdoiw719PpvxhgIs0Xl9Q5kgufRno1AdDrrN:OPaOwzrgts3Q5kgufRno1AdB","tlshash":"a6b254f46de708971502b12f564e7804b476007fbe19ba517c8e2b782fde63c86b1ab4","first_seen":"2026-05-29T18:14:08.34452Z","last_seen":"2026-05-29T18:17:03.891556Z","times_seen":2,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.input.js?v=20200219","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/jquery.payment.input.js?v=20200219 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-23c8\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 3529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9160,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"57780dbf88bf3b53b4636baf2bb5816f","sha1":"fe3359194997d2c11e336cfad974285289912685","sha256":"04a5dc1289057f5318835b65d6426c278929ec33fd328da0385afc458782f616","sha512":"afa26b5b1e401342029b957ee47d4396ec994d6c5547147a816e1470d982ca2fc801cc988befeb518a82aaff9f628b725eef687c7e17fdefb20b0bffd5b3f0f5","ssdeep":"192:+/hg0S6hvHVG47rGw7NdreZZrET54gaSHC7aO+HhT+Hf1awXssa5pMwaT/oQQDO2:UiI/LOZZrwc0p","tlshash":"86122e58bdf700564a67723d4bef52043a7540a3180bee25bc2c2b95bf92d2842f2fe5","first_seen":"2026-05-29T18:14:08.321297Z","last_seen":"2026-05-29T18:17:03.89756Z","times_seen":2,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":287,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA6VZkWJ9-dHC3qR3jYzpm72zYpllzffAxTSUI2nyxKfWYUbgaxe3yxbOz6v11am7hjpnfJSHeZaNd-qIULPbrqpdZavRA","date":"2026-05-29T18:13:18.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 388300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 17:57:17 GMT\r\nexpires: Sat, 29 May 2027 17:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 961\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":900499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (684)","md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/merchants/megaservis/custom/logo.png?timeNow=1780078397761","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/merchants/megaservis/custom/logo.png?timeNow=1780078397761 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 20 Feb 2023 09:24:18 GMT\r\nConnection: keep-alive\r\nETag: W/\"63f33c42-3ba\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\ncontent-length: 593\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit colormap, interlaced","md5":"12a0b8389607b37211fb4278262258a7","sha1":"8967cd210f11b8a5952e844cd3e0d60792ee5c0a","sha256":"2511073165b2e0007d961c2d592053e00415514e1112347274e537e66bdc4883","sha512":"a601b9a5ada058c069820d300ad9b0646e1caa226367fafc008f708658854d7fbed965ff775d3b44217b02466e5d9b04ec582b43d660f8d1e8ae98d8bcb6bca6","ssdeep":"","tlshash":"f311106af6001c61e608d5d214f35423a92b4980ead4f6b168cfcb0a0d702f9c58b5db","first_seen":"2025-10-15T08:56:19.450223Z","last_seen":"2026-05-29T18:17:03.905868Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/2019/07/kkt-54.png","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/kkt-54.png HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 15499\r\nlast-modified: Fri, 13 Sep 2019 11:06:37 GMT\r\netag: \"5d7b783d-3c8b\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 165, 8-bit colormap, non-interlaced","md5":"a99184c0239b4ee3883270d6c6c7d0a9","sha1":"3d1820441915c03b0aed68b8084af5d6d5bef62e","sha256":"962f590295d2500065e432224bc780882f8831919daddb2dc1dfd2f597d45856","sha512":"b34910545a9f038b54662f4c424375c495f5d2fafc039709a612d8706a4349fa0deba921a1b78f7654142e5aee56cf64fbe98ead9f2bc3c1506823729ca98e01","ssdeep":"384:SsJ2CrmMRLStS6vqn93Fz0H4VaMcbBVJRtuM/AC9jxFlYsd:HJ1mA+TE1AH4VFcbBVNuoAwxzY0","tlshash":"8b62c0d4dae0c7062bf58bd0d942ce66b31d47a2685879e6ea390b03f6a07c57024ef4","first_seen":"2026-05-29T18:14:08.373661Z","last_seen":"2026-05-29T18:17:03.937146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/waypoints.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/js/waypoints.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Dec 2019 10:25:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5de789a5-1f7a\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8058,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (7808), with CRLF, CR line terminators","md5":"836d0126dd6fe5125a48d87dd4eda12e","sha1":"81e8d2da7748245d174569b4180e299000810a09","sha256":"54c7e25da334be758c942a477fd475223d4e24cbfd29a8430db2baba35b91a9e","sha512":"1d9daf3d7989a52c6121a3b555acd44f6dae13cd3da5db31389202dcf275d0876ae62eb8d90673b31e81cfc9e3a659bbdbcfe21785e67fd411939aed84b29e70","ssdeep":"96:5BzBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:5B3G3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"b0f1eac9b4c7b4221befa0b5d43f160bb33a9d4571098064f194e4da3db4a2da567f38","first_seen":"2023-09-20T18:24:27Z","last_seen":"2026-05-29T18:17:04.015596Z","times_seen":8,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/easy-responsive-tabs/assets/css/res_tab_icon.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/easy-responsive-tabs/assets/css/res_tab_icon.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2019 12:38:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515dac-d9\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cce383ec3cc7c7980a451a6149e51a49","sha1":"7a6cf8bf1c68ac2f5813f5b6103ebc035f821077","sha256":"1141771786d73c928c58b34f60da8dd0a4af77d8d110c1185b05250c76e789b3","sha512":"57dd4aaa7d8994dc1e4b74fe396554fc91d830a46d1af2c52fe2fa67b0b51fe028086d491c91d1a9c73e79a233bffc3918b06682814044b845085c9a1db70267","ssdeep":"","tlshash":"ced0a751c3a329dfb807407a1bb12345022a41035106ce1c779a74b5af150c060227a2","first_seen":"2023-04-19T04:39:17Z","last_seen":"2026-06-04T19:11:06.745825Z","times_seen":96,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/shortlink/AOn9gwbh","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:16.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /shortlink/AOn9gwbh HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaservis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:16 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nContent-Language: en-US\r\nLocation: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: cookiesession1=678B28F3E376EC1B6D4EB8A6DAACC840;Expires=Sat, 29 May 2027 18:13:16 GMT;Path=/;HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":133,"dns":1,"connect":38,"send":0,"wait":73,"receive":1,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/local_storage_wrapper.js?v=20200327","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/local_storage_wrapper.js?v=20200327 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-914\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 916\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2324,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"b1278c5d07ec36a3634a17681bdcb8a3","sha1":"9b89205b29dd24e50d7ce0c634e71b4dab866736","sha256":"b6d3062d765276bc9436c09509707d08b9c69890de11e88c0d32271283ff7e6a","sha512":"189ac41f8db44d5cd76438901052aa2def58640a1085989d19c1965f8baa7443857e48939c4bf44b14cddeb7ddf14d14a992d96c0e2d6271ee0d87b5bbaf8bef","ssdeep":"","tlshash":"1d41bf485cf325d440eb70ad276f4074b63b94537a1cdb95b98c6a013facd2882a5bf8","first_seen":"2026-05-29T18:14:08.34919Z","last_seen":"2026-05-29T18:17:04.01907Z","times_seen":2,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":159,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/2019/07/radar-dish-63013_1280-250x165.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/radar-dish-63013_1280-250x165.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9399\r\nlast-modified: Fri, 13 Sep 2019 11:06:32 GMT\r\netag: \"5d7b7838-24b7\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9399,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 250x165, components 3","md5":"14cecb4abe9469ad145433889d9075ad","sha1":"2f0dca1b891ad5ce17230e977af42324b340ee5d","sha256":"9fff4d2a2a2b8c2ea548584241fbf531fda45ec5eeabaa0fb88b30a05f13d0ca","sha512":"204738de43904ad46d32fabd1598e52128f88ae83c69d32b68c38155cd7749d52f30b23685574cef718ab49845c8d36a6d8bfe6fdcea0f09660e1bea9f1ad6cb","ssdeep":"192:4s9EyxIYYGqHhivD5odXUBe8TP30a7LLBDlxz4azau0/rkc+X:4sfaYYRMDedksANVbMajj","tlshash":"f112af5a424205f2bf224170a6808dc7c4ebeeb6b0cd675375e9815c44bbfdd9a41c7c","first_seen":"2026-05-29T18:14:08.375681Z","last_seen":"2026-05-29T18:17:04.062635Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/2024/08/grunsport.png","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/grunsport.png HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 119081\r\nlast-modified: Wed, 28 Aug 2024 05:18:02 GMT\r\netag: \"66ceb30a-1d129\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119081,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1047 x 914, 8-bit colormap, non-interlaced","md5":"b22bb9ed1bda87395f014d2ed0851d59","sha1":"a5eea2fb7f2bc9ef0a629afcd9130604128c8bd8","sha256":"0675845e2056442b46656b17d8b38e72e9d55a2b81d1cee21eb7ed2ec69c89e1","sha512":"706d77c6c7d86a15eb2eef1ca9cc9385a191f673f022fc3dcfb8e021f7b2037f8395eaffd32b9e895134dd46f66fc22543f62206aec99a9482f4b03398deb771","ssdeep":"3072:Yl8D4J9ZzPVi9XeidOmO/EDf+pELeZAJe:jMJ3z9iFe/tArA8e","tlshash":"b6c312b876ce8874d2e336375225c79c8d2bbbf59a7026fd1d13541a2eab4281343f85","first_seen":"2026-05-29T18:14:08.376686Z","last_seen":"2026-05-29T18:17:04.039271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=8j78faht51yj","date":"2026-05-29T18:13:16.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 388300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 17:57:17 GMT\r\nexpires: Sat, 29 May 2027 17:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 959\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":900499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (684)","md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/dist/hooks.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Mar 2026 08:51:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f278-161d\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-06-07T18:24:13.069347Z","times_seen":193162,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/easy-responsive-tabs/assets/js/bootstrap-dropdown.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/easy-responsive-tabs/assets/js/bootstrap-dropdown.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Mon, 12 Aug 2019 12:38:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515dae-13df\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5087,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"19f52038ca355ba4f960268d0d6631ee","sha1":"938efdae4354f58a8709855fad4a287750158602","sha256":"25126d6417df361a1fd84dfd1f9f7a1b3a22de24076744391094c7f61dee044f","sha512":"f46708e079a6a427e04dd5558e6a7fa4f1d8c1d638ef249256da351089272c308fce008576616d488373f69ffe7989afb6abdd9ba6126bd65e3f0f1b3997c05e","ssdeep":"96:y4S/XHFCBOTegblOZgbyQmp8iIdM6UxbyRHh:yfXHUWNLyQyq9eoB","tlshash":"6fa1ed55f4e630761a5f39b91e9b8049ba6f481b4106c220786c93c87fd473887aaffc","first_seen":"2023-03-07T12:11:14Z","last_seen":"2026-05-29T18:17:03.900435Z","times_seen":84,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=2b605kektb65","date":"2026-05-29T18:13:16.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42542\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 25 May 2026 19:59:23 GMT\r\nexpires: Tue, 25 May 2027 19:59:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 339233\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bd80a84e0df8f52ee85cca1108cb4ed9","sha1":"367bf472f729c83febd67da9e47cd1f791495fc1","sha256":"2be4e8d1c17075e750149c6b3334cc76b190e1e6e10a95db910cdf444a9c91b3","sha512":"00e3cd881c07fda21032fd80708de378110589cf702ac03cea75d257b127f3e122f194a0cd6db6d03415fec3c3f27094a840703b2cc77f6f673dd5fbe8d7e300","ssdeep":"1536:D7Rpgh9C9ToL9gTNfWNfK4RxrD9ZzhXwWxd1bx7:D7ArC9ULiTYNC4RJ9Xt","tlshash":"8f837e7338513a1afc2b8b616196b9fdf11cc923e5515bfaa5497a20c3cb0a78223747","first_seen":"2026-05-25T19:10:06.905054Z","last_seen":"2026-06-07T12:40:45.778713Z","times_seen":10794,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gu-st.ru/portal-st/lib-assets/fonts/Lato-Bold.woff2","fqdn":"gu-st.ru","domain":"gu-st.ru","tld":"ru"},"ip":{"addr":"46.235.185.9","port":443,"asn":34879,"as":"OOO Sovremennye setevye tekhnologii","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gosuslugi.ru/crt","date":"2026-05-29T18:13:15.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gu-st.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 07 May 2025 11:42:01 GMT","end":"Mon, 08 Jun 2026 10:09:08 GMT"},"fingerprint":{"sha1":"24:AB:74:E2:D7:3D:AB:D6:77:8B:23:F5:46:57:98:D9:24:BA:AB:0A","sha256":"8F:6F:96:11:E6:AE:D6:5F:BC:A2:4E:C5:46:16:C9:18:DC:26:37:AE:A0:C0:03:FD:ED:0D:E8:B5:49:AC:DD:D3"}}},"request":{"raw":"GET /portal-st/lib-assets/fonts/Lato-Bold.woff2 HTTP/1.1\r\nHost: gu-st.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gosuslugi.ru/\r\nOrigin: https://www.gosuslugi.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 May 2026 18:13:15 GMT\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 25 May 2026 19:19:31 GMT\r\nexpires: Fri, 29 May 2026 19:15:39 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Origin, Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Mx-ReqToken, X-Requested-With, X-TimeZone-Offset, X-Origin, Accept, Authorization, srcUrl, DNT, X-Mx-ReqToken, Keep-Alive, User-Agent, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, X-Cache-Date, X-Atmosphere-tracking-id, X-B3-Spanid, X-Atmosphere-Framework, X-TimeZone-Offset, X-Atmosphere-Transport, test-scope, schema, x-order-id, x-form-id, X-B3-TraceId, X-B3-SpanId, X-B3-ParentSpanId, X-B3-Sampled, X-B3-Podname, *\r\naccess-control-expose-headers: X-Cache-Date,Authorization,Accept\r\nstrict-transport-security: max-age=157680000\r\naccess-control-allow-origin: *\r\nx-ngenix-cache: HIT, HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28520,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 28520, version 1.0","md5":"15305df63a1d3199afb774825ef82ff6","sha1":"cc8f3b302abb27841c25e5a753a68f33884ac431","sha256":"d89f199ceae883e8dbc2ad5b3b57e3052cfc3d08774b56de4a03db17db03209f","sha512":"f821a73a85a8f3d3d79fc8f6c5b89b8e6c28471b4368d7559ec9624fe6ca513391bcc8f96ee7dc99440ab99428ea71df0c4f476d009010e5277d0377d5d3263a","ssdeep":"768:ORsqw9vbjksHvfIbLc21uwTh5pJN4koBB8Vm:OTs3hvwbkwTjZ4h4m","tlshash":"d4d2f1cf3e74a5ecd62a4073382d5d155002d2b58eab9ea360de1d56e6f90883c23af0","first_seen":"2023-07-30T13:40:47Z","last_seen":"2026-05-29T18:17:04.002861Z","times_seen":83,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":78,"dns":15,"connect":28,"send":0,"wait":77,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=2b605kektb65","date":"2026-05-29T18:13:17.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 15:06:54 GMT\r\nexpires: Fri, 28 May 2027 15:06:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:53 GMT\r\ncontent-type: font/woff2\r\nage: 97582\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-06-07T08:16:34.820969Z","times_seen":19514,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/js/cbpAnimatedHeader.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/js/cbpAnimatedHeader.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Dec 2019 10:25:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5de789a3-cbe\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3262,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b2330a149413e7d6b542a75f588eadef","sha1":"39aeff9f629add6bc7cdb64056d526dba8d227f7","sha256":"ce9d174b20bf2f2e1994895404d28430a00ac7ce0e849781120f62d66be5ddcf","sha512":"68b71997edd388a0eb790eb557af276dc9b4d7c00107f48296c21647ce6ba8f5b60dc919fd634aad98b4f7ea7c66963d9eeb0eb5a1868dcd32e3f26e941472e3","ssdeep":"","tlshash":"4c61cecc300764bb4bf36399ad3b6c1cf768d063e509116574fa874a2a344a951e5fec","first_seen":"2026-05-29T18:14:08.381885Z","last_seen":"2026-05-29T18:17:04.035939Z","times_seen":2,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.utils.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.utils.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-5ce8\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 9709\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23784,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1cd03e1c6fec4e76555f86505d2011ef","sha1":"910c380fd148d88edcc7f837795a5eca99c7d55b","sha256":"9228482d0d7a78164ddb0f4fe116f1c3ab25c529465faf443dbf8887fd7cf43c","sha512":"34e15d41f4a02d3ba37b746e32b8bc5e360fcfd285348a73d0ab3829ef2e6691fc3847eee11d57f6a27c39f0c3d6ed7a904c74f03d1aec09cae76e618ef68166","ssdeep":"384:OPaFicra9rZ1iAXCCdoiw719PpvxhgIs0Xl9Q5kgufRno1AdDrrN:OPaOwzrgts3Q5kgufRno1AdB","tlshash":"a6b254f46de708971502b12f564e7804b476007fbe19ba517c8e2b782fde63c86b1ab4","first_seen":"2026-05-29T18:14:08.34452Z","last_seen":"2026-05-29T18:17:03.891556Z","times_seen":2,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA5wdt4sZI8izRwpCW76icUr8Z2TbZ7iIzw27xSdQ5tpEgT-0IKbD1JhKwbj-A48Qr_Z733nZ2_9N3esjPw_F7c5eJBwyw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:18.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA5wdt4sZI8izRwpCW76icUr8Z2TbZ7iIzw27xSdQ5tpEgT-0IKbD1JhKwbj-A48Qr_Z733nZ2_9N3esjPw_F7c5eJBwyw HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 May 2026 18:13:18 GMT\r\ncontent-security-policy: script-src 'nonce-2sF29dsgnXZiwe1CCmlemQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"450a3b1d52e0a0be909e2204899cbd50","sha1":"be8770e9bd1c364232e9037db230779af48f15fc","sha256":"d5e2b3bf50cfbeb41e36c1b182556e755232f38c51d8d168edb72a0740dd8a08","sha512":"6907b771c0fde20e01075728f0c7f1acb0daff4082a6c2f62886feb8752ded7d7c7fad6fbe25f125590bddc50d2b2034bec768cd112326af14b29bc436b1525c","ssdeep":"384:6jfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/1:6FkD/OE/hkc3+bsIO7/KbzbK3YcOX/+E","tlshash":"57721f50041744009b835ce223ce7f34fe4e92517242d0b1abfd9b6beedbda6926939d","first_seen":"2026-05-29T18:14:08.382739Z","last_seen":"2026-05-29T18:14:08.382739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/css/prettyPhoto.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/css/prettyPhoto.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2019 12:45:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515f62-4f83\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (402), with CRLF line terminators","md5":"4724c37f47ce6739092520315ae9feb2","sha1":"f8d871f52576097f120c708829e9f3e1fae6da8a","sha256":"97b486dac9ec98b60238f842691397d3ecf9a78956d0d0c642f5d6c48d8705ca","sha512":"db4688390436e8d161f30323a39b58e6e18d7b5cac601e566451bd2d4514aff9d82c9fca619daadb2c1a943a045b9602b453cc32ff511c9b3a783f26317677f3","ssdeep":"192:lLphLHyoLTzsHzP55jf+5O3FbeYCTbSaJq+KauSORcO:JHyoLTziLDGo1bCTbSUq+KauSOR5","tlshash":"f692233995da6ccfe14f82359697e7449e0e841ed7027f7c62bcc0be30ca2a4553a2c6","first_seen":"2026-01-08T07:04:23.124245Z","last_seen":"2026-05-29T18:17:04.107512Z","times_seen":4,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/SketchBoard/functions/shortcodes/js/jquery.tipTip.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/SketchBoard/functions/shortcodes/js/jquery.tipTip.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Mon, 12 Aug 2019 12:46:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515fa0-112d\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4397,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (540), with CRLF, CR line terminators","md5":"5eed60723d4bf9f4623a8f47c2351add","sha1":"1b6d9ad16fd0535907bca92f1d06dde704dc6927","sha256":"8d0b1c707f61886d3be8e1b39a10dfb7e2fe675909cae213dd3b08cc07e1c800","sha512":"3a24ac05d3f39d88b25ccd4d3246d36e7d47dd53937712c0b60020ffde47a9caf5e952163b146d00f059d50320e1f5f491496de85d9d6f9abd9041b7a2d932a6","ssdeep":"96:nQVOkSE4l8xMPfD+z5IKxKs74/Y0dAM4F:rkSE4l8xMC6KxKs7v01A","tlshash":"e9912e2f3058f2be23e37ce3821f41197429eeffc502b513316096681466edb44979ad","first_seen":"2026-05-29T18:14:08.384226Z","last_seen":"2026-05-29T18:17:03.914128Z","times_seen":2,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/easy-responsive-tabs/assets/js/bootstrap-tab.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/easy-responsive-tabs/assets/js/bootstrap-tab.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Mon, 12 Aug 2019 12:38:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515daf-daa\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3498,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"42765889d9b0986088c5a3a3c5a53397","sha1":"a5742efb2db546c0b5c9481184f5ed22f3c899e5","sha256":"1bcb6be625a29a75c24077d062ab43668fb2e32eb31a2256848119df05f0afb1","sha512":"a3e3c2e5dd243a0d61f182fe0a07df283027b8f25636486faedb2eb8107054f77b493d1d56531a248763fea116d29a39565c1a766d359623abe8a960641ef0ca","ssdeep":"","tlshash":"8271762937d434b00753a4bf58cf5589bb2ae09b210b0a543c8d51945f203b863f6ffa","first_seen":"2023-03-07T12:11:14Z","last_seen":"2026-05-29T18:17:03.916454Z","times_seen":86,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=8j78faht51yj","date":"2026-05-29T18:13:17.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=8j78faht51yj\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Fri, 29 May 2026 18:13:17 GMT\r\ndate: Fri, 29 May 2026 18:13:17 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ff4213aeb4cda8b5250563ccd10c39b0","sha1":"c4cfc89c6595b02bc68eebcbe1e6317c57527ff5","sha256":"5be0c0e7f8125bfefe1b91f994b7875e6575714a5df85f69ee34c051a1ebf7bd","sha512":"b155810f0f0b9266311946358c3c6b62f3b36c137a970ac9ae385ffe5b590ccab3f4bc6a5890355e86c497024c0c62b5f5d8a5ef1dcb9fe5631d9d20ddb6ae71","ssdeep":"","tlshash":"3db0126f1ba0d01c1c100042c92be7f8e016d028e75080e445748fb415135f34515450","first_seen":"2026-05-28T05:22:58.148745Z","last_seen":"2026-06-05T07:12:05.490992Z","times_seen":38,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.utils.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.utils.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-5ce8\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 9709\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23784,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1cd03e1c6fec4e76555f86505d2011ef","sha1":"910c380fd148d88edcc7f837795a5eca99c7d55b","sha256":"9228482d0d7a78164ddb0f4fe116f1c3ab25c529465faf443dbf8887fd7cf43c","sha512":"34e15d41f4a02d3ba37b746e32b8bc5e360fcfd285348a73d0ab3829ef2e6691fc3847eee11d57f6a27c39f0c3d6ed7a904c74f03d1aec09cae76e618ef68166","ssdeep":"384:OPaFicra9rZ1iAXCCdoiw719PpvxhgIs0Xl9Q5kgufRno1AdDrrN:OPaOwzrgts3Q5kgufRno1AdB","tlshash":"a6b254f46de708971502b12f564e7804b476007fbe19ba517c8e2b782fde63c86b1ab4","first_seen":"2026-05-29T18:14:08.34452Z","last_seen":"2026-05-29T18:17:03.891556Z","times_seen":2,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":184,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/modules/bank-info/get-bank-info.js","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/modules/bank-info/get-bank-info.js HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-3b05f\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 53342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241759,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b342292255b5206e7ae2269342d63993","sha1":"7fe56ff2aa9cce9dea2375f0b567fa0108f77b14","sha256":"513717c5ec45ef530f2a6ceacb7d86acbe09d149128e7dc7ee58f90c8a8fa004","sha512":"b9f2182e872d581634c56de7170208cd39ffd492671bb10e785b0e5d5d6e37ac920d3be007676b39ee169693b3ef3eb1d6b0e64c42fca6068b20a9eac680df22","ssdeep":"1536:vnJ9n7H20MEmzgNRC3UsQYgky1BH8SUly0GHiIjJ2yArNUVsU9wjFxPZGvpi+2hs:3aFHE","tlshash":"2a34c835e5140d77a42985c850e23a67ea441503be49f40af35c2b8c1f6e35f9cbaeee","first_seen":"2026-05-29T18:14:08.312636Z","last_seen":"2026-05-29T18:17:03.993999Z","times_seen":2,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":222,"dns":0,"connect":0,"send":0,"wait":90,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/page-list/css/page-list.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/page-list/css/page-list.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Mar 2026 19:30:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b708d6-65d\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1629,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2b161b36c5ec8457c1e02719dfbc3cf5","sha1":"65fe4b937daca03e5d24a37a5b09f35216de2f36","sha256":"62a88fe954d3dd0835bec2b587835f31de3ca941e6f38e57f545e94a87bf7ae9","sha512":"9c823f1f3af7760f57ba778c4809734c65eed3c99912cfb94ff0f709a85206975aaf54e842ad9c06c1403ba5bf062ca05f0da4bc1206f2382fa97658dcfe098b","ssdeep":"","tlshash":"34312c3e4f8d110b9ed10b17b2ba6e20075ce01fd921d6d47cc9de4ba5499fb28b2e49","first_seen":"2023-04-14T05:00:29Z","last_seen":"2026-05-29T18:17:03.946104Z","times_seen":119,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato%3A400%2C700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css?family=Lato%3A400%2C700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 May 2026 18:13:14 GMT\r\ndate: Fri, 29 May 2026 18:13:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1556,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fb11803945991f23c6f306b6943b1012","sha1":"fed43f9f939246591860130c7cbfb84ce282614e","sha256":"3f7a1dddeb3c904b5573a2f03f3dbeb9ed69bb8cd30e4917f9f1e422ee51e0bc","sha512":"249034099f738fe88da46e5ee62dc04c4a1f368c26986abcaee477b53aeaa52e6b46573eae2b9b17ca5430a6b5c85573a27af7ff72eba2430e373ab7ab98f0ef","ssdeep":"","tlshash":"9431bd91096fb508db830cc212c97d32ef0f625064499831aeff14d8bca7c699362b0d","first_seen":"2025-09-17T01:18:38.016711Z","last_seen":"2026-06-07T07:23:58.321593Z","times_seen":4857,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":287,"dns":1,"connect":28,"send":0,"wait":30,"receive":0,"ssl":341},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ninja-forms/assets/js/min/front-end.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ninja-forms/assets/js/min/front-end.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 28 Apr 2026 18:34:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0fda8-1c506\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115974,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4948e2854697ab5d75e5395c2f54520b","sha1":"e59012b492ab4b899581693aeb921cbcb5b17fe6","sha256":"8b9c2e16f6e88b83b23454a92b6804b7b6fd901267a956f3ac6f67cf5b0c57da","sha512":"3ca8547587604f2e1e2eb6408350bdfb7b72c508b111df3958a5a46768200635337c3db61009b60f71cef1924e6177b815dcde2eec6b55a483968b0974ac669d","ssdeep":"1536:9gO3b7auQohf+3qgnBjEqMMZENVujuwZwtwn67cpOlNOOfNh5WfY7ti5JOIKoWGy:+7jQYfbST8zGC1o","tlshash":"d0b309dab15529e30ff720a0a0ab52267335aa54dc084554ff2495d7ae7ce83e623f3c","first_seen":"2026-03-24T03:45:16.223299Z","last_seen":"2026-06-07T03:08:48.132546Z","times_seen":249,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/doc/MCHS-2.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/doc/MCHS-2.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 218478\r\nlast-modified: Mon, 12 Aug 2019 12:37:01 GMT\r\netag: \"5d515d6d-3556e\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":218478,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, baseline, precision 8, 800x1100, components 3","md5":"c60460c41616acb37cd6f4872b53ac05","sha1":"5b254b7ecb5b7e008b122e8c0c3c3eae32e5c75d","sha256":"589495cc45c05f8042a8631833565e9e4a850c62e0087c7179c56e517b163d3a","sha512":"99fbf427a9879d5343960a6ecc9e10d598e73c524cb25276f80ce85253ac4335c64e0e2b7071ed4aa5f73b60ee0daa5b97a974952c900cfb27932343ae340415","ssdeep":"6144:lAE67Lq1JFEsi1xs//DhOekdzacwmersCffVwZSB0f5dei:D67Lq1JFEs8s/bh9kcxfVcu0f57","tlshash":"3924238026700e58466ed9b045b6cebc58f8592872676ff8dfc1dd49df72eab00299cc","first_seen":"2026-05-29T18:14:08.387489Z","last_seen":"2026-05-29T18:17:04.025425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gosuslugi.ru/crt","fqdn":"www.gosuslugi.ru","domain":"gosuslugi.ru","tld":"ru"},"ip":{"addr":"213.59.254.7","port":443,"asn":12389,"as":"Rostelecom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gosuslugi.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 11 Nov 2025 11:42:01 GMT","end":"Sat, 12 Dec 2026 14:20:04 GMT"},"fingerprint":{"sha1":"A3:D3:5E:A6:90:5D:F0:DE:DD:79:A8:66:CC:9B:BC:E6:3B:B1:A1:19","sha256":"0E:05:92:F5:EF:99:07:CA:8F:D8:90:11:FB:0A:98:EC:79:FF:C5:DF:BB:0D:B0:93:18:C3:82:FF:44:C4:87:05"}}},"request":{"raw":"GET /crt HTTP/1.1\r\nHost: www.gosuslugi.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx\r\ndate: Fri, 29 May 2026 18:13:14 GMT\r\ncontent-type: text/html\r\ncontent-length: 9376\r\nkeep-alive: timeout=10\r\nlast-modified: Tue, 11 Mar 2025 14:45:45 GMT\r\netag: \"67d04c99-24a0\"\r\nexpires: Fri, 29 May 2026 18:13:13 GMT\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nStrict-Transport-Security: max-age=16070400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9376,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2099)","md5":"0d849f724dfcbd86391afe0b812f6a6d","sha1":"8400f557018171b31ddbb00f1b596b4e3f052cf8","sha256":"1d8fd9af92029911fb4023153434cb51bd2da78a69d8c0435cadd376a36735e6","sha512":"e1c376da65f123485eacd3bd7f23de7fa7a0098a30881301511dbb6c9d86ad8d9099871b6c14b813b30b884dc32cfe0e3f3871b5bd2d961330757125c004ef38","ssdeep":"192:yoHTVGkxS2zA+1AU057rd8k+nwvgNHHFc3Y:vwu657rdp+fFc3Y","tlshash":"9812d9f711f862a87186c3f0d8247419f90b28bbb7110954f26dac9e5fe1884c6c7e5d","first_seen":"2025-04-08T10:13:15.270716Z","last_seen":"2026-05-29T18:17:03.999568Z","times_seen":93,"resource_available":true,"data":null}},"time_used":628,"timings":{"blocked":215,"dns":41,"connect":26,"send":0,"wait":193,"receive":1,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.validation.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.validation.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-4b2\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 657\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"c906f4b4f8118bf368bcaaeecd4ee9fe","sha1":"293b9165ea0f157c459b79951ecf5622d5a6fb8f","sha256":"34a25e04b6fd19ddefe62c356c3e371c7633d7c405e1a701d31e1c8f48489860","sha512":"988f3effaebab0f42d4271e1f43ba2732f04b5ebcc9f047b2f46cadfe0512b37f34f3a48327db3ac310982dec7e0ebb29d8a7912095baaa6a6e10a87f33fbfc1","ssdeep":"","tlshash":"1021468e7de325444bafb26d47af804973794417244cdd05f87cb2412fa1ea861faacd","first_seen":"2026-05-29T18:14:08.31859Z","last_seen":"2026-05-29T18:17:04.016429Z","times_seen":2,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/doc/FBU.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/doc/FBU.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 125063\r\nlast-modified: Mon, 12 Aug 2019 12:36:55 GMT\r\netag: \"5d515d67-1e887\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125063,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, baseline, precision 8, 800x1100, components 3","md5":"485dcc1386b8c095c31f45a913be352a","sha1":"d29849b4d51b41a0288ee4742e2827781eda0197","sha256":"b126d767bd38bddb07019cc68be82e8c970c0b7f25868d7612855a9fc2e44e11","sha512":"3dca236e529104b0b3b3d5d56c67aeddb116ce3de1848d2aa62b5b157cdca4d1f1a493a6d9b4a4a42e00c38f7fee562f70a5116d9c62c73501cfb69ad7046412","ssdeep":"1536:ViBqgvvb4OYH7YnCGK0A2t8Q3lYw1nyE2W3VGvzlFMB5rjuFJRX4E10l/eRrzH1A:36vb4OYbgAg372W3l5w4q0MVPIgwf","tlshash":"fdc31237872bec17ea5d1a4c564b0a961c3c08167d3519cb9c82ebb56769ee8c27c3cc","first_seen":"2026-05-29T18:14:08.38891Z","last_seen":"2026-05-29T18:17:04.040869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/easy-responsive-tabs/assets/js/bootstrap-tabdrop.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/easy-responsive-tabs/assets/js/bootstrap-tabdrop.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Mon, 12 Aug 2019 12:38:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d515daf-c43\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3139,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"3d1c4ad866296e401c1104cd44f50620","sha1":"6740432ce1ddfd36af8f28d5854f7148363142d4","sha256":"30e5f643379c9ecd6c5986891069f2365c11936502d4f91873129f81c3482763","sha512":"93527f8ea00ea959188790c00e34558f19aa933b633829ca9b06a39ce56dbdb683ece41b12603609d8bcd421ed62077592a5514f14a73dc09b8971f9d5f00e27","ssdeep":"","tlshash":"885131edf3fe60634ab230ad7c1f20c8557f51729406846fbc2551f81db4b29a15ae38","first_seen":"2023-03-07T12:11:14Z","last_seen":"2026-06-04T19:11:06.76881Z","times_seen":90,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/js/bootstrap.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/js/bootstrap.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4c-10d5a\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 22676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68954,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"ed69cf59ee487638489ff8742a469e43","sha1":"8cf4186ce86777b4b408ce308ca9f66dd421f509","sha256":"defc39740ac1859d8e2785ed473208409627e87addd5f78f2deaacb93a12d51d","sha512":"cf1c9af1a6ae1477c31bcfd2bc5e19a2382f71d2a8ed879d99aa62e5a1e1fc8cdbc52d762e99411ab58b9f51ae266108241b826cba0082b84b5854dccd49ea63","ssdeep":"768:YctqAC7ZRl92TibveNCf0SIVXx4oBkRmJnrsBdw9W5+A:uZXizXx4GsbYWoA","tlshash":"6c634f167bb820618b5b30ba8cdf514c7238951b554bd4283cad97d06f50b38a2abffd","first_seen":"2023-03-07T01:17:24Z","last_seen":"2026-06-07T16:26:05.64918Z","times_seen":997,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ninja-forms/assets/js/min/front-end-deps.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ninja-forms/assets/js/min/front-end-deps.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 28 Apr 2026 18:34:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0fda8-1041e\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66590,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32153)","md5":"800f9018920b9caf506b4e3d1618b062","sha1":"d72cfd3ef5cdacc7cb375f373f79a6d7ebc18180","sha256":"1bc4057f60d9210be767a211286f2daf025038069b947793973792b8a39906e2","sha512":"c36383ed6c624e529c47a196cf444dad9b1dbedf4ebcd66be88dd4c461302af97fc845a6939c1dd5d63402b788d03284ef6cbe09ff6e075c3b62b02ba4591982","ssdeep":"1536:0AMnOLmtROGzaOS8SupeAamoxfLBeVyTZUvX1I0VrZyI+M2jFYNR7lmi4Yo4:0AutxzaOS8SuYqP1I0V8zXhS","tlshash":"8b53088cb6c675668aefb074503f220be1370865354a8448faade4eabd7c90d5137f78","first_seen":"2025-08-12T04:13:32.136667Z","last_seen":"2026-06-07T14:38:27.347904Z","times_seen":1779,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ditty-news-ticker/inc/static/js/ditty-news-ticker.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ditty-news-ticker/inc/static/js/ditty-news-ticker.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 24 Jan 2020 04:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e2a6ebe-33bf\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13247,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13247), with no line terminators","md5":"51cd64270e8165b6bf4ef5601368257f","sha1":"ac521a77f05f58ae3a15ee0436913fd2dfef2fa6","sha256":"6fb8cc17983d6f0c0545d7adb4977979e5409423cda63e8f6fe1e42856f9fb2e","sha512":"d0e2d803d84a7f2d29ab23f2395d436606659e420bb15dfcc8cbbc77e596fadb8775c255694943aa3b50f0c887873190a7023a1b9afdc557b97d51c41ae8d86f","ssdeep":"384:pfRlGa+jdsGI2FYnz9g9a8mc4NyG58FVB4M:zehU2F+HE","tlshash":"c95285583701f05499d320fb94afd1196061a451ae0b8850e2bae3757c3ae3d3bdbe6d","first_seen":"2025-10-27T07:56:01.997492Z","last_seen":"2026-05-29T18:17:04.098578Z","times_seen":6,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/2019/07/glaz.png","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:15.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/glaz.png HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 2496\r\nlast-modified: Fri, 13 Sep 2019 11:06:26 GMT\r\netag: \"5d7b7832-9c0\"\r\nexpires: Sun, 28 Jun 2026 18:13:14 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 42, 8-bit colormap, non-interlaced","md5":"2b0bdde560026b853a210f59138da2e4","sha1":"e307bd238268e02372089be5a914f7e4aa83282b","sha256":"313186822844b280adf95a1eec2bb80481d4b63aa862f4137caa92395ad677ed","sha512":"2678a2bc139bd99c862d4506b11edd0c5cb55237b93156f06c9e6da93120d48c5adfeec094268d4d3dc5c26c33c202333fc82473f2d444d06be70d705064500c","ssdeep":"","tlshash":"da515be2176c33c89671c724aefd29b182a0aeead40e377939dfb71198b0a97c115117","first_seen":"2026-05-29T18:14:08.391903Z","last_seen":"2026-05-29T18:17:04.001883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=wl4y3j3q5nsy","date":"2026-05-29T18:13:17.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 15:06:54 GMT\r\nexpires: Fri, 28 May 2027 15:06:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:53 GMT\r\ncontent-type: font/woff2\r\nage: 97583\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-06-07T08:16:34.820969Z","times_seen":19514,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=wl4y3j3q5nsy","date":"2026-05-29T18:13:17.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=wl4y3j3q5nsy\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Fri, 29 May 2026 18:13:17 GMT\r\ndate: Fri, 29 May 2026 18:13:17 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ff4213aeb4cda8b5250563ccd10c39b0","sha1":"c4cfc89c6595b02bc68eebcbe1e6317c57527ff5","sha256":"5be0c0e7f8125bfefe1b91f994b7875e6575714a5df85f69ee34c051a1ebf7bd","sha512":"b155810f0f0b9266311946358c3c6b62f3b36c137a970ac9ae385ffe5b590ccab3f4bc6a5890355e86c497024c0c62b5f5d8a5ef1dcb9fe5631d9d20ddb6ae71","ssdeep":"","tlshash":"3db0126f1ba0d01c1c100042c92be7f8e016d028e75080e445748fb415135f34515450","first_seen":"2026-05-28T05:22:58.148745Z","last_seen":"2026-06-05T07:12:05.490992Z","times_seen":38,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/SeroPro.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/SeroPro.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: font/woff\r\nContent-Length: 96764\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-179fc\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96764,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 96764, version 0.0","md5":"8c23216e3ba0a73df3171649668b23e7","sha1":"4b7eda5ce830c186230c4f910bd77acbfd2465fb","sha256":"b9f2009499ad4a7c2f3b160f6f0fdd8a6fee484837e78ccbc8e694a8fdf6bc5b","sha512":"e71459b71e748be5d10cf89b2bfd423b55e7306f17184d9236ceaadf61a441820d17f4bb02debf1fb2112c8f7a5346f1233c8ef017e93554f0a9a7ac628f6ff6","ssdeep":"1536:m8z0f+mlYERUxqfw1Vppyv4+LTj44NHxT/yefyglXTwriGaifBQpoEepm5XCBaLV:mc4L+R04B63pFRll8rSiJ2oEepmVCaoy","tlshash":"5093129b94ee5670e488c13f9a7884dd362eca474aa4859c17c4c2c47bfe69dc6f301e","first_seen":"2026-05-29T18:14:08.354426Z","last_seen":"2026-05-29T18:17:03.921135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ninja-forms/assets/css/font-awesome.min.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ninja-forms/assets/css/font-awesome.min.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 18:34:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f0fda8-6b4a\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27466,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27303)","md5":"4fbd15cb6047af93373f4f895639c8bf","sha1":"12d6861075de8e293265ff6ff03b1f3adcb44c76","sha256":"ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5","sha512":"f8be32cba15170319b5c9f663c6f0c4ffdd4083cf047d80f7b214d302b489eca25fbee66ddb9366d758a7598efc9b9a886b02c9f751ae71f207cb9db1356243a","ssdeep":"384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T","tlshash":"3bc230f8e54c01d66731c48bff81b36862b6f73dd5814d99f01f690c29d22a522c5bba","first_seen":"2023-04-05T07:46:17Z","last_seen":"2026-06-07T18:34:36.65884Z","times_seen":39542,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/localization.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/localization.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-2896\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 4282\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7fbc88954025ff448567cfbbc66835b4","sha1":"7e9d5351b19c9792fc847e80ef13eb44c56c9f8e","sha256":"e205dfe1008d498942e9fed6a9f47db31aad166335618334ce97af6ebcb65650","sha512":"f06e7b6ace710db1c80e1692a8262f2de57cbed0cdca80e1330e9ae0234a962cb39f91790d8200fe413c25714d1ca226fd6f8837af81e684a39c63b5ccbe7334","ssdeep":"192:064yFeClzVVjVIY1bDB+tMGmHWjzT+vq+FW1uRIl8HIdnQQyiQCyiIqyi2Bym:0RyFeGzVVqYB9+tEoP+0uRs8HnQkCsqY","tlshash":"e42222f318a310621146e07a984e9842b47600fb2a5dbe3974a8356c7fcf76c72bf657","first_seen":"2026-05-29T18:14:08.30193Z","last_seen":"2026-05-29T18:17:04.004892Z","times_seen":2,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":251,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ","date":"2026-05-29T18:13:17.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 388300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 17:57:17 GMT\r\nexpires: Sat, 29 May 2027 17:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 960\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":900499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (684)","md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026bft=0dAFcWeA49V58iaPeRooIKbahFbNzNmpZ0HfQT-fhLKDCByweYHKOE3sDQ0et7yEFYW-LoU96m5dH2GvMEdgl1WRQbZSx5RW_7XQ","date":"2026-05-29T18:13:18.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 388300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 17:57:17 GMT\r\nexpires: Sat, 29 May 2027 17:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 961\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":900499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (684)","md5":"b11141e467c8eef1335e098ff16f6985","sha1":"b614d3d4b6e7a49593b66de74bf9f76720c745a6","sha256":"36fdba5827c2ecbe5b5227a43ce522df24b60ae74ab49a05e3170e8ead5c9590","sha512":"9ac5e4ff1c67e2f8b4ad8399eef9717cc45204fbf83c589f64a88239a9ceeecad3680d204b649c3f10257ef72d24dcbe306e966ac81fd7e62e0ce886979edca4","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDqQc9hBb:LJDQP0LSub5dOTv1aIDqDqQIhBb","tlshash":"05155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","first_seen":"2026-05-28T05:22:58.142324Z","last_seen":"2026-06-05T07:58:35.714229Z","times_seen":59,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/4f99f68f542830a6f64e0966b38eae66.css?generated=1779829961","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/4f99f68f542830a6f64e0966b38eae66.css?generated=1779829961 HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 May 2026 21:12:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a160cc9-471f\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18207,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7556), with CRLF, LF line terminators","md5":"00cfd4ca634e25e1433d6834d53ae800","sha1":"f77bbba91c164c5ac8d2eeb233d504aedb5531ce","sha256":"97162d4464c16313363d0869a8b0e2b510ce46ef780b724720431a911ec5f176","sha512":"c34c7f52de6d2181e0477ab4c77f3bbb2ea257a85aac64f15ba50d0673e7b8758c5e72c9938bf700005193ae0ef96962337668923a4a9d9dfd268de34fdfde3e","ssdeep":"384:kGE75zGmz3BMBcivwcz9/jPZpCpzS6l//vXfRil8nVb2/OLAWTEUK36MN+/I/CZy:K74FklRrusI/hjkDZAC5UaA","tlshash":"978221300a710750b1a7f7787af1ab9d1f23b121c682a2ada6965c59c3cf17be1c275c","first_seen":"2026-05-29T18:14:08.39322Z","last_seen":"2026-05-29T18:17:04.045904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/jquery/jquery.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Mar 2026 08:51:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f279-15601\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-07T18:34:26.220101Z","times_seen":894101,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/2019/07/b0bcc70d4e072b950d9807fd59006a4e-250x165.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/b0bcc70d4e072b950d9807fd59006a4e-250x165.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14481\r\nlast-modified: Fri, 13 Sep 2019 11:06:30 GMT\r\netag: \"5d7b7836-3891\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14481,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 250x165, components 3","md5":"6f09b7bb9164c7d030660a5a31428ada","sha1":"c0d1bdd998e83910bdd1b3631b2d5e4d145ace47","sha256":"1bfa94a1b29cc98783f9708c866ba36744034d8662f4b78e834aa156d92729fe","sha512":"8d9b2e61ab0eb4b27ae02ed93731437104de7e572dc11882cc9eee5e0049906b1fd2977c3c666a6eb93072cec5d012e7559b70e66a92b46bb469474e4178e5f1","ssdeep":"384:4V7EN3QBZ0VWKwpd7HilbRG+Xe2Ou+Cq8bkakHc:4GN36Z0Vm7ClbglJaB","tlshash":"5c52c0160b441ec4f5f92e730b4d2c4b27dcb4caea2f5497f78866d68dd0a8494d8cea","first_seen":"2026-05-29T18:14:08.394633Z","last_seen":"2026-05-29T18:17:04.005905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:16.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaservis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 3399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.12.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"42036ef261134c246cd6bae0de08a7b6","sha1":"1e23ed4d7f95dfa43af1087e96ed5f495792f287","sha256":"2b9e2b34d7c3219707945ec52af51a3bd662fc9fcb5b4a8a468d64a4261cc004","sha512":"e84fee11726ce21e75fc0e3c77eabf12a25313aa6bcf625c450446f34aca38bc67693d8aaf884626d8fa794d1fecfcff22c13bcc179603875268b26a65233fa7","ssdeep":"96:TuzR1RCigWi/REeQnyb3oRtl1qWh8ykIowo5o0ixyixgqYaJ1:41pG/mxRvMWBowo5oZTXnX","tlshash":"08220f1158f088b6409680a46ef1aa1b2f90d717db0b564476ec4be81fc3ec2de97a79","first_seen":"2026-05-29T18:14:08.329949Z","last_seen":"2026-05-29T18:17:03.941464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/rouble.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/rouble.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: font/woff\r\nContent-Length: 5932\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-172c\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5932,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 5932, version 1.0","md5":"5f303e6538185a119f4f14249c4865cd","sha1":"6dba0640a12b8ed556cb58ef7400436ee62c5e4f","sha256":"d7817d2ffa4053fedde57d8e9e822a59dd7e0def9f74c5691de3f29ddbd5340a","sha512":"b1765f7977d4e857ce3d039dc898db90a2568d29f89dcf789e79903bc756a5ca197233f7b39db7eea861d7e03484353b0a5adde417e507d4b613dbabd21c1b5f","ssdeep":"96:UB0NEjzSGrOryFO70lIGad0rLe8CAFTBYuMLFijI05AUaWk4PMtSx1gr2KcA9eRi:fN2eGrSyFk0OpOrntCLFiE05jRktSjKb","tlshash":"f1c19f79af18e871d0b08cb87115ef4b3787d79aa3065697acf186c13515204e2707af","first_seen":"2026-05-29T18:14:08.314134Z","last_seen":"2026-05-29T18:17:03.919354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T18:13:12.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 36672\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; expires=Fri, 05-Jun-2026 18:13:13 GMT; Max-Age=604800; path=/\nPHPSESSID=bccac8705b9efdeb2954005561a3380b; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlink: \u003chttps://megaservis.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://megaservis.com/wp-json/wp/v2/pages/9\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://megaservis.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"prettyPhoto","description":"","website":"https://no-margin-for-errors.com/projects/prettyphoto-jquery-lightbox-clone/","common_platform_enumeration":"","icon":"prettyPhoto.png","categories":["JavaScript libraries"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cookie Notice","description":"Cookie Notice provides a simple, customizable website banner that can be used to help your website comply with certain cookie consent requirements under the EU GDPR cookie law and CCPA regulations and includes seamless integration with Cookie Compliance to help your site comply with the latest updates to existing consent laws.","website":"https://wordpress.org/plugins/cookie-notice","common_platform_enumeration":"","icon":"Cookie Notice.png","categories":["Cookie compliance","WordPress plugins"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Yoast SEO Premium:13.2","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"Ninja Forms","description":"Ninja Forms is the WordPress form builder.","website":"https://ninjaforms.com","common_platform_enumeration":"","icon":"Ninja Forms.svg","categories":["WordPress plugins","Form builders"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Backbone.js","description":"BackboneJS is a JavaScript library that allows to develop and structure the client side applications that run in a web browser.","website":"https://backbonejs.org","common_platform_enumeration":"cpe:2.3:a:backbone_project:backbone:*:*:*:*:*:*:*:*","icon":"Backbone.js.png","categories":["JavaScript frameworks"]}],"data":{"size":249643,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832), with CRLF, LF line terminators","md5":"06806e8d1157af42a22f09b49ec74a80","sha1":"b8a7956ff7aac9d4958973e276fc38aa535f5008","sha256":"407eab8072827d555ef02173dd0f404b68f36246a5f096d3f34424c573ee88fe","sha512":"1fb4d48343f531c39d048076172c3218a5969d46aba6c12b462c76ef8c769c0ad12f885d7e4e2f10035c0a334342e09b18dc3c781258b1307dd05fcf4ce277d7","ssdeep":"3072:4A2SA3Ylrv+AA0tTSiYqKU86hHp2h6Az8MOS6OTf1oHmDK/+7MPIcA2vAwQsqH+q:47AAHiQ6hHp2h6Az8VS6OTf1S4","tlshash":"3634b47295760a3e059e328ac0b9af0da187d323d704d7f9febc5d2bd788a142653349","first_seen":"2026-05-29T18:14:08.395753Z","last_seen":"2026-05-29T18:17:04.058584Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1327,"timings":{"blocked":160,"dns":77,"connect":39,"send":0,"wait":965,"receive":38,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/doc/FSB-1.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/doc/FSB-1.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 274956\r\nlast-modified: Mon, 12 Aug 2019 12:36:57 GMT\r\netag: \"5d515d69-4320c\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":274956,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 800x1100, components 3","md5":"2e699e8f7a18ab70db603a0120d68af1","sha1":"4a66a79eaf9e1fbfc877d8fadf23004f452d23d8","sha256":"b7b8e6ea24c25f563a05f18119daa3d13195b76d5713dc13a119f28ced8c1cd6","sha512":"14cf8af9051660f19d002f34af3957b4a59cb363dd85d0db18246fd05d13fcb9e6f2e815b4f9a0bd0faeb3e12100663827d0920b6809f205874d4c4d7ab07a2b","ssdeep":"6144:xvnwVQWaKVS76aXIYgtucad7Q5i5Evq13WSnn8zRjoNdCypymeqmlp8zZwX:QQWDAXuzrY11GSniVojCUydd81q","tlshash":"794412f6ae3519d7d6be11e0c8f2a5679d95074187e0129392d2aca9d3432e2cf43e3c","first_seen":"2026-05-29T18:14:08.396849Z","last_seen":"2026-05-29T18:17:04.007138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/shortlink/obCrLDGA","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.714Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /shortlink/obCrLDGA HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T18:34:13.800455Z","times_seen":16218517,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":3,"connect":56,"send":0,"wait":0,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/local_storage_wrapper.js?v=20200327","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/local_storage_wrapper.js?v=20200327 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-914\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 916\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2324,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"b1278c5d07ec36a3634a17681bdcb8a3","sha1":"9b89205b29dd24e50d7ce0c634e71b4dab866736","sha256":"b6d3062d765276bc9436c09509707d08b9c69890de11e88c0d32271283ff7e6a","sha512":"189ac41f8db44d5cd76438901052aa2def58640a1085989d19c1965f8baa7443857e48939c4bf44b14cddeb7ddf14d14a992d96c0e2d6271ee0d87b5bbaf8bef","ssdeep":"","tlshash":"1d41bf485cf325d440eb70ad276f4074b63b94537a1cdb95b98c6a013facd2882a5bf8","first_seen":"2026-05-29T18:14:08.34919Z","last_seen":"2026-05-29T18:17:04.01907Z","times_seen":2,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/css/dist/components/style.min.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/css/dist/components/style.min.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Mar 2026 08:51:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f278-1877e\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100222,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"0f42831badbfc2362c07ca19e92b00a7","sha1":"0f099f772118407a8c9d64c93319896c319820f1","sha256":"46ed460756d17015aeda929ccd840de0fae9eee7ff6968e93ec0d3e20a31acf8","sha512":"72ff0c8289d6b1070ad8bded1583a7ad2b47b7995dd3c74801b95c7dc01fbab5753476bc4037e0e814be4bb1d1473a3fc27b4adb03ec6fd3a017b44971a812bf","ssdeep":"768:qZ5Ziyfkx1lolTAaZxoSB/2EKCknW8lD9oTJ7wLxkOIgs9jb9jSHtlISM8MJxDAW:ycx1lolTAaZxn8lD9oTJ7YoiW","tlshash":"daa3a47194101d3a61e3d3b85370fd1b12d452d1cec3eadaa453aae8cbc718e096b6db","first_seen":"2025-12-02T23:43:13.71289Z","last_seen":"2026-06-07T18:38:03.991591Z","times_seen":11522,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/local_storage_wrapper.js?v=20200327","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/local_storage_wrapper.js?v=20200327 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-914\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 916\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2324,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"b1278c5d07ec36a3634a17681bdcb8a3","sha1":"9b89205b29dd24e50d7ce0c634e71b4dab866736","sha256":"b6d3062d765276bc9436c09509707d08b9c69890de11e88c0d32271283ff7e6a","sha512":"189ac41f8db44d5cd76438901052aa2def58640a1085989d19c1965f8baa7443857e48939c4bf44b14cddeb7ddf14d14a992d96c0e2d6271ee0d87b5bbaf8bef","ssdeep":"","tlshash":"1d41bf485cf325d440eb70ad276f4074b63b94537a1cdb95b98c6a013facd2882a5bf8","first_seen":"2026-05-29T18:14:08.34919Z","last_seen":"2026-05-29T18:17:04.01907Z","times_seen":2,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?hl=ru\u0026onload=nfRenderRecaptcha\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:58 GMT","end":"Thu, 30 Jul 2026 15:53:57 GMT"},"fingerprint":{"sha1":"3D:2F:68:CA:7D:7E:91:9E:9A:F6:55:25:90:92:2C:70:DF:61:E1:AA","sha256":"17:D0:A6:F1:72:DB:CB:B5:FD:37:15:CC:95:48:17:63:D5:77:2E:57:FC:4D:6A:36:5B:D9:8A:76:6B:1B:54:5E"}}},"request":{"raw":"GET /recaptcha/api.js?hl=ru\u0026onload=nfRenderRecaptcha\u0026render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 29 May 2026 18:13:14 GMT\r\ndate: Fri, 29 May 2026 18:13:14 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1038,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1038), with no line terminators","md5":"69bbe703ac1a3ced50b2e4cc292729d7","sha1":"ceff5d592c03779f6eb5a3f09996ea9084db910b","sha256":"05f4d7a198e3f5c480f405acfee18bd7015f36b0178c82b3ec66fb8d546c9439","sha512":"4785d1a86bbaf0e721561ca9bbb2a218b1d6702fb2cae76aa788c7c56bfa2d0bb8a793101055a069f68f86ef886058cec283b1eca2682e0d3d0fd09233394fd0","ssdeep":"","tlshash":"62111fbb1a08f0390e7218d0e2fecab1e452701da11845d8a511d6942e7adcbce05599","first_seen":"2026-05-29T18:14:08.398371Z","last_seen":"2026-05-29T18:17:04.0823Z","times_seen":2,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":188,"dns":1,"connect":21,"send":0,"wait":38,"receive":0,"ssl":291},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"209.85.233.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/hsFBb1u5wWWWkWP4in1ua2cQ/recaptcha__ru.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://megaservis.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 388300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 17:57:17 GMT\r\nexpires: Sat, 29 May 2027 17:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 08:02:13 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 958\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":900499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (684)","md5":"6f169659e61f9c1d9680d75798ed3923","sha1":"662813960dad0a73ad432cdb3f40c0e725baa868","sha256":"73571ba29f455d8d93f6b3ca5e6cddf0466c4ddb3c8fedd07aa946e5dd2a0bd9","sha512":"96cfe456749c3eb1fbb9f6a59c8e584778cea055200f64de7e5f18dc85e1a8680f97887a8ce5235cb50799deb19f192010e1cabd3efc22eee2c8c813233a03ca","ssdeep":"12288:CgkErFb1FQP0LSubDWRk0tC48e0OnaaNLvYVuaIj6AqDTQc9hBb:LJDQP0LSub5dOTv1aIDqDTQIhBb","tlshash":"84155cd8bc627da25222b4f154a7355db72e65aad84c0c1e7198c4f03ef4809a0b7ef7","first_seen":"2026-05-29T18:14:08.399402Z","last_seen":"2026-05-30T14:58:17.027124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":55,"dns":9,"connect":28,"send":0,"wait":29,"receive":123,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.user-agent.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.user-agent.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-2a5\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nSet-Cookie: cookiesession1=678B28F3BB4174503B0F55625FCB91B2;Expires=Sat, 29 May 2027 18:13:17 GMT;Path=/;HttpOnly\r\nContent-Length: 266\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":677,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"fc2273c858f0626e64e8a6983f1dcd31","sha1":"e8f436f4478a7c3607a1413dedd84ca15de3ddd7","sha256":"30ef21e28206803e992d3e9c5afa30a8dbdd6bacf860d1b95073f59855c9c4cd","sha512":"af0b29f65543ace3ea483cc0b83c4044babd8edcfc2944285487917d231b36f7778e43203f32bf9b2a659af8d303870e8e37be9a3b7f0fc8b5d2677aa9e09a8b","ssdeep":"","tlshash":"b201a79db9f6b004462374be985b9104753a444ba82d1d40fc684fe0ef7583a4193eac","first_seen":"2026-05-29T18:14:08.324949Z","last_seen":"2026-05-29T18:17:03.943597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":55,"dns":1,"connect":36,"send":0,"wait":50,"receive":1,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/img/down-arrow.svg","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/img/down-arrow.svg HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-4d7\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\ncontent-length: 667\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87f3924ba24ef9c91bd5bace2874e245","sha1":"048047428c0e9c53818d0505a112759d728ceeb1","sha256":"b3fd4e914c4c7add3cb3cb2431fa0c90baa0f058f54d817aeaf59c6441288ce3","sha512":"3c1f43497d829303bb3789482adfea80934c38f993ac6a968242155ded3b132e61e6ff64c27978c6a9c71b0fd06885907fcc6e4cb6fc90fa63464101f352b6d8","ssdeep":"","tlshash":"26211e98e2aa08a2711daa007df1f840832a789797c4018ebdde4df54f244d5528afda","first_seen":"2026-05-29T18:14:08.400159Z","last_seen":"2026-05-29T18:17:03.903742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/img/ps-transparent.svg","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/img/ps-transparent.svg HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-91\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\ncontent-length: 136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f3c49f213f9a31f3be5a841e6f1b120","sha1":"a431ff5749f21a00f92694943865837d1e17b33d","sha256":"bbe69c091588568067582573343cf939f4cda953d92c21647ab170776583fa52","sha512":"f84911f90fec5a70c592eb57c77cdaf98f89a5c032657a11b266079271f5817aef96ce78ef8b4e2246fc97d660306bad4caffa16b049efbaee22004510820afa","ssdeep":"","tlshash":"a4c02b34c0ec0e1cc4944410683ce550236ff0405bc8052fd4c0270477075ca2c23ddc","first_seen":"2026-05-29T18:14:08.401126Z","last_seen":"2026-05-29T18:17:04.07066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/SeroPro.woff","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%223700.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B8%D1%82%D1%8C%20%D0%B2%D1%8B%D0%BF%D1%83%D1%81%D0%BA%20%D0%BA%D0%B0%D1%80%D1%82%D1%8B%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F%20%D0%A1%D0%9A%D0%97%D0%98%20%D0%B8%20%D0%A0%D0%A4.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/SeroPro.woff HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: font/woff\r\nContent-Length: 96764\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-179fc\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96764,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 96764, version 0.0","md5":"8c23216e3ba0a73df3171649668b23e7","sha1":"4b7eda5ce830c186230c4f910bd77acbfd2465fb","sha256":"b9f2009499ad4a7c2f3b160f6f0fdd8a6fee484837e78ccbc8e694a8fdf6bc5b","sha512":"e71459b71e748be5d10cf89b2bfd423b55e7306f17184d9236ceaadf61a441820d17f4bb02debf1fb2112c8f7a5346f1233c8ef017e93554f0a9a7ac628f6ff6","ssdeep":"1536:m8z0f+mlYERUxqfw1Vppyv4+LTj44NHxT/yefyglXTwriGaifBQpoEepm5XCBaLV:mc4L+R04B63pFRll8rSiJ2oEepmVCaoy","tlshash":"5093129b94ee5670e488c13f9a7884dd362eca474aa4859c17c4c2c47bfe69dc6f301e","first_seen":"2026-05-29T18:14:08.354426Z","last_seen":"2026-05-29T18:17:03.921135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/fonts/fontawesome-webfont.woff2?v=4.3.0","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B0%D0%B1%D0%BE%D0%BD%D0%B5%D0%BD%D1%82%D1%81%D0%BA%D0%BE%D0%B5%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D1%8B%20%D1%81%D0%BF%D1%83%D1%82%D0%BD%D0%B8%D0%BA%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%20%D0%BC%D0%BE%D0%BD%D0%B8%D1%82%D0%BE%D1%80%D0%B8%D0%BD%D0%B3%D0%B0.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E_%D0%B8%D0%BB%D0%B8_%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%20%D0%B8%D0%BB%D0%B8%20%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\u0026ask=%7B%22name%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9_%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9A%D0%BE%D0%BD%D1%82%D0%B0%D0%BA%D1%82%D0%BD%D1%8B%D0%B9%20%D1%82%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:23.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/css/font-awesome.min.css?v=20200131\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:23 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 56780\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: \"69261d4c-ddcc\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56780, version 4.197","md5":"97493d3f11c0a3bd5cbd959f5d19b699","sha1":"1075231650f579955905bb2f6527148a8e2b4b16","sha256":"aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c","sha512":"bfe4679bbe5d1db21f6ecb2d6c2810dd02d3b698efdd50004cc355c1d0bc51de8dd102707c796b26e8250c600b4b64db88b67d3f28157777b68e36ad7930bfc0","ssdeep":"1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE","tlshash":"eb430269f84b577202275a0509ee0d34ef804962eef247fbb1fb90c5d6309ac1ea1b56","first_seen":"2023-04-05T09:41:17Z","last_seen":"2026-06-07T08:08:43.548915Z","times_seen":27309,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ninja-forms-layout-styles/layouts/assets/js/min/front-end.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ninja-forms-layout-styles/layouts/assets/js/min/front-end.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Thu, 23 Jan 2020 09:45:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e296b55-1f1f\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7967,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (7927)","md5":"5bcc345f6c2386193d24714fac0b9b12","sha1":"114457c29d0b99bca921c60fc0e62a31852756dc","sha256":"dc228e912765cf8289347e62db1643b7efd84f84483d4e550ae97649f882dc0d","sha512":"981b7bee7203336badb94011e82ce31d0733143ee8813c9a955b60df0c43a2fd41dc50db7be9a032c11077d3a07f9cbd4081570fc532e431a467bba9edf0e03b","ssdeep":"96:1pTcIgbYbpJnu1Ln0LmSZKMI800OMqVEvV+zyoTy2eo9uEvcnZrQE4MfA:HoIgbQgLhEDbX8zykyjmvY0","tlshash":"9ef1a6ccb1a23b5d0abfb4b061ff7209933558956c095024f465f5e6acf865a1223f3d","first_seen":"2023-03-07T12:56:46Z","last_seen":"2026-06-07T05:57:02.094866Z","times_seen":1116,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/themes/invert/images/phone-ico.png","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/themes/invert/images/phone-ico.png HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 20094\r\nlast-modified: Mon, 12 Aug 2019 12:45:40 GMT\r\netag: \"5d515f74-4e7e\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20094,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 68, 8-bit/color RGBA, non-interlaced","md5":"434cefd875ba7b0dcf2a0aeca8b3ccd5","sha1":"a49fd58e2bcd479dbfd66997c7be7ef271977fd4","sha256":"66b064fd3451f2bd5341ec04579aaa6c29a541448803651939a405715bc79e5f","sha512":"5ee35d8bb15b24be07b7095443b263f09cd8b3b4ac702f6d6a719e8bc5508fba6a6b502f690a7bbef27668101116cee75c3b9a7deffc84f1466b1c0489d7367c","ssdeep":"96:tSw+dxWvkiS/qIDNGTkTpJdw6XGfNXrNCVhsc5wNW1QiX+y8M1EPlsp4J4ATK4yc:tSwQckiSSIDEkTs52Oy8M1aspUOiTb","tlshash":"fd921769fcf174b4a589b2359ee814416ca71ec3dc90ac093bed4dda6f00358dd6f982","first_seen":"2026-05-29T18:14:08.402622Z","last_seen":"2026-05-29T18:17:03.990745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/css/style-sbersafe.css?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/css/style-sbersafe.css?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-6964\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 8389\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26980,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"39464a5d04e9f2ade1dd9e8cc46bea07","sha1":"17d83598e5fd39603cb78819ab197d00530e6e61","sha256":"7562280ef849e399519dd4d612e19a380b1ab2f58717c917f81b37fc3341a272","sha512":"0a09ace24a8abba558200762e9afbe18dfe90c01afaab016a305c14f1c64d82c287ca0c7b10dc9224de741914f23858c19e92a84ad659a9f02e11de13bff5480","ssdeep":"384:AiBWhi+x/0y2fc6aE3faFHOFXgovUIsD1HG:AiBWhiNf5z3faFHOFXXRsD1HG","tlshash":"49c274962ff02508755f95697aeb9f62332d4053610fccb96ae0205cff846ea85b3f48","first_seen":"2026-05-29T18:14:08.403562Z","last_seen":"2026-05-29T18:17:04.023281Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/plugins/ditty-news-ticker/inc/static/css/style.css","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:13.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/plugins/ditty-news-ticker/inc/static/css/style.css HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 24 Jan 2020 04:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e2a6ebe-26f6\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9974,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4586a334fb706b476858ae375170596c","sha1":"70b1c563f1c4fcf8baa7ea7ce138fbd27ba41b95","sha256":"c108454c3e5cebabdee554161c7c24b62320b5c0a503aa7b104e2309281f8aec","sha512":"ebeb7911bb94b625913014ebc7f618518c0312c2c9d25e9bc80008d89e997bd7c122590991064dcb582e5f5a0139a9f45edb506f05624aaaef6ea27a5eb1997d","ssdeep":"192:bqhLJIKxNArMPbG/7OC+IXPv0Pv3kuYa0Mj2ZK5aBQ0bxsRRFfQXY:byjrArQGCCh/GPTSQ80nFfQXY","tlshash":"bb22dc724fe6224cf492c647a2b793b4e126c0034a9aaebcf645e134cf151d41bae777","first_seen":"2026-05-29T18:14:08.404502Z","last_seen":"2026-05-29T18:17:04.0499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=2b605kektb65","date":"2026-05-29T18:13:17.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 14:42:11 GMT\r\nexpires: Thu, 27 May 2027 14:42:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 185465\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T08:20:47.127655Z","times_seen":872407,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/jquery.payment.input.js?v=20200219","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/jquery.payment.input.js?v=20200219 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-23c8\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 3529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9160,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"57780dbf88bf3b53b4636baf2bb5816f","sha1":"fe3359194997d2c11e336cfad974285289912685","sha256":"04a5dc1289057f5318835b65d6426c278929ec33fd328da0385afc458782f616","sha512":"afa26b5b1e401342029b957ee47d4396ec994d6c5547147a816e1470d982ca2fc801cc988befeb518a82aaff9f628b725eef687c7e17fdefb20b0bffd5b3f0f5","ssdeep":"192:+/hg0S6hvHVG47rGw7NdreZZrET54gaSHC7aO+HhT+Hf1awXssa5pMwaT/oQQDO2:UiI/LOZZrwc0p","tlshash":"86122e58bdf700564a67723d4bef52043a7540a3180bee25bc2c2b95bf92d2842f2fe5","first_seen":"2026-05-29T18:14:08.321297Z","last_seen":"2026-05-29T18:17:03.89756Z","times_seen":2,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfQRpkUAAAAAIhIQqYFX7xo0gpKUU4Xgnf0ardJ\u0026co=aHR0cHM6Ly9tZWdhc2VydmlzLmNvbTo0NDM.\u0026hl=ru\u0026v=hsFBb1u5wWWWkWP4in1ua2cQ\u0026theme=light\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=8j78faht51yj","date":"2026-05-29T18:13:17.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 15:06:54 GMT\r\nexpires: Fri, 28 May 2027 15:06:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:53 GMT\r\ncontent-type: font/woff2\r\nage: 97583\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-06-07T08:16:34.820969Z","times_seen":19514,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-content/uploads/2019/07/IFWKSJLF-250x165.jpg","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/IFWKSJLF-250x165.jpg HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12857\r\nlast-modified: Fri, 13 Sep 2019 11:06:28 GMT\r\netag: \"5d7b7834-3239\"\r\nexpires: Sun, 28 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12857,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x165, components 3","md5":"bf605ebb30f6882fbda8ef6bb551f3a9","sha1":"a3094ccc9149ee76784b38dccc71464861550446","sha256":"8295a0719a3065c68555515ac6a2a81ea1253de8ebaa38c6e1fa63c0591ddf77","sha512":"f48d2e79f6fb8512fba44740c9243208b0f23402a0feb94300b02d7f785e12360bb695b1fdbcd575689c5602bebbd0b1848dfc5e2a3df7406c640ed9738d6ad4","ssdeep":"192:s4IkEcq9NJ6UtRININDVcUcDHETJ1UzjRP/z0hxwuXcU2xJzEW3SveBBaCR0+UZ:so5qUIRININqUxXO9bVBXNgeBkCc","tlshash":"6042d0b313dbdf05dcbe47a5fb9480c8438e4b60b056772296e167088e3cb6b90a55d2","first_seen":"2026-05-29T18:14:08.405528Z","last_seen":"2026-05-29T18:17:04.109346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/assets/js/payment.validation.js?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D","date":"2026-05-29T18:13:17.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/assets/js/payment.validation.js?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026def=%7B%22amount%22:%224000.00%22%7D\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%B5%D0%B2%D1%80%D0%BE%D0%BF%D0%B5%D0%B9%D1%81%D0%BA%D1%83%D1%8E%20(%D0%95%D0%A1%D0%A2%D0%A0)%20%D0%BA%D0%B0%D1%80%D1%82%D1%83%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8F.%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\u0026ask=%7B%22name%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5_%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22,%22placeholder%22:%22%22,%22label%22:%22%D0%9D%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BE%D1%80%D0%B3%D0%B0%D0%BD%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B8%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 25 Nov 2025 21:19:07 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4b-4b2\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 657\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"c906f4b4f8118bf368bcaaeecd4ee9fe","sha1":"293b9165ea0f157c459b79951ecf5622d5a6fb8f","sha256":"34a25e04b6fd19ddefe62c356c3e371c7633d7c405e1a701d31e1c8f48489860","sha512":"988f3effaebab0f42d4271e1f43ba2732f04b5ebcc9f047b2f46cadfe0512b37f34f3a48327db3ac310982dec7e0ebb29d8a7912095baaa6a6e10a87f33fbfc1","ssdeep":"","tlshash":"1021468e7de325444bafb26d47af804973794417244cdd05f87cb2412fa1ea861faacd","first_seen":"2026-05-29T18:14:08.31859Z","last_seen":"2026-05-29T18:17:04.016429Z","times_seen":2,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/merchants/megaservis/custom/logo.png?timeNow=1780078397666","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/merchants/megaservis/custom/logo.png?timeNow=1780078397666 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 20 Feb 2023 09:24:18 GMT\r\nConnection: keep-alive\r\nETag: W/\"63f33c42-3ba\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\ncontent-length: 593\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit colormap, interlaced","md5":"12a0b8389607b37211fb4278262258a7","sha1":"8967cd210f11b8a5952e844cd3e0d60792ee5c0a","sha256":"2511073165b2e0007d961c2d592053e00415514e1112347274e537e66bdc4883","sha512":"a601b9a5ada058c069820d300ad9b0646e1caa226367fafc008f708658854d7fbed965ff775d3b44217b02466e5d9b04ec582b43d660f8d1e8ae98d8bcb6bca6","ssdeep":"","tlshash":"f311106af6001c61e608d5d214f35423a92b4980ead4f6b168cfcb0a0d702f9c58b5db","first_seen":"2025-10-15T08:56:19.450223Z","last_seen":"2026-05-29T18:17:03.905868Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaservis.com/wp-includes/js/comment-reply.min.js","fqdn":"megaservis.com","domain":"megaservis.com","tld":"com"},"ip":{"addr":"87.236.16.229","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaservis.com/","date":"2026-05-29T18:13:14.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaservis.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 14:16:43 GMT","end":"Thu, 16 Jul 2026 14:16:42 GMT"},"fingerprint":{"sha1":"FC:B7:56:A1:31:F1:72:5F:C4:8B:8F:BC:35:4D:19:D5:3A:09:EA:A6","sha256":"B9:4A:50:1B:41:7F:59:07:86:C9:A8:F9:02:B7:D2:B1:AF:66:E5:FC:7F:82:72:1D:14:8A:FD:B6:08:5D:00:16"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js HTTP/1.1\r\nHost: megaservis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaservis.com/\r\nCookie: wt_geo_data=%7B%22country%22%3A%22%5Cu041d%5Cu043e%5Cu0440%5Cu0432%5Cu0435%5Cu0433%5Cu0438%5Cu044f%22%2C%22district%22%3Anull%2C%22region%22%3A%22Oslo%20County%22%2C%22city%22%3A%22%5Cu041e%5Cu0441%5Cu043b%5Cu043e%22%2C%22lat%22%3A59.91329999999999955662133288569748401641845703125%2C%22lng%22%3A10.7388999999999992240873325499705970287322998046875%7D; PHPSESSID=bccac8705b9efdeb2954005561a3380b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx-reuseport/1.21.1\r\ndate: Fri, 29 May 2026 18:13:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Mar 2026 08:51:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7f279-bd2\"\r\nexpires: Fri, 05 Jun 2026 18:13:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-06-07T18:26:58.143392Z","times_seen":79667,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepayments.sberbank.ru/payment/docsite/css/font-awesome.min.css?v=20200131","fqdn":"securepayments.sberbank.ru","domain":"sberbank.ru","tld":"ru"},"ip":{"addr":"62.76.205.134","port":443,"asn":60544,"as":"LLC Runet Business Systems","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D","date":"2026-05-29T18:13:17.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"securepayments.sberbank.ru","organization":"SberBank of Russia PJSC"},"issuer":{"commonName":"Russian Trusted Sub CA","organization":"The Ministry of Digital Development and Communications"},"validity":{"start":"Fri, 14 Nov 2025 07:25:00 GMT","end":"Sat, 14 Nov 2026 07:25:00 GMT"},"fingerprint":{"sha1":"7A:57:9F:8E:EE:9A:51:5E:03:33:41:C1:C8:83:33:25:CC:4A:3F:AE","sha256":"85:76:E9:77:A3:57:48:B2:21:51:17:45:B3:67:A7:C1:A1:E7:1C:57:90:B1:46:18:0C:C5:25:CA:D6:81:F1:3C"}}},"request":{"raw":"GET /payment/docsite/css/font-awesome.min.css?v=20200131 HTTP/1.1\r\nHost: securepayments.sberbank.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://securepayments.sberbank.ru/payment/docsite/payform-1.html?token=p72neuruvapmfn547c6rts1ne7\u0026ask=amount\u0026def=%7B%22description%22:%22%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0%20%D0%B7%D0%B0%20%D0%BE%D0%B1%D1%81%D0%BB%D1%83%D0%B6%D0%B8%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%9A%D0%9A%D0%A2%22%7D\u0026ask=email\u0026ask=%7B%22name%22:%22%D0%A4%D0%98%D0%9E%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A4%D0%98%D0%9E%22%7D\u0026ask=%7B%22name%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22,%22placeholder%22:%22%22,%22label%22:%22%D0%A2%D0%B5%D0%BB%D0%B5%D1%84%D0%BE%D0%BD%22%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 18:13:17 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 25 Nov 2025 21:19:08 GMT\r\nConnection: keep-alive\r\nETag: W/\"69261d4c-6f60\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nContent-Length: 7606\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28512,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"05e7672cb91d9dbdc876a3d2d66d545c","sha1":"fde95c99e6903ef725152c6d71f0f3ba95d28936","sha256":"83a87d917ffdf89896f9a8e6ee64b3e9da2d34557d2799e45c80ac5fd7feab97","sha512":"ca1c30f8304e8bee85ee1e59e081415ca73bf790551270e15877031de8db70e8eb7cebf5681ad1381d18b682c1598a17ebf75a6865482a49e191b9316c082f01","ssdeep":"384:d4Q0jfsI+/70//6U7+090M+0TN+aTuAZdfoq/:p0jf0A36U7+0q0TN7KABn/","tlshash":"5ad210ecedfe1c804391e4916346f2b0b32db7299c4a6e6cc2e6789c91c9654d1e63cd","first_seen":"2026-05-29T18:14:08.407046Z","last_seen":"2026-05-29T18:17:04.027616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}