{"report_id":"131ab0c9-163e-4226-8057-2cd999b7ac33","version":6,"status":"done","tags":[],"date":"2026-05-17T14:19:14Z","url":{"schema":"https","addr":"varmeshrek.com","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"varmeshrek.com/","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"title":"Mashreq - Home","dom":{"size":23877,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7a5621b04bf1c7ffb64f29ee7133094f","sha1":"e614005764eaa80b1c61eb83be59773c295db703","sha256":"51e1c9011e84dffcef3e056855659cc6c4cd3f5420195ec791f7a68ad218f97b","sha512":"0ba06ece44bf65e698693848070e6ddb84d2a7009288ffe5d1af3c7f4a50f98391e15f67265c6e712455a8d8b795120cca2b28018508554d427202ff17a0002c","ssdeep":"384:NCvZmS/Dd8z/MJ5P75zNTI2DRnlN4yOFu5IUBny:N+msd8zEJZ75zNTj+du2UBny","tlshash":"a9b264a71ae320296417e0b85bfb67482276d413e10acd7d3bcd1689cf51bd48ed3b89","dom_hash":"domhashe9930c006330b33c8e1b322b3d101cd8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"varmeshrek.com","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T14:19:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"varmeshrek.com","ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":18,"received_data":38028615,"sent_data":8740,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":7734,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":4,"received_data":132772,"sent_data":2222,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"varmeshrek.com/","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7b1496eea9876fb056a040cb80d3a60","sha1":"30cf79618b79a43dbb82525dc100c00b9076f25f","sha256":"cdb3419fb6704b2647e2e670d7a8344e52858b3d6d6215b2fec568bde31722f6","sha512":"84f3353b974506c739af951956e64c9824a0b451cf572397fb1137223986887d52f8a4b9c1c9574f15e683d0d948cf2c59159e2596045a39b63c195154cce2ab","ssdeep":"","tlshash":"06519c2f76b71039407bf03b5b9fa3c9367300472545cd963e5d8a450fa1da82ae2ada","size":3049,"data":"","first_seen":"2026-05-17T14:01:06.781406Z","last_seen":"2026-05-17T14:22:02.936339Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"varmeshrek.com/","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T14:18:52.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23899,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6b24ca11e0038c6e483a1e54e575bfae","sha1":"e17bb4f294964003c8f3bbac47518051557d4d22","sha256":"63958477d2c10133de4f44cad6b8d6e269a56db48a1b4e313fef7de3fd94a0e0","sha512":"0ad41ed82075a6315d86e80347caac730706a7bb703abfbf100333a0f5f14aa131dbef41bb4bb7281a0dc49debadbae54a43be09eb9de057bb505ffb8a862e27","ssdeep":"384:/CvZmS/Dd8z/MJ5P75zNTI2DRnlN4yOFu5IUBna:/+msd8zEJZ75zNTj+du2UBna","tlshash":"a4b264a71ae320296417e0b86bfb67482276d413e10acd7d3bcd1689cf51bd48ed3789","first_seen":"2026-05-17T14:16:03.012936Z","last_seen":"2026-05-17T14:22:02.933325Z","times_seen":4,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":69,"dns":27,"connect":20,"send":0,"wait":24,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/assets/mashreq_logo.png","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /assets/mashreq_logo.png HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://varmeshrek.com/\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:18:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 14:34:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 92604\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 938 x 997, 8-bit/color RGBA, non-interlaced","md5":"ef2dce5156fbb1899869f686cd89af72","sha1":"aa3f6e231f85cb213c09138282edd6820d851241","sha256":"56f0baa5f32469e87ed02b5c4df661ad652340fc439bffa4e177f29a461f8cbb","sha512":"54406219679b431f5372eef960cc238716fb32aa415ee7bf60555cea4bde8c3b29a09fe8ab678f7f81208f82e4831110a7a5213277ac3cdd36fe43ba0a0d3e7b","ssdeep":"1536:+kqWCOgNDXJ5XNz7EZ0V41AmA+za+FVsVSMvAimTU73NJwxW3mEWeh59KT72wXoq:+kqPHV7EsgkpBwcAiIQdmYmVeb9W74xK","tlshash":"039301292f1669f0d9ca34b63a2a94518065958733db5cba90c1f10f249bfb8eccf817","first_seen":"2026-05-17T14:16:03.001495Z","last_seen":"2026-05-17T14:22:02.928535Z","times_seen":4,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/assets/watches/watch3.png","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /assets/watches/watch3.png HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://varmeshrek.com/\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:18:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 14:34:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5377377\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5377377,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"c744afb13840c52590c436729046f603","sha1":"e0a79204d0f9972523e4f7c6688f1db91ac0b380","sha256":"fc872beb9aa3546d92f3836b0d9df0e040fb2edd751f6dd4165c9992f6f653da","sha512":"e03824a6a9486d2a2373bb5e8dcc0b013c3b46e9b0841dd80e7f9fad340c61d985225fe5669fce4888e65097ac95e7dd86df86ec1fecd12743b1d895f369f55c","ssdeep":"24576:ACwFdHbI8EPpQkRMczUZRSJN8q8QUWDYmFQAEw+O+EaLx80TEeu7BgY:zWbIwcz84JoQUbW2YaVDTEeuuY","tlshash":"422523dddbba59b0e9820131e869c4f1cd247a455bfb28b8159b61c0c806dbc53e1efa","first_seen":"2026-05-17T14:16:03.030372Z","last_seen":"2026-05-17T14:22:02.932148Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1323,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/assets/watches/watch2.png","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /assets/watches/watch2.png HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://varmeshrek.com/\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:18:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 14:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5245722\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5245722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"a290a8f108546b1e6f2730a0c0830efb","sha1":"ff85a4b2962290e2a4bba0200aef43cc62457610","sha256":"2ab8c3b9ae5be2e004e2c2d75810d04cbc843fb0ca5a15b0d279e2c7a1b02183","sha512":"d95e722fa56fab750f9bdd95e5d00ef05351cc4a0706c2bba911fceb6e3e7834fdabffa4ce81c82aaf581a5ac65c5914b633862923450566007c9d7fb725a27b","ssdeep":"24576:qA0Sd2q0sJlJJNbgkpdPzWVH7jRx5vhgkjPIMB/2ceU:qA3UmJbJ3PzWd7NvhgCIG+c7","tlshash":"9325121dba7730a0e8c64af63672a6da9f6df60587c40c381dcb60965a165b02f3c4f7","first_seen":"2026-05-17T14:16:03.05123Z","last_seen":"2026-05-17T14:22:02.916081Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":1367,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/assets/watches/watch5.png","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /assets/watches/watch5.png HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://varmeshrek.com/\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:18:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 14:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5218508\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5218508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"4bb386aa55cafaa5809ca20630348f26","sha1":"b874270a047e2a82d649a2538d7f855dd03403df","sha256":"8606e41a09458aa0ff73c5852baedbb5e96b080ce161913bb1305d9670ee5a9f","sha512":"c51511402839162d2dca95d890cff7920f3f3bdd07ba66bda1812d9eccb9bd2f6d80faf907b09ef30b3538e0c03313ea5ea71cad113d6c345578fd527051c819","ssdeep":"24576:/E8t/NI827ycYWHVMFwec4aI/YtIx0LjH7o6Tfmei:8WNI827yc7x4y0WNi","tlshash":"082523f6eaa22dc2f7950774d4689430fd9872425afd2ca0d9bbe0d1c421d4812f6f6a","first_seen":"2026-05-17T14:16:03.00873Z","last_seen":"2026-05-17T14:22:02.918704Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":1598,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/heartbeat.php","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:55.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://varmeshrek.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:18:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2117f2125d7b9f6749d8587e4598a38","sha1":"af004f1b1fd86f38ff39fe070230f85ec0d074da","sha256":"26460ba750d16f4995552e3c4895efb6c6303ed889a721d581b9d9d1efadbfd6","sha512":"d278f186f383bf91b4f664cda22d0874c33de0d4f5b2285f97cc7e76788c4a658b1867da56adeebc6759eaf17a0d32ed224a70235e8accb00e2ecfd150a9885c","ssdeep":"","tlshash":"5470002008a80020880803080800ba00a82fa0a30080000a20083088033230a0223a23","first_seen":"2026-05-17T14:19:23.361384Z","last_seen":"2026-05-17T14:22:02.935562Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/heartbeat.php","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:19:07.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://varmeshrek.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:19:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4f89be19276d0ba55a7d63f229d359aa","sha1":"da6c0546366e326ed04ffb92b4d6f4a392d30931","sha256":"437f4c62afc71e086fd909d42ae8cd477fe374b4382cc3eee67eda3bd22da8a0","sha512":"747621e44a33c4ae4a0cb65d3fec343268e9b3580c42b17c9c92a6528a6b004d487df91461b15de6189a24dbfd0486ab3e431dd2cc3e211dc0b961c47bcec1bc","ssdeep":"","tlshash":"bb70002008a80820880803082800ba00a82fa0a30080000a200830888322a0a0223a23","first_seen":"2026-05-17T14:01:06.75455Z","last_seen":"2026-05-17T14:19:23.36254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cairo:wght@300;400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Cairo:wght@300;400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://varmeshrek.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 May 2026 14:18:52 GMT\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7048,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"5fdc90f6f8ac461f0c9cd5beef5f705c","sha1":"2ba2685af072151d94e3052a59c911c89cb7aa99","sha256":"a41c905bcb01091042229a640a442248a2f3bd2779f37ead9009e3c7b4484f32","sha512":"d56a48e58cdcf2f2d9634c1834bdac9b6ccd14063268afe14597ab2019fa199949b5f2130e5a3cde260dee3ff99fa4ad332e09783653918801325275bb0fc34c","ssdeep":"96:tO1a8A0Zl8DCK9cHlO1ajJc+uZO1aHN0OEa8A0Zl8DCK9cHlOEajJc+uZOEaHN02:zbClb3UlbCl63JDbClw338bClX3QO","tlshash":"5ce19ed00c1e4184bf475dc2638d6e23ee0ee1956494886cabfd2b8b9cabc27739575c","first_seen":"2025-09-24T12:30:44.457156Z","last_seen":"2026-05-17T14:22:02.910198Z","times_seen":270,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":112,"dns":1,"connect":21,"send":0,"wait":37,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/assets/watches/watch4.png","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /assets/watches/watch4.png HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://varmeshrek.com/\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:18:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 14:34:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5126899\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5126899,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"aad10f63f3171afff99ecc3959358d46","sha1":"626834d558dcb6416f23136c022519333b485951","sha256":"45f666a4a001fd9df82915231febf9bb08baf34eb066c0ddf8640acaa7fc63ad","sha512":"5ab4b13aa7636674059f4b554192f3ab75994ff4e78e3c9c3cae813176d98c55ca4c1ee4f91cd9cb9375c4c8becc4ebb560d078bdfeac105d69b01057e971317","ssdeep":"24576:XZ6DhG6PAWn81oyr7IJ9fZhE9dfmxg4UaxfeE85o:gDX8KyuE98xw2r86","tlshash":"8c252341967e20e1eec458b5ac58964cd8b0bf842b7a2c352e775105c81af5c73e8fbe","first_seen":"2026-05-17T14:16:03.020651Z","last_seen":"2026-05-17T14:22:02.931512Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/assets/watches/watch1.png","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /assets/watches/watch1.png HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://varmeshrek.com/\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:18:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 14:34:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4823844\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4823844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"08eccd3bc944e04a8d59cbdb70ee0b56","sha1":"49ef16af16646c8788ce834e41d94707e0abb6c7","sha256":"e599df5f3bf90917bc42f69ac17a90099222c3b5110fab070d88d1e9e0e752d3","sha512":"f54b5ddd81fc9dee96244a7ed445cf2ed10f7ec3cf1f3532ddcc0168de107f12f533f311082554f8f4dc2c0a9292c725fd80c8ed1c9f727a5390d92947bf02cd","ssdeep":"24576:WWdNvNRhymyNYbqvVkcPVNNuvvCbhQjJPi7wz2uzM20r:WEv/AmHQVj9NQ3CMPi8r0r","tlshash":"5725236a47036897fac961b1bddcd861d924368226ff18910cdfb2c4d02af6519f1fb2","first_seen":"2026-05-17T14:16:03.016148Z","last_seen":"2026-05-17T14:22:02.934502Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1996,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1776,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://varmeshrek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 15 May 2026 19:02:54 GMT\r\nexpires: Sat, 15 May 2027 19:02:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 155759\r\nlast-modified: Tue, 16 Sep 2025 03:39:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33820, version 1.0","md5":"3c9597566d23234e05dc818314188491","sha1":"caa2f572bcbbe2985a96a9d59a459b2d1990b356","sha256":"82c13cbd1352d76e97c3d335caa912ae68fecdc3949a43cf8d149eb892384c1b","sha512":"d76f835a4a850b0225c5e93170423220970e6a40a9bfcd2ddf1e4cf054a543eb640e591495d5250437b9f5dee704feb3b16065318f8b926fb26dfc89baed0034","ssdeep":"768:cKG0/+s/RooAoTwdJMehHY+8ko/9givnjHYzIvg0Hk2Oeej:TGiR/RoqIVpT8+ivjHQyg0HkheS","tlshash":"fee2f214abfa7963912a2ba7bf354f6fe753f391ce0da844074e03d644699409f8030c","first_seen":"2025-06-03T03:54:51.937094Z","last_seen":"2026-05-20T10:12:25.370203Z","times_seen":4203,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":181,"dns":1,"connect":9,"send":0,"wait":60,"receive":2,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://varmeshrek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 04:57:44 GMT\r\nexpires: Sun, 16 May 2027 04:57:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 120069\r\nlast-modified: Tue, 16 Sep 2025 03:39:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30896, version 1.0","md5":"4d90a59cb1819bdd41f970549ab90a16","sha1":"714d40cf07db15fa9268ea607211c31438e4ded4","sha256":"748022f50c427456ad66031e855349be3448ee1f05a5f1eb59574ebe0c686749","sha512":"a0acca1df3a6abcd7b6f4c2757862b77af98571e283adb26be5c5f386c3c1e59afd1e1186ee17a4642c410ca7d2eb60e3cf51df731010bdc5ad9a5b3a7f8eec1","ssdeep":"768:6L9cTVSKprJeCIyonOLwDIzFBO5CTJH0mtCFiCv:k9GteHyonM9ZBO09HxMv","tlshash":"bed2e1c2bca5cd835d7e7f721239a96f008c1c8b776c99fc5cf21e644494dad028aa91","first_seen":"2025-09-17T15:48:15.244682Z","last_seen":"2026-05-20T10:12:25.364316Z","times_seen":2470,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":347,"dns":1,"connect":88,"send":0,"wait":9,"receive":6,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/assets/mashreq_logo.png","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:54.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /assets/mashreq_logo.png HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://varmeshrek.com/\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:18:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 14:34:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 92604\r\ndate: Sun, 17 May 2026 14:18:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 938 x 997, 8-bit/color RGBA, non-interlaced","md5":"ef2dce5156fbb1899869f686cd89af72","sha1":"aa3f6e231f85cb213c09138282edd6820d851241","sha256":"56f0baa5f32469e87ed02b5c4df661ad652340fc439bffa4e177f29a461f8cbb","sha512":"54406219679b431f5372eef960cc238716fb32aa415ee7bf60555cea4bde8c3b29a09fe8ab678f7f81208f82e4831110a7a5213277ac3cdd36fe43ba0a0d3e7b","ssdeep":"1536:+kqWCOgNDXJ5XNz7EZ0V41AmA+za+FVsVSMvAimTU73NJwxW3mEWeh59KT72wXoq:+kqPHV7EsgkpBwcAiIQdmYmVeb9W74xK","tlshash":"039301292f1669f0d9ca34b63a2a94518065958733db5cba90c1f10f249bfb8eccf817","first_seen":"2026-05-17T14:16:03.001495Z","last_seen":"2026-05-17T14:22:02.928535Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/heartbeat.php","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:58.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://varmeshrek.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:18:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5bc38d8ac20e4e64b41474cbcc6af7fb","sha1":"9509662f0d12681ac286e5cadc291287d13e8090","sha256":"3b1c54bd402f832b3feaaa405a601f06dcd3d140ed6cd18c4ae059b331974b00","sha512":"b13a6bbe7efcaba7094342fcf182096911c093658ebccaf80e8a80c3768e50acfcdbf05c8dfcd702ddc70a1659f13897c4c1586a22506e25ffc844cc736b57a2","ssdeep":"","tlshash":"7570002028a8002c880803080800ba00a82fa0a300a0000a20083088032220a022be23","first_seen":"2026-05-17T14:01:06.776488Z","last_seen":"2026-05-17T14:19:23.366415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/assets/images/watch_main.png","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /assets/images/watch_main.png HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://varmeshrek.com/\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:18:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 14:34:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5050327\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5050327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"5e5de10c95c57818b09843a32ed25f2a","sha1":"e66a98ed7e2861e5a1d747bb60fbfaf7cbe492ac","sha256":"fc428acf353310b3d2d8b8c21751688c3cbf5ef0caa542e833fa497f2797e1f6","sha512":"c449522ce2e84b01c0e014753eba338e4622fd4eeb123ef37e02aeba34542e9e57d63a5460a58854dc941d111b37f41caeda61cf58445faa4f1605fac228f849","ssdeep":"24576:JpitycTxrArIFphJYYKnMunhOteBLbrqGX6CMVsqiQoUY0X0EG:FQrAgz6zMunhOcWh1ZXG","tlshash":"1b2512dac7227a23f8692175f854e0e4cca42a47b77c28b218bfd1d4c459df846a4fb4","first_seen":"2026-05-17T14:16:03.01397Z","last_seen":"2026-05-17T14:22:02.912171Z","times_seen":4,"resource_available":false,"data":null}},"time_used":953,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":856,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/heartbeat.php","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://varmeshrek.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2117f2125d7b9f6749d8587e4598a38","sha1":"af004f1b1fd86f38ff39fe070230f85ec0d074da","sha256":"26460ba750d16f4995552e3c4895efb6c6303ed889a721d581b9d9d1efadbfd6","sha512":"d278f186f383bf91b4f664cda22d0874c33de0d4f5b2285f97cc7e76788c4a658b1867da56adeebc6759eaf17a0d32ed224a70235e8accb00e2ecfd150a9885c","ssdeep":"","tlshash":"5470002008a80020880803080800ba00a82fa0a30080000a20083088033230a0223a23","first_seen":"2026-05-17T14:19:23.361384Z","last_seen":"2026-05-17T14:22:02.935562Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/heartbeat.php","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:19:01.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://varmeshrek.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:19:01 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2e668b6197727cd632f164211099024d","sha1":"5261a801efced652ac252cadba09fa32361b5511","sha256":"d14c60cb2cb669a7c3c0bbda764575bdd597a2240801a95e814a131aa329bb2a","sha512":"d35f7e3b44303e42ff3cb783fd716264631ed86e66aa06b016a9918364eb84624db4dff815ec9460c2baf3afdf7acc564c10ff2f6a5f941177b8c64c581796ef","ssdeep":"","tlshash":"2870002808a80022880803080800ba00a82fa0a30080000a20083088032220a0223a23","first_seen":"2026-05-17T14:01:06.76174Z","last_seen":"2026-05-17T14:19:23.36799Z","times_seen":3,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/heartbeat.php","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:19:04.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://varmeshrek.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:19:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2e668b6197727cd632f164211099024d","sha1":"5261a801efced652ac252cadba09fa32361b5511","sha256":"d14c60cb2cb669a7c3c0bbda764575bdd597a2240801a95e814a131aa329bb2a","sha512":"d35f7e3b44303e42ff3cb783fd716264631ed86e66aa06b016a9918364eb84624db4dff815ec9460c2baf3afdf7acc564c10ff2f6a5f941177b8c64c581796ef","ssdeep":"","tlshash":"2870002808a80022880803080800ba00a82fa0a30080000a20083088032220a0223a23","first_seen":"2026-05-17T14:01:06.76174Z","last_seen":"2026-05-17T14:19:23.36799Z","times_seen":3,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/assets/mashreq_banner.png","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /assets/mashreq_banner.png HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://varmeshrek.com/\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:18:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 14:34:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1928838\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1928838,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1377 x 768, 8-bit/color RGBA, non-interlaced","md5":"00b4658bc8ee7ec0198e2ac30661c01e","sha1":"7178d77f7b1258dfa63c06f5b89e94d0a7707460","sha256":"cea1e3e04a379385d58bd76350ae0f7b1527da358ccea492566688b837357bff","sha512":"4da98f82e19c7af6eecc1562f0b23af1b95a92365bbab0aa0ff02372ad38e4c76bf61e9b7050eb952e971df1c036cb964c57b49fb7b133814ff43a71ca9b3d0e","ssdeep":"24576:F18J/H2clSP7vO2dLScbozV0L5/KM2QiTcrIfUwdRG:F18J/H2clSP7tEzUcQisIfxRG","tlshash":"3a2533a39173945cbd8fa5f8069f850c87961ecd193fa7b480b382ea2b4385117e3bd5","first_seen":"2026-05-17T14:16:03.0036Z","last_seen":"2026-05-17T14:22:02.930919Z","times_seen":4,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/assets/watches/watch6.png","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /assets/watches/watch6.png HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://varmeshrek.com/\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:18:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 14:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5042453\r\ndate: Sun, 17 May 2026 14:18:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5042453,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"cf6310c4b0f42a086d565b09fef89156","sha1":"dd35ac6301dd910d9948e16a8e4a9f79ff76bf21","sha256":"ec4790acd201ec6543a1961155f72c17eac2e6f2e6136c8ae20d1921e63c3c00","sha512":"de76bf12f52c3b54fa8a8f9518f9be0057f155d0cec7d0ab2d942972ac8afab2b67508f341e7b9f251c29ee8ccab3d6974507d16cdeedcabdb7b47b1c7bf4f0e","ssdeep":"24576:XEgsB5uO5xlEUCacpQe8y8HlLy1pJb+C9wI/wtNRbv:BsB8OPEiHlLPZJv","tlshash":"c62523ced6636891e1c10930ac59c4f8cc15b40b5bba48b50e9f76c7c12697c63aaff9","first_seen":"2026-05-17T14:16:03.034448Z","last_seen":"2026-05-17T14:22:02.92168Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":2009,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://varmeshrek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 15 May 2026 19:02:54 GMT\r\nexpires: Sat, 15 May 2027 19:02:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 155759\r\nlast-modified: Tue, 16 Sep 2025 03:39:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33820, version 1.0","md5":"3c9597566d23234e05dc818314188491","sha1":"caa2f572bcbbe2985a96a9d59a459b2d1990b356","sha256":"82c13cbd1352d76e97c3d335caa912ae68fecdc3949a43cf8d149eb892384c1b","sha512":"d76f835a4a850b0225c5e93170423220970e6a40a9bfcd2ddf1e4cf054a543eb640e591495d5250437b9f5dee704feb3b16065318f8b926fb26dfc89baed0034","ssdeep":"768:cKG0/+s/RooAoTwdJMehHY+8ko/9givnjHYzIvg0Hk2Oeej:TGiR/RoqIVpT8+ivjHQyg0HkheS","tlshash":"fee2f214abfa7963912a2ba7bf354f6fe753f391ce0da844074e03d644699409f8030c","first_seen":"2025-06-03T03:54:51.937094Z","last_seen":"2026-05-20T10:12:25.370203Z","times_seen":4203,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":252,"dns":1,"connect":7,"send":0,"wait":8,"receive":18,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:18:52.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://varmeshrek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 04:57:44 GMT\r\nexpires: Sun, 16 May 2027 04:57:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 120069\r\nlast-modified: Tue, 16 Sep 2025 03:39:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30896, version 1.0","md5":"4d90a59cb1819bdd41f970549ab90a16","sha1":"714d40cf07db15fa9268ea607211c31438e4ded4","sha256":"748022f50c427456ad66031e855349be3448ee1f05a5f1eb59574ebe0c686749","sha512":"a0acca1df3a6abcd7b6f4c2757862b77af98571e283adb26be5c5f386c3c1e59afd1e1186ee17a4642c410ca7d2eb60e3cf51df731010bdc5ad9a5b3a7f8eec1","ssdeep":"768:6L9cTVSKprJeCIyonOLwDIzFBO5CTJH0mtCFiCv:k9GteHyonM9ZBO09HxMv","tlshash":"bed2e1c2bca5cd835d7e7f721239a96f008c1c8b776c99fc5cf21e644494dad028aa91","first_seen":"2025-09-17T15:48:15.244682Z","last_seen":"2026-05-20T10:12:25.364316Z","times_seen":2470,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":357,"dns":1,"connect":86,"send":0,"wait":9,"receive":40,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"varmeshrek.com/heartbeat.php","fqdn":"varmeshrek.com","domain":"varmeshrek.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://varmeshrek.com/","date":"2026-05-17T14:19:10.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.varmeshrek.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 13:00:21 GMT","end":"Thu, 13 Aug 2026 13:00:20 GMT"},"fingerprint":{"sha1":"98:7F:F2:63:1D:29:91:2D:8D:92:46:F7:05:65:E2:24:6D:5F:18:FA","sha256":"AB:AF:32:0B:41:8A:75:CF:93:38:A9:76:0D:49:37:E8:77:49:67:D9:D8:C1:AF:50:D4:A9:2F:32:59:AB:FD:F0"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: varmeshrek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://varmeshrek.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=d76e896a926133a52b0badb7c0aa7a94\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:19:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4f89be19276d0ba55a7d63f229d359aa","sha1":"da6c0546366e326ed04ffb92b4d6f4a392d30931","sha256":"437f4c62afc71e086fd909d42ae8cd477fe374b4382cc3eee67eda3bd22da8a0","sha512":"747621e44a33c4ae4a0cb65d3fec343268e9b3580c42b17c9c92a6528a6b004d487df91461b15de6189a24dbfd0486ab3e431dd2cc3e211dc0b961c47bcec1bc","ssdeep":"","tlshash":"bb70002008a80820880803082800ba00a82fa0a30080000a200830888322a0a0223a23","first_seen":"2026-05-17T14:01:06.75455Z","last_seen":"2026-05-17T14:19:23.36254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}