{"report_id":"cdabcb54-e50f-48c2-b632-c1229b873ca4","version":0,"status":"done","tags":[],"date":"2026-10-06T21:47:48Z","url":{"schema":"https","addr":"valoskinspray.com/","fqdn":"valoskinspray.com","domain":"valoskinspray.com","tld":"com"},"ip":{"addr":"109.238.86.76","port":0,"asn":201738,"as":"Ufo Technologies Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"valoskinspray.com/","fqdn":"valoskinspray.com","domain":"valoskinspray.com","tld":"com"},"title":"403 · Forbidden — SilkGuard","dom":{"size":12077,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (611)","md5":"ba26e4b65ba041b7ed0bd6eee31b6a8c","sha1":"eccea6e5e24206d4a653efb25a8008650197f21e","sha256":"9cbe9d722b6a40d08401ef368e19c1ec1966f6c8684589ca187f41b1dbebed04","sha512":"b97177908b52a3572f624361df631d79b93309b4f9bccf80bdeed8d6b6454feae72963ab94c64570912113552050179f49f1436f3ee2a586adb2203b5a9f9302","ssdeep":"192:Qg0adqflIEkwHWR8QudTtdQDxWEXUF33Lg7VSiySeLDCo/O62MG3m:DCkfDcmo","tlshash":"4a42b96623730135f833aaa577db6b0a6161e403c406ddb53edc0248cf8aafda6d274c","dom_hash":"domhash56b1fc2b30f987be6dc585ae94307f78","first_seen":"2026-10-06T21:47:51.294425Z","last_seen":"2026-10-06T21:47:51.294425Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"valoskinspray.com/","fqdn":"valoskinspray.com","domain":"valoskinspray.com","tld":"com"},"ip":{"addr":"109.238.86.76","port":0,"asn":201738,"as":"Ufo Technologies Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-10T21:47:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"valoskinspray.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":5,"received_data":121724,"sent_data":2824,"comment":"","tags":null,"fingerprints":null},{"fqdn":"valoskinspray.com","ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"domain_registered":"2026-06-01","domain_rank":0,"first_seen":"2026-10-06T21:11:36.749527Z","last_seen":"2026-10-06T21:11:36.749527Z","alert_count":1,"request_count":1,"received_data":12331,"sent_data":486,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":13320,"sent_data":611,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"valoskinspray.com/","fqdn":"valoskinspray.com","domain":"valoskinspray.com","tld":"com"},"ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"473d5479d1552f2effd785c2bfb8e730","sha1":"8650f0f79632520093a485a37a9a3c8fa21ffb0f","sha256":"85cff4e42601cd6b402eac1e7312e5702163d8499ddf39f21eb6dfa8718d24ad","sha512":"9ecbe588d047e095101d15d77e0e4bbf173b246088f28e8661d7c7730bd5e4a97c7e658c2faa7c35abb521e3e01828d6bf81f278412f8923b14ad4519e26fb58","ssdeep":"","tlshash":"fab0124031c004808aae0101c1c32503325ed20144500441284b840a2029c9a33298b2","size":88,"data":"","first_seen":"2026-07-14T21:11:46.946004Z","last_seen":"2026-10-06T22:54:36.111792Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valoskinspray.com/","date":"2026-10-06T21:46:58.135Z","timestamp":1791323218135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valoskinspray.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:02:18 GMT\r\nexpires: Tue, 05 Oct 2027 16:02:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 107080\r\nlast-modified: Tue, 16 Sep 2025 13:27:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13768,"size_decoded":14581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13768, version 1.0","md5":"5853435d21b13022c663f99f2bd76107","sha1":"1f063bd9a3dfa8dfd04e071c0a18369a971f8351","sha256":"a7c90c89240c134f7fdd33d40c000ec90b79d675ea53e8cc5a6d423c073de412","sha512":"7b7ea49e16c5255394872c346ea109b6687101c03e6c69ff634f3e835d8f5fc87a6e9846e1dd95e9b4e54592a2a26ed139db16c35958c6abd6e877fd5bb2f9ad","ssdeep":"384:CEEvtXmScTc9b7/kB++WPXP7kRU7+YTSagBj+q11Q:bEpn7skjkA+YTSagBS81Q","tlshash":"d052c0b8d5df2408c784e2b5ab7c2559c8ca1691d078bfb91a3235069f62d2180bccfd","first_seen":"2025-09-17T05:43:28.937898Z","last_seen":"2026-10-07T05:57:35.136328Z","times_seen":17929,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valoskinspray.com/","fqdn":"valoskinspray.com","domain":"valoskinspray.com","tld":"com"},"ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-06T21:46:57.224Z","timestamp":1791323217224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valoskinspray.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 13:09:08 GMT","end":"Thu, 17 Dec 2026 13:09:07 GMT"},"fingerprint":{"sha1":"29:73:4E:03:34:E8:1F:27:E5:DE:07:09:88:A1:E0:4E:0C:B0:D8:11","sha256":"D5:AF:5B:BE:96:35:3E:A1:7C:49:3C:30:9B:F9:EE:40:2D:59:A3:45:78:4F:88:36:84:B8:37:6C:01:9A:AD:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: valoskinspray.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 12064\r\ncache-control: no-store\r\nx-incident-id: euwest1::1791323217-zMg1gcPIrT2Dl2bequ01tGUGmGu4AaeP\r\nx-edge-action: block\r\ndate: Tue, 06 Oct 2026 21:46:57 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":12064,"size_decoded":12331,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (611)","md5":"2952435b43adf31d760c1edaee75568a","sha1":"2e4d9a8604923c031e040e672d74840aaa580695","sha256":"6f068569cec4af3bde1ff0c9c58a569b05f8a4d3ddb91b0c821ff105d6c44e2a","sha512":"9b58742ee3f6964b5e79cd3e25347bd74b36e2eaba740581ca93ee7a2b6ada141c1ea67f68784a2ef57337b384193fc7aa62bfa4a282b5bad35555a5c3d2e9c3","ssdeep":"192:3sg0ShqflIEkwHWR8QudTtdQDxWEXUF33Lg7VSiySeLDCM/O62MG3+:FWkfDQmI","tlshash":"2142a86623730135f833aaa577db6b0a6161e503c406dda53edc0258cfcaafd66d274c","first_seen":"2026-10-06T21:47:51.306168Z","last_seen":"2026-10-06T21:47:51.306168Z","times_seen":1,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":236,"connect":30,"send":0,"wait":31,"receive":3,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"valoskinspray.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Instrument+Serif:ital@0;1\u0026family=Geist:wght@300;400;500\u0026family=Geist+Mono:wght@400;500\u0026family=Bebas+Neue\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://valoskinspray.com/","date":"2026-10-06T21:46:57.979Z","timestamp":1791323217979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Instrument+Serif:ital@0;1\u0026family=Geist:wght@300;400;500\u0026family=Geist+Mono:wght@400;500\u0026family=Bebas+Neue\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valoskinspray.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 06 Oct 2026 21:46:58 GMT\r\ndate: Tue, 06 Oct 2026 21:46:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12636,"size_decoded":1670,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"647cb15b39f4708065fbef8d400cde4b","sha1":"7e66ca72528fff0bc2816a1065b294bd48ecefbf","sha256":"37438a8c15e04702f41cb9b94802eeeffdd476f868691072305cb048e7ffecb9","sha512":"58d8e042000f2b7b12052705f3b9d7e68ad3af7dadf9916810785fc3332cad90fddaa419e64001c87591827e1c4151a9080076116d9e63c673392f68925b77c1","ssdeep":"192:K1TYtKJLVtoXtrJqotVwtEJZvt2ogkj3Azkt2ygLc3AsLtV3OvW9OvWN7A:RQm1c+WYAzIAKp2","tlshash":"3242fc91046bd400eb931cc237cf7e36ae8e61157444d57eabfe08dcacaac265365b2d","first_seen":"2026-10-06T21:05:45.646032Z","last_seen":"2026-10-07T05:57:35.143258Z","times_seen":30,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valoskinspray.com/","date":"2026-10-06T21:46:58.100Z","timestamp":1791323218100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valoskinspray.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:07:05 GMT\r\nexpires: Tue, 05 Oct 2027 16:07:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 106793\r\nlast-modified: Wed, 13 May 2026 17:53:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29304,"size_decoded":30117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29304, version 1.0","md5":"981055687324f3dedfb5a24339f2eede","sha1":"73487b35c1a834e402828d3f3421821630cfa5ca","sha256":"49f46fee70346a0520f20763e5a41807ddfc33268d7010657affe031179aa0b4","sha512":"85f5381398698481b504686b2b9b525de81afceb6c0a068a689a41f0cc752c6b444773711059f72e61c739027aac1666262bb0b6288b4c90e632dc4bc34e7ee3","ssdeep":"768:ooecEnSFJJZ4/IeT4Iih8/mnmfgljb2dePdhiLMGF9YKA5Y:oaEnSFJH9/hingl+dzMq91iY","tlshash":"48d2f1d5da2131ffd84ab7b458cad6913525256085bbc706ccb0cbc1890beeaf60d1ee","first_seen":"2026-05-14T01:29:15.492288Z","last_seen":"2026-10-07T06:15:16.338915Z","times_seen":6854,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":30,"send":0,"wait":18,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valoskinspray.com/","date":"2026-10-06T21:46:58.128Z","timestamp":1791323218128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geist/v5/gyByhwUxId8gMEwcGFWNPoTcZY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valoskinspray.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:07:05 GMT\r\nexpires: Tue, 05 Oct 2027 16:07:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 106793\r\nlast-modified: Wed, 13 May 2026 17:53:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29304,"size_decoded":30117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29304, version 1.0","md5":"981055687324f3dedfb5a24339f2eede","sha1":"73487b35c1a834e402828d3f3421821630cfa5ca","sha256":"49f46fee70346a0520f20763e5a41807ddfc33268d7010657affe031179aa0b4","sha512":"85f5381398698481b504686b2b9b525de81afceb6c0a068a689a41f0cc752c6b444773711059f72e61c739027aac1666262bb0b6288b4c90e632dc4bc34e7ee3","ssdeep":"768:ooecEnSFJJZ4/IeT4Iih8/mnmfgljb2dePdhiLMGF9YKA5Y:oaEnSFJH9/hingl+dzMq91iY","tlshash":"48d2f1d5da2131ffd84ab7b458cad6913525256085bbc706ccb0cbc1890beeaf60d1ee","first_seen":"2026-05-14T01:29:15.492288Z","last_seen":"2026-10-07T06:15:16.338915Z","times_seen":6854,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentserif/v5/jizHRFtNs2ka5fXjeivQ4LroWlx-6zAjjH7M.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valoskinspray.com/","date":"2026-10-06T21:46:58.130Z","timestamp":1791323218130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/instrumentserif/v5/jizHRFtNs2ka5fXjeivQ4LroWlx-6zAjjH7M.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valoskinspray.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:05:02 GMT\r\nexpires: Tue, 05 Oct 2027 16:05:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 106916\r\nlast-modified: Thu, 04 Sep 2025 17:19:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22128,"size_decoded":22941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22128, version 1.0","md5":"bc891bdd08ad55f22a545508466f855b","sha1":"24e6c99ca08b1e5acc92cf106c586f491ed15151","sha256":"5a51946dfffa82972bc98745359c46761515641fda557c25116459a9f83da4a7","sha512":"50f56f74de747ac5e63de8000dad47fe758d14f77a6f196938ea075e836ce29e01f98884e37f278e0a36ce50a03874af239ebf36e4c7480b3e05021b1b70f9a8","ssdeep":"384:KgIqm88WU0pMFLBCqOeANVwepCcyQxODsiuRdjccBgqirziD/pOk5Tuc:dnm88WyFlJc7CcRxOArecGqVDRF6c","tlshash":"71a2e1d844d527e287e4b4b5e530b8a6ac7ed9da8e3b266330f3a999b8484827343410","first_seen":"2025-09-11T04:20:12.966234Z","last_seen":"2026-10-07T05:57:35.126438Z","times_seen":2546,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valoskinspray.com/","date":"2026-10-06T21:46:58.133Z","timestamp":1791323218133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/geistmono/v6/or3nQ6H-1_WfwkMZI_qYFrcdmhHijks9bA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valoskinspray.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 06 Oct 2026 04:34:51 GMT\r\nexpires: Wed, 06 Oct 2027 04:34:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 61927\r\nlast-modified: Mon, 08 Jun 2026 16:32:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23156,"size_decoded":23968,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23156, version 1.0","md5":"101f830f66bde67d6f815e42ed6c6f10","sha1":"9b4584e63a1554a356f3c6ad4dc7b98a034313b4","sha256":"c9b2702d0ff5865fcf7ed9442ec95888830b0065682ca4f2b44e2fa3b3a4f269","sha512":"94ba8955bef6c9ba90cd9a1ac2ebe06e6574ba2a567f0d246b79e9872d538d12bb20d3c56e67a7e5a2f36d82306ab0ca09ce315cbd171c66d471af434206edc5","ssdeep":"384:Nmb/KM+jEhKHk2xFO40A1ncGNcx18I+3Qiuo187cwcr5RIqUtshyqAeWeM6r2uOR:NaKLjEg9JbczZwQho18Awcr5RIxtsIeK","tlshash":"2ea2e129cb41eb14610048e86b820c4b3fb47d1b30835aee6452bdbaa4f2cbd175e5fd","first_seen":"2026-06-09T00:53:20.653285Z","last_seen":"2026-10-07T06:15:16.339995Z","times_seen":1285,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}