{"report_id":"cf77ce96-012c-4c89-8064-0776b0e49bee","version":0,"status":"done","tags":[],"date":"2026-09-22T18:43:42Z","url":{"schema":"http","addr":"medpharmacygroup.ge/","fqdn":"medpharmacygroup.ge","domain":"medpharmacygroup.ge","tld":"ge"},"ip":{"addr":"188.93.95.68","port":0,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"final":{"url":{"schema":"https","addr":"medpharmacygroup.ge/","fqdn":"medpharmacygroup.ge","domain":"medpharmacygroup.ge","tld":"ge"},"title":"เว็บหวยออนไลน์ จ่ายจริง จ่ายไว ซื้อหวยออนไลน์ แทงหวย 24 ชม. Survey","dom":{"size":274647,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46697)","md5":"fc4c80dc511af7dabf057d7a1115570d","sha1":"011b4e95bb696fec2f00b59b9901f936f1e61241","sha256":"cea702dfb070921d5accee55cf222b4d803b76ae8faf27afed761eb8d0035526","sha512":"09a17990c543a5340bb011f4c599adb9edb28de24faab6808d15b8fb1fcd716d415f1b801d178bd090b6f127864073413510f8ed874b11ce57082cc03e07354e","ssdeep":"3072:iE7ORmS8fHeCbVosmtIpLz7Qh9TadG7ABdg6Ua6Wd0BUc:VPQen7OsQ6Ua6Wd0BUc","tlshash":"8344f96269172201d7235ce9b2cb3f29fb1da216d5024a78bbfc14ac6ec6d9523d370d","dom_hash":"domhashde999d0a1ba48756a5978b6b3392c048","first_seen":"2026-09-22T18:44:04.488416Z","last_seen":"2026-09-22T18:44:04.488416Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"medpharmacygroup.ge/","fqdn":"medpharmacygroup.ge","domain":"medpharmacygroup.ge","tld":"ge"},"ip":{"addr":"188.93.95.68","port":0,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T18:43:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"medpharmacygroup.ge","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"medpharmacygroup.ge","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"medpharmacygroup.ge","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"medpharmacygroup.ge","ip":{"addr":"188.93.95.68","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-01T11:33:15.557241Z","last_seen":"2026-09-22T18:39:03.552716Z","alert_count":6,"request_count":2,"received_data":538045,"sent_data":1095,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WPML:4.4.0","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"Slider Revolution:6.2.22","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":2,"received_data":57635,"sent_data":1120,"comment":"","tags":null,"fingerprints":null},{"fqdn":"harmed.ge","ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-01T11:33:15.558536Z","last_seen":"2026-05-01T11:33:15.558536Z","alert_count":0,"request_count":102,"received_data":4640293,"sent_data":55627,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":3,"received_data":149129,"sent_data":2034,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/c01ac50650734c9313c245b4166d6144.js?ver=d6144","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7720ac72180c0f3f042fa2277e1554e","sha1":"1dcafb034d5a3e4e94d6205ddab55364660d8db3","sha256":"66dfbf8e0289967c43fe846462eac246aa2d8e0dd4fdfb50118172b7d6fd91b1","sha512":"ddb9d8fcf2b4eeb21753d971a88af9882a10d084a10bb29e4927f73886c74648e7fa26ae64f8f425cbfc10ac705d3f84e33f8ad0f073c03df3d24888b1b566a7","ssdeep":"192:QYAtBY1jWBoYfgZn+gkEmaAGCkHjpXCNd882E9cNS/JWmw:QYAvSWBoYfon+gkDkrH1XCNd882E9cNV","tlshash":"d002845e365a6a4156efa078616f324b613a20aa5801815cf4bc9fcfad3ce1431b7d7c","size":8468,"data":"","first_seen":"2026-05-01T11:33:24.016944Z","last_seen":"2026-09-22T18:44:04.539621Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/42a9a4f1ce13053c1567df544c3f5ce5.js?ver=f5ce5","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"45679cab9fb5ff4d1a39d585d52fc36e","sha1":"4b5de4488c06da0536034aadd7d1df2363ecfeb7","sha256":"106bf09b3755caefcf6bb0963fc9db0b8562ee459a706f89425ff7c1e948869b","sha512":"24865906f663c2b662ed6a7a09a261843bf12e2f71ab5dff0f3679136e25b31e974825f6483d63a502e62f6b5de16ed52af75fb203b09a13d68f06fb844dac10","ssdeep":"","tlshash":"17410f98348c3c1a45f71be075bf15a8f13cdb72009a4098c626a7e02d74c439a9be6e","size":1948,"data":"","first_seen":"2025-07-11T21:44:50.358481Z","last_seen":"2026-09-22T18:44:04.530141Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/4ed5a20e262e7e6600d4660380700330.js?ver=00330","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b34bee4dadd25514c65b69adf0d0d8b","sha1":"b9c1ff1e004b27c000b2cbaee8a328b84d1deff3","sha256":"8cb620d51972f434f116497146aaa242cc5b5d242b4aeae7fe5412458cec7feb","sha512":"50afe69037b42ea935c0b607e23779b3b8893ec8f8994e431883cba8fc97a6c8fd92e28ed89997d78fbf1bd748cc72459e344291907382cddef2e893724edd1e","ssdeep":"3072:MHYu8CpEgycN/piwwAf1wiT1VCExSFth38t:M4ngfNoaT1VCExSjh38","tlshash":"45c32a9d726471b9999711ea314f2a0a7333946e840bc16cb538dce85cf8d0d32abf79","size":128418,"data":"","first_seen":"2026-05-01T11:33:23.984153Z","last_seen":"2026-09-22T18:44:04.55022Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/e051439ace0f02b26a0d899ea562c38f.js?ver=2c38f","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad1a8c7d5c80346cd0e6be9dbcfa1963","sha1":"660ecad7d7a5dca9c74fc3f859439d3cf83eb3cb","sha256":"069a06c3fd9b7e5c8e1ccc6a80718dc5ec5ea0407eb9cb49dbf6a835a3325410","sha512":"fc5b9f42182440d8cf1a4be4a8208198ad4485df7e2cffa0321ba8083c2ca052d1f4deaf7f1b839560caf012d112903357a3f93b1574066a810feda8acf4edae","ssdeep":"192:sEPwJdswSRibO6JSplZn41SFzpYK2p7ESa/TI9w0uV6uSnotk+nWEdpTARHrLG4e:FH6JElZn4WpYKC7E5rI9oV6ultk6tIe3","tlshash":"902286c5f155396687bfb034713f230a223748ecf8445c68bc5d95e1aef8a4e02b6b69","size":10865,"data":"","first_seen":"2023-10-24T20:04:05Z","last_seen":"2026-09-22T18:44:04.499284Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/e3b331d65ec5dbce6ee2d5e0e7b400ea.js?ver=400ea","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"edb2d5e1fc1d11c6153cc5f739c73a8d","sha1":"88c3094b52ab8e37d5a82cf82322c606d03898cf","sha256":"ab11e296c38aa3fc852b80a9f37040d90fa58140f032ad5ad7a28828e7fd7068","sha512":"967255649dd7151af5cdae95856f03f0aa942aca00c9524fbda572d3b69c63ec08aafdf745acb4b6d935f4d0229fadf390d536a80bf725bf785b1561443261fc","ssdeep":"","tlshash":"ad5122e77b54ed1b03827472705b7a6ce3330405e9cac496c1a0b9a21f786eb753ea5c","size":2640,"data":"","first_seen":"2025-12-17T10:47:21.86167Z","last_seen":"2026-09-22T18:44:04.570349Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/2960c0e596963667f9a7ddf25aa1dfd2.js?ver=1dfd2","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"acc73316eee10726fa31f35210ec52a5","sha1":"edf11ef42996e67d6ccceadf9df3ac56014671fc","sha256":"d361fe46c44e5f6b6b495921d9d9c3d0392d0bfea7c96c145e8f3bdb3f2667e3","sha512":"f6516fb1fc6eb226f7a7076287870417376ae0dad093cb70b4defe34f1e413157e3283653e264422ffe540452b5dcf94afff92c448cce0aff5972324f7e84d6b","ssdeep":"","tlshash":"9141ed07f4312d7321ef97b5289eb9842523063e88114611366acb2c257a9c7763bfbe","size":2141,"data":"","first_seen":"2023-03-07T23:28:30Z","last_seen":"2026-09-22T18:44:04.556143Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/311d8328744a7c21b7fdcaa72c5111d7.js?ver=111d7","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"42d4558e0ac3c699b4cd6cf8322ec8ae","sha1":"c97a82545657c65cf4b5026ce4724e398a1148f1","sha256":"73455ce3ba49cbdbb5014e1030d93ebffb8dbc1701a7e4bd2f6aa92fae96ca10","sha512":"6e40a4fb4b18412b25b4868bf6968fc5e139fd81ff1428df4927c853ec0e3b392fe563bd55367d6f35592ffde75288b20c71c41ce6551eabfce4955965230ef5","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxc:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzk","tlshash":"3af2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35447,"data":"","first_seen":"2023-05-11T13:59:04Z","last_seen":"2026-09-22T18:44:04.518402Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/280f9885c3b754b0d592642bddfb84a2.js?ver=b84a2","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"310c61a1dc4f20b98549cef0483c24ca","sha1":"73d574151aab04388ccbe13edafc0681711c3023","sha256":"bda3de096adf90d94829d33a028add09e613f5d2384cc35fd14ee9eb17781d6b","sha512":"f218690c564e505d3c38de34bcdf4b046105e886f72a49ed99c847057cb515086675a142cc9a09c66f995d937ec52c8f8211bf0d2450def2bc5f4b2f0365621a","ssdeep":"96:xGqKtAZw5D9jEOVEE1VlebgJAW42IJDaDlr:EGO55YOVEEblekJAWNIkD5","tlshash":"88a143c9bb467032c79792f1863f4205b33a15bda009447cb6b984e5bd34d299236f38","size":4778,"data":"","first_seen":"2026-05-01T11:33:24.007716Z","last_seen":"2026-09-22T18:44:04.495742Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/616cb9e568e8d79fc49ed4750e990c2e.js?ver=90c2e","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"037a2ae90fb04676f7c237c0ff414732","sha1":"d3ccd368047a64edd6b3eff7d0ee72a72aadd9ee","sha256":"c9e1893c00aabdd8a234b5f8316ea8f17558e18959796443ff9d77e0e1046085","sha512":"cecee0a45704b855652dc1d50744367bfdc7745d1e3ae9038c2c057c234839b014ef0d1ff0fc367094d67cc04b44e759e0f0f68d2f2c746a44ec0ed79dc320f6","ssdeep":"96:IVCVfByk/RUNobBqL2mG0X/xMxHxqxAxixw3xex5oxrxAxW7qZwzIC:C6/RdBqLrxMxHxqxAxixw3xexaxrxAxE","tlshash":"478195ceb37217d908d95292009e16065277f65bd0e3005cb5fcfdc8a868d9d306fab8","size":4126,"data":"","first_seen":"2026-05-01T11:33:24.000882Z","last_seen":"2026-09-22T18:44:04.521622Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKCl7dmFyIGM9ZG9jdW1lbnQuYm9keS5jbGFzc05hbWU7Yz1jLnJlcGxhY2UoL3dvb2NvbW1lcmNlLW5vLWpzLywnd29vY29tbWVyY2UtanMnKTtkb2N1bWVudC5ib2R5LmNsYXNzTmFtZT1jfSkoKQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"12d5206ce84aaf3f8932743c6060018b","sha1":"74b0b3d8572408b45e33d3ab7d68486a62ac77fb","sha256":"c961c13ec5b0b257ee7049bdeb1078def025e3ee6c02ca609b6a45e2ca48056f","sha512":"dea6be0ca1c0be69d778c2c9397d7919535e13736d27ad78d373e1a7114f6838495b7e953fb4540a7424bfef63519ca4e952706dd644741a565d48c2865b15c6","ssdeep":"","tlshash":"35b0922b354409e4128b35e018ef93e53d32a488b9516814e8bab509d0948ca2802ed9","size":121,"data":"","first_seen":"2023-03-07T01:19:01Z","last_seen":"2026-09-22T19:15:23.590378Z","times_seen":8479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/8e60f33c0e4f253a2a78e8fab46bbcb7.js?ver=bbcb7","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffa74b150a293478d78d6d167dc7b353","sha1":"a7fc1fe9cf4d542f3d0a36812df0c4cf0f87eeb4","sha256":"e086beef5f2d30c412f530f3534616527ed8dfbbf7dde4bc06e367d63112cab8","sha512":"4a5e4dce668cd84bacb9d7145ad0f9e12ae9b900fac66865ec682931383a7680accd41491fe8b0208ed86a0a6f03d147578fc5925948fd1b8a424aacd45c0285","ssdeep":"","tlshash":"3321a8ca38c6bce583fb311c562f72821161913f574299a31ceadd7c35a6c913c13e68","size":1200,"data":"","first_seen":"2026-05-01T11:33:23.99835Z","last_seen":"2026-09-22T18:44:04.508145Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/8350ded823627b2fcd38a61d8e4bb33a.js?ver=bb33a","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"32a5e77d9f44043e4575bba80aed8e6f","sha1":"a81416bb6c3b9ecd57ce54f5ce068e7fdb0246d7","sha256":"f91fab60eabe3eaf340e9124d64940dc8742ddd3f5feedba725e9681e79da89c","sha512":"8bed458fe23e885f892824e6dd67ecb7cff2f0d51d8c952b78a66d5d8b4d4c006d15bf05539496c25cac37d3737b53bb1d348e1a7c3794df9f3701cd14609cc7","ssdeep":"192:rcn1gNsAeuLJJE2mBrnYgfGGFTsPdQlJh1NmgKzm:rrsuNJE7x/3sPd46M","tlshash":"4d22758831863a72349ba3d8291f60da623664989909555c70385fddee3df9023f37be","size":10116,"data":"","first_seen":"2026-05-01T11:33:24.060791Z","last_seen":"2026-09-22T18:44:04.556766Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/6a71f5fda76e206a00d18f344441fd35.js?ver=1fd35","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b16fb62942dca6224316bb30df687b","sha1":"1382aa0f344eb6415eef0b13315de02366608917","sha256":"040b442f3e801c9f82c4fe7c1b73e571c60efa7387802429a8a2e27a501f2e27","sha512":"bdca29b3b0fed1d7945786dc22be7ccf4f525d42b94bbaa3a884cb4263ea105fe6db27fb4c5ca7e0d057b8bfcd2557bd9e8a1e0e5d693b730bc72cabc2ed2318","ssdeep":"","tlshash":"e0f0c060b585e9f062b990e5003f5381f232b476362170d18f4cd8b4acb0a9a037ec9f","size":500,"data":"","first_seen":"2023-03-07T12:58:57Z","last_seen":"2026-09-22T18:44:04.490969Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/8737bf333c5a4f497eff20043474089a.js?ver=4089a","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e035784dd9266028fbc398842601f6b9","sha1":"1263f64133a9957bd74a10e83ca4893dd004b638","sha256":"f5bed67298b8ab1586f26ae1ea59949aa3a03a3bf8e510613c65e45d38a35d8e","sha512":"9f6584f6114b821ca8c1457ef022b7771767bd09769760719636cdffc8c494efd221514e14911ce79978d95a25cba03cd7ff3bcfefd66aa87288a6743b8afe14","ssdeep":"96:+5gEBcI7Du/3+D4Xf/TrURT19yArAgQ4FNln85mOpF6jURg/mICe:UtcIHq3hMRB9zQW7Ctr+OId","tlshash":"7ea123c474c3b460d673b062a47f544ab27a9ae1782dc480d25c94e13e73acee0b7e6d","size":4912,"data":"","first_seen":"2023-03-07T12:58:57Z","last_seen":"2026-09-22T18:44:04.547366Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/00aa1c7d3af99baa550a22949d64e936.js?ver=4e936","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a3b3755cd23e73bd6123742ccacd139","sha1":"9d11b04db3758a0ba19a43c4ca09683b9442745b","sha256":"0efbb245ac703a973da04596805a2e264f56dbac5c69339780aeb5fcc2efc6b3","sha512":"16a854093b066884243701aaff1b6b2829bfcfe18a8ed27fc04c081f3ec2efec4fd0f9090a7bff483131726fafa1a24ecb6d9b0b8db254132057bc3c20969d86","ssdeep":"192:XcnSRa1BFzAb3ymfh6KpnYzDmCHqyjhUy/H3Ds9sFGeZSNSUikf+F:MnSRWEBhHpY/rHyy/H3Y9sFJZStff+F","tlshash":"e222c4acb1d6b096175710e4847ff10af23bae5430d6e890c645c9e57c70aca61a3fad","size":10232,"data":"","first_seen":"2023-03-08T23:56:17Z","last_seen":"2026-09-22T18:44:04.529524Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/ec1e6052a88dea2fec6d53b8dea24db1.js?ver=24db1","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e29d8a960798533829647f8e3a206fb5","sha1":"93d4faded4fa33afa1764da542e48543f05b3a87","sha256":"01b853ee7cbc8389186f6a4cf0cfacbb66ae2a10fc5f85f9acf8aef6c62df9d7","sha512":"c603a18e42be9f6699684a21624e2d763eb35b843e51385128e2ddb7083924417af2139e69d577c9e62e38e55a6e70b79e773763cfc82efe1dc39ec59b80fbaa","ssdeep":"","tlshash":"ba5174763480767285bf39f25c3f838abb3199303a47e044890cae967639d9d6032bd4","size":2510,"data":"","first_seen":"2023-03-07T12:58:57Z","last_seen":"2026-09-22T18:44:04.510501Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/9c22d0e7575e2348f67dc34f02db0841.js?ver=b0841","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f51a9f57f79e5fbe1051bfcab9435b89","sha1":"852d1b9e5880cc0ab88fabb052d7f9486f45b1ff","sha256":"c93d2f2282c22b9b7b54b69bdadda26f62b6935b450329a8be133a9084a30fe9","sha512":"8fa96e0b516d355185a2ddc7e731d00039a345978c78bb5b775bded932af1bde938435e9901f245971e7414534c9679e312930c4e7dd597d3bde156077235482","ssdeep":"768:lScuzyTXmQsy2WOigtwudCQ0kJwJLOpyrbOvtR:lScuzyTWQ72F2QMJLOsrbOT","tlshash":"8c03d85df475a9ba41fb21b540cb720672512d3ec2968990b5ac6cb40fbdc8d3233a6f","size":38137,"data":"","first_seen":"2026-05-01T11:33:24.022697Z","last_seen":"2026-09-22T18:44:04.564038Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/bfa0962f120d42ddd4fb9d6dc546b31e.js?ver=6b31e","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa2062c4aefed4e35646fc091cbfb0a0","sha1":"35bd3f58537b584a0e9a031572dd271e56d82160","sha256":"6d328df87460b80fc09f06def901e4515c7ffd6ca0b8aa660d484424a136dba3","sha512":"4cc15ac998189f0e6f6351c181e26656e6825bc368d765e172d80bff91e1caee0a0e213096db4fa8960de455a397da20697dfb04b06a3c620e9adae03b76b7c8","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1X:9VIRuo53XiwWTvl1X","tlshash":"c023c94a7214b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","size":48904,"data":"","first_seen":"2023-05-05T13:18:23Z","last_seen":"2026-09-22T18:44:04.562909Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-includes/js/jquery/jquery.min.js","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"17738318d61d394f1de8890d589afaec","sha1":"f6d0c4dc1399cf02d53f5753ad46573a8bbc2ac3","sha256":"cc7403bab52ed166e24ea9324241045af370be482f5b594468f4a6ac6e7e7981","sha512":"242ffc23ed47553221460f601cb56c507e52a163e46ab9c89c3e39ab933a54fd326b2134d3e831df7f32614329775a0c600f63bf54f4c5b8994f090c5fba156f","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQv1:SdeIygP3fulzcsz8jlvaDioQ47GKK","tlshash":"fb93f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89684,"data":"","first_seen":"2023-03-08T14:21:46Z","last_seen":"2026-09-22T20:40:58.633458Z","times_seen":15434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/3e79f8ee4c25bc788224122cf0d0512d.js?ver=0512d","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"442375dc7af9e87bc9813d6d54dab173","sha1":"10a0ae499cbd8dea1ba93ebf6d82a623feae052e","sha256":"3e3815120dfc1f835f8f0f853e73ca751275c476455bbe79e1ea5ed0e395eb5a","sha512":"b75b2e29a5632ba606c9223be8f332ce0775587775ec01845639e787ef7ca6e109a65cad1842c8e652f5a0616640ed601d161300761f7475267c30935c3ab445","ssdeep":"768:SBcgN0o6d9zZ5NNoHeuTW3Bny+qyBiEYtTK:Cf0o6d9zZ5NNo+uTW3Bny+ZYc","tlshash":"4bc2a7097681105f4ecf30fbb497524f72ba95946019a069b8f8a4d1bef9f8170a6f38","size":26362,"data":"","first_seen":"2026-05-01T11:33:24.011975Z","last_seen":"2026-09-22T18:44:04.545222Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/c09527c131b9bfd52ac3c4da2fac0548.js?ver=c0548","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed34a0eb5d7b0118876dd2b8b4429801","sha1":"b8983373425b2d0ef1e9b49379580d160213c14d","sha256":"b137c4885e3a7f09b15a07aa1078d95d723472cb3eac60b70d2dd38514e6c495","sha512":"79d269e214806a3afa8c13de16a28face00d1731006b78cfef4f94bfd20f83ea41777492245988fc9740c7e2342d142f7d2d28aa37e014c818cbed1318f9afb0","ssdeep":"192:x9oDHJdlYT7TMcPv5b7KiG15tw5DlRnqVSaG88MdrHxlP72IDerNrDB:x9UdlYf4cPBb7KiW/YnnyBG8hRF72C+F","tlshash":"a012e96831f2605790b3b1507cf7d78fb372227d648399c0d09ce5a929bceba1226f19","size":9507,"data":"","first_seen":"2023-03-10T04:30:13Z","last_seen":"2026-09-22T18:44:04.502896Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/0d0de65b4097819365aa309836276e24.js?ver=76e24","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"add7fc831b2d62e61557a24f6662ce5b","sha1":"5237107a3d53572999de563cd58137f61374e687","sha256":"fe068227bcf446a061c99093bfd74e48105f2605f002dce6ab72d799fb035a22","sha512":"13f13ebb6db4e7e9e46c119d888c5ea6bea3b363e95f1c1d6b904bbe56980620de56cae1124a67e8ee164a5e0876850ccdc240ec5578043bd92031edb0f54c4b","ssdeep":"192:k9JcRXbFhyWpBXvqDHqpVSTmtqHr4ULkv:k/ch/xG+Y8ULO","tlshash":"3fd175cdb1c6f02503977725551f140ae33a699df9098009eb18ece1bcf484ea22bf79","size":6477,"data":"","first_seen":"2023-03-07T12:12:45Z","last_seen":"2026-09-22T18:44:04.576768Z","times_seen":317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"016d7634370e520916c41ab490eac5bd","sha1":"579ad5358893d3a80259d30706bb83f25d1166e1","sha256":"015fd535ee8f21b87a949dff6145d5b7c275abb1cc8c0d4cdc5400fb60e73caf","sha512":"d3ab38c814261523bd457f3413d6127670d9ba3ba7b97ff4f38bac30090120975f52805144b9fff5bf11504ab39c4f4e59373d31a454f635e414772e7238257c","ssdeep":"","tlshash":"7111352d20fa32fdf5cfc1aa8c7145b9d8f70a944a15f429ea4a7f470c61730a974816","size":1081,"data":"","first_seen":"2026-05-01T11:33:24.097901Z","last_seen":"2026-09-22T18:44:04.579712Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/688417fcb1fec5148ef45b3b76fa688b.js?ver=a688b","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc4420dba33d9de70f303a393e20a71e","sha1":"b92b2cc8b2e59690d9d92bec4ad3cd602fe5e707","sha256":"1057e7ca620debb14433084f0c18e642964fce1de94cb3cb2b20ea3dd470bad0","sha512":"69a25f34ef9d65c9e92556664bee227aa74505fe79602a4a0a3774028932a78b57a5f868a131138ef5e28cbe37ec4e1d486d67d657f88e01b7fbadeb8c4b8893","ssdeep":"96:42qsoJenl5DYyBIf5fENvXr14m3+xTWk7FmdqOdt:97oInl5kfyV6TK","tlshash":"1991656d3b2830b041dfa2afa09f5f49a23390169627805471fddca81a79a397b71d2c","size":4527,"data":"","first_seen":"2026-05-01T11:33:24.0556Z","last_seen":"2026-09-22T18:44:04.543742Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/88b93df2474d75c58a56a6e5b8920688.js?ver=20688","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"41bc2f470a566695a83fd6a7be23b85f","sha1":"de9c3e26c2500839a13a5498d437e42864dd376b","sha256":"9d00e8135bc81ef65e517211371c597a485f49d4b5bf315b16bce49b55fc2d78","sha512":"be46b59a8663513dfab85384d344294bfa787566b69c23bdc6abde83ab4102aaab9e6497db42996210e1621a94bd90ec7e93baa562bcf6822a2e03aba5665804","ssdeep":"1536:cY9sg+DgSDfHfGIQt4RcSS6eDq6/9q59Cl+ItzrFfxIKBtH2e2lv/:R9sg+vDf/V","tlshash":"de53758abad9b6e503eb60b5002f760fb1bbd854b44e95c1d265e5e0ac7984e4133f3c","size":64118,"data":"","first_seen":"2026-05-01T11:33:24.047441Z","last_seen":"2026-09-22T18:44:04.507375Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c55a9b034f0b0f4055871fa557a3a67","sha1":"21f77cf32cebf42907558be11031ba6d809bda9a","sha256":"09d4d58ef483ba5ee56c52bdf568464aeb4e89935ba19dbff1bfd5c119d7c3dc","sha512":"c5888f5df89b21c77246c685ddc2655259610edf64451a2639b7b0c65c72532a52cef3cdee86369f9f722dace2becf024e93744356610d970190c4a6a62b50ed","ssdeep":"","tlshash":"0431cdd33c99c2d0867b3669ed7aa326b252c433120591a580047cd9fd5ca239bcf5fd","size":1704,"data":"","first_seen":"2023-03-07T12:56:13Z","last_seen":"2026-09-22T18:44:04.58043Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1749b802e04f517a3ed11776c3d66fe","sha1":"ebab8ca1468b033038236381e9607837f77f5704","sha256":"be1715868f6b960658ca5c3725cb2aa099963c2998e1d6ccae70b8d539999d2e","sha512":"d6aed145da6c559f7015bfd70df42512df45bc9a172d031206737191396bae9775426f4a7317d65e4fea7cede3592b391fb21a1337cc2cc2348aba5cad65799a","ssdeep":"","tlshash":"4111bb354556912ecc232420e0dcbe9ad4a2e03ab50f8084c1fa9a3081a6a14622eeff","size":1081,"data":"","first_seen":"2026-05-01T11:33:24.093409Z","last_seen":"2026-09-22T18:44:04.581033Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/c5686ccf5028cfa93714e1b353470fae.js?ver=70fae","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e78d6646f5bb7d5fefad37d1fa801544","sha1":"c6124b7fda57fc93f71b39675ce54639f81d2b4a","sha256":"dceda4f5f5d89f2b4e5501b78e7fb444d3732abc3e05841ed56930a889064abc","sha512":"7d4dd1a6def10d70f7523a8a8cbb5ec5dabaf4d25f6941b1416091d1c6958fda2b26afc0f8e9e325d7cc3dfc7be2fee17900c6560b3b8203a488857bf8c602b1","ssdeep":"","tlshash":"d65183ceb122f4ba07e22981e507dac45532282bf19755bd2488a1e18f78e461527f3f","size":3031,"data":"","first_seen":"2023-03-10T04:30:14Z","last_seen":"2026-09-22T18:44:04.506677Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/e510b238128b652565a95ca455c9c97e.js?ver=9c97e","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"209dca571e638ac673e273be81a4527a","sha1":"76f66df140a86e52044fc1a959b2c75991e88a52","sha256":"ec7a72cb9662825e0ebdbee45de1684f93ee963661b6de0d5e4fe99c8fc5c25a","sha512":"35be6e2073cf7d7543a0925ff4aac0b878c940c348434e331bcc7722f58a65996287df5501011c6f8efa9ef0a98f58c5589d287721edb7ee48f423806a0c559d","ssdeep":"","tlshash":"4651c8d433c95d362a83b3395eff930261722709b50804608816c86931bcfea63b67fe","size":2983,"data":"","first_seen":"2023-03-07T12:28:41Z","last_seen":"2026-09-22T18:44:04.528882Z","times_seen":289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/f6d06e40776ef1eabb0e195e92142331.js?ver=42331","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"db8a7ffe16e84f6d1e9baf5485fba9b5","sha1":"33300ec72215e696099183815320c7a354010dab","sha256":"157037414ca2cfb0a2258f542c0f25dcf4c33ba9a8db2f483a6e8103a9dace1a","sha512":"e681fe9ca4edd054d432966c71280e2959a34c6c7cd188f99dfbefce9d273b88d2e614c2b131a340b7e9fa1af22c05f08cf533c5d4f97d27964a41c73fd44b6f","ssdeep":"768:ZDBPtwiLsbwzFFuuJYfBmPdUBrzdUOfGxBu7bb62z4Mt/iDZdabtrtXcGdQeFvtr:Ptlfz/uu+APiUEgQuW","tlshash":"c933089b7720743582bb25a8a20f510fd137b41af50385b274bcd4d416e5fc922ebbea","size":52304,"data":"","first_seen":"2025-10-02T20:17:29.993989Z","last_seen":"2026-09-22T18:44:04.513872Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/cfaeb4813c7ec137b9daff1dc8b82c67.js?ver=82c67","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"022ddb1d4d95c178254acb3217a15c81","sha1":"baa73fdb4f98636faec9b2315de55b324f4c0cb6","sha256":"9d1d2c1ca64ff6930f079e0ac8c27ce4b4749adf803d80bc01c1c696451729d1","sha512":"dcc842259df1d38f3e80d9e20d0ea77f5489bc09e764c4c53f6521bb9d4065c87f8389716634ff79be8faa0694443052d4818ef86b112d2396ccc80fe45a8210","ssdeep":"768:G1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgjZ7Nc4hC5orG1TsI:X0tVUkkK1GPz6QrG1AI","tlshash":"07139509d204372688eb12e57105c14ea3fbfababd12c0f076c987d6606d81d86e77f6","size":41955,"data":"","first_seen":"2023-03-13T20:31:27Z","last_seen":"2026-09-22T18:44:04.578038Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/3f433ccf0b00dba328ab6a1e2be9e93d.js?ver=9e93d","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"251fa3849e20c1ee94c1e6fe7060cb18","sha1":"bd500cb589e2662bd2956ff772d122979d3584d7","sha256":"2330a9c808422525a6ea11f0b8103277e1632227b55012a86d389632a0a71838","sha512":"35451d5b39677163332c3e03ea011ee703a06f377722f17337f6bd34c94fe60c4d7fb4535d0cbf702d090e6cdb3b5dad55a59bd1238ee1aa25c41170e74d9313","ssdeep":"6144:slhZz/xgM34F0CXHUMo5/gv9oWGGKRxSifdGknTKbl7wnoyJDKgOfqMbx6:slP34FWYv96RxSifdGknTKbl7wnoyJDx","tlshash":"a3643be8e531787a04e743db905a440433b5e92de30785a2f1bbe1695c5858d02ebffe","size":327002,"data":"","first_seen":"2023-10-20T04:53:53Z","last_seen":"2026-09-22T18:44:04.549566Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/ff711b4095ff5358dfeb4705391614b1.js?ver=614b1","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"21e1283c4ac00f67a0761277e558006f","sha1":"5f8c73d7bacbbf29e2eb59b63b90d85d635f5bdf","sha256":"2934d502acefaf611e0a29bb8b3282f6ac8d06f633565efca4f89f00cac24477","sha512":"bc2256689b790a9517c95475e4df4b7e0092ffd247cfa0891f780074e75ab1cc4b713d001d49451dfaf7eea04a6d615debe5ce4cef9cb5e384198764bae526f6","ssdeep":"384:Sdw5JLyFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvs:wS36Z5vkO7ku","tlshash":"d1a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21442,"data":"","first_seen":"2023-03-08T23:56:17Z","last_seen":"2026-09-22T18:44:04.528279Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,d3AuaTE4bi5zZXRMb2NhbGVEYXRhKHsndGV4dCBkaXJlY3Rpb25cdTAwMDRsdHInOlsnbHRyJ119KQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"04a9b59b7e49f913a3926f6431334155","sha1":"35f2521d3ab3f75895b02da9c6b5419e1a35be59","sha256":"94c4eed60653e14337c021261a52581e9b6f93ae9ba512912ca30ce656b3ac64","sha512":"40068c8ae55d5f7b8bdd0fcf5eabdf443cd6b033788c1686b0a96adf4f645bfd34d50ea7f0017c9514e3029752b213826373450e791760bf8310e0c303aaa750","ssdeep":"","tlshash":"57a0028530a76805c505d1605967fc00446415cb818eaa181ae5ee30e515598748232e","size":58,"data":"","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-09-22T20:50:19.269411Z","times_seen":19745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"899cd1238687f3c4f380edec69ee8fe0","sha1":"598c77848c3a13e97a6873143886c9383330f6d7","sha256":"7f1e7087076dafe16c1e755026ae70bdae7968f08b5d6c361f196fca98efd559","sha512":"8d8a243d863682005406a91790f1fa5458a710fcac70a9d8257c7f3a10703320ebe40236b9e5ce076fe42f26ffbaa515e7f512c26e72ce83ceed76e1e0c9c4cd","ssdeep":"","tlshash":"b811890ce12f999b528acfaf9c765993a8ef353530515b7edf0848cc04c40658ad22ca","size":1031,"data":"","first_seen":"2026-05-01T11:33:24.100931Z","last_seen":"2026-09-22T18:44:04.582547Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/7aad585f0a4ab622bd68a9ec58fa8393.js?ver=a8393","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a21a60655ed0dcd788e43054e71ed78","sha1":"0f0ae78eaf8427e9401a8113bb8cb52ceadd0469","sha256":"3004a75ed220409eb731e505d5ce9b36b17f64a9eb214977a3720a77c62fafb6","sha512":"c10bfa67a7bbd8372f827f0d3d246e60eb0bbb3b3e12f0e585364d4647732587d19ba2925f98c10ce3504cf7883b26a65ade58c859f6c798bcd0969d01c915a0","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9c:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoC","tlshash":"8c4221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12200,"data":"","first_seen":"2023-03-07T15:51:56Z","last_seen":"2026-09-22T18:44:04.551054Z","times_seen":700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/65d8d51e3a4c301f2b7b2a55bc8560b3.js?ver=560b3","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"22ad8e1404c8b7f818a675d5ae5dd912","sha1":"fd0e78317790a7178bf108390ba6ffee97d6438f","sha256":"13d7505d179a3a9c43b5fc4a31edf23028840a8f0421418275f2b5c3f89bed87","sha512":"c4d8068655e913bdebc3dbca604ee43f9cab90e1c2482ced717dda7c3b24c0a352a02edfcfebfe9a85c87001abb59a072936f3646526ffc77b7ad9bfa7ccbe7f","ssdeep":"1536:cM//uAXia4eDqJA6059C9eMJq5kakncd7qe+ZFGSNVXj9y3qI1xz8qm3SeVaB7xw:f//t7khndZ","tlshash":"50c3d89d71c6f0a643e760ba201f310f62b269a8a885e144b176c8e19e76d5d3333f7d","size":120194,"data":"","first_seen":"2026-05-01T11:33:24.087702Z","last_seen":"2026-09-22T18:44:04.571307Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"medpharmacygroup.ge/","fqdn":"medpharmacygroup.ge","domain":"medpharmacygroup.ge","tld":"ge"},"ip":{"addr":"188.93.95.68","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3b4806ed38659b88636e6a589dfc218","sha1":"40c70bcb77eb95b8fd583b9733194b6b9a5c0b71","sha256":"d17bb0176414ab00a4731e50d967f11ac9209ab8fa187fe34bf764c2e160c489","sha512":"d66696ccd9b12fcdb5255077cc068e4b9fe08a7f07000d29d84811a72946767ceb30c0ffac79e1596da2f8a2ed20f6c93a487db6f85aba1bb9693ead7c103352","ssdeep":"","tlshash":"0721eb4f64053e6acb8a93fdb1cf3a0676ec419984c1404dc49e8e6e09a4a193286d37","size":1323,"data":"","first_seen":"2026-05-01T11:33:24.099616Z","last_seen":"2026-09-22T18:44:04.58339Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"medpharmacygroup.ge/","fqdn":"medpharmacygroup.ge","domain":"medpharmacygroup.ge","tld":"ge"},"ip":{"addr":"188.93.95.68","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1503186c81dfc6efa7a388a4b8113898","sha1":"5009cb6668aada32466569d5c3fc320c6138f62a","sha256":"f967ab9d754c6c9b5834719e3be12744d09e929e84e2edccdf90f9ef5c6d5780","sha512":"2f61ad9e20e5b139a769e836a72e23d763e47bc947486ef838aba8a4376b93e6e30090266d5cb218cbca9cdd48554dc99622eb232d8b9f308f2f216d8fb201da","ssdeep":"","tlshash":"b701891d0706446f156bb050b139d9ceec6ace66042a04d8edf861ade1e29988f669c4","size":808,"data":"","first_seen":"2023-03-07T13:01:57Z","last_seen":"2026-09-22T18:44:04.584319Z","times_seen":1016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/c24d1d75f5cc165f314aabb11e052ff9.js?ver=52ff9","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"277209f6d1232cf257a1204c32c00327","sha1":"a92273bb1dd96ec8ce128b0f2617d79b44512b46","sha256":"2b5f4f75baa3e2e2826110e5ee4a78cca53b1aaf03c8227570149ca7aaeb24c0","sha512":"22a1195dd18e260217ec8b26222645f3875e748102019e71a84104fb0231dd9704ae232c068ce961505f0779aed3c4ff79bbf558702e83feadeab362f7672a0b","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1Rk:JrprxG6fPP3P1fQMOIsDsMMt","tlshash":"c232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","size":11225,"data":"","first_seen":"2023-03-07T01:36:20Z","last_seen":"2026-09-22T18:44:04.500239Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/1f686d1bd3aca5797249fa6af1fc3109.js?ver=c3109","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7673d260a135aa3755e13e5f25e5dbab","sha1":"fe9724298af7de2b09e398da8477efa9beeeb65d","sha256":"0865f43fdb2059bb0bade558b0995b848fee6dcd40933dc41925097ba4e10594","sha512":"fd0e16bf4d9fcc6d2be55a93dfb9b73471a6b5fe12df6a2b617f5b790c4126fd24d9d20138b5fbdc0c02de0829c68968abb054a0cba7b79c4be9ad7727ceb06e","ssdeep":"","tlshash":"ae51341fb070cda119f2287e617a718522329965b6098b30b025d8e42eece4b1773ece","size":2940,"data":"","first_seen":"2023-03-07T23:28:30Z","last_seen":"2026-09-22T18:44:04.537676Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/38fc8dbd140a37435bcd181bbb6950b7.js?ver=950b7","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0a285eacc24618301cb4f1449ff0868","sha1":"046c35da6070eea303d2bfef8c87eb45f9c589d0","sha256":"964913196f886a394f53f6c51b918bedd8da945aa665d12911c46e7dc7d6dfe4","sha512":"d499c195f09300d7ef29adaa17ba5c48be678047434df2e7cbf993ffe04e60666ace7eec1d6f5fece479eb91b9cd97f5b1ca68cb34475d750b6f822cf74c5f92","ssdeep":"384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnM8:T17bd7iq07ftxivbuzGQvBx1jknrTcbK","tlshash":"0b8292dc3290b06647a79067a06f960eb2335879604e9420f29df2d97c30dfa927fd79","size":18995,"data":"","first_seen":"2023-03-11T10:31:09Z","last_seen":"2026-09-22T18:44:04.520578Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/d6d65b731799e6c2fa273ecff1834849.js?ver=34849","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3effa9da7489ba835211a5b8913c144","sha1":"dd8cc76ea71be5a0a7c03084a111e68dddcce182","sha256":"9a229177ca589411f4f95f13ff188082a513c02ab7f9a12c610b528c36c02f27","sha512":"6cca9ed4335af92ad60b76410944f2fae75f7472c2893866877c1b061da013ab1002bd035181e28da59825cbbb13736f15c243039740a1019421fda4b8717881","ssdeep":"384:yGL13VaQEAROfhy+eRbH4yuLE7Z1d3yTw4Ef:yQR/OqRjHgG55f","tlshash":"6082538dbd85f4520363a1b6122f840bf3bb0a5ab46fa5d0a25ac5d06c7988e512bf1d","size":17825,"data":"","first_seen":"2023-04-06T20:32:42Z","last_seen":"2026-09-22T18:44:04.535957Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKGRvbWFpbix0cmFuc2xhdGlvbnMpe3ZhciBsb2NhbGVEYXRhPXRyYW5zbGF0aW9ucy5sb2NhbGVfZGF0YVtkb21haW5dfHx0cmFuc2xhdGlvbnMubG9jYWxlX2RhdGEubWVzc2FnZXM7bG9jYWxlRGF0YVsiIl0uZG9tYWluPWRvbWFpbjt3cC5pMThuLnNldExvY2FsZURhdGEobG9jYWxlRGF0YSxkb21haW4pfSkoImRlZmF1bHQiLHsidHJhbnNsYXRpb24tcmV2aXNpb24tZGF0ZSI6IjIwMjQtMDEtMzEgMDk6NDA6NDUrMDAwMCIsImdlbmVyYXRvciI6Ikdsb3RQcmVzc1wvNC4wLjAtYmV0YS4yIiwiZG9tYWluIjoibWVzc2FnZXMiLCJsb2NhbGVfZGF0YSI6eyJtZXNzYWdlcyI6eyIiOnsiZG9tYWluIjoibWVzc2FnZXMiLCJwbHVyYWwtZm9ybXMiOiJucGx1cmFscz0xOyBwbHVyYWw9MDsiLCJsYW5nIjoia2FfR0UifSwiTm90aWZpY2F0aW9ucyI6WyJcdTEwZThcdTEwZDRcdTEwZTJcdTEwZTdcdTEwZGRcdTEwZDFcdTEwZDhcdTEwZGNcdTEwZDRcdTEwZDFcdTEwZDRcdTEwZDFcdTEwZDgiXX19LCJjb21tZW50Ijp7InJlZmVyZW5jZSI6IndwLWluY2x1ZGVzXC9qc1wvZGlzdFwvYTExeS5qcyJ9fSk=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc5d6e3ad81581927566ba7b5d219fc","sha1":"c589d9ce445c365368f6aa7b0f54e581cbcec779","sha256":"26c274ff800412c3e6a430ff36c52d5e05304b38a3e24bf22c55b51a5adbae8b","sha512":"b94df4fa6c980c3a4a214c88eced21ff46c04ce8808a66a9742c1c789d5ed3ba2651bf29364b332b57f378beff605d554d7feff7fbd7aab4939d367866e26b8d","ssdeep":"","tlshash":"41f0ac4c3cf2a4ee5482c1d97c4d795050b7f62500ab6c05360b1e011a6073ca2e350c","size":575,"data":"","first_seen":"2026-05-01T11:33:24.095656Z","last_seen":"2026-09-22T18:44:04.585176Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/2917c201b899923499b1e40b05e153e3.js?ver=153e3","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"141931ee67a88608fc9b774842745550","sha1":"96235a2dd886acbdaf3207a9c4521ce61efc22aa","sha256":"dce7332ec8e5e08cf0e7472517305c5fe1ee2a6ef67ade946ddcdaed191511aa","sha512":"b87d9d6fbd5f8019a3fa1b6143c7ce54b4094ea3a836006fd5865487d2e2db4633237e137c64490664243016aa06f5fc1b9bd9da5ddb1edaa65432cbd03216f9","ssdeep":"1536:Fj2qhgxfeuGMfoqi2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBg7:wxoo6desFshaKi+HgZsUOUTqiqM37E4","tlshash":"33d3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","size":139154,"data":"","first_seen":"2023-03-07T15:51:56Z","last_seen":"2026-09-22T18:44:04.541635Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGVsZW1lbnRvckZyb250ZW5kQ29uZmlnPXsiZW52aXJvbm1lbnRNb2RlIjp7ImVkaXQiOiExLCJ3cFByZXZpZXciOiExfSwiaTE4biI6eyJzaGFyZU9uRmFjZWJvb2siOiJTaGFyZSBvbiBGYWNlYm9vayIsInNoYXJlT25Ud2l0dGVyIjoiU2hhcmUgb24gVHdpdHRlciIsInBpbkl0IjoiUGluIGl0IiwiZG93bmxvYWQiOiJEb3dubG9hZCIsImRvd25sb2FkSW1hZ2UiOiJEb3dubG9hZCBpbWFnZSIsImZ1bGxzY3JlZW4iOiJGdWxsc2NyZWVuIiwiem9vbSI6Ilpvb20iLCJzaGFyZSI6IlNoYXJlIiwicGxheVZpZGVvIjoiUGxheSBWaWRlbyIsInByZXZpb3VzIjoiUHJldmlvdXMiLCJuZXh0IjoiTmV4dCIsImNsb3NlIjoiQ2xvc2UifSwiaXNfcnRsIjohMSwiYnJlYWtwb2ludHMiOnsieHMiOjAsInNtIjo0ODAsIm1kIjo3NjgsImxnIjoxMDI1LCJ4bCI6MTQ0MCwieHhsIjoxNjAwfSwidmVyc2lvbiI6IjMuMC4xMCIsImlzX3N0YXRpYyI6ITEsImxlZ2FjeU1vZGUiOnsiZWxlbWVudFdyYXBwZXJzIjohMH0sInVybHMiOnsiYXNzZXRzIjoiaHR0cHM6XC9cL2hhcm1lZC5nZVwvd3AtY29udGVudFwvcGx1Z2luc1wvZWxlbWVudG9yXC9hc3NldHNcLyJ9LCJzZXR0aW5ncyI6eyJwYWdlIjpbXSwiZWRpdG9yUHJlZmVyZW5jZXMiOltdfSwia2l0Ijp7Imdsb2JhbF9pbWFnZV9saWdodGJveCI6InllcyIsImxpZ2h0Ym94X2VuYWJsZV9jb3VudGVyIjoieWVzIiwibGlnaHRib3hfZW5hYmxlX2Z1bGxzY3JlZW4iOiJ5ZXMiLCJsaWdodGJveF9lbmFibGVfem9vbSI6InllcyIsImxpZ2h0Ym94X2VuYWJsZV9zaGFyZSI6InllcyIsImxpZ2h0Ym94X3RpdGxlX3NyYyI6InRpdGxlIiwibGlnaHRib3hfZGVzY3JpcHRpb25fc3JjIjoiZGVzY3JpcHRpb24ifSwicG9zdCI6eyJpZCI6NjMyNywidGl0bGUiOiJIQVJNRUQlMjAlRTIlODAlOTMlMjBNYW51ZmFjdHVyZSUyMG9mJTIwU3RlcmlsZSUyMFN1cmdpY2FsJTIwYW5kJTIwTm9uJTIwU3RlcmlsZSUyMEdvd25zJTIwYW5kJTIwT3BlcmF0aW9uJTIwU2V0IiwiZXhjZXJwdCI6Ilx0XHRcdFx0XHRcdCIsImZlYXR1cmVkSW1hZ2UiOiExfX0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b4d0fea8dd793e1600bb0685adeb90b","sha1":"038a9d565a140387f47e45c4a27c72c26f319cf6","sha256":"71a70c534233c02ab4ba4fd4f2d349357ca923e5f9231cb5935cb651fcacca43","sha512":"9339d7f83490a3cdd9fbd594cbc1a4155bbd8ac44193499c236e5ed529f4c93a3284baa1ae33a06c772981081130e24e5f9e334973e2cf7f8908ebc3256a00a2","ssdeep":"","tlshash":"3d11232faf0e612e03572a4f741bf74695fc131425826965c468483d009cfae364bd37","size":1064,"data":"","first_seen":"2026-05-01T11:33:24.105458Z","last_seen":"2026-09-22T18:44:04.586101Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGFqYXhfYWNjb3VudF9vYmplY3Q9eyJhamF4dXJsIjoiaHR0cHM6XC9cL2hhcm1lZC5nZVwvd3AtYWRtaW5cL2FkbWluLWFqYXgucGhwIiwicmVkaXJlY3R1cmwiOiJodHRwczpcL1wvaGFybWVkLmdlXC9teS1hY2NvdW50XC8iLCJsb2FkaW5nbWVzc2FnZSI6IjxwIGNsYXNzPVwid29vY29tbWVyY2UtbWVzc2FnZVwiPlNlbmRpbmcgdXNlciBpbmZvLCBwbGVhc2Ugd2FpdC4uLjxcL3A+In0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8008324d4eecee96887acd026038e3a0","sha1":"48c00ec5db7c07643c974f9983ddd59527efac6c","sha256":"8176078bc8c1738f5f1080c5ce77dc5d72dd7236393fe80df22e22e37a367db3","sha512":"a95a5afbc78b79059494d745d23923c14710b82fed617f66ae66a491f6d846cf1d2d09833c2fe16bc1ecd380129c9babccf7eec6ab0b399e53519c1e6bc99f29","ssdeep":"","tlshash":"84d0a7565a045d57268a19eb39a03b1a6821313b1e11745e66d886c0c2021409c6c253","size":224,"data":"","first_seen":"2026-05-01T11:33:24.094565Z","last_seen":"2026-09-22T18:44:04.587257Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/f1792fd378e6a94eb00daaef215e915b.js?ver=e915b","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"03ff86400835132fbe703b6e399d55ff","sha1":"2b3af3a54535cea6252621d1e1f5a1fe6ba38888","sha256":"7278616211d3914b4f104e3c3cb9d59b7fe4c37d3fc04e24723306ccb374ffeb","sha512":"9c17bdfe0aef8fa442d26f66e6b65838a1214ba50008aa269730b9952f2754f9573f515828385a09d6cfcf8b5f23c5f559c0470a3bb3901b134722b7522d620b","ssdeep":"","tlshash":"6811ce54351876f64a47694b28f7530933db96611143674cc270b3997f2df86b82130a","size":950,"data":"","first_seen":"2026-05-01T11:33:24.053207Z","last_seen":"2026-09-22T18:44:04.53326Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/06632db860ea631381de7552fade3ba1.js?ver=e3ba1","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f9507ad6338936ac4cd1b6dce6df31","sha1":"10769c1549e09bd28dbe0bee709003ea99ccbf57","sha256":"6c9aa046879cf0fdb44b16615532fcb0d5abb446e659d51acb51284b492c2650","sha512":"f66b60b9f3f96a20d92a6b8660b901b0b531eb71f5bc2ea4db6c2092d9d5ff76a2680bcbbbe34c16d2b66cd3cec3530a41282332d7813690cef24edc630509ec","ssdeep":"","tlshash":"ed21ab243146f1fabafba195266f7097c4516fedd01020e134e6b9e94b5ecc0203371b","size":1279,"data":"","first_seen":"2026-05-01T11:33:23.99727Z","last_seen":"2026-09-22T18:44:04.534042Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/92606acea74aa90338a9c5dc80b3b561.js?ver=3b561","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c4e1a1b7d6079214460b52c5637a104","sha1":"4037cf53545f6df8e8dbe303def623857285c26c","sha256":"a2972033b3bedeca2d716c08627a8c35a68f964f0c0255d2cdbf192d32a57f32","sha512":"84943a1964b6f58571f95678c4d1cf43ede9c6df2cc863d31acd2317a97e13dec32ab81443275dfda6adb2b1b366badbacc4bafc2528381efb613c57b7c1fdd1","ssdeep":"1536:7jaxldyra469QduD5VFg2WKl+2rCdlm0SNUINVp7NE1Q1wveOdV3LU6AK/w:c469QstWKAdm0S6IDEeYegbpo","tlshash":"99c34cd87151b432029766a6453f0b0ff23b9915740b452cf368e4c87e3c9a991bbfba","size":119248,"data":"","first_seen":"2023-03-13T15:08:28Z","last_seen":"2026-09-22T18:44:04.555279Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdjX2FkZF90b19jYXJ0X3BhcmFtcz17ImFqYXhfdXJsIjoiXC93cC1hZG1pblwvYWRtaW4tYWpheC5waHAiLCJ3Y19hamF4X3VybCI6IlwvP3djLWFqYXg9JSVlbmRwb2ludCUlIiwiaTE4bl92aWV3X2NhcnQiOiJcdTEwZDlcdTEwZDBcdTEwZGFcdTEwZDBcdTEwZDdcdTEwZDhcdTEwZTEgXHUxMGRjXHUxMGQwXHUxMGVlXHUxMGQ1XHUxMGQwIiwiY2FydF91cmwiOiJodHRwczpcL1wvaGFybWVkLmdlXC9jYXJ0XC8iLCJpc19jYXJ0IjoiIiwiY2FydF9yZWRpcmVjdF9hZnRlcl9hZGQiOiJubyJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"859b584b7ecefeaf168c0dbc691bef94","sha1":"99392218ad98cdee7187d8f427be148188c69e31","sha256":"15dce2237a180bd317c47e67bfc63db51c0d9d8ba8c17d714a6ea5b1e3a53de1","sha512":"ebb1afae74b12e1e13009a14c29ca9b3486d3f578b56e1fbd39a65aa99a39b9815f31c217cf5e92ff9a445c328b11a58c906c0e52548381efb1c1e293881ed9c","ssdeep":"","tlshash":"f2d02b6c028dccc3629aedd81c3235e270f31113a956a81c97887d154b111b0cd0015f","size":285,"data":"","first_seen":"2026-05-01T11:33:24.092335Z","last_seen":"2026-09-22T18:44:04.587981Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/4fa7e9ce7174e903bdc42ec2db306bf4.js?ver=06bf4","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"df132c0f1b0f1f2d89d54b4f2eb19cb0","sha1":"2156f0112a2992e91fd27697426e7dcf981feae9","sha256":"b6d96c7d9402c0cccfefd32ab0d9f6e989c2322f2a2a9cc592036a7bf85a44b7","sha512":"74c9d92bccbff6d0d17e7289419bc03d30531ec8cc7af44605415a373d920776f30b402567ca115ea062603a67ff04af37ba760b2ef9e245f02d16acc3dd716d","ssdeep":"","tlshash":"2c31b5c83449388e06af1221523f62cbb03c9a0f5ccd9459a308b2f13531867815bfb3","size":1836,"data":"","first_seen":"2023-03-07T23:28:30Z","last_seen":"2026-09-22T18:44:04.546706Z","times_seen":191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdvb2NvbW1lcmNlX3BhcmFtcz17ImFqYXhfdXJsIjoiXC93cC1hZG1pblwvYWRtaW4tYWpheC5waHAiLCJ3Y19hamF4X3VybCI6IlwvP3djLWFqYXg9JSVlbmRwb2ludCUlIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5886f749148542f7a5cda3dffb8341a1","sha1":"e92c03199b1c11dcbff8707611ba26586a463850","sha256":"7eddeff7a157e6dd0fef737ca332d3bdc613541be3e7d73843dc4ed8c87ea87d","sha512":"2df5905d915de9289191fba0a7b887e7285726db3f1c55330e9463f3709d9e3f8a4afc8075b17007e8507d5d02c2ab1e63de9789162983a341dc30ceda2088e7","ssdeep":"","tlshash":"d3b0125a45448e9372dc7dc47414395331f02227bd710c422f4dfc6c5139982cd0429b","size":104,"data":"","first_seen":"2023-03-07T12:02:05Z","last_seen":"2026-09-22T18:44:04.589088Z","times_seen":2372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/7cf4fd46d70cd4598fe80ca48a63cb78.js?ver=3cb78","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e63a9aae2e02eccb1c41c73f58ae8155","sha1":"62e646aac20d91f87be912bf85e0b3162776b42d","sha256":"2da862c03ec64734a836d3e88d22612ddf0d81c6bf4f9ee0dc447072545e2dea","sha512":"d588ba42fbc80bd7c2132ae767e1daa4f5118f736f10a6f21de378356e22c340eea225df1a378757265b8dfca5672ecac05e3acaf6048db65cb4fd4f93bdf288","ssdeep":"","tlshash":"3c61b9d07741793852ae91689aae6901e1aed3bc57738050fe1e84c05c1ce6a30f3fdb","size":3282,"data":"","first_seen":"2025-10-27T06:47:04.871766Z","last_seen":"2026-09-22T18:44:04.508982Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdjX2NhcnRfZnJhZ21lbnRzX3BhcmFtcz17ImFqYXhfdXJsIjoiXC93cC1hZG1pblwvYWRtaW4tYWpheC5waHAiLCJ3Y19hamF4X3VybCI6IlwvP3djLWFqYXg9JSVlbmRwb2ludCUlIiwiY2FydF9oYXNoX2tleSI6IndjX2NhcnRfaGFzaF8zOGMyZDI5NTVjMDA3NzViMGJlMjVlMDljMDAwYTEyYSIsImZyYWdtZW50X25hbWUiOiJ3Y19mcmFnbWVudHNfMzhjMmQyOTU1YzAwNzc1YjBiZTI1ZTA5YzAwMGExMmEiLCJyZXF1ZXN0X3RpbWVvdXQiOiI1MDAwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0af9208738bfbca4d4c3f3ad7df5210c","sha1":"62192cfb7b4bf1c945e1620bb9f6d61ff630ea7b","sha256":"3ad5c644ee52ec52dc3396123385908ba8e3a24fb9ca507eec72068068a64e2a","sha512":"2a7e1b9be628da5b2706a301bd7509a60954d70428693afa9737d526e372e77166abf3268172cbf8f866aa47f04c0a57127fbe086f1cd7ea7a0c7e4e6d2454bb","ssdeep":"","tlshash":"8fd02e8619a889834ada68c128203ab371f12323f8381b208204dc300330ec3ee00d1b","size":263,"data":"","first_seen":"2026-05-01T11:33:24.102534Z","last_seen":"2026-09-22T18:44:04.589827Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.3.2","filename":"https://harmed.ge/wp-content/litespeed/js/c24d1d75f5cc165f314aabb11e052ff9.js?ver=52ff9","line_number":2,"column_number":709}]},"http":[{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/68280413de8c6a0f9c5aaa96e469384e.css?ver=9384e","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.035Z","timestamp":1790102583035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/68280413de8c6a0f9c5aaa96e469384e.css?ver=9384e HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18058,"size_decoded":1762,"mime_type":"text/css","magic":"ASCII text, with very long lines (18058), with no line terminators","md5":"b221595f9d07e2d0142a4a315ed55c79","sha1":"976054905b2195e09905cbbdcf6684e1fa3090c2","sha256":"ed4718137414e885de83b1aab49ae6d7b990fd0713fb1e3ed24f270c9b24e958","sha512":"89a451be366026c50d352dcbb199a3445cbec0734c4063adf9e2b3952966b73a5e8552b674bdea25c9186f4ed3f740f513e2309dd0b09293334afd57c7996064","ssdeep":"192:2dt5gydG+/TWOJ0UkLjdZOQdGY1ydvdG5j5zIdUsC/kFZhLdUbGdladvBlRsMs65:J11zIIcODUxC/","tlshash":"ad82f6d83c37d0369477146f668fa41c140cacce684acbe7f65d910698fbfaa6328e15","first_seen":"2026-05-01T11:33:24.075199Z","last_seen":"2026-09-22T18:44:04.490121Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/6a71f5fda76e206a00d18f344441fd35.js?ver=1fd35","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.264Z","timestamp":1790102583264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/6a71f5fda76e206a00d18f344441fd35.js?ver=1fd35 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":500,"size_decoded":544,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (463)","md5":"c8b16fb62942dca6224316bb30df687b","sha1":"1382aa0f344eb6415eef0b13315de02366608917","sha256":"040b442f3e801c9f82c4fe7c1b73e571c60efa7387802429a8a2e27a501f2e27","sha512":"bdca29b3b0fed1d7945786dc22be7ccf4f525d42b94bbaa3a884cb4263ea105fe6db27fb4c5ca7e0d057b8bfcd2557bd9e8a1e0e5d693b730bc72cabc2ed2318","ssdeep":"","tlshash":"e0f0c060b585e9f062b990e5003f5381f232b476362170d18f4cd8b4acb0a9a037ec9f","first_seen":"2023-03-07T12:58:57Z","last_seen":"2026-09-22T18:44:04.490969Z","times_seen":56,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/6c35c8f26113cd4e54848fad5a7a3f51.css?ver=a3f51","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.031Z","timestamp":1790102583031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/6c35c8f26113cd4e54848fad5a7a3f51.css?ver=a3f51 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3855,"size_decoded":743,"mime_type":"text/css","magic":"ASCII text, with very long lines (3815)","md5":"f4de1c79faaadaa02e12327b27f064b3","sha1":"0b77e0f6945cad3ef9b26a3604854ef6e0d6cbb8","sha256":"173355852fda1e302dd8028b8299e38baa2973424b6cc2fb1750f0e7a1233163","sha512":"b5e0244452d0f4bae9748b34ff22b10e2c09e906c2014ce36e24cc09c8ed74a9d62671171f8bfee6aaaadf5f5d0af5203fc3c28f01d6faf9d58a98bbe1acd101","ssdeep":"","tlshash":"558192237e13622530cf586b529b39cdc721a2f2c0923ae9f7e5d4139b76da07764c89","first_seen":"2023-05-15T17:39:40Z","last_seen":"2026-09-22T18:44:04.491886Z","times_seen":105,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/themes/arangi/assets/webfonts/themify.ttf?-fvbane","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.116Z","timestamp":1790102584116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/themes/arangi/assets/webfonts/themify.ttf?-fvbane HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/f785d17f89a76e472df919e721b4a348.css?ver=4a348\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:04 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 78584\r\nlast-modified: Mon, 22 Apr 2019 15:13:48 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78584,"size_decoded":78786,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, themifyVersion 1.0themifyhmf                                         ","md5":"e23a7dcaefbde4e74e263247aa42ecd7","sha1":"5bb1fe69452a484566a81076af7567728fe7e43b","sha256":"350663a4665e00072c68a87ad3fa0be47b8a91424127f5f3e09f664197295f01","sha512":"e3e9a7c1232c1ed4e20c8f4007f0fd8b08f1178ed126d62d677bef5d769bc6c7636b8b515ca5b421bda359f50571f8ed92676cda4b1d6fa88c704eb944217906","ssdeep":"1536:ToDkfLM7phIjep8azfBf9ggkZA1WL09KvJKh4J4Ig1yjTCe2:EDHthT9gzzWQU","tlshash":"ed735d4b32803357c1cfa77d48d7406d0baa910cab4627579bed9932c76234e7e9a39c","first_seen":"2023-05-10T05:38:27Z","last_seen":"2026-09-22T18:44:04.492636Z","times_seen":1232,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/themes/arangi/assets/webfonts/arangi.woff?6wikw3","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.027Z","timestamp":1790102584027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/themes/arangi/assets/webfonts/arangi.woff?6wikw3 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/6acb2d6f86ee84858c860842e8b8bc9e.css?ver=8bc9e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:04 GMT\r\ncontent-type: font/woff\r\ncontent-length: 21340\r\nlast-modified: Mon, 22 Apr 2019 15:13:48 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21340,"size_decoded":21543,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 21340, version 1.0","md5":"27e24b9778afc5260ec2404d5ee0a12e","sha1":"a953471211132d971636c264fea27982b50c7126","sha256":"0baa7c7db27feff1469a3b0fbcda5c74921c28f0b3a32c628274700437decd8b","sha512":"cd61753c5d089541f00316ae5ca6a05cde6de613034cc6907d08aedf6a3fc9b2c76ded1fc3c7601da4e006a45bd848084292e00f76c75ebf7a0dfb7848a68069","ssdeep":"384:tSGfpgItrrDl3OLqXLDHaYyD2D8xq6PkngCKATda9V7kj:tSGfp9rDJtXnHaYyiYq6sgrIda9V7kj","tlshash":"50a26b0be387df9ed41305bb491693364cf6d634873bb3a93aca4e54d6064f44e28749","first_seen":"2026-05-01T11:33:23.986529Z","last_seen":"2026-09-22T18:44:04.493338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/a360b3899262264accb5a0a874a02920.css?ver=02920","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.879Z","timestamp":1790102582879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/a360b3899262264accb5a0a874a02920.css?ver=02920 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30922,"size_decoded":5614,"mime_type":"text/css","magic":"ASCII text, with very long lines (30922), with no line terminators","md5":"3b192b39e4a4da84c4e1acb81a9f670f","sha1":"53e3af0141aa440c424badbdc9ed1a75a082e557","sha256":"443c47288b469cb8de26e1ad50df578a6e8309337cbdc4c7459f4531a9888766","sha512":"596f7133fa54f501418994400b1743fc8bcf38b89af54f004bc3acdc75e2c16af4aa128c667588d504310da10a2bd34335fc58f1a6171d428997c2fa9c36f9e3","ssdeep":"768:yK5sn91X4MP/WW5vNiO1OlAQJH1AvkCSNi4d:yK5sn91hP/WW5vNt1OlAQJH1AvkCuf","tlshash":"33d2942274832a09e13fd5775787b62c3194ee46a5231bfdf4826a0fc7de5c127a324a","first_seen":"2026-05-01T11:33:24.082377Z","last_seen":"2026-09-22T18:44:04.494787Z","times_seen":3,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/280f9885c3b754b0d592642bddfb84a2.js?ver=b84a2","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.245Z","timestamp":1790102583245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/280f9885c3b754b0d592642bddfb84a2.js?ver=b84a2 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4778,"size_decoded":1920,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4746)","md5":"310c61a1dc4f20b98549cef0483c24ca","sha1":"73d574151aab04388ccbe13edafc0681711c3023","sha256":"bda3de096adf90d94829d33a028add09e613f5d2384cc35fd14ee9eb17781d6b","sha512":"f218690c564e505d3c38de34bcdf4b046105e886f72a49ed99c847057cb515086675a142cc9a09c66f995d937ec52c8f8211bf0d2450def2bc5f4b2f0365621a","ssdeep":"96:xGqKtAZw5D9jEOVEE1VlebgJAW42IJDaDlr:EGO55YOVEEblekJAWNIkD5","tlshash":"88a143c9bb467032c79792f1863f4205b33a15bda009447cb6b984e5bd34d299236f38","first_seen":"2026-05-01T11:33:24.007716Z","last_seen":"2026-09-22T18:44:04.495742Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/themes/arangi/assets/webfonts/fa-solid-900.ttf","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.074Z","timestamp":1790102584074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/themes/arangi/assets/webfonts/fa-solid-900.ttf HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/0b42591a6aa3c489dd711e56679e72ab.css?ver=e72ab\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:04 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 191832\r\nlast-modified: Fri, 26 Jul 2019 12:35:22 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191832,"size_decoded":192035,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"acf50f59802f20d8b45220eaae532a1c","sha1":"b7f728ec591ed9dd9028ed3deb6a536d0038c8d6","sha256":"9313de7304bef452ff5ac93e0f9ca48c3971d2fbb502c3fa1e2c2ea1f91ad853","sha512":"184b0b0f44501c33109d014eaf7ac43cbab9ab970c1f40a18795e1e87778d631d8fde52dae5b7187aeda1cc483fefb243387ad31428b2e2e2b72cb568b79be58","ssdeep":"3072:JvtG5iE+nhbTOqjZ5pLL1CdvPXiazQYYtByVNaKL/rjr0hFlxwP+muehAMe9n:ZtG5iE+nhqip9CxXiMQPtBy3pjYhFHww","tlshash":"4f144bed769fcf67c18687bcafd0bd3221e05f10325237e2be46991e20669c494f056a","first_seen":"2023-04-07T00:04:59Z","last_seen":"2026-09-22T18:44:04.496556Z","times_seen":23,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/47cdb8c14a439a5df4e65f89edfeddec.css?ver=eddec","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.015Z","timestamp":1790102583015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/47cdb8c14a439a5df4e65f89edfeddec.css?ver=eddec HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1026,"size_decoded":589,"mime_type":"text/css","magic":"ASCII text, with very long lines (1026), with no line terminators","md5":"6ee4558deb62c022bbc1a76fbbfdcc09","sha1":"08593417540a033957f9adb0cc522ddfa2e6527c","sha256":"885a26b91acc36fc21845bbd87dd759b5e1c5b992841d6f4c1751bbc5472450e","sha512":"d76329f41207db4d60fb286518812480052f4a8dc0eb40b4402a31adb0f6b17282d1ed275fa228a0876eaa70e073af83c9b7bf4842b6de5776127e29ef5000ac","ssdeep":"","tlshash":"04112ca1846e10c463b2cf4b63c43717e959f1238cc6856eeb1e441c5ae2f5613c4f38","first_seen":"2026-05-01T11:33:24.033115Z","last_seen":"2026-09-22T18:44:04.497168Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026ver=6.1.7\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.037Z","timestamp":1790102583037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026ver=6.1.7\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 18:43:03 GMT\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123129,"size_decoded":3877,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"725d4e1ac8ab3a2acc7596fdb86c0903","sha1":"29361c3f4df871d14f7aec27e4ca9906dddfaf06","sha256":"183acc0f61d3a0c381a60ad8386229e4433a5d0f189b54920c759dcba5457965","sha512":"11485196733a8fac7d79606762ab6b869a0cb985139b751b93a58ef77396847d63c34c11556d250df6385a148afb4616dccd38c46cdd75b68ee69467d93a773e","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULh:GZQDSVUvWtALyl83uRt","tlshash":"d9c31d91041b5440ab834ce223cebf75fe5f92507141d0b9abfc9babaddbc62126835c","first_seen":"2026-02-19T23:35:04.827171Z","last_seen":"2026-09-22T18:44:04.497945Z","times_seen":3889,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":37,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/09/DSC_7489-70x85.jpg","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.227Z","timestamp":1790102583227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/DSC_7489-70x85.jpg HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1723\r\nlast-modified: Tue, 10 Nov 2020 20:11:42 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1723,"size_decoded":1926,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 70x85, components 3","md5":"bd0b6a4ff2ef60d33347aa8b05fbb85f","sha1":"516168b427bdac46e70f9b7c0d6edd35c72925e2","sha256":"ba4cb2ffa3243861ea321a10d2065e003a14cf91609c46ca1aaa315bba7f83e6","sha512":"91d9337a2e7a173bdf3e880c1628e8dad289e54486865734d0e1daa5e4fe8d9c3bced6d400db71d0a0782bb754c881083ce006f3dfa4140468dcbf4a0611e812","ssdeep":"","tlshash":"1831186a1b030294982bdc774be8694aa34c9d4e6b7943893e33c5e6c615fce800cd08","first_seen":"2026-05-01T11:33:24.021763Z","last_seen":"2026-09-22T18:44:04.498504Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/e051439ace0f02b26a0d899ea562c38f.js?ver=2c38f","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.279Z","timestamp":1790102583279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/e051439ace0f02b26a0d899ea562c38f.js?ver=2c38f HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10865,"size_decoded":3733,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10725)","md5":"ad1a8c7d5c80346cd0e6be9dbcfa1963","sha1":"660ecad7d7a5dca9c74fc3f859439d3cf83eb3cb","sha256":"069a06c3fd9b7e5c8e1ccc6a80718dc5ec5ea0407eb9cb49dbf6a835a3325410","sha512":"fc5b9f42182440d8cf1a4be4a8208198ad4485df7e2cffa0321ba8083c2ca052d1f4deaf7f1b839560caf012d112903357a3f93b1574066a810feda8acf4edae","ssdeep":"192:sEPwJdswSRibO6JSplZn41SFzpYK2p7ESa/TI9w0uV6uSnotk+nWEdpTARHrLG4e:FH6JElZn4WpYKC7E5rI9oV6ultk6tIe3","tlshash":"902286c5f155396687bfb034713f230a223748ecf8445c68bc5d95e1aef8a4e02b6b69","first_seen":"2023-10-24T20:04:05Z","last_seen":"2026-09-22T18:44:04.499284Z","times_seen":29,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/c24d1d75f5cc165f314aabb11e052ff9.js?ver=52ff9","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.040Z","timestamp":1790102583040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/c24d1d75f5cc165f314aabb11e052ff9.js?ver=52ff9 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11225,"size_decoded":4388,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11126)","md5":"277209f6d1232cf257a1204c32c00327","sha1":"a92273bb1dd96ec8ce128b0f2617d79b44512b46","sha256":"2b5f4f75baa3e2e2826110e5ee4a78cca53b1aaf03c8227570149ca7aaeb24c0","sha512":"22a1195dd18e260217ec8b26222645f3875e748102019e71a84104fb0231dd9704ae232c068ce961505f0779aed3c4ff79bbf558702e83feadeab362f7672a0b","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1Rk:JrprxG6fPP3P1fQMOIsDsMMt","tlshash":"c232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","first_seen":"2023-03-07T01:36:20Z","last_seen":"2026-09-22T18:44:04.500239Z","times_seen":154,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/0b42591a6aa3c489dd711e56679e72ab.css?ver=e72ab","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.867Z","timestamp":1790102582867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/0b42591a6aa3c489dd711e56679e72ab.css?ver=e72ab HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:40 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56565,"size_decoded":12473,"mime_type":"text/css","magic":"ASCII text, with very long lines (56376), with CRLF line terminators","md5":"f9431be82bc01350c36edfd24a6c481b","sha1":"a3129712125647bf3080338c4ec0f948006b52b4","sha256":"49fada9cad6278d43e3467c7b5c0b40147053b5dde72e3f3d93afd63c567b4a8","sha512":"cef67aba2bba0dff75235f8e72d84fbabc965b7f2b67e4c3e01684a3fe7a7fc20c3d40f168706b1acda32ec479fdc8c52cf7a34e266aa09cab1fae3228ce6cc6","ssdeep":"768:g6C31sPizPq4/vnUAUHJvkQCg/xMQyjJrX759sGZQzR:g6TPUC4/vMHBBC8gd7nsDd","tlshash":"c6430bb8e54d01c9a731c44bbf82b3bc61baf73ce9914d95f00e591c2ad26a811c5fb9","first_seen":"2026-05-01T11:33:24.010903Z","last_seen":"2026-09-22T18:44:04.501352Z","times_seen":3,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":82,"connect":14,"send":0,"wait":27,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/0da21f825a389d1782a181586a218eb6.css?ver=18eb6","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.033Z","timestamp":1790102583033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/0da21f825a389d1782a181586a218eb6.css?ver=18eb6 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1084,"size_decoded":555,"mime_type":"text/css","magic":"ASCII text, with very long lines (1084), with no line terminators","md5":"3b042e95516aa3b4b1bb7b61df68ab1d","sha1":"c7f6285c27884a7f082370f4e7d14b79a86d2dc5","sha256":"9a80e3e59e98d3573a5600b3d75fddeda1a577d6d187e9de52d87d8fa871a077","sha512":"c07839c254332c905572159df98301a88e4caf7fd60a799c7ad9ed335afc603f55990cad17c56d008bc2890ad3ac5eb2582459e4913ccbac834fc8bb9d821ce0","ssdeep":"","tlshash":"10115b457a27d036e17b043f91d3b02c111cd45e529fdadff80d8345e9beb46626c506","first_seen":"2026-05-01T11:33:23.97555Z","last_seen":"2026-09-22T18:44:04.502103Z","times_seen":3,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/c09527c131b9bfd52ac3c4da2fac0548.js?ver=c0548","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.232Z","timestamp":1790102583232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/c09527c131b9bfd52ac3c4da2fac0548.js?ver=c0548 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9507,"size_decoded":3719,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9111)","md5":"ed34a0eb5d7b0118876dd2b8b4429801","sha1":"b8983373425b2d0ef1e9b49379580d160213c14d","sha256":"b137c4885e3a7f09b15a07aa1078d95d723472cb3eac60b70d2dd38514e6c495","sha512":"79d269e214806a3afa8c13de16a28face00d1731006b78cfef4f94bfd20f83ea41777492245988fc9740c7e2342d142f7d2d28aa37e014c818cbed1318f9afb0","ssdeep":"192:x9oDHJdlYT7TMcPv5b7KiG15tw5DlRnqVSaG88MdrHxlP72IDerNrDB:x9UdlYf4cPBb7KiW/YnnyBG8hRF72C+F","tlshash":"a012e96831f2605790b3b1507cf7d78fb372227d648399c0d09ce5a929bceba1226f19","first_seen":"2023-03-10T04:30:13Z","last_seen":"2026-09-22T18:44:04.502896Z","times_seen":129,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/207848f5a5b1739fcc18b7bb645a14f6.css?ver=a14f6","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.877Z","timestamp":1790102582877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/207848f5a5b1739fcc18b7bb645a14f6.css?ver=a14f6 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 217\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217,"size_decoded":417,"mime_type":"text/css","magic":"ASCII text","md5":"95e891f28e44a9b314c09545d86be2b7","sha1":"f9b13a8bd47273b086a0a07df15f314e0af0bc3e","sha256":"5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5","sha512":"105947a192ec19166ab0d106a357bac3c4df7fcf575e4befa3002f0f032f80056cabf3af085de1f27b177243f7053d624059c7389e90259b9a62d745cbc19289","ssdeep":"","tlshash":"6dd023d1569b04e0701ec24c851545cd91751040dc735af2d0c7e0dfe5e50fa219d59b","first_seen":"2023-04-05T03:23:27Z","last_seen":"2026-09-22T20:43:40.5892Z","times_seen":12937,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":72,"connect":14,"send":0,"wait":32,"receive":0,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/77053218c2b14d16f19ecbe9ae39e67f.css?ver=9e67f","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.885Z","timestamp":1790102582885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/77053218c2b14d16f19ecbe9ae39e67f.css?ver=9e67f HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75230,"size_decoded":9827,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"5e8fcac0e171b60135a685f79035949b","sha1":"8b0bcea09cc5c95646fd8b318947ff7007230e65","sha256":"b05a905ca0116f9cc2ffab00dbe67833d98c0c719425ad673a9dbdb335e4ca6e","sha512":"c995d284782e8f920576632a7adab4f6d8d7b6b9a58b1742b22bfa7ab3559db72ff874be6968a474cbc39320855045825906323d12bdabf1bf17a0dd9550e37e","ssdeep":"768:nInzYt20c13Q6KmdbqmMkIyB40KPUeOhxeiTm0N4e:InzYtCQ6/dbqmMkt4a","tlshash":"0a732dab95b42d787bdaf5859c84b1d93e11d074b2811035ede50f9c81ce9eb382ab0e","first_seen":"2023-06-03T03:18:57Z","last_seen":"2026-09-22T18:44:04.504291Z","times_seen":28,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/6acb2d6f86ee84858c860842e8b8bc9e.css?ver=8bc9e","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.891Z","timestamp":1790102582891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/6acb2d6f86ee84858c860842e8b8bc9e.css?ver=8bc9e HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3279,"size_decoded":1008,"mime_type":"text/css","magic":"ASCII text, with very long lines (3279), with no line terminators","md5":"e8207d969d1602206a5aff3d33884066","sha1":"41c2196a45883fd3af2b468a34f87ab2496d62ad","sha256":"5a8a90e6efee666d1837d4e763b238ec59824d936a57c2eddb54f2d61f7a1a2b","sha512":"f4f50165d8172b3234769783030a5ceeece5a2525654a223ef53bf2c81e0dd38e1a2aea50aa1dd05227537022c46f18d92c2b953840c523f1c509a65b29e9ab6","ssdeep":"","tlshash":"5f618ca5856e80c97362ca178790f349dd84f4619ded8d17f11f602c4ff270a9b81b79","first_seen":"2026-05-01T11:33:24.049899Z","last_seen":"2026-09-22T18:44:04.505093Z","times_seen":3,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:400%7CPoppins:500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.231Z","timestamp":1790102583231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Roboto:400%7CPoppins:500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 18:43:03 GMT\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6947,"size_decoded":2352,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"8f1d3cafd77cb51c2eca7297c0385048","sha1":"6a4c0fa4cd6e18faf816208a7e68bbae4c16b4d3","sha256":"55f0d839fd3015661973d981bc246f7cd4aabf66732812b12878e95df739fa98","sha512":"b0f808eadf4b2deebafca47159f84a607593f83f8fb6c42663dfac6d63d69b588bc8c8f3ce417b1dfa51ab92dc795b2c301152939c4164baed8de1b671f44735","ssdeep":"192:GXr3YNsmNRNkNokNEqbN2bqGIwV4BNCNCwNX:fsMHi3XhKqY4XY5X","tlshash":"f4e11d91042754009b835cd227ce7f35fe1e92007444d0b9ebfd5aaaadebda6436836e","first_seen":"2026-02-23T04:44:01.496682Z","last_seen":"2026-09-22T18:44:04.505898Z","times_seen":40,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/c5686ccf5028cfa93714e1b353470fae.js?ver=70fae","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.234Z","timestamp":1790102583234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/c5686ccf5028cfa93714e1b353470fae.js?ver=70fae HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3031,"size_decoded":1305,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3029)","md5":"e78d6646f5bb7d5fefad37d1fa801544","sha1":"c6124b7fda57fc93f71b39675ce54639f81d2b4a","sha256":"dceda4f5f5d89f2b4e5501b78e7fb444d3732abc3e05841ed56930a889064abc","sha512":"7d4dd1a6def10d70f7523a8a8cbb5ec5dabaf4d25f6941b1416091d1c6958fda2b26afc0f8e9e325d7cc3dfc7be2fee17900c6560b3b8203a488857bf8c602b1","ssdeep":"","tlshash":"d65183ceb122f4ba07e22981e507dac45532282bf19755bd2488a1e18f78e461527f3f","first_seen":"2023-03-10T04:30:14Z","last_seen":"2026-09-22T18:44:04.506677Z","times_seen":117,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/88b93df2474d75c58a56a6e5b8920688.js?ver=20688","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.278Z","timestamp":1790102583278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/88b93df2474d75c58a56a6e5b8920688.js?ver=20688 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64118,"size_decoded":18491,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47303), with LF, NEL line terminators","md5":"41bc2f470a566695a83fd6a7be23b85f","sha1":"de9c3e26c2500839a13a5498d437e42864dd376b","sha256":"9d00e8135bc81ef65e517211371c597a485f49d4b5bf315b16bce49b55fc2d78","sha512":"be46b59a8663513dfab85384d344294bfa787566b69c23bdc6abde83ab4102aaab9e6497db42996210e1621a94bd90ec7e93baa562bcf6822a2e03aba5665804","ssdeep":"1536:cY9sg+DgSDfHfGIQt4RcSS6eDq6/9q59Cl+ItzrFfxIKBtH2e2lv/:R9sg+vDf/V","tlshash":"de53758abad9b6e503eb60b5002f760fb1bbd854b44e95c1d265e5e0ac7984e4133f3c","first_seen":"2026-05-01T11:33:24.047441Z","last_seen":"2026-09-22T18:44:04.507375Z","times_seen":3,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/8e60f33c0e4f253a2a78e8fab46bbcb7.js?ver=bbcb7","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.247Z","timestamp":1790102583247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/8e60f33c0e4f253a2a78e8fab46bbcb7.js?ver=bbcb7 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1200,"size_decoded":768,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1198)","md5":"ffa74b150a293478d78d6d167dc7b353","sha1":"a7fc1fe9cf4d542f3d0a36812df0c4cf0f87eeb4","sha256":"e086beef5f2d30c412f530f3534616527ed8dfbbf7dde4bc06e367d63112cab8","sha512":"4a5e4dce668cd84bacb9d7145ad0f9e12ae9b900fac66865ec682931383a7680accd41491fe8b0208ed86a0a6f03d147578fc5925948fd1b8a424aacd45c0285","ssdeep":"","tlshash":"3321a8ca38c6bce583fb311c562f72821161913f574299a31ceadd7c35a6c913c13e68","first_seen":"2026-05-01T11:33:23.99835Z","last_seen":"2026-09-22T18:44:04.508145Z","times_seen":3,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/7cf4fd46d70cd4598fe80ca48a63cb78.js?ver=3cb78","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.271Z","timestamp":1790102583271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/7cf4fd46d70cd4598fe80ca48a63cb78.js?ver=3cb78 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3282,"size_decoded":1629,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (546)","md5":"e63a9aae2e02eccb1c41c73f58ae8155","sha1":"62e646aac20d91f87be912bf85e0b3162776b42d","sha256":"2da862c03ec64734a836d3e88d22612ddf0d81c6bf4f9ee0dc447072545e2dea","sha512":"d588ba42fbc80bd7c2132ae767e1daa4f5118f736f10a6f21de378356e22c340eea225df1a378757265b8dfca5672ecac05e3acaf6048db65cb4fd4f93bdf288","ssdeep":"","tlshash":"3c61b9d07741793852ae91689aae6901e1aed3bc57738050fe1e84c05c1ce6a30f3fdb","first_seen":"2025-10-27T06:47:04.871766Z","last_seen":"2026-09-22T18:44:04.508982Z","times_seen":4,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/b387564bcd8b42ebf191177a4ce91e5d.css?ver=91e5d","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.883Z","timestamp":1790102582883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/b387564bcd8b42ebf191177a4ce91e5d.css?ver=91e5d HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17470,"size_decoded":2750,"mime_type":"text/css","magic":"ASCII text, with very long lines (17470), with no line terminators","md5":"374c77e53af8cadd480b8c9721ba9aab","sha1":"15ce0372ee076b2542bda3446ec5b26b9640dabd","sha256":"b8b311402c88b2f1989a1e0414f2a4cf87d1c2d14b8aa1c96eb40ee94474e018","sha512":"d2e0bea82d843cec0974e74f952726dda507f10ba150e98b66f6e6ce9e0301ede642fbc77393bb8ea968423bd23340ccfd9d7ba659568427f6af4acdbe0e3594","ssdeep":"384:v985uqzOm9Oq/tfbwW8mYUeGAmBW2SpSgsVY8s:fGAmAL","tlshash":"737223e7c4381c2837edb4997c9031d63c26853cbb8521b9a8d46b0dc6ca6db36b170e","first_seen":"2023-04-10T22:41:39Z","last_seen":"2026-09-22T18:44:04.509735Z","times_seen":80,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/ec1e6052a88dea2fec6d53b8dea24db1.js?ver=24db1","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.268Z","timestamp":1790102583268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/ec1e6052a88dea2fec6d53b8dea24db1.js?ver=24db1 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2510,"size_decoded":1204,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2472)","md5":"e29d8a960798533829647f8e3a206fb5","sha1":"93d4faded4fa33afa1764da542e48543f05b3a87","sha256":"01b853ee7cbc8389186f6a4cf0cfacbb66ae2a10fc5f85f9acf8aef6c62df9d7","sha512":"c603a18e42be9f6699684a21624e2d763eb35b843e51385128e2ddb7083924417af2139e69d577c9e62e38e55a6e70b79e773763cfc82efe1dc39ec59b80fbaa","ssdeep":"","tlshash":"ba5174763480767285bf39f25c3f838abb3199303a47e044890cae967639d9d6032bd4","first_seen":"2023-03-07T12:58:57Z","last_seen":"2026-09-22T18:44:04.510501Z","times_seen":11,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/themes/arangi/assets/webfonts/arangi.ttf?6wikw3","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.941Z","timestamp":1790102583941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/themes/arangi/assets/webfonts/arangi.ttf?6wikw3 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/6acb2d6f86ee84858c860842e8b8bc9e.css?ver=8bc9e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 21264\r\nlast-modified: Mon, 22 Apr 2019 15:13:48 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21264,"size_decoded":21466,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, arangi     ","md5":"5ebbecb65b04de53f96b141f39deacd6","sha1":"b0566f8886a148ccd9e828edb86ce240f3a1d304","sha256":"071d4c863d2df4dc11bf80749a2ac3bf40dd3e356914ac4a49597a2406643c34","sha512":"15ae364d36532d6531dc14921c1d8b5e0a14d7f8cb46fb9e4a5e12f9b397bd607ebad3ce5d76cc3c838c02091ba09a1f69d6f7a73ac6dcd63e56e36f6c992a4e","ssdeep":"384:LSGfpgItrrDl3OLqXLDHaYyD2D8xq6PkngCKATda9V7kj:LSGfp9rDJtXnHaYyiYq6sgrIda9V7kj","tlshash":"c0a26c0be387df9ed40305bb491692364cf5d634873bb3a97aca4e54e6064f48d2874d","first_seen":"2024-12-13T03:31:28.851769Z","last_seen":"2026-09-22T18:44:04.511251Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/06278259ffa3a9eb7026bf34e670e700.css?ver=0e700","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.880Z","timestamp":1790102582880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/06278259ffa3a9eb7026bf34e670e700.css?ver=0e700 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50058,"size_decoded":9712,"mime_type":"text/css","magic":"ASCII text, with very long lines (50058), with no line terminators","md5":"8a6073aba84b7df80ea8550a3ba5be1e","sha1":"1c648a6c4f2d910fbfb54234e1764b9c6ec2cad1","sha256":"30594bfb8bf5deb2164c861873a221f59a1d9fddd187c4a865b5d5224febf12a","sha512":"2a2ebb406af8d0e01a610d87e46c7d84fb026ad19cb21414181d502222c09c77e89c60c0e679e7863a182fef988539f33886afcb72081c0a0afc2dd791fdddfa","ssdeep":"1536:Vme4M17VT+QWilaN72euqoMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dHvQr5:Vmw7VT+Q4SX","tlshash":"7223c931986511fc632bc651e3cc0b996429cd23ea530d9ef61b322e83db5ca257e74e","first_seen":"2026-05-01T11:33:23.992949Z","last_seen":"2026-09-22T18:44:04.512178Z","times_seen":3,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Domine%3A300%2C400%2C500%2C600%2C700%2C800%2C900%7CRaleway%3A300%2C400%2C500%2C600%2C700%2C800%2C900%7CSail\u0026subset=latin%2Clatin-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.020Z","timestamp":1790102583020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Domine%3A300%2C400%2C500%2C600%2C700%2C800%2C900%7CRaleway%3A300%2C400%2C500%2C600%2C700%2C800%2C900%7CSail\u0026subset=latin%2Clatin-ext\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 18:43:03 GMT\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17001,"size_decoded":1549,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e4243d79a719e35d53b7ac05c27648a4","sha1":"0fdd3c84cd089a4eebfce6840c093143c8947700","sha256":"b5f73e9362c8bf5beda6f0595da0372d91f801773542023c52236c2518ad6922","sha512":"5aabb197c7804328cc8d1614da58b012e6a5652eaacce870be33971980195dd38d6e2b8854ee6794b39964c97482a9bcc5088f4ee45d0c92985280257b61c6a8","ssdeep":"192:ITVrT2OTzNTsBiVT8HXDn+ioTRH+DO9ivTiH9DN0iST/H0DEbiBT4HbDryiUTtHZ:IFSnStobcFwf+JmT2RkvgX","tlshash":"3872baa009279100eb475dc623ce7f36ee5e62153046997e9ffd18e8bcabc261395b0d","first_seen":"2026-05-01T11:33:24.031167Z","last_seen":"2026-09-22T18:44:04.513055Z","times_seen":3,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/f6d06e40776ef1eabb0e195e92142331.js?ver=42331","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.249Z","timestamp":1790102583249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/f6d06e40776ef1eabb0e195e92142331.js?ver=42331 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52304,"size_decoded":17013,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32007)","md5":"db8a7ffe16e84f6d1e9baf5485fba9b5","sha1":"33300ec72215e696099183815320c7a354010dab","sha256":"157037414ca2cfb0a2258f542c0f25dcf4c33ba9a8db2f483a6e8103a9dace1a","sha512":"e681fe9ca4edd054d432966c71280e2959a34c6c7cd188f99dfbefce9d273b88d2e614c2b131a340b7e9fa1af22c05f08cf533c5d4f97d27964a41c73fd44b6f","ssdeep":"768:ZDBPtwiLsbwzFFuuJYfBmPdUBrzdUOfGxBu7bb62z4Mt/iDZdabtrtXcGdQeFvtr:Ptlfz/uu+APiUEgQuW","tlshash":"c933089b7720743582bb25a8a20f510fd137b41af50385b274bcd4d416e5fc922ebbea","first_seen":"2025-10-02T20:17:29.993989Z","last_seen":"2026-09-22T18:44:04.513872Z","times_seen":4,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/useanyfont/9959BPG.woff","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.023Z","timestamp":1790102584023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/useanyfont/9959BPG.woff HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/9d705cd5df042b875dc88a1fc011132f.css?ver=1132f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:04 GMT\r\ncontent-type: font/woff\r\ncontent-length: 17968\r\nlast-modified: Sun, 27 Sep 2020 20:17:02 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17968,"size_decoded":18171,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 17968, version 2.1","md5":"97b6e359135afe44adf3ba7ccde2be51","sha1":"d05692905b4e153560afd2b3e4b78d7da8ceafe2","sha256":"33811e3c2fa70d96c37e8d0e9d107f6c62ea5f6ec99c518b99d51c749496d181","sha512":"99441a4037b6bfef9e53d41006192f008e773d812ee394efcba81678d1d8109e11f88196c2b8eacb5f701f11a3375165b20d856c7ebad7c21b5793fb06aafacf","ssdeep":"384:NVDfe1KJojhrK6X3eifOZ/6+dJphBO9qroCJOanmGLda2fW8Fsr:zSBh+6n5fOZSmJph90PIW8C","tlshash":"9c82c017ff1ec9acc7995e30f2ae4c2e8e38370d1199596d8102643f4174d92623fa47","first_seen":"2026-05-01T11:33:24.06904Z","last_seen":"2026-09-22T18:44:04.514822Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"medpharmacygroup.ge/?wc-ajax=get_refreshed_fragments","fqdn":"medpharmacygroup.ge","domain":"medpharmacygroup.ge","tld":"ge"},"ip":{"addr":"188.93.95.68","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.168Z","timestamp":1790102584168,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.medpharmacygroup.ge","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 00:49:11 GMT","end":"Sun, 25 Oct 2026 00:49:10 GMT"},"fingerprint":{"sha1":"64:28:D7:7D:98:CC:46:C7:FD:2B:33:00:D9:BF:42:91:18:8F:67:FE","sha256":"BA:28:E5:3F:43:C8:2C:62:A0:8C:BA:50:08:A6:13:ED:87:7F:A6:BF:CB:BC:26:E9:5E:F3:BB:63:68:D0:A0:81"}}},"request":{"raw":"POST /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: medpharmacygroup.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"time=1790102584155"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 22 Sep 2026 18:43:04 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=9\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WPML:4.4.0","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"Slider Revolution:6.2.22","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":268781,"size_decoded":32963,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46501), with CRLF line terminators","md5":"92d2b2ecc0e1ccb81124106ebb4acee0","sha1":"633cfdc40d0b110d4634107820eadb95e0e89a37","sha256":"22be5cd851f35a80f2c52041b335513ab70d25de4d849a045a1213526e417551","sha512":"e72f634d5f8abe6b0696dc9608fd1f2baf41d0f2df7a306d8310e7663a3192842f776b18da0f6defd25e09c5b16cc11c257d9a45813a8ecba61d9a1057ad45f5","ssdeep":"3072:gJaQ6ORmS8fHeCbVosGtIpLzVUh9TadIguqKANW6dwK:gQIenVpUANW6df","tlshash":"ff44b5626507261587734deaa3c63f29f71da215d6020634bafc18ac7fc6da523e3b0d","first_seen":"2026-05-01T11:33:24.062125Z","last_seen":"2026-09-22T18:44:04.515697Z","times_seen":3,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"medpharmacygroup.ge","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"medpharmacygroup.ge","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"medpharmacygroup.ge","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/4f38f1a37479faa18037f45a2d6574df.css?ver=574df","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.036Z","timestamp":1790102583036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/4f38f1a37479faa18037f45a2d6574df.css?ver=574df HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":431,"size_decoded":343,"mime_type":"text/css","magic":"ASCII text, with very long lines (431), with no line terminators","md5":"f7db263ff945fd05be6f3bc7493111d6","sha1":"e09ae7710d97a7bbdb694f2086443027d6cc439e","sha256":"6a865b1105084fe09fafa33db0efd9d191bea959818065fba32b0193db3f4486","sha512":"07e2b2b1f948ba4c32a3e8cee3c45d6d0393d5adcf607ac1b28d509a1fe20f720bc046c8c280bbe795b0d23b1e5a9129e365ec1f42fac14eadeac1f2084c62f0","ssdeep":"","tlshash":"81e0b6627d475478702f243b0033aa9ca1668cccc43e30c7f422169bba70e8237f0e14","first_seen":"2026-05-01T11:33:24.083533Z","last_seen":"2026-09-22T18:44:04.516554Z","times_seen":3,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/11/empt.png","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.210Z","timestamp":1790102583210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/11/empt.png HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 15581\r\nlast-modified: Mon, 09 Nov 2020 14:04:38 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15581,"size_decoded":15784,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"7bb460c2db2fec373bb1c300934bad9c","sha1":"e8e137a3863939c686b48ee3ebbca03eb24316a8","sha256":"c459bf6579f19d816323c82371fb5ed1acc064f7e9217f98f6e371a25221c138","sha512":"9aa98d8b7fb459e75c4f9428e331162ce97ddd442044ffbc3c942c9dba877278530cc2d5c25486907b167fc5efd32734e072eeca83bd3a1678275a2c7f88c908","ssdeep":"96:ASw+dTkEWmlnjCPnCxNXrNCtNRYjsc57n:ASwQTk698A5QM","tlshash":"88627434bdf1b6a19449d2312ee43109ac730b83da819d41fece8c5b5f20ba9cd1f286","first_seen":"2026-05-01T11:33:24.01295Z","last_seen":"2026-09-22T18:44:04.517504Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/311d8328744a7c21b7fdcaa72c5111d7.js?ver=111d7","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.241Z","timestamp":1790102583241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/311d8328744a7c21b7fdcaa72c5111d7.js?ver=111d7 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35447,"size_decoded":10180,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019)","md5":"42d4558e0ac3c699b4cd6cf8322ec8ae","sha1":"c97a82545657c65cf4b5026ce4724e398a1148f1","sha256":"73455ce3ba49cbdbb5014e1030d93ebffb8dbc1701a7e4bd2f6aa92fae96ca10","sha512":"6e40a4fb4b18412b25b4868bf6968fc5e139fd81ff1428df4927c853ec0e3b392fe563bd55367d6f35592ffde75288b20c71c41ce6551eabfce4955965230ef5","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxc:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzk","tlshash":"3af2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-05-11T13:59:04Z","last_seen":"2026-09-22T18:44:04.518402Z","times_seen":361,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/themes/arangi/assets/webfonts/fa-solid-900.woff2","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.945Z","timestamp":1790102583945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/themes/arangi/assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/0b42591a6aa3c489dd711e56679e72ab.css?ver=e72ab\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 75440\r\nlast-modified: Fri, 26 Jul 2019 12:35:22 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75440,"size_decoded":75644,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75440, version 329.-1049","md5":"b5cf8ae26748570d8fb95a47f46b69e1","sha1":"07bed153d47f9129a944ee54dd72952deed074c8","sha256":"cd398be1a91817126cef10224738e624358edf6f08043abad7e60c1aaeccc8d0","sha512":"f08b9289695cf530094f076b2df4d2b0e1a1daedd00190d123b4179b2c1a1b5e8b2bb988d86fc6dc9eee117d88a58dd5b6dfe7689586c17068f5d2da01904d76","ssdeep":"1536:1Zq/f5ldhNurIqp+jqNT5Fm653lqWppat1Wa4W8TeodjxNrqM:1kvdS7ppFm6JhpgkrW6bGM","tlshash":"6f73028e1719f192f5d6cd177edc20be38f1a7121008f839e2eda6dd5085ab639a3825","first_seen":"2023-04-05T08:48:24Z","last_seen":"2026-09-22T19:45:03.097489Z","times_seen":23336,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/e2309c6feffa7f96a033766e7ff9322d.css?ver=9322d","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.869Z","timestamp":1790102582869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/e2309c6feffa7f96a033766e7ff9322d.css?ver=9322d HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153268,"size_decoded":19457,"mime_type":"text/css","magic":"ASCII text, with very long lines (44578), with CRLF line terminators","md5":"6b628af2ee31e442eed7e44adfeb6b69","sha1":"d2295f1bc392635b98a0e216ff61fe9cc03f30a1","sha256":"8db87a37b2054ca12c834b748b770ccbbc1e47f03ba5c165b99161781de3509c","sha512":"c11e7b7a588ec6588ab26b9f4699ae6fb22fce4821756be352bec9bc950ce991224d7afec1a10c91207fa6d1223b8e0523a6ae2f2de944ce237f7ca7d8bc559f","ssdeep":"1536:ZN0Ot6gvECabe9Jxp/fwOw0StyRsmYd7ZRt68Rqg:3Ce9Jxp3StyRsmYd7ZRt68Rqg","tlshash":"cce3446125d23cdfb73f44a9e39077b9b2b53982db400abef09d78b05b46b969027143","first_seen":"2026-05-01T11:33:24.029344Z","last_seen":"2026-09-22T18:44:04.519814Z","times_seen":3,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":80,"connect":15,"send":0,"wait":37,"receive":0,"ssl":278},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/38fc8dbd140a37435bcd181bbb6950b7.js?ver=950b7","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.242Z","timestamp":1790102583242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/38fc8dbd140a37435bcd181bbb6950b7.js?ver=950b7 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18995,"size_decoded":7048,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18860)","md5":"e0a285eacc24618301cb4f1449ff0868","sha1":"046c35da6070eea303d2bfef8c87eb45f9c589d0","sha256":"964913196f886a394f53f6c51b918bedd8da945aa665d12911c46e7dc7d6dfe4","sha512":"d499c195f09300d7ef29adaa17ba5c48be678047434df2e7cbf993ffe04e60666ace7eec1d6f5fece479eb91b9cd97f5b1ca68cb34475d750b6f822cf74c5f92","ssdeep":"384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnM8:T17bd7iq07ftxivbuzGQvBx1jknrTcbK","tlshash":"0b8292dc3290b06647a79067a06f960eb2335879604e9420f29df2d97c30dfa927fd79","first_seen":"2023-03-11T10:31:09Z","last_seen":"2026-09-22T18:44:04.520578Z","times_seen":62,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/616cb9e568e8d79fc49ed4750e990c2e.js?ver=90c2e","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.273Z","timestamp":1790102583273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/616cb9e568e8d79fc49ed4750e990c2e.js?ver=90c2e HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4126,"size_decoded":1867,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4124)","md5":"037a2ae90fb04676f7c237c0ff414732","sha1":"d3ccd368047a64edd6b3eff7d0ee72a72aadd9ee","sha256":"c9e1893c00aabdd8a234b5f8316ea8f17558e18959796443ff9d77e0e1046085","sha512":"cecee0a45704b855652dc1d50744367bfdc7745d1e3ae9038c2c057c234839b014ef0d1ff0fc367094d67cc04b44e759e0f0f68d2f2c746a44ec0ed79dc320f6","ssdeep":"96:IVCVfByk/RUNobBqL2mG0X/xMxHxqxAxixw3xex5oxrxAxW7qZwzIC:C6/RdBqLrxMxHxqxAxixw3xexaxrxAxE","tlshash":"478195ceb37217d908d95292009e16065277f65bd0e3005cb5fcfdc8a868d9d306fab8","first_seen":"2026-05-01T11:33:24.000882Z","last_seen":"2026-09-22T18:44:04.521622Z","times_seen":3,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/11/1KDYhFHg4WJYkH01w45Vr7G8jvTj10tg-1024x569-min.jpg","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.952Z","timestamp":1790102583952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/11/1KDYhFHg4WJYkH01w45Vr7G8jvTj10tg-1024x569-min.jpg HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62949\r\nlast-modified: Wed, 25 Nov 2020 01:40:20 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62949,"size_decoded":63153,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x569, components 3","md5":"d1db3cd56bd426abe90f9e60dd12dc1c","sha1":"3a9febb978df1cab4c64452ae230613b3349bad6","sha256":"bcf1cb4542802f4f597e2af94118c0f602994ee75260cbf0ce9409eb372edeca","sha512":"c1b313ffc50de1b821b70499e588a4cfa562ae137ab27b6bf83b0162385169f1b715677d182023f96d5b3f145d8d997d311c0ca778ae951fde8651d53fbcb1ff","ssdeep":"1536:n6LDVk1/VuocU7jLbmaguJ93LfcCRc5KHxMv4hA/FJC:nsseSbmajfLVCn4UM","tlshash":"ad530295ff344dc88055a8384055de8b47dbaaa5b478bbe3c6890a61cd371f42fc9c8a","first_seen":"2026-05-01T11:33:24.076643Z","last_seen":"2026-09-22T18:44:04.522417Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/4b4cc5ae2fa8ab13a80d488dab77cc55.css?ver=7cc55","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.872Z","timestamp":1790102582872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/4b4cc5ae2fa8ab13a80d488dab77cc55.css?ver=7cc55 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10419,"size_decoded":2182,"mime_type":"text/css","magic":"ASCII text, with very long lines (10419), with no line terminators","md5":"262fa14974c886b4f11a6a2f3a873456","sha1":"b977283d9a7b1bb63bf2b048e4a75ff5fbce9004","sha256":"f2f6f7d8fb01136f78edd2bd0f5b3484ed2c5bd663ec7210450f3ed030615719","sha512":"0b89905e5ef6e29b8d6ca708f123c3a9ac3771b8179d4e3709da276cda481238a7449f26278297789d76e58ea90c9da3b4e1dda0c38763e67d957a52aa34e629","ssdeep":"192:WnCAp0Kgy72Mn8bIC6RjNVjVi6Uh8jSj5wjvj0d78RYTODlOUnDlnj6Dl6wK4/4V:47H/2Cp03ApODH7yT","tlshash":"0422df6154402e26b4e2ef591fb0f81727e4caa5dec3a5dea60351d4cfcb46a0d132db","first_seen":"2023-04-06T07:35:53Z","last_seen":"2026-09-22T18:44:04.523437Z","times_seen":159,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":77,"connect":14,"send":0,"wait":31,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/plugins/3d-flipbook-dflip-lite/assets/fonts/themify.woff","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.936Z","timestamp":1790102583936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/plugins/3d-flipbook-dflip-lite/assets/fonts/themify.woff HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/3d597852dba9cd048c4710559c9e81e3.css?ver=e81e3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 56108\r\nlast-modified: Wed, 22 Feb 2023 13:28:50 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56108,"size_decoded":56311,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 56108, version 1.0","md5":"a1ecc3b826d01251edddf29c3e4e1e97","sha1":"9394f35bd2addd24666b79bfc36d4f9d247cb01d","sha256":"0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7","sha512":"2329063d667b5480a2862fe4e11154b4dabf3b8782fd67be79ebfe55bfda96e28e70f8f438f73c7ef9901afcb16370897c3022c8b649a33cb74459c610cca00a","ssdeep":"768:tImTAHYFg71fAWsOKi5qSy5LBaK+mn2noN5IO3RCtebWA8ipCWUa:GmTp0gpBpv2a58oSA81","tlshash":"244328747f6a5b2bde839db9fe850e5160f098c61f43f123c09e98522c7b7a88979143","first_seen":"2023-04-05T04:30:11Z","last_seen":"2026-09-22T18:53:11.48123Z","times_seen":33092,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/718d585316aa2bc68373b5192006f5e1.css?ver=6f5e1","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.890Z","timestamp":1790102582890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/718d585316aa2bc68373b5192006f5e1.css?ver=6f5e1 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":123540,"size_decoded":19950,"mime_type":"text/css","magic":"ASCII text, with very long lines (65320), with CRLF line terminators","md5":"61d62a1bd0027ba91f626d574693e3ce","sha1":"b2fdd172265b07acc1172bf9c9c43cf5317aaa5d","sha256":"ef0a60caa26de781c5db537e19f5da2268d43211bcd76a64a7e9b87b8f2b657b","sha512":"5bdb2337d83563cf4812e2a711068fa0052c74b451fde1676f677edbb487089c91f22191a8918f0526f60a9b18901db9a077f0a27cbc2b6653ca3a341b0aa828","ssdeep":"1536:CGQOQnmXl1NiByxU56Ru1lraaE/IjCR1BMRQNk6hNO6i:BQfmXN1WRQNk6hNO6i","tlshash":"d2c3b7d6f5a0316d6567c65d60d0fafe292f8141e6224fbbf0277b608b891ca0673e0d","first_seen":"2026-05-01T11:33:24.020689Z","last_seen":"2026-09-22T18:44:04.524897Z","times_seen":3,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/a8adbfce3611be25160e653f93a20d7c.css?ver=20d7c","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.018Z","timestamp":1790102583018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/a8adbfce3611be25160e653f93a20d7c.css?ver=20d7c HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508172,"size_decoded":77982,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"359da91fff66ee7025329019fe4558f8","sha1":"e5fc239b190801ec399517683901c3f0d1fbf275","sha256":"b2a2a9b48dbbbd17d3c3deecc2d2c92908808ecd3602d1c3ec4f955ff6506350","sha512":"58842a9c32ad1dfd386793909f91db09e6512e69f7dfd6fc910cc66f82abf902fea1e1e179adc41baec2c8c796e3b9912fe09e51668204927145c3384b0ebfdc","ssdeep":"6144:SOPot6I4F541rtAzrtA920HersVND2enrZIOBpUFucIV0:SOfDH4t20HvEY0","tlshash":"0eb4d867e171351c71bbda31e9c179e87d18b13be2520af9f9507a2987c29d6233230e","first_seen":"2026-05-01T11:33:24.024871Z","last_seen":"2026-09-22T18:44:04.525601Z","times_seen":3,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/4164130e6459ee51d0a1533a6e163918.css?ver=63918","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.022Z","timestamp":1790102583022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/4164130e6459ee51d0a1533a6e163918.css?ver=63918 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60544,"size_decoded":4691,"mime_type":"text/css","magic":"ASCII text, with very long lines (60365), with CRLF line terminators","md5":"dc1f7b8b72d9e64ae03363436a587562","sha1":"ac85b18ca8a0a08eddeb8cfe2d23e12133c6fd24","sha256":"17c11e8579cbda22b3cee4b5172b0f7476506ca64f6b3d3df8bff24da3dd3e3d","sha512":"1a2328f6c1a67e60166a994fedf381dc8452743ffef29b28e166e433046076383b1edda46cb8ed43fb347f0cda8426a4fe14336fdcf0296ed1e8b4797c21f877","ssdeep":"1536:ukZ9POwe1uA5kGDj3Cyg5lrcee0qT66j3rwzlr20:ukZwwe1uA5kGDj3Cyg5lrcee0qTO","tlshash":"d143f5ae5851228991274ba6c7dc4e68873dc67314621cde73862c4b8f87f9f33da607","first_seen":"2024-10-22T13:29:26.599202Z","last_seen":"2026-09-22T18:44:04.526292Z","times_seen":9,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/plugins/sitepress-multilingual-cms/res/flags/ru.png","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.214Z","timestamp":1790102583214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ru.png HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 241\r\nlast-modified: Thu, 24 Sep 2020 11:25:54 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":241,"size_decoded":442,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"3e4733a9ecb758d58eec825cc227fee2","sha1":"ded9f036f70fbb4253f8b3a08adab51de76e84fd","sha256":"bc78f50b6e27078e91fe318c8ebdc52bac6cabbe5c298f471bc60292e126e1a5","sha512":"e0656de4d204b826e186a4b8f86eeaadc7dd7adae86ab11cc43ed270ebad29b7d019a8752d6638707545f3a7556bc1b23116897475fbf8ba712684edeb175d79","ssdeep":"","tlshash":"51d0a7f28ddc4a34d01b1a9f521539a8f47604e6415307d2be0e4619187d5a86387a54","first_seen":"2023-05-02T01:14:22Z","last_seen":"2026-09-22T20:26:17.897128Z","times_seen":1618,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/11/h-1-min-1536x960-1-1-1536x359.jpg","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.954Z","timestamp":1790102583954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/11/h-1-min-1536x960-1-1-1536x359.jpg HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48454\r\nlast-modified: Thu, 26 Nov 2020 17:36:22 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48454,"size_decoded":48658,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1536x359, components 3","md5":"7cd395d32270f48cbbf3835c173ff3de","sha1":"0009d3e5c94d7ab67031127bd890bac9410a6775","sha256":"bdc88bb435abd1fac7aa3103d826a3491db35cf6b736f2bdfdbf66dadbe3a1d8","sha512":"24a6659f1409478c1fd4374a9ac5cfb1a30e660d0d7235a3affecd3106f0cce5ee565c7fae3346d66b193fa41d8d010eb8fabc3ba3377aa33057bb169fad3562","ssdeep":"768:dOkjePWwxn2QoARLupDjB9GKR6OgXlS8fDjq7UJ4S+7mqzq0u34d0+n85zEnoIMm:drjeOio+LIBgPWUJ4Pzqm0+kEoIoBlAh","tlshash":"9c23f22e7a64040af5b64eb3c5c1701d4709fb7ad6d8e44a263cdced05167869b8f8b1","first_seen":"2026-05-01T11:33:24.051158Z","last_seen":"2026-09-22T18:44:04.527559Z","times_seen":3,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/ff711b4095ff5358dfeb4705391614b1.js?ver=614b1","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.259Z","timestamp":1790102583259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/ff711b4095ff5358dfeb4705391614b1.js?ver=614b1 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21442,"size_decoded":7328,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"21e1283c4ac00f67a0761277e558006f","sha1":"5f8c73d7bacbbf29e2eb59b63b90d85d635f5bdf","sha256":"2934d502acefaf611e0a29bb8b3282f6ac8d06f633565efca4f89f00cac24477","sha512":"bc2256689b790a9517c95475e4df4b7e0092ffd247cfa0891f780074e75ab1cc4b713d001d49451dfaf7eea04a6d615debe5ce4cef9cb5e384198764bae526f6","ssdeep":"384:Sdw5JLyFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvs:wS36Z5vkO7ku","tlshash":"d1a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-03-08T23:56:17Z","last_seen":"2026-09-22T18:44:04.528279Z","times_seen":22,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/plugins/3d-flipbook-dflip-lite/assets/fonts/themify.ttf","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.026Z","timestamp":1790102584026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/plugins/3d-flipbook-dflip-lite/assets/fonts/themify.ttf HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/3d597852dba9cd048c4710559c9e81e3.css?ver=e81e3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:04 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 78584\r\nlast-modified: Wed, 22 Feb 2023 13:28:50 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78584,"size_decoded":78786,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, themifyVersion 1.0themifyhmf                                         ","md5":"e23a7dcaefbde4e74e263247aa42ecd7","sha1":"5bb1fe69452a484566a81076af7567728fe7e43b","sha256":"350663a4665e00072c68a87ad3fa0be47b8a91424127f5f3e09f664197295f01","sha512":"e3e9a7c1232c1ed4e20c8f4007f0fd8b08f1178ed126d62d677bef5d769bc6c7636b8b515ca5b421bda359f50571f8ed92676cda4b1d6fa88c704eb944217906","ssdeep":"1536:ToDkfLM7phIjep8azfBf9ggkZA1WL09KvJKh4J4Ig1yjTCe2:EDHthT9gzzWQU","tlshash":"ed735d4b32803357c1cfa77d48d7406d0baa910cab4627579bed9932c76234e7e9a39c","first_seen":"2023-05-10T05:38:27Z","last_seen":"2026-09-22T18:44:04.492636Z","times_seen":1232,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/e510b238128b652565a95ca455c9c97e.js?ver=9c97e","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.240Z","timestamp":1790102583240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/e510b238128b652565a95ca455c9c97e.js?ver=9c97e HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2983,"size_decoded":1564,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2946)","md5":"209dca571e638ac673e273be81a4527a","sha1":"76f66df140a86e52044fc1a959b2c75991e88a52","sha256":"ec7a72cb9662825e0ebdbee45de1684f93ee963661b6de0d5e4fe99c8fc5c25a","sha512":"35be6e2073cf7d7543a0925ff4aac0b878c940c348434e331bcc7722f58a65996287df5501011c6f8efa9ef0a98f58c5589d287721edb7ee48f423806a0c559d","ssdeep":"","tlshash":"4651c8d433c95d362a83b3395eff930261722709b50804608816c86931bcfea63b67fe","first_seen":"2023-03-07T12:28:41Z","last_seen":"2026-09-22T18:44:04.528882Z","times_seen":289,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/00aa1c7d3af99baa550a22949d64e936.js?ver=4e936","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.267Z","timestamp":1790102583267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/00aa1c7d3af99baa550a22949d64e936.js?ver=4e936 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10232,"size_decoded":4080,"mime_type":"text/javascript","magic":"data","md5":"4a3b3755cd23e73bd6123742ccacd139","sha1":"9d11b04db3758a0ba19a43c4ca09683b9442745b","sha256":"0efbb245ac703a973da04596805a2e264f56dbac5c69339780aeb5fcc2efc6b3","sha512":"16a854093b066884243701aaff1b6b2829bfcfe18a8ed27fc04c081f3ec2efec4fd0f9090a7bff483131726fafa1a24ecb6d9b0b8db254132057bc3c20969d86","ssdeep":"192:XcnSRa1BFzAb3ymfh6KpnYzDmCHqyjhUy/H3Ds9sFGeZSNSUikf+F:MnSRWEBhHpY/rHyy/H3Y9sFJZStff+F","tlshash":"e222c4acb1d6b096175710e4847ff10af23bae5430d6e890c645c9e57c70aca61a3fad","first_seen":"2023-03-08T23:56:17Z","last_seen":"2026-09-22T18:44:04.529524Z","times_seen":47,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/42a9a4f1ce13053c1567df544c3f5ce5.js?ver=f5ce5","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.275Z","timestamp":1790102583275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/42a9a4f1ce13053c1567df544c3f5ce5.js?ver=f5ce5 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1948,"size_decoded":1113,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"45679cab9fb5ff4d1a39d585d52fc36e","sha1":"4b5de4488c06da0536034aadd7d1df2363ecfeb7","sha256":"106bf09b3755caefcf6bb0963fc9db0b8562ee459a706f89425ff7c1e948869b","sha512":"24865906f663c2b662ed6a7a09a261843bf12e2f71ab5dff0f3679136e25b31e974825f6483d63a502e62f6b5de16ed52af75fb203b09a13d68f06fb844dac10","ssdeep":"","tlshash":"17410f98348c3c1a45f71be075bf15a8f13cdb72009a4098c626a7e02d74c439a9be6e","first_seen":"2025-07-11T21:44:50.358481Z","last_seen":"2026-09-22T18:44:04.530141Z","times_seen":7,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/11/2-1-1024x727.jpg","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.953Z","timestamp":1790102583953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/11/2-1-1024x727.jpg HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96393\r\nlast-modified: Tue, 10 Nov 2020 16:22:04 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96393,"size_decoded":96597,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1024x727, components 3","md5":"64e0e880c4681b4789d2cc05f0c7ce9a","sha1":"b2108dc11f02059e548feff55c0b2ae0bc527af4","sha256":"13bc7e96b325ba9178fe990c68e0661e1ddc7504e4fd352d2d42b156cae715b9","sha512":"4894845098ccddd3ad5d4d107a7cdc632a62a18a2d592dda35520f0cba48972b88eebbc39695383f851e2e9db5110af48ebd83a69756a5ee7a9809a9e6dd73bb","ssdeep":"1536:eiYXwRY70MRgpaZuoh/CNEhfJnsoTJ0BrztN0/EJSeJTMSrHszjP+Dcrx:lYXwRkg4NhThxsoTuVg2FrMX2Dcrx","tlshash":"4893010711ccc5238db74cd2ac4b274f2e15be622eafb42315add98c32361db06ad46e","first_seen":"2026-05-01T11:33:24.023774Z","last_seen":"2026-09-22T18:44:04.530969Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"medpharmacygroup.ge/","fqdn":"medpharmacygroup.ge","domain":"medpharmacygroup.ge","tld":"ge"},"ip":{"addr":"188.93.95.68","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T18:43:02.055Z","timestamp":1790102582055,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.medpharmacygroup.ge","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 00:49:11 GMT","end":"Sun, 25 Oct 2026 00:49:10 GMT"},"fingerprint":{"sha1":"64:28:D7:7D:98:CC:46:C7:FD:2B:33:00:D9:BF:42:91:18:8F:67:FE","sha256":"BA:28:E5:3F:43:C8:2C:62:A0:8C:BA:50:08:A6:13:ED:87:7F:A6:BF:CB:BC:26:E9:5E:F3:BB:63:68:D0:A0:81"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: medpharmacygroup.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 22 Sep 2026 18:43:02 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=10\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WPML:4.4.0","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"Slider Revolution:6.2.22","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":268781,"size_decoded":32964,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46501), with CRLF line terminators","md5":"92d2b2ecc0e1ccb81124106ebb4acee0","sha1":"633cfdc40d0b110d4634107820eadb95e0e89a37","sha256":"22be5cd851f35a80f2c52041b335513ab70d25de4d849a045a1213526e417551","sha512":"e72f634d5f8abe6b0696dc9608fd1f2baf41d0f2df7a306d8310e7663a3192842f776b18da0f6defd25e09c5b16cc11c257d9a45813a8ecba61d9a1057ad45f5","ssdeep":"3072:gJaQ6ORmS8fHeCbVosGtIpLzVUh9TadIguqKANW6dwK:gQIenVpUANW6df","tlshash":"ff44b5626507261587734deaa3c63f29f71da215d6020634bafc18ac7fc6da523e3b0d","first_seen":"2026-05-01T11:33:24.062125Z","last_seen":"2026-09-22T18:44:04.515697Z","times_seen":3,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":3,"connect":89,"send":0,"wait":233,"receive":175,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"medpharmacygroup.ge","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"medpharmacygroup.ge","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"medpharmacygroup.ge","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/2939f9e558f6b25eff069b6381c531cb.css?ver=531cb","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.024Z","timestamp":1790102583024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/2939f9e558f6b25eff069b6381c531cb.css?ver=531cb HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1292,"size_decoded":677,"mime_type":"text/css","magic":"ASCII text, with very long lines (1292), with no line terminators","md5":"6951878f392fedb2b8b8959181f4c07d","sha1":"af8c451da0a1671dfb6cd807fb09cd42de808d07","sha256":"88c94cf1499b838cb6359d937957bd7d4acea76fb8101d209a6c4ed01f4617d0","sha512":"73394da644eff4f247ae235ea0be6b0040f9bfdb2ad3b2645dd63493ef0957cf88ad23e87a4ce850ced0887f53d068c80ffb2940aea9c45fd12bd5ae1a12b395","ssdeep":"","tlshash":"e7217c550496115a4027e7015dd3da9a38ebf1521c3607cdf7408309ce8faad1dd29e7","first_seen":"2023-04-06T21:12:22Z","last_seen":"2026-09-22T18:44:04.53187Z","times_seen":473,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/3d597852dba9cd048c4710559c9e81e3.css?ver=e81e3","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.026Z","timestamp":1790102583026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/3d597852dba9cd048c4710559c9e81e3.css?ver=e81e3 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14082,"size_decoded":3085,"mime_type":"text/css","magic":"ASCII text, with very long lines (14082), with no line terminators","md5":"19cb45ccfb4b9eb82a28651f302796c4","sha1":"680e723f1d799032eec21a7383fec580d05467e6","sha256":"6cfc4ce6b0e24b8939e54d467beba1f80fad4d93de835dfa432eefbdfdf94e6e","sha512":"2c0e0ecc91c31361796e61032c35192aa2cea312c70da8e77598b0fd822502d491537136ea6131e3c4db0a286995328ca3d31952990452159ee05b385247eddf","ssdeep":"192:RLW+lVqHwfEikYpF/wITcddD4uSHiN+V2+j:Pz3kYQITAajFV2+j","tlshash":"e752d8a9e45d44e87737c003d744f26d609af931ea820c7df12fa62c1dd266262d9ebc","first_seen":"2026-05-01T11:33:23.988429Z","last_seen":"2026-09-22T18:44:04.532481Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/f1792fd378e6a94eb00daaef215e915b.js?ver=e915b","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.042Z","timestamp":1790102583042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/f1792fd378e6a94eb00daaef215e915b.js?ver=e915b HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":950,"size_decoded":675,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (593)","md5":"03ff86400835132fbe703b6e399d55ff","sha1":"2b3af3a54535cea6252621d1e1f5a1fe6ba38888","sha256":"7278616211d3914b4f104e3c3cb9d59b7fe4c37d3fc04e24723306ccb374ffeb","sha512":"9c17bdfe0aef8fa442d26f66e6b65838a1214ba50008aa269730b9952f2754f9573f515828385a09d6cfcf8b5f23c5f559c0470a3bb3901b134722b7522d620b","ssdeep":"","tlshash":"6811ce54351876f64a47694b28f7530933db96611143674cc270b3997f2df86b82130a","first_seen":"2026-05-01T11:33:24.053207Z","last_seen":"2026-09-22T18:44:04.53326Z","times_seen":3,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/06632db860ea631381de7552fade3ba1.js?ver=e3ba1","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.044Z","timestamp":1790102583044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/06632db860ea631381de7552fade3ba1.js?ver=e3ba1 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1279,"size_decoded":652,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1277)","md5":"d7f9507ad6338936ac4cd1b6dce6df31","sha1":"10769c1549e09bd28dbe0bee709003ea99ccbf57","sha256":"6c9aa046879cf0fdb44b16615532fcb0d5abb446e659d51acb51284b492c2650","sha512":"f66b60b9f3f96a20d92a6b8660b901b0b531eb71f5bc2ea4db6c2092d9d5ff76a2680bcbbbe34c16d2b66cd3cec3530a41282332d7813690cef24edc630509ec","ssdeep":"","tlshash":"ed21ab243146f1fabafba195266f7097c4516fedd01020e134e6b9e94b5ecc0203371b","first_seen":"2026-05-01T11:33:23.99727Z","last_seen":"2026-09-22T18:44:04.534042Z","times_seen":3,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/10/Logo-HARMED-1.png","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.224Z","timestamp":1790102583224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/10/Logo-HARMED-1.png HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 89221\r\nlast-modified: Tue, 27 Oct 2020 11:38:24 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89221,"size_decoded":89424,"mime_type":"image/png","magic":"PNG image data, 3684 x 1104, 8-bit/color RGBA, non-interlaced","md5":"0a63f7f87d27c00d64c83a189a1ce09e","sha1":"7b86477df39ec07697d26e849b7fea753421b67b","sha256":"29ad3a8b04544d1fdc2949fc9f8d3763a949cc612d0d8d390e43247d2873a1f4","sha512":"13aa29118d402325d8cd01e7b28d1295aa98aa7f0a509213a276c44017f9fafd25ef4c59c22390208a80320c2d74e69cd7597c39e71815809b9d8fd1f0052d71","ssdeep":"1536:e1SkTteAwe+QJOUmobuAY9WBSp0weR+Sd/3Z4e80qooW/8yRYcnt38PLincx2c4W:65ele+QEAYkBSp0hR3/GeMooW/NrJCca","tlshash":"7193f1a5e547fed2d7a94678903aafc0b33d5f59809923d2337d21382f79b4cea52240","first_seen":"2026-05-01T11:33:24.070818Z","last_seen":"2026-09-22T18:44:04.535034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/d6d65b731799e6c2fa273ecff1834849.js?ver=34849","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.263Z","timestamp":1790102583263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/d6d65b731799e6c2fa273ecff1834849.js?ver=34849 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17825,"size_decoded":6802,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17819)","md5":"a3effa9da7489ba835211a5b8913c144","sha1":"dd8cc76ea71be5a0a7c03084a111e68dddcce182","sha256":"9a229177ca589411f4f95f13ff188082a513c02ab7f9a12c610b528c36c02f27","sha512":"6cca9ed4335af92ad60b76410944f2fae75f7472c2893866877c1b061da013ab1002bd035181e28da59825cbbb13736f15c243039740a1019421fda4b8717881","ssdeep":"384:yGL13VaQEAROfhy+eRbH4yuLE7Z1d3yTw4Ef:yQR/OqRjHgG55f","tlshash":"6082538dbd85f4520363a1b6122f840bf3bb0a5ab46fa5d0a25ac5d06c7988e512bf1d","first_seen":"2023-04-06T20:32:42Z","last_seen":"2026-09-22T18:44:04.535957Z","times_seen":79,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/f785d17f89a76e472df919e721b4a348.css?ver=4a348","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.017Z","timestamp":1790102583017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/f785d17f89a76e472df919e721b4a348.css?ver=4a348 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14059,"size_decoded":3090,"mime_type":"text/css","magic":"ASCII text, with very long lines (14059), with no line terminators","md5":"735e7a5bbc3e4574d485b30ee2670cd2","sha1":"98026c3ce9455321bb146d9c39b1517d4ead8fac","sha256":"1f6b0f13e4db827569b5eeb08d00fe7f1d426b3715f43b178d0f1dcffc57cbc2","sha512":"b0f26f43e81dc75c984fda4961ef7d8f2037753972073e58675fc5b7e1be056d9a8aec7a1499a8a0a8ffbb6bc9d264f7eecb55d0b25875ffa210733c8db147c6","ssdeep":"192:9FlOqHwfEikYpF/wITcddD4uSHiN+V2+j:Ez3kYQITAajFV2+j","tlshash":"0452c7a5e45a44e87737c003d784f26d609af531ea820c7df12fa62d1dd266262c9fbc","first_seen":"2026-05-01T11:33:24.073841Z","last_seen":"2026-09-22T18:44:04.536713Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/1f686d1bd3aca5797249fa6af1fc3109.js?ver=c3109","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.237Z","timestamp":1790102583237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/1f686d1bd3aca5797249fa6af1fc3109.js?ver=c3109 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2940,"size_decoded":1256,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2938)","md5":"7673d260a135aa3755e13e5f25e5dbab","sha1":"fe9724298af7de2b09e398da8477efa9beeeb65d","sha256":"0865f43fdb2059bb0bade558b0995b848fee6dcd40933dc41925097ba4e10594","sha512":"fd0e16bf4d9fcc6d2be55a93dfb9b73471a6b5fe12df6a2b617f5b790c4126fd24d9d20138b5fbdc0c02de0829c68968abb054a0cba7b79c4be9ad7727ceb06e","ssdeep":"","tlshash":"ae51341fb070cda119f2287e617a718522329965b6098b30b025d8e42eece4b1773ece","first_seen":"2023-03-07T23:28:30Z","last_seen":"2026-09-22T18:44:04.537676Z","times_seen":119,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/fonts/raleway/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrcVIT9d4cw.woff","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.943Z","timestamp":1790102583943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/fonts/raleway/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrcVIT9d4cw.woff HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 22460\r\nlast-modified: Mon, 15 Sep 2025 17:12:05 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22460,"size_decoded":22663,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 22460, version 1.1","md5":"c55459912df7e1c62f7b5b40e04d4766","sha1":"621bdd2f582ae3a8f7d558649c6a19733e1ce94f","sha256":"b57c24f082aec6ab1daa4aec034e79b95a0381bd929f03baf4795d724650c2bb","sha512":"209bc3ba7a0169d580db833917518dad91a53e08e038d7ef702ab56d4457eb46189dc6571729d1cf7b8de76d9cef64e4f40fcd1c13e3d34e9e9e4abc51f6d63c","ssdeep":"384:xb51SiRXjEnjpn5A2MpngsESSfFtdKVojU7ftgpKg7q05CPB:xt1SEjsBfM9eFKhtgKYq0g","tlshash":"3ca2e1874273f48acd99bab7daddf505c42b877ddf126d2563ef145028382efa40824a","first_seen":"2025-06-13T11:54:11.782419Z","last_seen":"2026-09-22T18:44:04.538332Z","times_seen":123,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.050Z","timestamp":1790102584050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:35 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 96629\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49076,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-22T21:01:15.120826Z","times_seen":66437,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/c01ac50650734c9313c245b4166d6144.js?ver=d6144","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.270Z","timestamp":1790102583270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/c01ac50650734c9313c245b4166d6144.js?ver=d6144 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8468,"size_decoded":3102,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8281)","md5":"f7720ac72180c0f3f042fa2277e1554e","sha1":"1dcafb034d5a3e4e94d6205ddab55364660d8db3","sha256":"66dfbf8e0289967c43fe846462eac246aa2d8e0dd4fdfb50118172b7d6fd91b1","sha512":"ddb9d8fcf2b4eeb21753d971a88af9882a10d084a10bb29e4927f73886c74648e7fa26ae64f8f425cbfc10ac705d3f84e33f8ad0f073c03df3d24888b1b566a7","ssdeep":"192:QYAtBY1jWBoYfgZn+gkEmaAGCkHjpXCNd882E9cNS/JWmw:QYAvSWBoYfon+gkDkrH1XCNd882E9cNV","tlshash":"d002845e365a6a4156efa078616f324b613a20aa5801815cf4bc9fcfad3ce1431b7d7c","first_seen":"2026-05-01T11:33:24.016944Z","last_seen":"2026-09-22T18:44:04.539621Z","times_seen":3,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/09/cropped-harmed-1-32x32.png","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.017Z","timestamp":1790102584017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/cropped-harmed-1-32x32.png HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1221\r\nlast-modified: Fri, 16 Oct 2020 14:22:50 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1221,"size_decoded":1423,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"1030e91bcd71b9bfda7ed1ca90554717","sha1":"16dc9724db2930dcf2aabcb54fa4c564ed4d7673","sha256":"f4e3c46d47d708d35496a45019d23aec758c3e3ff6538136feb6af5202900049","sha512":"14160bc0ed74523de19d54d01ede4d0af2b67745b95bdf2c6d30626cea462b58a80079c4ec70515a94023a3b03ac9ab434ff7027c7fa676f01285760fcd78c14","ssdeep":"","tlshash":"9a21b7c3210337561928630e8e569608fd9b0de256b46624011dcaed0ff228065f5479","first_seen":"2026-05-01T11:33:24.009898Z","last_seen":"2026-09-22T18:44:04.540295Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/90fd252c487cecfbe16243dd25f9a3d4.css?ver=9a3d4","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.871Z","timestamp":1790102582871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/90fd252c487cecfbe16243dd25f9a3d4.css?ver=9a3d4 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95004,"size_decoded":13101,"mime_type":"text/css","magic":"ASCII text, with very long lines (47869)","md5":"0f1cb62ff61c9d9c61811f878051d057","sha1":"33c1bc613e08dca99951a3596728bf8d74fb7547","sha256":"c44a81f1dc8847a93e69fb5f7fc5b6b8c7dccb34079bc171d730ad768c77f876","sha512":"95769b6bc318af728261fa476f0bc773fb240103aa729061f6e67efc18dba0a684e82d8dbe584bc8cc98bfba0981b9deaedddee5611bbe76235da69249530767","ssdeep":"1536:bcaFIf4gkA5SOV+sQ354NThtf0J6BZ9NuZr9:bcaFskA5SOV+sQ354NThV0cBZ9NuZr9","tlshash":"f593415417b0dcf939ffa73a9d5ee248a513aa41c24a9be7e036d190614ca494cf3b0f","first_seen":"2023-05-20T15:55:44Z","last_seen":"2026-09-22T18:44:04.541052Z","times_seen":42,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":79,"connect":14,"send":0,"wait":38,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/2917c201b899923499b1e40b05e153e3.js?ver=153e3","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.283Z","timestamp":1790102583283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/2917c201b899923499b1e40b05e153e3.js?ver=153e3 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139154,"size_decoded":36164,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"141931ee67a88608fc9b774842745550","sha1":"96235a2dd886acbdaf3207a9c4521ce61efc22aa","sha256":"dce7332ec8e5e08cf0e7472517305c5fe1ee2a6ef67ade946ddcdaed191511aa","sha512":"b87d9d6fbd5f8019a3fa1b6143c7ce54b4094ea3a836006fd5865487d2e2db4633237e137c64490664243016aa06f5fc1b9bd9da5ddb1edaa65432cbd03216f9","ssdeep":"1536:Fj2qhgxfeuGMfoqi2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBg7:wxoo6desFshaKi+HgZsUOUTqiqM37E4","tlshash":"33d3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","first_seen":"2023-03-07T15:51:56Z","last_seen":"2026-09-22T18:44:04.541635Z","times_seen":175,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/08479ac02dec62190e355076c8f4a261.css?ver=4a261","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.023Z","timestamp":1790102583023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/08479ac02dec62190e355076c8f4a261.css?ver=4a261 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14065,"size_decoded":3627,"mime_type":"text/css","magic":"ASCII text, with very long lines (14065), with no line terminators","md5":"1679dcd38f5d43f1ef64c0ff331af810","sha1":"fe69cca0e7d419533924228c6bd434bc57ab542f","sha256":"f6f3d53dd2240261f157695adf386a5c08014298c19f62ccf63cd162996892d0","sha512":"35ea7a6b3445a389e236643fda00a7b03712e083f79c5efbf8cde336ff58c3164f19e9dfb4b63457a2b245aab0e13e1f8e5a527aa02109040182b389fab981f2","ssdeep":"192:LSI+Dc4r6oiMtKtlgjg0xY7Z394C6vGgjq5TCb:GIu7qMtKtlgkr7Z0vGTZi","tlshash":"855252636140325c507bcd61d7cf9948e239c152a6221afbf64cfd59cbc7be822c62c6","first_seen":"2023-04-06T01:20:39Z","last_seen":"2026-09-22T18:44:04.542301Z","times_seen":5487,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/fb6d7b19428ea66b6f58a2cb0d00e97d.css?ver=0e97d","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.027Z","timestamp":1790102583027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/fb6d7b19428ea66b6f58a2cb0d00e97d.css?ver=0e97d HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27071,"size_decoded":5768,"mime_type":"text/css","magic":"ASCII text, with very long lines (27071), with no line terminators","md5":"8288ccfd5401bd8836b95bf4174862f8","sha1":"032f42a5e50edc7989c71b18bad471e17e22d341","sha256":"137d10d8483cab9a53b283a12973aa20a55e8f5c3b07e5150995e9272609e846","sha512":"3dc619f2c3555691f4c34b439ebe5aebef555fd2993fad8e6e90196372f365790c3c74c8a03b9ca1a08390d9fbfdfab7739f3c7fd550865fdb54e40451e87097","ssdeep":"192:Kar0X+6v4gY3yoLHaW0/4PzP/PeKlv/Cy/KQq8i8q8iiz06IBcMBjrYb8TSPcN+D:KMD6wbyoLjhH06UYbMWcNly+3HIQGUi","tlshash":"2dc266b29585112cf13fd23da7d09bac2639c283f9530fbef215b176cb814eb11a5a85","first_seen":"2026-05-01T11:33:24.067329Z","last_seen":"2026-09-22T18:44:04.54301Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/688417fcb1fec5148ef45b3b76fa688b.js?ver=a688b","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.276Z","timestamp":1790102583276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/688417fcb1fec5148ef45b3b76fa688b.js?ver=a688b HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4527,"size_decoded":1979,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4525)","md5":"dc4420dba33d9de70f303a393e20a71e","sha1":"b92b2cc8b2e59690d9d92bec4ad3cd602fe5e707","sha256":"1057e7ca620debb14433084f0c18e642964fce1de94cb3cb2b20ea3dd470bad0","sha512":"69a25f34ef9d65c9e92556664bee227aa74505fe79602a4a0a3774028932a78b57a5f868a131138ef5e28cbe37ec4e1d486d67d657f88e01b7fbadeb8c4b8893","ssdeep":"96:42qsoJenl5DYyBIf5fENvXr14m3+xTWk7FmdqOdt:97oInl5kfyV6TK","tlshash":"1991656d3b2830b041dfa2afa09f5f49a23390169627805471fddca81a79a397b71d2c","first_seen":"2026-05-01T11:33:24.0556Z","last_seen":"2026-09-22T18:44:04.543742Z","times_seen":3,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/11/medicine_sld1-1.jpg","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.477Z","timestamp":1790102583477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/11/medicine_sld1-1.jpg HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 361093\r\nlast-modified: Tue, 10 Nov 2020 15:54:28 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":361093,"size_decoded":361298,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=736, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1920], progressive, precision 8, 1920x736, components 3","md5":"d436c816274a031670411b5ad7691956","sha1":"afb873ca4f8715168721ebb35d2292eebff0d9bf","sha256":"133173467aa98a63220cdf5fa804fb60087ec56faeb4e3a3ff6f73ac4edf202c","sha512":"018edccbbc85307b7a453b721ace3b72a7651934eca377187558f0f1636d3a81829cdb590686b1e9b86ceab6ee2415a4ea566bba30605c70e1045a8606e28e6b","ssdeep":"6144:A3D391nRLb0F4Ik+uoepijiLmhafmiZdb4rBiUk0Z08gaeyU9:mD9FF+u/EqmNg4FgvP9","tlshash":"a974121915334873df8150752bc6eb0e621e7f6071a22262f55e713e3b573a8b4aba8c","first_seen":"2026-05-01T11:33:24.045353Z","last_seen":"2026-09-22T18:44:04.544489Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/3e79f8ee4c25bc788224122cf0d0512d.js?ver=0512d","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.041Z","timestamp":1790102583041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/3e79f8ee4c25bc788224122cf0d0512d.js?ver=0512d HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26363,"size_decoded":7529,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2425), with CRLF, LF line terminators","md5":"442375dc7af9e87bc9813d6d54dab173","sha1":"10a0ae499cbd8dea1ba93ebf6d82a623feae052e","sha256":"3e3815120dfc1f835f8f0f853e73ca751275c476455bbe79e1ea5ed0e395eb5a","sha512":"b75b2e29a5632ba606c9223be8f332ce0775587775ec01845639e787ef7ca6e109a65cad1842c8e652f5a0616640ed601d161300761f7475267c30935c3ab445","ssdeep":"768:SBcgN0o6d9zZ5NNoHeuTW3Bny+qyBiEYtTK:Cf0o6d9zZ5NNo+uTW3Bny+ZYc","tlshash":"4bc2a7097681105f4ecf30fbb497524f72ba95946019a069b8f8a4d1bef9f8170a6f38","first_seen":"2026-05-01T11:33:24.011975Z","last_seen":"2026-09-22T18:44:04.545222Z","times_seen":3,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/a940ea7342f49a5607f3289a38039d41.css?ver=39d41","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.888Z","timestamp":1790102582888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/a940ea7342f49a5607f3289a38039d41.css?ver=39d41 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":198,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T20:48:35.301897Z","times_seen":18605994,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/4fa7e9ce7174e903bdc42ec2db306bf4.js?ver=06bf4","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.235Z","timestamp":1790102583235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/4fa7e9ce7174e903bdc42ec2db306bf4.js?ver=06bf4 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1836,"size_decoded":1195,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1668)","md5":"df132c0f1b0f1f2d89d54b4f2eb19cb0","sha1":"2156f0112a2992e91fd27697426e7dcf981feae9","sha256":"b6d96c7d9402c0cccfefd32ab0d9f6e989c2322f2a2a9cc592036a7bf85a44b7","sha512":"74c9d92bccbff6d0d17e7289419bc03d30531ec8cc7af44605415a373d920776f30b402567ca115ea062603a67ff04af37ba760b2ef9e245f02d16acc3dd716d","ssdeep":"","tlshash":"2c31b5c83449388e06af1221523f62cbb03c9a0f5ccd9459a308b2f13531867815bfb3","first_seen":"2023-03-07T23:28:30Z","last_seen":"2026-09-22T18:44:04.546706Z","times_seen":191,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/8737bf333c5a4f497eff20043474089a.js?ver=4089a","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.265Z","timestamp":1790102583265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/8737bf333c5a4f497eff20043474089a.js?ver=4089a HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4912,"size_decoded":1877,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4875)","md5":"e035784dd9266028fbc398842601f6b9","sha1":"1263f64133a9957bd74a10e83ca4893dd004b638","sha256":"f5bed67298b8ab1586f26ae1ea59949aa3a03a3bf8e510613c65e45d38a35d8e","sha512":"9f6584f6114b821ca8c1457ef022b7771767bd09769760719636cdffc8c494efd221514e14911ce79978d95a25cba03cd7ff3bcfefd66aa87288a6743b8afe14","ssdeep":"96:+5gEBcI7Du/3+D4Xf/TrURT19yArAgQ4FNln85mOpF6jURg/mICe:UtcIHq3hMRB9zQW7Ctr+OId","tlshash":"7ea123c474c3b460d673b062a47f544ab27a9ae1782dc480d25c94e13e73acee0b7e6d","first_seen":"2023-03-07T12:58:57Z","last_seen":"2026-09-22T18:44:04.547366Z","times_seen":55,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/11/1-1-1024x727.jpg","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.951Z","timestamp":1790102583951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/11/1-1-1024x727.jpg HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65174\r\nlast-modified: Tue, 10 Nov 2020 16:22:14 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65174,"size_decoded":65378,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1024x727, components 3","md5":"250e2908d4739426499fec53fa2d940e","sha1":"317239a772813642f23a28a8bf61f969fc30a21d","sha256":"55ff3e6aa05116c4e9bd378e6d920bf54c96623ecfdea2b46ff8ddf908de338f","sha512":"412b4277795e579df20d9b2a47f64414ab93c8670d1c67c33d0346313e6ec0eb174481489dc16da5fbea29af9bb7376611d50ccf43223f3dcf12bd7dd664586b","ssdeep":"1536:e+f+GjaW+CDcjaueeQ+Jw+gU3AplM/n8+4PaELe:yGuW+XveeQ+Jw+VduFK","tlshash":"f053d037568d0733ca3b8c96691b17ac5f2a3e4dad99316f09bac057b3b12e110dd49c","first_seen":"2026-05-01T11:33:24.018101Z","last_seen":"2026-09-22T18:44:04.548235Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/plugins/revslider/public/assets/assets/loader.gif","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.112Z","timestamp":1790102584112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/06278259ffa3a9eb7026bf34e670e700.css?ver=0e700\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:04 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2545\r\nlast-modified: Sun, 27 Sep 2020 11:17:50 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2545,"size_decoded":2747,"mime_type":"image/gif","magic":"GIF image data, version 89a, 24 x 24","md5":"4b3afb84b2b71ef56df09997a350bd04","sha1":"accdac8a7abeab0e21c49539aad0a973addb28ef","sha256":"9034d5d34015e4b05d2c1d1a8dc9f6ec9d59bd96d305eb9e24e24e65c591a645","sha512":"d65078b5d13873adb363472b5c358f6b42c128b530f8feba9776f8e4906cc97f20ee7bf1e823336cda8049147a9c7fa5e4016f07f96ec154f3774fbde1a564b6","ssdeep":"","tlshash":"de51e743e6a9fbe3cd7c013aee3c02c9764543e8ca2c6f38952bb5672509329a056a41","first_seen":"2023-04-05T06:54:01Z","last_seen":"2026-09-22T19:54:49.847474Z","times_seen":25417,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/3f433ccf0b00dba328ab6a1e2be9e93d.js?ver=9e93d","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.046Z","timestamp":1790102583046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/3f433ccf0b00dba328ab6a1e2be9e93d.js?ver=9e93d HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":327002,"size_decoded":84463,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64268)","md5":"251fa3849e20c1ee94c1e6fe7060cb18","sha1":"bd500cb589e2662bd2956ff772d122979d3584d7","sha256":"2330a9c808422525a6ea11f0b8103277e1632227b55012a86d389632a0a71838","sha512":"35451d5b39677163332c3e03ea011ee703a06f377722f17337f6bd34c94fe60c4d7fb4535d0cbf702d090e6cdb3b5dad55a59bd1238ee1aa25c41170e74d9313","ssdeep":"6144:slhZz/xgM34F0CXHUMo5/gv9oWGGKRxSifdGknTKbl7wnoyJDKgOfqMbx6:slP34FWYv96RxSifdGknTKbl7wnoyJDx","tlshash":"a3643be8e531787a04e743db905a440433b5e92de30785a2f1bbe1695c5858d02ebffe","first_seen":"2023-10-20T04:53:53Z","last_seen":"2026-09-22T18:44:04.549566Z","times_seen":25,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/4ed5a20e262e7e6600d4660380700330.js?ver=00330","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.277Z","timestamp":1790102583277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/4ed5a20e262e7e6600d4660380700330.js?ver=00330 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128418,"size_decoded":40962,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65388)","md5":"6b34bee4dadd25514c65b69adf0d0d8b","sha1":"b9c1ff1e004b27c000b2cbaee8a328b84d1deff3","sha256":"8cb620d51972f434f116497146aaa242cc5b5d242b4aeae7fe5412458cec7feb","sha512":"50afe69037b42ea935c0b607e23779b3b8893ec8f8994e431883cba8fc97a6c8fd92e28ed89997d78fbf1bd748cc72459e344291907382cddef2e893724edd1e","ssdeep":"3072:MHYu8CpEgycN/piwwAf1wiT1VCExSFth38t:M4ngfNoaT1VCExSjh38","tlshash":"45c32a9d726471b9999711ea314f2a0a7333946e840bc16cb538dce85cf8d0d32abf79","first_seen":"2026-05-01T11:33:23.984153Z","last_seen":"2026-09-22T18:44:04.55022Z","times_seen":3,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/7aad585f0a4ab622bd68a9ec58fa8393.js?ver=a8393","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.281Z","timestamp":1790102583281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/7aad585f0a4ab622bd68a9ec58fa8393.js?ver=a8393 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12200,"size_decoded":3230,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12198)","md5":"8a21a60655ed0dcd788e43054e71ed78","sha1":"0f0ae78eaf8427e9401a8113bb8cb52ceadd0469","sha256":"3004a75ed220409eb731e505d5ce9b36b17f64a9eb214977a3720a77c62fafb6","sha512":"c10bfa67a7bbd8372f827f0d3d246e60eb0bbb3b3e12f0e585364d4647732587d19ba2925f98c10ce3504cf7883b26a65ade58c859f6c798bcd0969d01c915a0","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9c:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoC","tlshash":"8c4221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T15:51:56Z","last_seen":"2026-09-22T18:44:04.551054Z","times_seen":700,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/e62c3c7cb6dd76957934a0d15a8e46e8.css?ver=e46e8","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.949Z","timestamp":1790102583949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/e62c3c7cb6dd76957934a0d15a8e46e8.css?ver=e46e8 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7021,"size_decoded":1374,"mime_type":"text/css","magic":"ASCII text, with very long lines (7021), with no line terminators","md5":"477005a603d62553e715b31faea0c163","sha1":"0efdb76d9197540d80c259e5f3b1aefc84dfaab8","sha256":"2e05a099697256c998974e9155f9d6c2c2df700504628e7cb30977fe773eb63c","sha512":"784cb9605f43cd0a7e4ce0f76d0b260652d6d314569a8617ce14e5e33daef029d2cc704275844a16a7aab5ca52850b159839b87eb4e69da7e76f093ca60aac88","ssdeep":"192:3jHXN5HjRHJNnHKDHJXHa+HQBj8fHBH8TNbHlmIrmni4ElJK6XKUlK5859lP5IQv:3TdtjVTHKzJXa+QB6lYbiapGAHzJ","tlshash":"6fe1f2a7aa15bd3537dee5807c0735e87c2ae038bf04193558d90b1cc7ca9ca61a2f1e","first_seen":"2023-04-06T15:10:56Z","last_seen":"2026-09-22T18:44:04.55207Z","times_seen":485,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/3fc2d7cb4b1f619d62be2a1f4c0e3a46.css?ver=e3a46","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.030Z","timestamp":1790102583030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/3fc2d7cb4b1f619d62be2a1f4c0e3a46.css?ver=e3a46 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18468,"size_decoded":2835,"mime_type":"text/css","magic":"ASCII text, with very long lines (10019)","md5":"4601ba55044413706c2022cb6c1c3d05","sha1":"5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec","sha256":"fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c","sha512":"8dab2d19378e34b40043621aac57b418e56486dcfebd1a5991be8a02ee6b071d07ec6bfd9408dea8ff0198995de9d42a46e66513d68b40b68056707e4e691e01","ssdeep":"384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm","tlshash":"c58269c9ee12104902a70373caca5e68c9388ec764325cfe7366544f0a51add73eba77","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-09-22T20:32:27.262799Z","times_seen":44154,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.940Z","timestamp":1790102583940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:37 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nage: 96626\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":8559,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-09-22T20:53:36.627289Z","times_seen":291312,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/92606acea74aa90338a9c5dc80b3b561.js?ver=3b561","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.045Z","timestamp":1790102583045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/92606acea74aa90338a9c5dc80b3b561.js?ver=3b561 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119248,"size_decoded":45578,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41022)","md5":"0c4e1a1b7d6079214460b52c5637a104","sha1":"4037cf53545f6df8e8dbe303def623857285c26c","sha256":"a2972033b3bedeca2d716c08627a8c35a68f964f0c0255d2cdbf192d32a57f32","sha512":"84943a1964b6f58571f95678c4d1cf43ede9c6df2cc863d31acd2317a97e13dec32ab81443275dfda6adb2b1b366badbacc4bafc2528381efb613c57b7c1fdd1","ssdeep":"1536:7jaxldyra469QduD5VFg2WKl+2rCdlm0SNUINVp7NE1Q1wveOdV3LU6AK/w:c469QstWKAdm0S6IDEeYegbpo","tlshash":"99c34cd87151b432029766a6453f0b0ff23b9915740b452cf368e4c87e3c9a991bbfba","first_seen":"2023-03-13T15:08:28Z","last_seen":"2026-09-22T18:44:04.555279Z","times_seen":36,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/2960c0e596963667f9a7ddf25aa1dfd2.js?ver=1dfd2","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.236Z","timestamp":1790102583236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/2960c0e596963667f9a7ddf25aa1dfd2.js?ver=1dfd2 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2141,"size_decoded":1009,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2139)","md5":"acc73316eee10726fa31f35210ec52a5","sha1":"edf11ef42996e67d6ccceadf9df3ac56014671fc","sha256":"d361fe46c44e5f6b6b495921d9d9c3d0392d0bfea7c96c145e8f3bdb3f2667e3","sha512":"f6516fb1fc6eb226f7a7076287870417376ae0dad093cb70b4defe34f1e413157e3283653e264422ffe540452b5dcf94afff92c448cce0aff5972324f7e84d6b","ssdeep":"","tlshash":"9141ed07f4312d7321ef97b5289eb9842523063e88114611366acb2c257a9c7763bfbe","first_seen":"2023-03-07T23:28:30Z","last_seen":"2026-09-22T18:44:04.556143Z","times_seen":175,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/8350ded823627b2fcd38a61d8e4bb33a.js?ver=bb33a","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.260Z","timestamp":1790102583260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/8350ded823627b2fcd38a61d8e4bb33a.js?ver=bb33a HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10116,"size_decoded":3251,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9937)","md5":"32a5e77d9f44043e4575bba80aed8e6f","sha1":"a81416bb6c3b9ecd57ce54f5ce068e7fdb0246d7","sha256":"f91fab60eabe3eaf340e9124d64940dc8742ddd3f5feedba725e9681e79da89c","sha512":"8bed458fe23e885f892824e6dd67ecb7cff2f0d51d8c952b78a66d5d8b4d4c006d15bf05539496c25cac37d3737b53bb1d348e1a7c3794df9f3701cd14609cc7","ssdeep":"192:rcn1gNsAeuLJJE2mBrnYgfGGFTsPdQlJh1NmgKzm:rrsuNJE7x/3sPd46M","tlshash":"4d22758831863a72349ba3d8291f60da623664989909555c70385fddee3df9023f37be","first_seen":"2026-05-01T11:33:24.060791Z","last_seen":"2026-09-22T18:44:04.556766Z","times_seen":3,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/useanyfont/9959BPG.woff2","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.934Z","timestamp":1790102583934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/useanyfont/9959BPG.woff2 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/9d705cd5df042b875dc88a1fc011132f.css?ver=1132f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14964\r\nlast-modified: Sun, 27 Sep 2020 20:17:02 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14964,"size_decoded":15168,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14964, version 1.0","md5":"ddd49c8e1413c8e97173379914cc7c53","sha1":"321902456cabed690bfef6e6311f5e1baba8e2f9","sha256":"88e7451f65b636a554e904475ae8aa6dbef1b5a69fa92ec339ce253d4dea6307","sha512":"8c9c283df578941486a23f2ed51ae2a7bf1ef820494bf4934fa85777a80850446512918207c4bd95b17d4ab4fc82a47077f49e9155da79178983d1d2c915bc7b","ssdeep":"384:6oCZYHmPKeGZOeHF+nkf3XNB7B2LoJSSA8ddE4C/:RCZMZOCFv3XN2LCk4C/","tlshash":"d562cf479af1b0a9c03e80ef364a7661c99c6dd37bbf54e864b43b095c58ccb607a840","first_seen":"2026-05-01T11:33:24.008802Z","last_seen":"2026-09-22T18:44:04.55754Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/themes/arangi/assets/webfonts/themify.woff?-fvbane","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.068Z","timestamp":1790102584068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/themes/arangi/assets/webfonts/themify.woff?-fvbane HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/f785d17f89a76e472df919e721b4a348.css?ver=4a348\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:04 GMT\r\ncontent-type: font/woff\r\ncontent-length: 56108\r\nlast-modified: Mon, 22 Apr 2019 15:13:48 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56108,"size_decoded":56311,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 56108, version 1.0","md5":"a1ecc3b826d01251edddf29c3e4e1e97","sha1":"9394f35bd2addd24666b79bfc36d4f9d247cb01d","sha256":"0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7","sha512":"2329063d667b5480a2862fe4e11154b4dabf3b8782fd67be79ebfe55bfda96e28e70f8f438f73c7ef9901afcb16370897c3022c8b649a33cb74459c610cca00a","ssdeep":"768:tImTAHYFg71fAWsOKi5qSy5LBaK+mn2noN5IO3RCtebWA8ipCWUa:GmTp0gpBpv2a58oSA81","tlshash":"244328747f6a5b2bde839db9fe850e5160f098c61f43f123c09e98522c7b7a88979143","first_seen":"2023-04-05T04:30:11Z","last_seen":"2026-09-22T18:53:11.48123Z","times_seen":33092,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/31f5fe20c0618607dc546d8cf4665b12.css?ver=65b12","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.028Z","timestamp":1790102583028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/31f5fe20c0618607dc546d8cf4665b12.css?ver=65b12 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16924,"size_decoded":3730,"mime_type":"text/css","magic":"ASCII text, with very long lines (16879)","md5":"abde8e665aaa06d4df564755f177958f","sha1":"c222fb6fe3ebf85b60dfef36f89f9409697837e2","sha256":"bc4e31222a2d72caa3f7a243ee7e70278e08fc20384cde270546aa24b611d5dd","sha512":"1dbc46b1b18797fe4cbcbc26cec75a6b7dcb3bb7b3326aed624c6a3fbb9c4a3f72848204d00bfa41fb45a8c8bdbea1179fe89a05c681bcde57730438fbb3cf5f","ssdeep":"192:wqV29r8XHGK+JRxSe6OSfNVsXZLUCpZETvebAmR+srfSbqkbQC4u/M:NmK+JRQcx5ZETGNREmk45","tlshash":"0472dba4e02923c92bb1c413e3d0734e7449b921fed5cd59fa9ba50c5bf1693068ab7c","first_seen":"2025-09-30T13:16:38.338007Z","last_seen":"2026-09-22T18:44:04.558219Z","times_seen":9,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.213Z","timestamp":1790102583213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 600\r\nlast-modified: Thu, 24 Sep 2020 11:25:54 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":600,"size_decoded":801,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"2878f64a0217a154e531853f6a822c65","sha1":"ac7a53e9f53b9de8a344c38222e217d50d559b83","sha256":"3f47c75fa68e49b1cdca50c61e9cd6603b57c521e5e6809df59a4a15e291a4ef","sha512":"0885bc73e9364c2b3c3730dcc5430e74bd17c3ab84f85a0ff33002bbba95f6650622650bbac35b05505978b58d98584f0c78b6a471e6449d33e333729c1fa0dc","ssdeep":"","tlshash":"4cf041d5b4c5323ee76f489343360bf1fc7080ee9901ac8ead0948191e6106ce74b201","first_seen":"2023-04-08T02:38:56Z","last_seen":"2026-09-22T19:49:37.765823Z","times_seen":15982,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/09/NZ7_6391-70x85.jpg","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.226Z","timestamp":1790102583226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/NZ7_6391-70x85.jpg HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2117\r\nlast-modified: Tue, 28 Sep 2021 15:15:50 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2117,"size_decoded":2320,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 70x85, components 3","md5":"39978ae6499b3a21f3474d701563c54f","sha1":"952be964846f0fb8a8bcb43bac0eea15251cce3d","sha256":"44d39ee8344ee1d9b14fb859a804943ad077aadc8b75a1e3aeb565ccb68223b4","sha512":"9155583a7ddbbea410cf1447b18841b8ab859a71002276c12125bcce85bb01a71f6b8cd3bee1c6390e2081714001960e85a4b77628da5a6086ee8edf48730c3c","ssdeep":"","tlshash":"f0414a6fa76151b8cd1b8c3b4c2748602acf2762b6b4d3803b32d2528a817ed9c44f0c","first_seen":"2026-05-01T11:33:24.081255Z","last_seen":"2026-09-22T18:44:04.559633Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/flags/geo.png","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.211Z","timestamp":1790102583211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/flags/geo.png HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 321\r\nlast-modified: Thu, 24 Sep 2020 11:28:48 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":321,"size_decoded":522,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGBA, non-interlaced","md5":"36667dc04b79dacea471183057f1a521","sha1":"df46eb8ea61534255833e2b7b5fc585cee5c6f08","sha256":"11aee11d527cbb6a3e709a38808f619d3faaf43cb26a116c34dc812e566abff7","sha512":"7ed19264595eab8cb570bfbae5198e8b8632c913c97c8c4b87d107034c2e040949455ebdf0e33180263b029f9a5b5b645095090b8f45b27725f6ea9dbbfdacbe","ssdeep":"","tlshash":"c9e07dd7a5f65e9cf9e80036b71bb0de29b262959b401b0d0607a86527128e4845b786","first_seen":"2026-05-01T11:33:24.037422Z","last_seen":"2026-09-22T18:44:04.5611Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/bfa0962f120d42ddd4fb9d6dc546b31e.js?ver=6b31e","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.243Z","timestamp":1790102583243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/bfa0962f120d42ddd4fb9d6dc546b31e.js?ver=6b31e HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48904,"size_decoded":13399,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (48664)","md5":"fa2062c4aefed4e35646fc091cbfb0a0","sha1":"35bd3f58537b584a0e9a031572dd271e56d82160","sha256":"6d328df87460b80fc09f06def901e4515c7ffd6ca0b8aa660d484424a136dba3","sha512":"4cc15ac998189f0e6f6351c181e26656e6825bc368d765e172d80bff91e1caee0a0e213096db4fa8960de455a397da20697dfb04b06a3c620e9adae03b76b7c8","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1X:9VIRuo53XiwWTvl1X","tlshash":"c023c94a7214b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","first_seen":"2023-05-05T13:18:23Z","last_seen":"2026-09-22T18:44:04.562909Z","times_seen":29,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/9c22d0e7575e2348f67dc34f02db0841.js?ver=b0841","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.272Z","timestamp":1790102583272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/9c22d0e7575e2348f67dc34f02db0841.js?ver=b0841 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38137,"size_decoded":8915,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (38135)","md5":"f51a9f57f79e5fbe1051bfcab9435b89","sha1":"852d1b9e5880cc0ab88fabb052d7f9486f45b1ff","sha256":"c93d2f2282c22b9b7b54b69bdadda26f62b6935b450329a8be133a9084a30fe9","sha512":"8fa96e0b516d355185a2ddc7e731d00039a345978c78bb5b775bded932af1bde938435e9901f245971e7414534c9679e312930c4e7dd597d3bde156077235482","ssdeep":"768:lScuzyTXmQsy2WOigtwudCQ0kJwJLOpyrbOvtR:lScuzyTWQ72F2QMJLOsrbOT","tlshash":"8c03d85df475a9ba41fb21b540cb720672512d3ec2968990b5ac6cb40fbdc8d3233a6f","first_seen":"2026-05-01T11:33:24.022697Z","last_seen":"2026-09-22T18:44:04.564038Z","times_seen":3,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/09/harmed-logo.png","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.223Z","timestamp":1790102583223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/harmed-logo.png HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 21307\r\nlast-modified: Sun, 27 Sep 2020 19:23:10 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21307,"size_decoded":21510,"mime_type":"image/png","magic":"PNG image data, 225 x 65, 8-bit/color RGBA, non-interlaced","md5":"cac4941bab3b1a2907e6599ef8d9c95c","sha1":"be36e37e96390c3d8044b95ed6bc150f4e88a0ed","sha256":"addb02759ae6de5161a854542da7b9d9097c857f1a63f62cd493ea7ba6f152a2","sha512":"804ecc32a01f83981dd440e77e4a5602f54bf788fdabe3a857d1a86a505801a089124bb538cd4d45d5e96d045f5abcc9eb038e86ae3732f323c672eae8ab0cf7","ssdeep":"192:qSFkt65Gckpb+Ql7n6bSXzQKYtCnkk/jS+Ul:lWt65hy+VSXzNcCnt/OXl","tlshash":"2ba25b10f9f171a49109a2313c84224d2f3747c3ea806cca7acd6d5b6f55babdc1f686","first_seen":"2026-05-01T11:33:24.07962Z","last_seen":"2026-09-22T18:44:04.565306Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/09/DSC_7536-70x85.jpg","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.228Z","timestamp":1790102583228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/DSC_7536-70x85.jpg HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2278\r\nlast-modified: Tue, 10 Nov 2020 20:10:42 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2278,"size_decoded":2481,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 70x85, components 3","md5":"013807ec63710e2e4ac8f223d02f7730","sha1":"7a9f9e1fff64b944077d8fa697f1fc82c38ed3fa","sha256":"f5ed9a13737f23d25d554984f8e0dc3394bb374e67fcb4208f585c7a83691fe4","sha512":"f325e7ef57f3c5dd7cd8ba01ef9b6265e42627a2f71c5e5014c0fa18a9bea9eacde40b9de463cc9fbf67286d24f70a0cc6f23d9655d67d2c9b4eeea05733ba34","ssdeep":"","tlshash":"13410b2b1313129856d78ffe04cb19daf33957823015a20c6fb1c2d38469dea958e97e","first_seen":"2026-05-01T11:33:24.034312Z","last_seen":"2026-09-22T18:44:04.566402Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-includes/js/jquery/jquery.min.js","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.039Z","timestamp":1790102583039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 22 Feb 2023 13:36:46 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89684,"size_decoded":31439,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"17738318d61d394f1de8890d589afaec","sha1":"f6d0c4dc1399cf02d53f5753ad46573a8bbc2ac3","sha256":"cc7403bab52ed166e24ea9324241045af370be482f5b594468f4a6ac6e7e7981","sha512":"242ffc23ed47553221460f601cb56c507e52a163e46ab9c89c3e39ab933a54fd326b2134d3e831df7f32614329775a0c600f63bf54f4c5b8994f090c5fba156f","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQv1:SdeIygP3fulzcsz8jlvaDioQ47GKK","tlshash":"fb93f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-08T14:21:46Z","last_seen":"2026-09-22T20:40:58.633458Z","times_seen":15434,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/9d705cd5df042b875dc88a1fc011132f.css?ver=1132f","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.882Z","timestamp":1790102582882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/9d705cd5df042b875dc88a1fc011132f.css?ver=1132f HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1444,"size_decoded":617,"mime_type":"text/css","magic":"ASCII text, with very long lines (1444), with no line terminators","md5":"a8b02826b3bbc95658d15f557daebb77","sha1":"42071020c59dc6fa4353067da9e443b4d1aacc9a","sha256":"4e116ccbb58752e9eecb49355bd95e54f4f7e719f433693ba2135785837da77e","sha512":"fc198c57975e0ace2ff4f3f02cc5321584550745d57c64e60940aa8f85ab88326f0e30a25a6ca894bad9177df048dd5e42958f6f490138919f9a3e94c01f841b","ssdeep":"","tlshash":"4a3193cabdc7a93df1ba0b4f7080c9252f36554acb6a4ce66c38e054cdc99502ad6770","first_seen":"2026-05-01T11:33:23.972449Z","last_seen":"2026-09-22T18:44:04.568808Z","times_seen":3,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/e3b331d65ec5dbce6ee2d5e0e7b400ea.js?ver=400ea","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.284Z","timestamp":1790102583284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/e3b331d65ec5dbce6ee2d5e0e7b400ea.js?ver=400ea HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2640,"size_decoded":1332,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2638)","md5":"edb2d5e1fc1d11c6153cc5f739c73a8d","sha1":"88c3094b52ab8e37d5a82cf82322c606d03898cf","sha256":"ab11e296c38aa3fc852b80a9f37040d90fa58140f032ad5ad7a28828e7fd7068","sha512":"967255649dd7151af5cdae95856f03f0aa942aca00c9524fbda572d3b69c63ec08aafdf745acb4b6d935f4d0229fadf390d536a80bf725bf785b1561443261fc","ssdeep":"","tlshash":"ad5122e77b54ed1b03827472705b7a6ce3330405e9cac496c1a0b9a21f786eb753ea5c","first_seen":"2025-12-17T10:47:21.86167Z","last_seen":"2026-09-22T18:44:04.570349Z","times_seen":4,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/65d8d51e3a4c301f2b7b2a55bc8560b3.js?ver=560b3","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.285Z","timestamp":1790102583285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/65d8d51e3a4c301f2b7b2a55bc8560b3.js?ver=560b3 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120194,"size_decoded":32304,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47238), with LF, NEL line terminators","md5":"22ad8e1404c8b7f818a675d5ae5dd912","sha1":"fd0e78317790a7178bf108390ba6ffee97d6438f","sha256":"13d7505d179a3a9c43b5fc4a31edf23028840a8f0421418275f2b5c3f89bed87","sha512":"c4d8068655e913bdebc3dbca604ee43f9cab90e1c2482ced717dda7c3b24c0a352a02edfcfebfe9a85c87001abb59a072936f3646526ffc77b7ad9bfa7ccbe7f","ssdeep":"1536:cM//uAXia4eDqJA6059C9eMJq5kakncd7qe+ZFGSNVXj9y3qI1xz8qm3SeVaB7xw:f//t7khndZ","tlshash":"50c3d89d71c6f0a643e760ba201f310f62b269a8a885e144b176c8e19e76d5d3333f7d","first_seen":"2026-05-01T11:33:24.087702Z","last_seen":"2026-09-22T18:44:04.571307Z","times_seen":3,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/uploads/2020/09/cropped-harmed-1-192x192.png","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.016Z","timestamp":1790102584016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/cropped-harmed-1-192x192.png HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 10053\r\nlast-modified: Fri, 16 Oct 2020 14:22:50 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10053,"size_decoded":10256,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"312d631944618a874d251791afed64e6","sha1":"79d03edc8371020b8ef8ec9c0f4cd39326160292","sha256":"522283be15b8360263e5b626138e0ccdce329b5058073e7a8c216e26c540d5a2","sha512":"8c0fa016fc861f674c0472907de770ff58fc0e02b16a74435ba1146fb1d315c6492600d3bff6eccbe3974a323d7672b5ae7c454ce2a71754483a722de9922de3","ssdeep":"192:XtxPgX6Bhwz1Mq7crO2/irVH5FciQT3Q3id2VFets4zLyO+oXYRcLw2:dKqcz1srOBVH5OTWbUzLyKXYRcP","tlshash":"5c22cf2571c81c2fc74f6d30e2db9c2dad4a171216b3b806d16f8ac92b85d1a6e861dc","first_seen":"2026-05-01T11:33:24.088906Z","last_seen":"2026-09-22T18:44:04.572339Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/themes/arangi/assets/webfonts/fa-solid-900.woff","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:04.029Z","timestamp":1790102584029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/themes/arangi/assets/webfonts/fa-solid-900.woff HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://medpharmacygroup.ge\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://harmed.ge/wp-content/litespeed/css/0b42591a6aa3c489dd711e56679e72ab.css?ver=e72ab\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:04 GMT\r\ncontent-type: font/woff\r\ncontent-length: 98020\r\nlast-modified: Fri, 26 Jul 2019 12:35:22 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98020,"size_decoded":98223,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 98020, version 329.-1049","md5":"4bced7c4c0d61d4f988629bb8ae80b8b","sha1":"0f6fcbf47ded1a1c6ace0f67383d512b6a053dad","sha256":"c1450cddfd98668e6e593e2d26f11b4c43faaccb5f033b0b50ea6f1ce7bf4b58","sha512":"d02d0edb21ab77eb4cf756e806940ba8625afbc91ee83a1f5966d465cc40ee711f2e0a59668a2235c144ad55e0279d4c594d9f1607b65043a250419765f5f2d4","ssdeep":"1536:YJaqmnUz6+weA2j3iwd82gYuDM+Xh/GAm4UIJYSKw1tKzkwQZCkUCphYq37P0WRf:3qmnUOTMj3td8bYunh/XUIlF1SJQZeCv","tlshash":"a7a31245a7366ac04e9cff01c2f9076f7da75d9c04a0abc8afd1de664db4902319a4cd","first_seen":"2023-04-07T00:04:59Z","last_seen":"2026-09-22T18:44:04.573222Z","times_seen":94,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/b55cef36ffb331b7b9b45a532219d1e9.css?ver=9d1e9","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.874Z","timestamp":1790102582874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/b55cef36ffb331b7b9b45a532219d1e9.css?ver=9d1e9 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":254842,"size_decoded":27037,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"5c2d46b0cd00572abb0a6a10d18d6149","sha1":"0088ca1d1018908497dbb3c3880ad927b589faea","sha256":"11ed139d7cf0985d71b75d2b79d95959d45dd1f3233bff92611bb202b20b2490","sha512":"4222c2fbf02124bc942b5232c34764b4f912ab3075047e1c9e70ac7b1f275bad6717ef1ab983e8c35d2baa5f00e289098987f84c9f566b0072a4956e5c8833f3","ssdeep":"768:YS/kFbACOsU/Ru7vmMN39tpzr7+0wFOVcswVZK65eSggH9GTWM444y0lj8NHj3RO:cYkwB5lEWx4u5Rg0OYUWICaaK2","tlshash":"ce44ea3193701ce928d68e251fb1ba8735f49281cb8305ebd547d89863ce9694ee37cb","first_seen":"2023-05-17T01:45:40Z","last_seen":"2026-09-22T18:44:04.575001Z","times_seen":9,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":76,"connect":14,"send":0,"wait":38,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/0c2b7d91c3e1c222ea13cae60663af83.css?ver=3af83","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.889Z","timestamp":1790102582889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/0c2b7d91c3e1c222ea13cae60663af83.css?ver=3af83 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":198,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T20:48:35.301897Z","times_seen":18605994,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/16f34a713ecb00aabcb56eeba8b79389.css?ver=79389","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.032Z","timestamp":1790102583032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/16f34a713ecb00aabcb56eeba8b79389.css?ver=79389 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112569,"size_decoded":16371,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"b7328d58f58c4c52078146c616a9e89d","sha1":"5171f3cef3cc406c13963964c8312e5205ef1b78","sha256":"46558779528aff54123b68a51cb24491a2940f52f5bedb73cc54683fdf359f89","sha512":"b9fee2d02a7518ab38d4165d8ee0a5dc325f48d50db9a4b63fc467b10cc6418260319c397d15554d8f27b85bc3d54ab5d7e2ed53be3b77121d7e1bcfdcbbf438","ssdeep":"768:czf6VYI8DUx0rgxPm0Em67bKIMs3P8nqvAyBPGSqYhczcdUm1W/+01nMfQL7x9H/:czJGNmgG01MfQL7WmufiOYRDfee","tlshash":"97b363237d072109612f492b56837a8c52a881c5ee5377e9fc91e807d7fbcd43b3295a","first_seen":"2023-05-10T05:47:07Z","last_seen":"2026-09-22T18:44:04.575965Z","times_seen":107,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/0d0de65b4097819365aa309836276e24.js?ver=76e24","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.262Z","timestamp":1790102583262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/0d0de65b4097819365aa309836276e24.js?ver=76e24 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6477,"size_decoded":2673,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6475)","md5":"add7fc831b2d62e61557a24f6662ce5b","sha1":"5237107a3d53572999de563cd58137f61374e687","sha256":"fe068227bcf446a061c99093bfd74e48105f2605f002dce6ab72d799fb035a22","sha512":"13f13ebb6db4e7e9e46c119d888c5ea6bea3b363e95f1c1d6b904bbe56980620de56cae1124a67e8ee164a5e0876850ccdc240ec5578043bd92031edb0f54c4b","ssdeep":"192:k9JcRXbFhyWpBXvqDHqpVSTmtqHr4ULkv:k/ch/xG+Y8ULO","tlshash":"3fd175cdb1c6f02503977725551f140ae33a699df9098009eb18ece1bcf484ea22bf79","first_seen":"2023-03-07T12:12:45Z","last_seen":"2026-09-22T18:44:04.576768Z","times_seen":317,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/css/0ae92fd07553e790e9cc40e5de49d6f8.css?ver=9d6f8","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:02.886Z","timestamp":1790102582886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/css/0ae92fd07553e790e9cc40e5de49d6f8.css?ver=9d6f8 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461,"size_decoded":388,"mime_type":"text/css","magic":"ASCII text, with very long lines (461), with no line terminators","md5":"46388bd77ea3e56517eee4e45b8c5114","sha1":"2c02236c517f30f86ae40ed96f441f8fa708cd82","sha256":"62bd0f9f32ed465f738165f4691ec5b74fdb1fae17f1cc2be017182a8ec33baf","sha512":"be6dcdde5a97fa699a6084edb4d76929ba7c2fb11f2ff6e514b601ea029da854b2757219c4bd5136329638848bb9d24ca7ef91fd73c6a35a90a78ea2170808b6","ssdeep":"","tlshash":"67f0650ed87cb510e273332e5fd906d93c194f4e4997ffe69482da136d271a60162399","first_seen":"2023-05-11T03:03:50Z","last_seen":"2026-09-22T18:44:04.577367Z","times_seen":97,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"harmed.ge/wp-content/litespeed/js/cfaeb4813c7ec137b9daff1dc8b82c67.js?ver=82c67","fqdn":"harmed.ge","domain":"harmed.ge","tld":"ge"},"ip":{"addr":"109.94.209.191","port":443,"asn":202376,"as":"Arvid Logicum OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://medpharmacygroup.ge/","date":"2026-09-22T18:43:03.257Z","timestamp":1790102583257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amoris.ge","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 02:01:42 GMT","end":"Tue, 17 Nov 2026 02:01:41 GMT"},"fingerprint":{"sha1":"DF:4C:4E:65:5D:92:05:39:16:FA:FF:4C:38:18:AE:7D:7A:78:F8:7A","sha256":"D8:BF:F6:80:AB:3C:CF:45:60:26:27:17:11:C5:27:60:37:F2:52:CA:96:9E:38:B4:02:38:DC:C5:61:3D:96:F3"}}},"request":{"raw":"GET /wp-content/litespeed/js/cfaeb4813c7ec137b9daff1dc8b82c67.js?ver=82c67 HTTP/1.1\r\nHost: harmed.ge\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://medpharmacygroup.ge/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:43:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Sep 2026 09:40:41 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41955,"size_decoded":10506,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32076)","md5":"022ddb1d4d95c178254acb3217a15c81","sha1":"baa73fdb4f98636faec9b2315de55b324f4c0cb6","sha256":"9d1d2c1ca64ff6930f079e0ac8c27ce4b4749adf803d80bc01c1c696451729d1","sha512":"dcc842259df1d38f3e80d9e20d0ea77f5489bc09e764c4c53f6521bb9d4065c87f8389716634ff79be8faa0694443052d4818ef86b112d2396ccc80fe45a8210","ssdeep":"768:G1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgjZ7Nc4hC5orG1TsI:X0tVUkkK1GPz6QrG1AI","tlshash":"07139509d204372688eb12e57105c14ea3fbfababd12c0f076c987d6606d81d86e77f6","first_seen":"2023-03-13T20:31:27Z","last_seen":"2026-09-22T18:44:04.578038Z","times_seen":136,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}