{"report_id":"e192a617-7a5c-42f8-a59f-776ea46d223e","version":6,"status":"done","tags":[],"date":"2026-03-08T14:31:34Z","url":{"schema":"https","addr":"www.virenapothecary.com/bonusqu/","fqdn":"www.virenapothecary.com","domain":"virenapothecary.com","tld":"com"},"ip":{"addr":"104.21.32.207","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.virenapothecary.com/bonusqu/","fqdn":"www.virenapothecary.com","domain":"virenapothecary.com","tld":"com"},"title":"NEW! Slot Bonus New Member 100 TO Kecil 3x 5x 7x Up To 200% Bebas IP Resmi 2026","dom":{"size":26290,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"937232e6761f931f3d14a066ff2aac2c","sha1":"f63019557fb61cef2e12d48aa2c75445a8fc6a37","sha256":"f20069f3836519632e16b96130de0b3449a6bae22e1214bbb4f4faedfa56d11b","sha512":"3f5f21a8c4e369ae020fc9d0d7c6a78841a635195564985550389066c4e7fd1272760c64e83b668df26e385ed519feddca4270a65be667a9444778b1a1a0eb4c","ssdeep":"384:dW0A3Xc5F4g5A4WR2vy//yDGvp+K/mrrsxvSBHbcrxxCvm:dWk5F4g5A4WR2vI6DI/mrrsL","tlshash":"b6c26113a48860995117d352c4d1fbbf6d38cd039a320e6ef91c6bdcdb96b867a3250e","dom_hash":"domhasha6c43879cd2df1380fef7e8bbced4637","first_seen":"2026-03-08T14:31:37.08439Z","last_seen":"2026-03-08T14:31:37.08439Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.virenapothecary.com/bonusqu/","fqdn":"www.virenapothecary.com","domain":"virenapothecary.com","tld":"com"},"ip":{"addr":"104.21.32.207","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-12T14:31:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn.ampproject.org","ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-03-02T07:14:51.852352Z","alert_count":0,"request_count":4,"received_data":317685,"sent_data":1846,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":23026,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.virenapothecary.com","ip":{"addr":"172.67.187.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-07-21T06:04:17.469767Z","last_seen":"2025-07-21T06:04:17.469767Z","alert_count":0,"request_count":1,"received_data":10023,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Google PageSpeed:1.13.35.2","description":"Google PageSpeed is a family of tools designed to help websites performance optimisations.","website":"https://developers.google.com/speed/pagespeed/mod","common_platform_enumeration":"","icon":"Google PageSpeed.svg","categories":["Caching","Web server extensions","Performance"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":5,"received_data":174690,"sent_data":2794,"comment":"","tags":null,"fingerprints":null},{"fqdn":"res.cloudinary.com","ip":{"addr":"151.101.1.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2011-05-24","domain_rank":21175,"first_seen":"2012-10-03T08:31:44Z","last_seen":"2026-03-02T07:33:19.610244Z","alert_count":0,"request_count":3,"received_data":2326351,"sent_data":1488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img-up.store","ip":{"addr":"209.74.67.85","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2025-07-06","domain_rank":0,"first_seen":"2025-07-21T18:54:02.806692Z","last_seen":"2026-01-09T17:26:11.955941Z","alert_count":0,"request_count":5,"received_data":951348,"sent_data":2200,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0db637eade21074dd084f0e0460ce41a","sha1":"50cc3dc17fd8e8bbd9c6fada1a8ccf0a051fd878","sha256":"68c0fdcf1ebaef87e313ecf537a773f7dc6633cbbf30cb047d99ad036547d49e","sha512":"4b8d1541d030d9165f093f9ad9c796236ba30d3926606235222979b4b0a8c62ce05ef633c7957c2fa1659344e92fb7360480e0565a2b01d765f378e3807319b6","ssdeep":"96:FV9HqqXQL8e05UjvNvECpPlVyiJl4wjQYqwyVnoeUEyExNXHOC3BuV7:JHZQ4hGvNcCpLr/jQnxddaV7","tlshash":"83d195ecb292b0a29b9b74e5802f040bf93ea539904bc450d615e8e579bd99e4173f3c","size":6167,"data":"","first_seen":"2026-01-27T22:56:52.860802Z","last_seen":"2026-03-17T22:15:38.811511Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de93c62fe8d520d5f20d3a375921f388","sha1":"ecc3eb0c77b12d60831c1f456bad0302b4d5db83","sha256":"07443ee9c85233c09c22c0668278316d8d4c25b7a5af83eba6ac761f30b75dff","sha512":"ea341717b7f75186720b4a3aab7f653eebeafb92ee328fc9fb2b2eee0365e201b11353a0f1d0fd5c1c8f8c06a134626f38b4f3375513675a9d1fa78ee065c156","ssdeep":"6144:HoUwkmOu6CFmZZoS2/VdK/HWL1Uqb9W9z:IlLWdYeW5Uqb9Gz","tlshash":"6154949db296b0724793b075803f150ae33ba855240a812cf56de9d67cbcd8aa137f7c","size":284617,"data":"","first_seen":"2026-01-27T21:42:06.365435Z","last_seen":"2026-03-17T21:09:47.691036Z","times_seen":2185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d1e1939a681e26ad7bac3e1bc7a4698","sha1":"1b6b404001ca244b6617aab982989604eb5db41b","sha256":"32a998421e9461bc53f942def0e915f0c7100cd4db2e516221bd443494147631","sha512":"af0ab1fedb33087a7bf24b01fdf1e1d7588e518104c563e448d68d0a4fed2c7a813f98e567530ba239e574abfeafdc4886b5e99d531ff14a7e075dff61f19008","ssdeep":"96:GKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:GKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0af196dc7ac2b83a5757b4b780af414fa63bb94624ad9120d120f0d83cb995ed633e5c","size":7798,"data":"","first_seen":"2026-01-27T21:42:06.36181Z","last_seen":"2026-06-29T08:09:07.891513Z","times_seen":2154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a4d82a5fcbe799aa3cd604d0add90a","sha1":"5614c8c0cb0b1ea9f6252f9a1c0465d68fad49c4","sha256":"28e18a22a127994816624a5d8843978ff13ec874e7bb6c3ec57d236fa85864f8","sha512":"f5e8c8ddfd89af0765afc670f3e2e847ce78e9a1f7bf0c75288d541f4445c02246b0da7b8a8a25a6d2aba28c72d671416108d80adc3404dfd2bd9ee9a3fc4a8a","ssdeep":"192:EfQHMOgzKBbnnRrVGOoPFU6rO2tHrbLvANHzMb5F4g5A4WR2vN:u0g2BbnnHWbLvARzMb5F4g5A4WR2vN","tlshash":"4d42a364a54ba2ac530341b484fab906757ecd4fb8104035f0118edecf99f48bd7ba6e","size":12715,"data":"","first_seen":"2026-01-27T21:42:06.359185Z","last_seen":"2026-06-29T08:09:07.895862Z","times_seen":1622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.virenapothecary.com/bonusqu/","fqdn":"www.virenapothecary.com","domain":"virenapothecary.com","tld":"com"},"ip":{"addr":"172.67.187.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-08T14:31:12.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virenapothecary.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 04 Mar 2026 22:25:50 GMT","end":"Tue, 02 Jun 2026 22:33:13 GMT"},"fingerprint":{"sha1":"0B:94:3C:5C:B5:E1:CC:47:A5:31:09:AA:D1:45:94:2B:4A:9B:B2:07","sha256":"B3:31:2E:EE:5B:00:01:7E:72:6D:FF:F4:93:CD:70:C7:29:10:1A:3D:8C:3B:98:66:21:D6:57:4B:0C:55:67:7D"}}},"request":{"raw":"GET /bonusqu/ HTTP/1.1\r\nHost: www.virenapothecary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 14:31:13 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-mod-pagespeed: 1.13.35.2-0\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FBkG90tKwoO0J7Zl%2BrFUGVoJXz1kcEgSBQXuTvy%2B92266rXJWi4Yj4mPHgYvJWnogEFinv2pQx1pEoMVrUICfqO1w4WEgdJQGJYrh0mcQk1aY1Ywu9U0\"}]}\r\ncache-control: max-age=0, no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d928ad20f236e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Google PageSpeed:1.13.35.2","description":"Google PageSpeed is a family of tools designed to help websites performance optimisations.","website":"https://developers.google.com/speed/pagespeed/mod","common_platform_enumeration":"","icon":"Google PageSpeed.svg","categories":["Caching","Web server extensions","Performance"]}],"data":{"size":9402,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (923), with CRLF line terminators","md5":"87dbb60f22d5b76208f7e4b235132387","sha1":"bef79b0ad40a098def0470ed85de400eec02d715","sha256":"08e101f95b7337d910e662b530a9240761fe671ce8cb4886e8740f09b0b135d1","sha512":"75e3bc86c12bb2ec8d32f4568b06b901b93fd8d7f3fe1eade17835b8d637753cad7b297ae81fb5cf2e79a040e9573d46ac563baaf2014d388d907bb19a769ce9","ssdeep":"192:aMTT/Wvt8pl/j/ieHCvp+/QTYl48zYI84z01rUGS2T969l:Vf/M4evp+gYlS14cml","tlshash":"5312a732448110266333c0d2c9e0bfadee518503d6434b5af6ad6397dff6ca65b63a4e","first_seen":"2026-03-08T14:31:37.086073Z","last_seen":"2026-03-08T14:31:37.086073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":30,"dns":1,"connect":8,"send":0,"wait":579,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.virenapothecary.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 33553\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-11T21:57:51.124603Z","times_seen":259961,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":80,"dns":0,"connect":8,"send":0,"wait":9,"receive":10,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.virenapothecary.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:15 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 33539\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-08-11T22:09:30.308532Z","times_seen":31392,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":105,"dns":0,"connect":11,"send":0,"wait":8,"receive":2,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.virenapothecary.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 33553\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-11T21:57:51.124603Z","times_seen":259961,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":162,"dns":0,"connect":22,"send":0,"wait":8,"receive":4,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dai7nc2gv/image/upload/v1772340028/bonusnewmember100_lhjdsz.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"151.101.1.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 23 Sep 2025 16:30:27 GMT","end":"Sun, 25 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"77:6B:7C:56:E5:E7:51:42:ED:61:04:B9:D9:26:38:05:21:1C:F9:06","sha256":"F7:5C:28:39:1D:C1:7D:92:F0:E1:D7:3B:EF:A5:AD:B3:36:CD:F3:E5:AA:BE:EF:53:D9:F3:D5:47:D1:F3:4D:75"}}},"request":{"raw":"GET /dai7nc2gv/image/upload/v1772340028/bonusnewmember100_lhjdsz.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\netag: \"f0295665081b3e49c5ee78ad8f900bee\"\r\nlast-modified: Sun, 01 Mar 2026 04:40:29 GMT\r\ndate: Sun, 08 Mar 2026 14:31:14 GMT\r\nstrict-transport-security: max-age=604800\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\nserver-timing: cld-fastly;dur=421;cpu=203;start=2026-03-08T14:31:14.350Z;desc=miss,rtt;dur=18,content-info;desc=\"width=1024,height=1024,bytes=369818,format=\\\"jpg\\\",o=1,crt=1772340028,ef=(17)\",cloudinary;dur=83;start=2026-03-08T14:31:14.622Z\r\nserver: Cloudinary\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options\r\nx-request-id: d845ba9a8f8c11c5a2aba91886922cf9\r\ncontent-length: 369818\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":369818,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"f0295665081b3e49c5ee78ad8f900bee","sha1":"ff4d9f5a71c5cb410d1c62606447757b56b55a0a","sha256":"4224206390efba66631dfb9e4a9082c73b258768ea185d02aa1983f9a77c5961","sha512":"c6f0b76574fb566a47892292b7cc6ba587bfca03dae54fc702297627512009564858451f78f1425d60cde00459cf9d9c631e60c89b4f4eba44d1cf38be21ad93","ssdeep":"6144:wey4AQEMUCAO51q2OjfmVjMfdWi0Lm3ShPSdP7zNqbgEjwD6IAeJMBNDpu7zPTtt:3Jf/vn9jMfMrqLgwD6IAeJMHI7zPYQ","tlshash":"bc74239c432d82dff1ab797595571c2acf52f20c84b19af9bef3914821892ce991b113","first_seen":"2026-03-08T14:31:37.088538Z","last_seen":"2026-03-08T14:31:37.088538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":90,"dns":27,"connect":26,"send":0,"wait":437,"receive":60,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-up.store/t5kj1b.jpg","fqdn":"img-up.store","domain":"img-up.store","tld":"store"},"ip":{"addr":"209.74.67.85","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img-up.store","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Mon, 06 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:18:C6:3F:63:F4:F6:6A:20:93:CB:B8:26:4F:19:BF:2E:93:CB:37","sha256":"0A:24:41:68:E7:B6:22:5A:5B:1C:4C:90:66:68:82:6C:B1:56:04:DD:D0:5F:A9:46:00:DE:24:D6:B8:39:4F:D9"}}},"request":{"raw":"GET /t5kj1b.jpg HTTP/1.1\r\nHost: img-up.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.34\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Feb 2026 18:16:25 GMT\r\netag: t5kj1b.jpg\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 08 Mar 2026 14:31:14 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":278209,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1024x1024, components 3","md5":"f03308ec8710c59d62e3a0686a26000d","sha1":"74e3bdf3f1c8c57893b2bcc2afc4ee26182fa441","sha256":"ba3307c37ee873c3d387ef02fd9dfeb6210859ce48cf2b39788b13c61d36eb00","sha512":"05aed95d826c66b815b19be249ba04258680036b0618bdb90947336f0b9fe660bfb7b70fa4f405b94d056c229e8c1a740613b22608b4ee07fdd395f8720d60bf","ssdeep":"6144:+U1R8qDEwKbt1nnHGq5CVs7ImXfUhECG/r5Rf5sXdu+j:dR88Kbt1nnHREVkIa/r5S","tlshash":"78442364ea63c6da3a9dd71cc2983d0a3e4c061dbadf5a1812c14c24634e65adc4f7fb","first_seen":"2026-03-08T14:31:37.089776Z","last_seen":"2026-03-08T14:31:37.089776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":5,"connect":361,"send":0,"wait":395,"receive":0,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:50 GMT","end":"Mon, 20 Apr 2026 08:39:49 GMT"},"fingerprint":{"sha1":"95:AF:DB:72:07:D8:8F:52:E5:50:5C:6A:7A:F5:37:62:9E:55:88:49","sha256":"D1:8D:14:23:A3:DB:4A:37:E4:DE:50:BF:5D:73:5C:7F:30:F3:46:52:1D:EA:45:33:50:95:61:CD:CC:ED:6D:6A"}}},"request":{"raw":"GET /rtv/012601162341000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.virenapothecary.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2965\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 01:01:22 GMT\r\nexpires: Mon, 08 Mar 2027 01:01:22 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"bcfe0d3a461d36bf\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 48592\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7798,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7676)","md5":"8d1e1939a681e26ad7bac3e1bc7a4698","sha1":"1b6b404001ca244b6617aab982989604eb5db41b","sha256":"32a998421e9461bc53f942def0e915f0c7100cd4db2e516221bd443494147631","sha512":"af0ab1fedb33087a7bf24b01fdf1e1d7588e518104c563e448d68d0a4fed2c7a813f98e567530ba239e574abfeafdc4886b5e99d531ff14a7e075dff61f19008","ssdeep":"96:GKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:GKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0af196dc7ac2b83a5757b4b780af414fa63bb94624ad9120d120f0d83cb995ed633e5c","first_seen":"2026-01-27T21:42:06.36181Z","last_seen":"2026-06-29T08:09:07.891513Z","times_seen":2154,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:13.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:50 GMT","end":"Mon, 20 Apr 2026 08:39:49 GMT"},"fingerprint":{"sha1":"95:AF:DB:72:07:D8:8F:52:E5:50:5C:6A:7A:F5:37:62:9E:55:88:49","sha256":"D1:8D:14:23:A3:DB:4A:37:E4:DE:50:BF:5D:73:5C:7F:30:F3:46:52:1D:EA:45:33:50:95:61:CD:CC:ED:6D:6A"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73111\r\ndate: Sun, 08 Mar 2026 14:31:13 GMT\r\nexpires: Sun, 08 Mar 2026 14:31:13 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"cbf8b0320ab789fb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284617,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"de93c62fe8d520d5f20d3a375921f388","sha1":"ecc3eb0c77b12d60831c1f456bad0302b4d5db83","sha256":"07443ee9c85233c09c22c0668278316d8d4c25b7a5af83eba6ac761f30b75dff","sha512":"ea341717b7f75186720b4a3aab7f653eebeafb92ee328fc9fb2b2eee0365e201b11353a0f1d0fd5c1c8f8c06a134626f38b4f3375513675a9d1fa78ee065c156","ssdeep":"6144:HoUwkmOu6CFmZZoS2/VdK/HWL1Uqb9W9z:IlLWdYeW5Uqb9Gz","tlshash":"6154949db296b0724793b075803f150ae33ba855240a812cf56de9d67cbcd8aa137f7c","first_seen":"2026-01-27T21:42:06.365435Z","last_seen":"2026-03-17T21:09:47.691036Z","times_seen":2185,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":89,"dns":0,"connect":7,"send":0,"wait":17,"receive":15,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:13.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:50 GMT","end":"Mon, 20 Apr 2026 08:39:49 GMT"},"fingerprint":{"sha1":"95:AF:DB:72:07:D8:8F:52:E5:50:5C:6A:7A:F5:37:62:9E:55:88:49","sha256":"D1:8D:14:23:A3:DB:4A:37:E4:DE:50:BF:5D:73:5C:7F:30:F3:46:52:1D:EA:45:33:50:95:61:CD:CC:ED:6D:6A"}}},"request":{"raw":"GET /v0/amp-anim-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2466\r\ndate: Sun, 08 Mar 2026 14:31:14 GMT\r\nexpires: Sun, 08 Mar 2026 14:31:14 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"abb27bce730772f2\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6167,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6054)","md5":"0db637eade21074dd084f0e0460ce41a","sha1":"50cc3dc17fd8e8bbd9c6fada1a8ccf0a051fd878","sha256":"68c0fdcf1ebaef87e313ecf537a773f7dc6633cbbf30cb047d99ad036547d49e","sha512":"4b8d1541d030d9165f093f9ad9c796236ba30d3926606235222979b4b0a8c62ce05ef633c7957c2fa1659344e92fb7360480e0565a2b01d765f378e3807319b6","ssdeep":"96:FV9HqqXQL8e05UjvNvECpPlVyiJl4wjQYqwyVnoeUEyExNXHOC3BuV7:JHZQ4hGvNcCpLr/jQnxddaV7","tlshash":"83d195ecb292b0a29b9b74e5802f040bf93ea539904bc450d615e8e579bd99e4173f3c","first_seen":"2026-01-27T22:56:52.860802Z","last_seen":"2026-03-17T22:15:38.811511Z","times_seen":241,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":294,"dns":1,"connect":23,"send":0,"wait":19,"receive":1,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.virenapothecary.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:01 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 33553\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-11T21:57:51.124603Z","times_seen":259961,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":125,"dns":0,"connect":20,"send":0,"wait":11,"receive":3,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:50 GMT","end":"Mon, 20 Apr 2026 08:39:49 GMT"},"fingerprint":{"sha1":"95:AF:DB:72:07:D8:8F:52:E5:50:5C:6A:7A:F5:37:62:9E:55:88:49","sha256":"D1:8D:14:23:A3:DB:4A:37:E4:DE:50:BF:5D:73:5C:7F:30:F3:46:52:1D:EA:45:33:50:95:61:CD:CC:ED:6D:6A"}}},"request":{"raw":"GET /rtv/012601162341000/v0/amp-loader-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.virenapothecary.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3927\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 01:01:45 GMT\r\nexpires: Mon, 08 Mar 2027 01:01:45 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"f118bd7ec62de08d\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 48569\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12715,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12600)","md5":"88a4d82a5fcbe799aa3cd604d0add90a","sha1":"5614c8c0cb0b1ea9f6252f9a1c0465d68fad49c4","sha256":"28e18a22a127994816624a5d8843978ff13ec874e7bb6c3ec57d236fa85864f8","sha512":"f5e8c8ddfd89af0765afc670f3e2e847ce78e9a1f7bf0c75288d541f4445c02246b0da7b8a8a25a6d2aba28c72d671416108d80adc3404dfd2bd9ee9a3fc4a8a","ssdeep":"192:EfQHMOgzKBbnnRrVGOoPFU6rO2tHrbLvANHzMb5F4g5A4WR2vN:u0g2BbnnHWbLvARzMb5F4g5A4WR2vN","tlshash":"4d42a364a54ba2ac530341b484fab906757ecd4fb8104035f0118edecf99f48bd7ba6e","first_seen":"2026-01-27T21:42:06.359185Z","last_seen":"2026-06-29T08:09:07.895862Z","times_seen":1622,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-up.store/kwkjh8.png","fqdn":"img-up.store","domain":"img-up.store","tld":"store"},"ip":{"addr":"209.74.67.85","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img-up.store","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Mon, 06 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:18:C6:3F:63:F4:F6:6A:20:93:CB:B8:26:4F:19:BF:2E:93:CB:37","sha256":"0A:24:41:68:E7:B6:22:5A:5B:1C:4C:90:66:68:82:6C:B1:56:04:DD:D0:5F:A9:46:00:DE:24:D6:B8:39:4F:D9"}}},"request":{"raw":"GET /kwkjh8.png HTTP/1.1\r\nHost: img-up.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.34\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Dec 2025 15:58:42 GMT\r\netag: kwkjh8.png\r\ncache-control: public, max-age=31536000\r\ncontent-length: 41325\r\ndate: Sun, 08 Mar 2026 14:31:14 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":41325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 100, 8-bit/color RGBA, non-interlaced","md5":"b097a82cfd55f2fc580359758ef9443e","sha1":"e217069754dcb5a3caa6a7703f056cc578ad1315","sha256":"4c4272432df3891c985d2d773d948fca3e463ec91c294dcfcc3f06311da3e679","sha512":"55569ffba07873950accba4d3f049fa1f4bcc4feed87bfb415df332699e4613389706703956c1201747bf8ae9d9caf29fd737fe1c6d84d4202abde553e1c6094","ssdeep":"768:FW5GKxx01JoVU24KvL0U5XOM5Z/pHMQhVMDfEsrjbYX/:FZK6oVVNj05UpHLhybEEO","tlshash":"6d03f17fe46a1f8ad592b4044e1c56ef82a08341da5e41ef855889815ca2fb33e3e3d7","first_seen":"2025-09-20T06:50:52.487084Z","last_seen":"2026-03-08T14:31:37.09346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1411,"timings":{"blocked":13,"dns":1,"connect":195,"send":0,"wait":753,"receive":196,"ssl":252},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-up.store/l33js9.png","fqdn":"img-up.store","domain":"img-up.store","tld":"store"},"ip":{"addr":"209.74.67.85","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img-up.store","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Mon, 06 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:18:C6:3F:63:F4:F6:6A:20:93:CB:B8:26:4F:19:BF:2E:93:CB:37","sha256":"0A:24:41:68:E7:B6:22:5A:5B:1C:4C:90:66:68:82:6C:B1:56:04:DD:D0:5F:A9:46:00:DE:24:D6:B8:39:4F:D9"}}},"request":{"raw":"GET /l33js9.png HTTP/1.1\r\nHost: img-up.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.34\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Jan 2026 05:22:21 GMT\r\netag: l33js9.png\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 08 Mar 2026 14:31:16 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":184705,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"7ea233684628600433aabe396546dd77","sha1":"6d04d2c2f61b5fd7a8afe3ff36eb7f83622aad82","sha256":"fdd8a88bfbfa0bd69075fc8f77e5e20d289b637e0a6b39af77e9e1edaa5043c3","sha512":"9cc02a1542fdc86193125f7f0d94d743340c931724dff7195044bdbc7966e80c30e1647614baf8d09e6b32451839b041f4033358e7fd5c68a6f9b19dc31d55fd","ssdeep":"3072:6nwL7KDsbGMH3Ktf5rTKR+3ATDiRG8vI1evqkXv9lvowIQs2inJP9/k3ImRikj:6neuDKGMXYhrTY+wHj10/FlwwIQs20ZG","tlshash":"3b04234f5edf73f6a3f3952921f6fdf70624416a2b6694053da48e0c2b11f017a92e06","first_seen":"2025-09-20T06:50:52.499064Z","last_seen":"2026-05-12T15:03:57.946659Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3136,"timings":{"blocked":1656,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":1290},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dai7nc2gv/image/upload/v1770568633/slotbonusnewmember_wxlsp0.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"151.101.1.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 23 Sep 2025 16:30:27 GMT","end":"Sun, 25 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"77:6B:7C:56:E5:E7:51:42:ED:61:04:B9:D9:26:38:05:21:1C:F9:06","sha256":"F7:5C:28:39:1D:C1:7D:92:F0:E1:D7:3B:EF:A5:AD:B3:36:CD:F3:E5:AA:BE:EF:53:D9:F3:D5:47:D1:F3:4D:75"}}},"request":{"raw":"GET /dai7nc2gv/image/upload/v1770568633/slotbonusnewmember_wxlsp0.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\netag: \"afc860fd61bb8439bc64507999158d69\"\r\nlast-modified: Sun, 08 Feb 2026 16:37:14 GMT\r\ndate: Sun, 08 Mar 2026 14:31:14 GMT\r\nstrict-transport-security: max-age=604800\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\nserver-timing: cld-fastly;dur=538;cpu=223;start=2026-03-08T14:31:14.330Z;desc=miss,rtt;dur=18,content-info;desc=\"width=1024,height=1024,bytes=323619,format=\\\"jpg\\\",o=1,crt=1770568633,ef=(17)\",cloudinary;dur=185;start=2026-03-08T14:31:14.619Z\r\nserver: Cloudinary\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options\r\nx-request-id: ce586665a5e284a3f5fe56f45f0865f3\r\ncontent-length: 323619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323619,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"afc860fd61bb8439bc64507999158d69","sha1":"d90c72d616cff879e1ea7234fe4aa012a70ab7cc","sha256":"68447789bd1f010066f52534176f1e1873c1327e75402289903f8932f7804395","sha512":"dcaf44906b6a186fe2f61bcf97ab264ee1f3a1dd92a0d15ba2ee19fdab9c13bcdcff79ae1982c1a31ec1dd1f67580256075be1d8033cb574664d94f2633ad890","ssdeep":"6144:fy/9imxZTLjDIx/iDV2+K8s+5KhAm6DSC2Un5IEzUOZfqSfW:fy/bzTLjDuih8+wiDH2G3o6/u","tlshash":"c764239202159b2ff87a3cbd4e16be75728b1e16a0569581efd04d1501f988fb7730cb","first_seen":"2026-03-08T14:31:37.095875Z","last_seen":"2026-03-08T14:31:37.095875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":902,"timings":{"blocked":-1,"dns":27,"connect":18,"send":0,"wait":551,"receive":274,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-up.store/rj98u8.jpg","fqdn":"img-up.store","domain":"img-up.store","tld":"store"},"ip":{"addr":"209.74.67.85","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img-up.store","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Mon, 06 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:18:C6:3F:63:F4:F6:6A:20:93:CB:B8:26:4F:19:BF:2E:93:CB:37","sha256":"0A:24:41:68:E7:B6:22:5A:5B:1C:4C:90:66:68:82:6C:B1:56:04:DD:D0:5F:A9:46:00:DE:24:D6:B8:39:4F:D9"}}},"request":{"raw":"GET /rj98u8.jpg HTTP/1.1\r\nHost: img-up.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.34\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Feb 2026 18:34:47 GMT\r\netag: rj98u8.jpg\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 08 Mar 2026 14:31:15 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":260979,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1024x1024, components 3","md5":"e361dd7bde66fe8cdcbc3711567ccca5","sha1":"7394aa802d66a3da48f9ab700a6042b6fb0c2851","sha256":"592341da2b7d39d2ee9b227adfac339fb708a6b5f784405e78314580e9e453a7","sha512":"15db5224f3ea91f2617d02b99dda2f76d184a43c0b4d7217aca363b15ababf4e67694d8736c13097cbdcefcec1323c6c08ab952cbd20f69374be501fd9402f7f","ssdeep":"6144:g16lAoLmN3UMEFem4H7Rn71pYYPsHufQa7ItNCcTX:g1kPmNWdUNnHYsMu4as3CcD","tlshash":"31442279da19cad02186ee19020c8c8e13c28c83a1bc565a4fbd7c77f7a5656d4ce8fc","first_seen":"2026-03-08T14:31:37.097352Z","last_seen":"2026-03-08T14:31:37.097352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1423,"timings":{"blocked":-1,"dns":5,"connect":354,"send":0,"wait":701,"receive":0,"ssl":363},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-up.store/l33js9.png","fqdn":"img-up.store","domain":"img-up.store","tld":"store"},"ip":{"addr":"209.74.67.85","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:15.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img-up.store","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Mon, 06 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:18:C6:3F:63:F4:F6:6A:20:93:CB:B8:26:4F:19:BF:2E:93:CB:37","sha256":"0A:24:41:68:E7:B6:22:5A:5B:1C:4C:90:66:68:82:6C:B1:56:04:DD:D0:5F:A9:46:00:DE:24:D6:B8:39:4F:D9"}}},"request":{"raw":"GET /l33js9.png HTTP/1.1\r\nHost: img-up.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.34\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Jan 2026 05:22:21 GMT\r\netag: l33js9.png\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 08 Mar 2026 14:31:15 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":184705,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"7ea233684628600433aabe396546dd77","sha1":"6d04d2c2f61b5fd7a8afe3ff36eb7f83622aad82","sha256":"fdd8a88bfbfa0bd69075fc8f77e5e20d289b637e0a6b39af77e9e1edaa5043c3","sha512":"9cc02a1542fdc86193125f7f0d94d743340c931724dff7195044bdbc7966e80c30e1647614baf8d09e6b32451839b041f4033358e7fd5c68a6f9b19dc31d55fd","ssdeep":"3072:6nwL7KDsbGMH3Ktf5rTKR+3ATDiRG8vI1evqkXv9lvowIQs2inJP9/k3ImRikj:6neuDKGMXYhrTY+wHj10/FlwwIQs20ZG","tlshash":"3b04234f5edf73f6a3f3952921f6fdf70624416a2b6694053da48e0c2b11f017a92e06","first_seen":"2025-09-20T06:50:52.499064Z","last_seen":"2026-05-12T15:03:57.946659Z","times_seen":7,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:13.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 08 Mar 2026 14:31:13 GMT\r\ndate: Sun, 08 Mar 2026 14:31:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"902507b7a40d993780ab84c27ebef044","sha1":"4574f291820fb61544c68b14d01802021d6a327a","sha256":"968957cbffd47371ce7a70121bee77163b2339821175c66c10b43430f06b1815","sha512":"4f362412abe70cc6a3b966eca467d2c148b35fe4ecb336390ab6834ab0ed1cdb22ef7fbe7e3e7b07d518410c3a74e54f8d94c527f5f2fa181cd3e5a3cd1f4dfa","ssdeep":"384:89fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/qY4Q9G9m949fd9k9D939yQ9/I:8yjooYhREHPM5svvYaR7AIWP2ZZYQRVq","tlshash":"2da21fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T01:00:52.43846Z","last_seen":"2026-08-10T17:19:14.380929Z","times_seen":1087,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":87,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.virenapothecary.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:15 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 33539\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-08-11T22:09:30.308532Z","times_seen":31392,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":116,"dns":0,"connect":20,"send":0,"wait":8,"receive":3,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dai7nc2gv/image/upload/v1769399045/bonusqu_f4ietc.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"151.101.1.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.virenapothecary.com/bonusqu/","date":"2026-03-08T14:31:14.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 23 Sep 2025 16:30:27 GMT","end":"Sun, 25 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"77:6B:7C:56:E5:E7:51:42:ED:61:04:B9:D9:26:38:05:21:1C:F9:06","sha256":"F7:5C:28:39:1D:C1:7D:92:F0:E1:D7:3B:EF:A5:AD:B3:36:CD:F3:E5:AA:BE:EF:53:D9:F3:D5:47:D1:F3:4D:75"}}},"request":{"raw":"GET /dai7nc2gv/image/upload/v1769399045/bonusqu_f4ietc.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.virenapothecary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\netag: \"41efde030cf986b9f333c7c805b1707b\"\r\nlast-modified: Mon, 26 Jan 2026 03:44:06 GMT\r\ndate: Sun, 08 Mar 2026 14:31:14 GMT\r\nstrict-transport-security: max-age=604800\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\nserver-timing: cld-fastly;dur=422;cpu=206;start=2026-03-08T14:31:14.348Z;desc=miss,rtt;dur=18,content-info;desc=\"width=4096,height=4096,bytes=1630421,format=\\\"jpg\\\",o=1,crt=1769399045,ef=(17)\",cloudinary;dur=91;start=2026-03-08T14:31:14.619Z\r\nserver: Cloudinary\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options\r\nx-request-id: 85e461231296df6068e363532692d6dd\r\ncontent-length: 1630421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1630421,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4096x4096, components 3","md5":"374aa9f75ef8d2791988baa81eb95ebe","sha1":"0f76b3c41e304ef91a1bd76f909e419b9614b048","sha256":"c2e67da27dcb0ff165d3297ccafdab699620404d586ad80eed67b0b6905c28f6","sha512":"47d11c63f41bf87688abe710164302d0c74e3e7e388ec3945bd01f0b29cb684242e4fa37166e91dee4adc317e7098ef62354e4dbc1208ad12db45cfba64d7700","ssdeep":"24576:+AyOv3R0xRzJkwFVY/BufKnk/8OjswpoEt8RwNhaGTc:+Ay2hO9tY/Buio8OlpoEt8WeGTc","tlshash":"362533336e220e4056f643ad6bcfc3b98e943d7f7a71a957b2431f64a48083d2d56389","first_seen":"2026-03-08T14:31:37.099005Z","last_seen":"2026-03-08T14:31:37.099005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":1,"dns":13,"connect":26,"send":0,"wait":436,"receive":188,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
