{"report_id":"2f2172ce-9ae6-4326-9061-1449670638a2","version":6,"status":"done","tags":[],"date":"2025-07-16T14:30:16Z","url":{"schema":"https","addr":"www.gmretreats.com/login","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"172.67.186.113","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.gmretreats.com/login","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"title":"Canada"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-20T14:30:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.gmretreats.com","ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-17","domain_rank":0,"first_seen":"2025-07-16T14:30:17.239901Z","last_seen":"2025-07-16T14:30:17.239901Z","alert_count":0,"request_count":10,"received_data":5453590,"sent_data":4639,"comment":"","tags":null,"fingerprints":null},{"fqdn":"df11acb99e9ca694.gmretreats.com","ip":{"addr":"172.67.186.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-17","domain_rank":0,"first_seen":"2025-07-16T14:30:17.252362Z","last_seen":"2025-07-16T14:30:17.252362Z","alert_count":0,"request_count":4,"received_data":4135,"sent_data":2200,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gmretreats.com/login","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4155b9e247af9b0cc880d702fdf84a59","sha1":"440c6c77e68723c1502ca5d086bebbf19fd35202","sha256":"80b0dd0797534f2567c79f1f62c1d997f50f6c8de6aeaee76ec257cffee30fc9","sha512":"6ee3a56622fda0514238ccb903af563c4b051e02227d008978fd042b0e6ec527c15c39ec1cb62b72247db8c0c4a14384ad17d72d82bafe5a3db1e7d9630d1457","ssdeep":"","tlshash":"4d31351939ee16650463f4bf5ebe5198726a40176108ef103d0e56802f5883b2af0fec","size":1738,"data":"","first_seen":"2025-03-03T15:50:57.267704Z","last_seen":"2025-12-06T01:27:23.571209Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-12T18:53:04.976806Z","times_seen":124814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/js/app.39b26b78.js","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"611ab6e68dce310ba3d45fd6d251eab0","sha1":"813497c981666a8e316f1db01bb068d5fd7d82b5","sha256":"2f9d5dcfd6333fddb4d1765f4981dec06072f1ef8443af17ed5b1e55642475c2","sha512":"c856d99302a77f25814db09f330058fa3f0fd6df59e9444b1e1532d1233bfdfa13a7875b27d238edbbdc49015fa320a875795f9add11400c8fddb9709284c5df","ssdeep":"24576:qQpZVud5Z5ge6kzAlrE+RV8mwv7QjTvxGS+VXg/6Nx5v799+:rpZVud5ZL6kzAlrE+RV8xk3xGS+Vo6NG","tlshash":"34655a8e3387b161075a2cb3101f3d3aa2391e64a3c9b4d4bb55e5e629b5cdc4237b78","size":1434475,"data":"","first_seen":"2025-07-16T14:30:21.050252Z","last_seen":"2025-07-16T14:30:21.050252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/js/chunk-f8e4e9a0.34554e30.js","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e35369cef44a6770ba7d75d5c11c7c23","sha1":"125fd415423c203113117fb1278201bdce0fef1e","sha256":"ba36b1e954c9fc88e3b49185e1f64076f5c7810f51b2c8667f29ee6368b6b55e","sha512":"3f514651e0a7daa95b64962c6e2f48e7d3810fcfb0b5979031f3b43946aa78f2f1d2d128c823df13c3b0a6bd98a55324adeac4efc903f2acc8d17ccf948a02e1","ssdeep":"24576:CK9bHEZE/EdEIEZELEf/3hNXtB6jBxnnu0MJqgaZ5hHUU/zP0Whb8UQCUTvua:CK9bHEZE/EdEIEZELEf/3hNXD6jBxnnW","tlshash":"b5157e177044781caa33c0b1312b59d4a1343ea5e04f49a9fb37f9e66aef499162b73c","size":944027,"data":"","first_seen":"2025-07-16T14:30:21.023295Z","last_seen":"2025-07-16T14:30:21.023295Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.gmretreats.com/js/app.39b26b78.js","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:54.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"GET /js/app.39b26b78.js HTTP/1.1\r\nHost: www.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gmretreats.com/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Jul 2025 15:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6867f8f7-15e36b\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9GCN0oAM9UmvVD0r1lV28oGEX37V6WECAvtBmWSam98R5wZvm4sihknqn5hC0WQpcI8Js3fd7RFF1VKMvZ8fDR%2FqsTyqGTbiBUaw38hQ%2F0c%3D\"}]}\r\ncf-ray: 960231c7ba770afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1434475,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10340)","md5":"bc4607102f0f2f615a5bbef3222490a5","sha1":"a4b2ac3a6024b1ac42b9672cd80efe6a801749cf","sha256":"02370d5fc54d3174fca9f2f33db1d20a0aeb3283bffc8bad395a779a59fea23b","sha512":"51151f11ff08f65dd9ad6e4084ea96b49e5a5103cfb49c52e5b98af1e72fdbc876e782d420a0175bf0f472d2318f5caab2d668b415d0b0811e2d548712fb9c48","ssdeep":"24576:qQpZVud5Z5ge6kzAlrE+RV8mwv7FfPGS+VXg/6Nx5v799+:rpZVud5ZL6kzAlrE+RV8xJPGS+Vo6NxQ","tlshash":"4a654aa97287b35007d638b3105f2f2aa3394e64d7cdb05ee755e0d629a6cdc4227b38","first_seen":"2025-07-16T14:30:21.015757Z","last_seen":"2025-07-16T14:30:21.015757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"df11acb99e9ca694.gmretreats.com/hall/listCsConfig","fqdn":"df11acb99e9ca694.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"172.67.186.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:56.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"OPTIONS /hall/listCsConfig HTTP/1.1\r\nHost: df11acb99e9ca694.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.gmretreats.com/\r\nOrigin: https://www.gmretreats.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 16 Jul 2025 14:29:57 GMT\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Token,Content-Type,Tz\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\naccess-control-max-age: 1728000\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GFLBtxkxJ9L_PkkAJ8Ch\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ETr18hN82tgQDc7HrMQj4yuLqvQ0DiYDXNgBnpBBtIP%2F%2BZfvN5tsFPR8AzEMyy1gfUwDFCeRsOG86OHhdXhu8qXw1LwyeyuiTm0WO9oawRn%2BALfVuyi090s4xF0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 960231d64cabb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T18:53:52.295863Z","times_seen":17859444,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":165,"dns":67,"connect":2,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"df11acb99e9ca694.gmretreats.com/hall/listCsConfig","fqdn":"df11acb99e9ca694.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"172.67.186.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:57.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"POST /hall/listCsConfig HTTP/1.1\r\nHost: df11acb99e9ca694.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 32\r\nOrigin: https://www.gmretreats.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gmretreats.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GFLBtyapyjb0HJMAJ8DB\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ThcprawXLDStk%2BFLrALnZSOcGY4EzJNXBYQcNE18p%2F1O7Zs3Dy8EXgtYfdrBPt4S6CPJja8vl9DVpeCHtfmIud%2BtgbqWyDCryHePEusRM6r4SibS3tuSxjJI4xPo\"}]}\r\ncontent-encoding: br\r\ncf-ray: 960231d8e938b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":505,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"178dbfd5e04c2c524fb2a4d13c9b6314","sha1":"2bbbd22939152fa4040e016fc3205a409e212dcc","sha256":"c5f61e7e996c7459798d30467a810ad9bbd46adb1e1bf3153ac76021cf42ae3a","sha512":"12fc0533482e9f92bcce6cfd9bbdae8ba193461c72064f7c101d025207f235b82e7106d1d5061e543225e30a01fc5381268740354a2fde19462ef87604fd6266","ssdeep":"","tlshash":"6cf059c6624cc53f6b81018824a7be1d389d244b795f8eb8a5895f2dc5da2f4780a6e3","first_seen":"2025-07-16T14:30:21.020959Z","last_seen":"2025-07-16T14:30:21.020959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/js/chunk-f8e4e9a0.34554e30.js","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:54.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"GET /js/chunk-f8e4e9a0.34554e30.js HTTP/1.1\r\nHost: www.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gmretreats.com/login\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=klKRqTh6i91UXuGqStmQ7hm0USMz6i1INaM74iCQlE0MIGh7RcnDaX4t%2F2wbEOPwn6ysJjukdF3yX%2FntKqx0Bi0b6qexGVXBHAAZEDDRUqVJKYFPNmw1IDyHn%2BmT786qsMgODHo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 04 Jul 2025 15:53:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6867f8f7-e679b\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 960231c87f065693-OSL\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7178\u0026min_rtt=961\u0026rtt_var=7773\u0026sent=110\u0026recv=136\u0026lost=0\u0026retrans=0\u0026sent_bytes=10381\u0026recv_bytes=8354\u0026delivery_rate=291139\u0026ss_exit_cwnd=14913\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c9c3b0c22ae7fa56\u0026ts=866\u0026inflight_dur=59\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":944027,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"e35369cef44a6770ba7d75d5c11c7c23","sha1":"125fd415423c203113117fb1278201bdce0fef1e","sha256":"ba36b1e954c9fc88e3b49185e1f64076f5c7810f51b2c8667f29ee6368b6b55e","sha512":"3f514651e0a7daa95b64962c6e2f48e7d3810fcfb0b5979031f3b43946aa78f2f1d2d128c823df13c3b0a6bd98a55324adeac4efc903f2acc8d17ccf948a02e1","ssdeep":"24576:CK9bHEZE/EdEIEZELEf/3hNXtB6jBxnnu0MJqgaZ5hHUU/zP0Whb8UQCUTvua:CK9bHEZE/EdEIEZELEf/3hNXD6jBxnnW","tlshash":"b5157e177044781caa33c0b1312b59d4a1343ea5e04f49a9fb37f9e66aef499162b73c","first_seen":"2025-07-16T14:30:21.023295Z","last_seen":"2025-07-16T14:30:21.023295Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":784,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/img/icons/apple-touch-icon-152x152.png","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:54.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1\r\nHost: www.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gmretreats.com/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U6mGT1LYtDzjVtYZdy7GacX5PreQqHYVeCrR34ZfHOlYeTpfYO%2B%2Beff0zXhWuho6KBPfjVtsVe2h9BUxO54887RZUFJLCD3GF56%2B4tfwOheaiGqppk5rI72TA7jM33Ba7caHA8g%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 04 Jul 2025 15:53:27 GMT\r\nvary: Accept-Encoding\r\ncache-control: private, no-store, no-cache, max-age=0, must-revalidate, proxy-revalidate\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: 960231c9af0f5693-OSL\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3905\u0026min_rtt=0\u0026rtt_var=5383\u0026sent=123\u0026recv=141\u0026lost=0\u0026retrans=0\u0026sent_bytes=27329\u0026recv_bytes=8575\u0026delivery_rate=5384615\u0026ss_exit_cwnd=14913\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c9c3b0c22ae7fa56\u0026ts=1046\u0026inflight_dur=67\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4214,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1288)","md5":"fa72e405ff0daf1da346f1de9b1690f9","sha1":"2d90c115d2342aa552396ef6fad3e4894b752f86","sha256":"cbdbb4f792c6f44bbaa6bc645aab5fd514b6ef0037fd0f1fde33c76833fa684f","sha512":"ecfde6c95492e85ef989642b430abe08c90f198246352fae3e3376d5086fb841498834339b0522350118455fffced7ce155f8b6db3c3121927d43edf16906f60","ssdeep":"48:TGWt6y9GsvZTYTe1wuJlI9FaJnEYVIoLyMsvrVqUX7gRDyiZToxSSsK8K7dA8Cnj:TG/y9thsSQKLCVdQDyiZMQS77jCj","tlshash":"7f91b44a1ca745590513f4fb9fbab1885172801ba904de603ccd12d14fb0faa89f3be6","first_seen":"2025-07-16T14:30:21.025798Z","last_seen":"2025-07-16T14:30:21.025798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/img/icons/favicon-16x16.png","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:54.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"GET /img/icons/favicon-16x16.png HTTP/1.1\r\nHost: www.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gmretreats.com/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mfE86h1qICbAeTRvk1y%2F7ycNg5YiGVcnEHURE2nn0Rwbw4LzWwe6b%2BZW0TqzXZHKPRVasFJsMjAkjZoWIX9hqPKZr4fN1EnD3pwLa5qBsHRV%2F%2BEDRsFwe6VG%2FJLDwAt6awkcN0E%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 04 Jul 2025 15:53:27 GMT\r\nvary: Accept-Encoding\r\ncache-control: private, no-store, no-cache, max-age=0, must-revalidate, proxy-revalidate\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: 960231c9bf105693-OSL\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3905\u0026min_rtt=0\u0026rtt_var=5383\u0026sent=121\u0026recv=141\u0026lost=0\u0026retrans=0\u0026sent_bytes=25193\u0026recv_bytes=8575\u0026delivery_rate=5384615\u0026ss_exit_cwnd=14913\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c9c3b0c22ae7fa56\u0026ts=1038\u0026inflight_dur=67\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4214,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1288)","md5":"5dbec3d005cd6506ab58daee638c178e","sha1":"4b289bd37754a4c9d3658cadf8f8fafa797edae0","sha256":"64d98cbcc9818f95db566c13a2b1cb3ce597c09a061b8213fc84afd9df52ec49","sha512":"596cf6db18d937e768dfcdf25e67e75de165e35da5d8413cbfd41d168218beb10f6ba8dd5a3747999c67dac592bf45112b476102b1dcbbb8405cb157645cc2a3","ssdeep":"48:TGWt6y9GsvZTYTe2GwuJlI9FaJnEYVIoLyMsvrVqUX7gRDyiZToxSSsK8K7dA8vY:TG/y9thsS2RKLCVdQDyiZMQS77jv0rd","tlshash":"b591a64a1ce3455e1513a5fbdeb6b1895172800ba904ee603ccd51d14fa0faa4df37fa","first_seen":"2025-07-16T14:30:21.032095Z","last_seen":"2025-07-16T14:30:21.032095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"df11acb99e9ca694.gmretreats.com/hall/listCsConfig","fqdn":"df11acb99e9ca694.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"172.67.186.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:56.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"OPTIONS /hall/listCsConfig HTTP/1.1\r\nHost: df11acb99e9ca694.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.gmretreats.com/\r\nOrigin: https://www.gmretreats.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 16 Jul 2025 14:29:57 GMT\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Token,Content-Type,Tz\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\naccess-control-max-age: 1728000\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GFLBtxluzsfCPHkAGV_C\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KA07fbwV7y0KwSZNYDi7V0cmliJ9FyYV30lsqlbaE88fDy%2FnK3RMQVRVtYsjmxc9fjQk39vVJJpzKeDy%2BJqt1mkFD2RjGJNc6Qwk2VM6xf2doqWz3TJ93t0%2FJ9W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 960231d62c74b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T18:53:52.295863Z","times_seen":17859444,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":144,"dns":62,"connect":2,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/img/login-logo.3668cb10.png","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:56.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"GET /img/login-logo.3668cb10.png HTTP/1.1\r\nHost: www.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gmretreats.com/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 11999\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 04 Jul 2025 15:53:27 GMT\r\netag: \"6867f8f7-2edf\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 960231d4ff795693-OSL\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nvary: Accept-Encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sdYLDlJjCX%2BAulE3KIJL7vO9bm5FDzkD%2FmYoDZoBYs7bUYvq41TUPWAXKYF%2FkQBESXXmmh4%2FyG%2BhN190cN4BDZgiWWU%2FNyK2ddAtuGfn%2Bou5sKnh%2FiVn%2B%2FqaPyhu8T220FMR2jA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=773\u0026min_rtt=0\u0026rtt_var=481\u0026sent=521\u0026recv=198\u0026lost=0\u0026retrans=0\u0026sent_bytes=552126\u0026recv_bytes=12201\u0026delivery_rate=23197098\u0026ss_exit_cwnd=14913\u0026ss_exit_reason=2\u0026cwnd=20015\u0026unsent_bytes=0\u0026cid=c9c3b0c22ae7fa56\u0026ts=2846\u0026inflight_dur=193\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11999,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 490 x 147, 8-bit/color RGBA, non-interlaced","md5":"3668cb10f6ef1b992b3ae3fce2471dd5","sha1":"f9f4ec6340f226fca12acadb150404c9c45f8015","sha256":"6eeaff8cec219b3dabf9a9ad8bfdf25cb546364908eba253d764a41e40e0ccf4","sha512":"4910f7035568ef78dee1b6ec7538025bef89de8ac0e61952dd53dc689d92ab1c46e891f26e6033ed89224ecfc0b2bb4a9da7a3acbba67b0860dd9166f3f7a66e","ssdeep":"192:iSHIIHUCD4wao1V1tqUgTRPDuT04VkykKjSBO0/nmbC3o4y/lD1Y1bjGef+k:950wx10UqDuT04VkyY9nQCY4YD1+Gs","tlshash":"1f42cf4d05b11dec0eca963d7c22cb0e9b7b55c6a0a9bf690ea78a1f07309577c33109","first_seen":"2025-07-16T14:30:21.034593Z","last_seen":"2025-07-16T14:30:21.034593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":407,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/login","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-16T14:29:53.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: www.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Jul 2025 15:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: private, no-store, no-cache, max-age=0, must-revalidate, proxy-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XoSFSRfCnB9fC4ovqdZN5kKQL0OeurGkI623fSW6906VNSboW9BQUsGeDu6k8xAyci1lirx7EswIU97%2Fl3TNVQwz174gYyd3viqmVv5oBsM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\ncontent-encoding: br\r\ncf-ray: 960231c30d1f0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4214,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1288)","md5":"3f55eb45d8c63ea392462975abc88c61","sha1":"a07ca4e574dfcbc7b286b95eab148d026491d527","sha256":"80dc17ea8487e68672a17937cdd66c37e25b33acb7f1b66b9dbcb1d803d8217b","sha512":"1800550fc6b3738cdde144832dc37a11e7f502b4c2f20fd609985c6f3b0b2e9d49ee1f9fecc6a9458edb04248872202b1ef0615a44472974f096f5c80773965d","ssdeep":"48:TGWt6y9GsvZTYTeSwuJlI9FaJnEYVIoLyMsvrVqUX7gRDyiZToxSSsK8K7dA8fnI:TG/y9thsSVKLCVdQDyiZMQS77jfI","tlshash":"3c91a64a1ca3454a0513a5ffdfbab1889176800ba914ee603ccd51d14fa0faa4df3be6","first_seen":"2025-07-16T14:30:21.036954Z","last_seen":"2025-07-16T14:30:21.036954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":110,"dns":75,"connect":1,"send":0,"wait":413,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:54.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: www.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gmretreats.com/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:54 GMT\r\ncontent-type: application/javascript\r\nexpires: Wed, 16 Jul 2025 15:17:54 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdhGKzMeN5IJTqZxDxs%2Bfrj3FqDk%2BO3sXg2VMdmIvt6NvzOjsulBydpglDTHSxd4UQ8eIdJgbCxT%2BAHGUMjUotaeegkj6U2qAYYx9CYVGMQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 960231c7ba820afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-12T18:53:04.976806Z","times_seen":124814,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/js/chunk-f8e4e9a0.34554e30.js","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:56.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"GET /js/chunk-f8e4e9a0.34554e30.js HTTP/1.1\r\nHost: www.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gmretreats.com/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cxoI5Ac%2F4EcvSUAsVT9PJdK%2FV0mhNk4ij0%2Bf860%2BiISqVB9gzT9sEyAK4QJtB0yy2C4vL%2FRrmJtognaNvykyO5OLcy7D7lgP1STMhammsYecUgwsWHpdEHykfjtHXqeBTL%2FLSgk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 04 Jul 2025 15:53:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6867f8f7-e679b\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\ncf-ray: 960231d30f735693-OSL\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=598\u0026min_rtt=0\u0026rtt_var=98\u0026sent=316\u0026recv=181\u0026lost=0\u0026retrans=0\u0026sent_bytes=283372\u0026recv_bytes=10624\u0026delivery_rate=23197098\u0026ss_exit_cwnd=14913\u0026ss_exit_reason=2\u0026cwnd=20015\u0026unsent_bytes=0\u0026cid=c9c3b0c22ae7fa56\u0026ts=2144\u0026inflight_dur=168\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":944027,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"e35369cef44a6770ba7d75d5c11c7c23","sha1":"125fd415423c203113117fb1278201bdce0fef1e","sha256":"ba36b1e954c9fc88e3b49185e1f64076f5c7810f51b2c8667f29ee6368b6b55e","sha512":"3f514651e0a7daa95b64962c6e2f48e7d3810fcfb0b5979031f3b43946aa78f2f1d2d128c823df13c3b0a6bd98a55324adeac4efc903f2acc8d17ccf948a02e1","ssdeep":"24576:CK9bHEZE/EdEIEZELEf/3hNXtB6jBxnnu0MJqgaZ5hHUU/zP0Whb8UQCUTvua:CK9bHEZE/EdEIEZELEf/3hNXD6jBxnnW","tlshash":"b5157e177044781caa33c0b1312b59d4a1343ea5e04f49a9fb37f9e66aef499162b73c","first_seen":"2025-07-16T14:30:21.023295Z","last_seen":"2025-07-16T14:30:21.023295Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/img/login-bg.4c612763.png","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:56.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"GET /img/login-bg.4c612763.png HTTP/1.1\r\nHost: www.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gmretreats.com/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2073486\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 04 Jul 2025 15:53:27 GMT\r\netag: \"6867f8f7-1fa38e\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 960231d53f7d5693-OSL\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nvary: Accept-Encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=B1SPPD4zMKzyFY4x78wgA5uhkGMOGZd7XnOx%2FoyP59Mz6TRUhY985HsaLs0VD9UJcIPmDcy1QzOKMUZmmT8LxmwNxtWMC%2FGQDiY4Ed%2Bkfa5DGL01SBV9GUb3Xh8wUdi1C0TZ60M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=853\u0026min_rtt=0\u0026rtt_var=519\u0026sent=531\u0026recv=199\u0026lost=0\u0026retrans=0\u0026sent_bytes=565080\u0026recv_bytes=12246\u0026delivery_rate=23197098\u0026ss_exit_cwnd=14913\u0026ss_exit_reason=2\u0026cwnd=20015\u0026unsent_bytes=0\u0026cid=c9c3b0c22ae7fa56\u0026ts=2901\u0026inflight_dur=196\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2073486,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1150 x 2489, 8-bit/color RGBA, non-interlaced","md5":"4c612763df85c56ac5c7e727fee3ef60","sha1":"51db8879d18e51ebfab6c5f7bd28ce58ff5c1c70","sha256":"1d8f0e3327f2c3bdcf955375083b42a2fe8b61d7390fbbf55bfa0d7fbcaef0a8","sha512":"bfad51ac707558e40ac7500a37469452508deaa22616ade6e11bdbe6de5e15d6cfca9bc2cafbe875a708071106f78d0b97ba9aeee90f675c354d997c03c36ec3","ssdeep":"49152:o0tfiZNrVM1ul7hJ9gMGNfRRVgdzUgc3QJcwozDqs:MrVM1ChJ+rNfZyALgi3T","tlshash":"eba5338db676b72a1fb0c362709d7120e70706a5dd36b5806ef0f1d24fe2395ad598b0","first_seen":"2025-07-16T14:30:21.0414Z","last_seen":"2025-07-16T14:30:21.0414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":1544,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gmretreats.com/img/login-bg2.edb9654f.png","fqdn":"www.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"104.21.1.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:56.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"GET /img/login-bg2.edb9654f.png HTTP/1.1\r\nHost: www.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gmretreats.com/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 10809\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 04 Jul 2025 15:53:27 GMT\r\netag: \"6867f8f7-2a39\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 960231d54f7e5693-OSL\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nvary: Accept-Encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JDxUJlORxDj9Rku%2Fx5lQmMlxl4qqp8WjgFf2R14MPu2bHu0BSQ%2Fc%2FmpV2kLA2uxIMwbvzSFRfh5ydUSXK9V7H6J3xJM9V1yhTxHmECqOyJMsv%2Bzro43%2BX2F4rrfmwxXPhYagYnQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=949\u0026min_rtt=0\u0026rtt_var=581\u0026sent=542\u0026recv=200\u0026lost=0\u0026retrans=0\u0026sent_bytes=579896\u0026recv_bytes=12290\u0026delivery_rate=23197098\u0026ss_exit_cwnd=14913\u0026ss_exit_reason=2\u0026cwnd=20015\u0026unsent_bytes=0\u0026cid=c9c3b0c22ae7fa56\u0026ts=2909\u0026inflight_dur=198\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1018 x 882, 8-bit/color RGBA, non-interlaced","md5":"edb9654f4ff8d66ad39cb2cf377348a4","sha1":"2dcb04c1cd7b9d2f923736b119c4f53197179bd5","sha256":"8a91ff8bca445d63d1947b25b21323a096fccb4a4b84a51b53b7fbfb367a2da5","sha512":"73db46b8d6e438fbc945e69ec11bc1ff7f3f2d8618d149290443215c5b40b409e8d1ee3b469f56d7d7a4e26c41d8a5532e68a4766f33853a7d87941a1d808e45","ssdeep":"192:iSHIIHUCD4waSft01rELd0vo0jbH+RsG+CO5Rkf5RkRmjkV5jkV5jkf5Rkf5RkPL:950wTCJ4Z0jLau5Rkf5RkgjkV5jkV5jI","tlshash":"0f227dcda9c63adad1fd62cef442ae0192738a1823d55df6c376578daf229001d33e52","first_seen":"2025-07-16T14:30:21.043512Z","last_seen":"2025-07-16T14:30:21.043512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"df11acb99e9ca694.gmretreats.com/hall/listCsConfig","fqdn":"df11acb99e9ca694.gmretreats.com","domain":"gmretreats.com","tld":"com"},"ip":{"addr":"172.67.186.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://www.gmretreats.com/login","date":"2025-07-16T14:29:57.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmretreats.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 15:05:01 GMT","end":"Mon, 15 Sep 2025 16:02:44 GMT"},"fingerprint":{"sha1":"ED:C4:0A:90:ED:22:79:B2:4C:9D:42:58:15:3E:DD:2A:21:C1:FC:0E","sha256":"D8:E0:3E:A3:9F:65:93:16:AB:76:2A:12:A4:AD:86:53:E4:54:7C:C6:D4:57:E5:78:2C:46:C3:CD:CF:2F:13:FB"}}},"request":{"raw":"POST /hall/listCsConfig HTTP/1.1\r\nHost: df11acb99e9ca694.gmretreats.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 14\r\nOrigin: https://www.gmretreats.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gmretreats.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 16 Jul 2025 14:29:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GFLBtyaLBsy9umYAAYmk\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15638400; includeSubDomains\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bcshj7%2BTmR87eb8vFw6BrR2pf6XDtUrlaWZDr1ddllgoalUlTOdh1QWqVykLeVd8jPRyBxxenwE%2BD%2Fi83sZ0C75diD6vpk1A%2FNT%2FNqEn2mteq9RbJJE8gQ9%2BWOeE\"}]}\r\ncontent-encoding: br\r\ncf-ray: 960231d8e958b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"628d9746fc44f39186cfdf4fd93135ef","sha1":"40cdc6d5d101a4fff419f9acd1a805dc6cb40e7e","sha256":"5161ee18585c1c65f4cbdf4acfa1f080968722cdab66cc6364aedb9aff8f57fa","sha512":"c260286a73e7dea44c44b7d692faa40ed0e8afcc13929ccf77f371b9083352f7936eba5033816a3e63595c0372b70bf08651df7955b88cc7657a651a818d47c7","ssdeep":"","tlshash":"8180008a280c28c30802308c000c8b8220f820a808008b80ceeea33c830c0abb883830","first_seen":"2023-05-11T08:57:42Z","last_seen":"2026-05-01T14:22:20.369736Z","times_seen":53,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}