{"report_id":"58a6181d-a83e-4fe4-809e-4b2ff3529def","version":6,"status":"done","tags":[],"date":"2025-04-15T16:04:18Z","url":{"schema":"http","addr":"fanpalace.rest/join/401904/verify.php/verify.php/verify.php/verify.php/verify.php","fqdn":"fanpalace.rest","domain":"fanpalace.rest","tld":"rest"},"ip":{"addr":"104.21.60.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click","fqdn":"chggcba.datesoffrs.com","domain":"datesoffrs.com","tld":"com"},"title":"chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-24T16:04:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"nrb2mr0.wild-match-network.com","ip":{"addr":"185.155.184.43","port":443,"asn":6898,"as":"AS5398 SA","country":"Switzerland","country_code":"CH"},"domain_registered":"2025-02-12","domain_rank":0,"first_seen":"2025-02-18T13:46:52Z","last_seen":"2025-04-15T07:02:34.500059Z","alert_count":1,"request_count":1,"received_data":356,"sent_data":561,"comment":"","tags":null,"fingerprints":null},{"fqdn":"chggcba.datesoffrs.com","ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"domain_registered":"2024-11-06","domain_rank":0,"first_seen":"2025-02-08T17:55:32.093525Z","last_seen":"2025-04-10T16:02:46.005452Z","alert_count":0,"request_count":2,"received_data":15943,"sent_data":994,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fanpalace.rest","ip":{"addr":"104.21.60.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-13","domain_rank":0,"first_seen":"2025-04-15T05:16:18.670731Z","last_seen":"2025-04-15T05:16:18.670731Z","alert_count":0,"request_count":5,"received_data":7674,"sent_data":2851,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":1294,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-04-09T02:29:24.000697Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":506,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-15","alert":"Sinkholed","trigger":"wild-match-network.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fanpalace.rest/verify.php","fqdn":"fanpalace.rest","domain":"fanpalace.rest","tld":"rest"},"ip":{"addr":"104.21.60.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d250f965f47630c6301bf4681b1fe26","sha1":"dabf66066e04a1f82dc57b3963a5a391d9cfbbc0","sha256":"966df4c70bd6f38e56187df4be553a46fbd9ec157c34563ec1ac1ac7c41b778a","sha512":"0388056925a8943ee6b03f074a174a8e888e0aae11d0fcc772d161f50a004dae279f36b4b3e39545cf8a25c68859ca465498b3628e68b9ffd49c13bee49fc265","ssdeep":"","tlshash":"5fe068773a231c301667a56b6154a344292396633ca1b40b3a2c45800f85e9a72bbeac","size":413,"data":"","first_seen":"2025-03-04T07:54:27.402297Z","last_seen":"2025-12-09T12:16:17.261105Z","times_seen":1251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-21T09:11:46.973158Z","times_seen":336074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nrb2mr0.wild-match-network.com/t6pp7e3?t=CasualDating\u0026cid=1","fqdn":"nrb2mr0.wild-match-network.com","domain":"wild-match-network.com","tld":"com"},"ip":{"addr":"185.155.184.43","port":443,"asn":6898,"as":"AS5398 SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-15T16:03:55.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wild-match-network.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Apr 2025 00:35:50 GMT","end":"Sun, 13 Jul 2025 00:35:49 GMT"},"fingerprint":{"sha1":"DC:DC:7F:21:C0:97:E8:FB:75:37:20:80:55:F0:3E:B8:95:A1:3F:41","sha256":"08:CC:39:61:EC:45:68:E3:30:67:27:F4:66:B0:AE:AA:5F:3D:9F:CF:44:6E:2D:7A:95:7E:3A:B8:59:75:A3:62"}}},"request":{"raw":"GET /t6pp7e3?t=CasualDating\u0026cid=1 HTTP/1.1\r\nHost: nrb2mr0.wild-match-network.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fanpalace.rest/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":994,"data":"$a=1%7C12%7C_event_%7C1744733036181%7C_sr_%7Ctype%7Cconf%7Cmodule%7C1%7Cexcluded%7C1%7Csrsr%7C10000%7Cvsn%7C5958760%7Cappid%7C220110cf75551a30$rId=RID_-233753682$rpId=1631027448$domR=1744733036398$tvn=%2Fsign-in.mi$tvt=1744733028452$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=1024$sw=1280$sh=1024$di=1$egf=1589PRUX$md=mdcc66%2CdT_pv%3Bmdcc69%2CdT_pv%3Bmdcc70%2CdT_pv%3Bmdcc31%2CdT_pv%3Bmdcc32%2CdT_pv%3Bmdcc33%2CdT_pv%3Bmdcc38%2CdT_pv%3Bmdcc48%2CdT_pv%3Bmdcc56%2CdT_pv%3Bmdcc57%2CdT_pv%3Bmdcc61%2CdT_pv%3Bmdcc63%2CdT_pv%3Bmdcc74%2CdT_pv%3Bmdcc75%2CdT_pv$url=https%3A%2F%2Fwww.marriott.com%2Fsign-in.mi%3FreturnTo%3D%252Floyalty%252FmyAccount%252FeditEmailPreferences.mi%253FenrollmentSourceCode%253DINCK%2526nck%253D559471315%2526ck%253D2187475%252520%252520%2526lk%253D1000301971$title=Welcome%20to%20Marriott%20Bonvoy$latC=0$app=220110cf75551a30$vi=KBFHPEIGQARRPPPHKDNFDUWQSNAFKQHM-0$dnt=1$fId=533032199_147$v=10309250310100759$vID=1744733032201KLRN6DPSVMLEVMVCU67PKVMQ3IGTE0OF$nV=1$time=1744733040957"}},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Tue, 15 Apr 2025 16:03:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 174\r\nlocation: https://chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click\r\nset-cookie: sid=t4~kigoesdmrpbb11xj2m5kkek0; path=/\r\nreferrer-policy: no-referrer\r\ncache-control: private, no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":288,"dns":3,"connect":33,"send":0,"wait":78,"receive":2,"ssl":249},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-15","alert":"Sinkholed","trigger":"wild-match-network.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chggcba.datesoffrs.com/favicon.ico","fqdn":"chggcba.datesoffrs.com","domain":"datesoffrs.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click","date":"2025-04-15T16:03:56.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datesoffrs.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jan 2025 22:02:47 GMT","end":"Fri, 25 Apr 2025 22:02:46 GMT"},"fingerprint":{"sha1":"B3:2D:DE:88:67:6B:C6:9D:BB:3A:79:0E:D5:FF:A7:7B:FC:0F:6C:80","sha256":"1B:97:FE:2A:8C:BC:C3:FC:B8:BC:2B:16:A7:08:3D:C4:A2:5C:3C:FA:4A:37:B7:31:30:69:F2:F6:9E:13:86:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chggcba.datesoffrs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":189,"data":"challenge=17e1dbc1e1b2c94b2d25d7bd1945c590\u0026fingerprint=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjB8MTI4MHgxMDI0fGVuLVVTfDA%3D"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 15 Apr 2025 16:03:56 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Mon, 07 Apr 2025 10:40:14 GMT\r\netag: \"67f3ab8e-3c2e\"\r\nexpires: Tue, 22 Apr 2025 16:03:56 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3dee16bbbc5f6765d0f7f5af5b0a854d","sha1":"6df4c718df2c6e96be91c7f7c6b96ec0a9f085cd","sha256":"77b36f6189bd94a6b360681983a60bfe4c3f33f2e1746a08b1520777e378212d","sha512":"74893d14b6b9c16c3f7e0c1c59af33f63b4326a59d81df6c3a79eae78a879dc8765bd13d396693a86096efe8402b5ce81344110c6c613e0e5ecb05d42ed16df2","ssdeep":"96:nvy3aVUX8WgWuao80oyAWyN6Q9qkNXC2v:6+mTGaV05Fy19PV3v","tlshash":"156230b6840131b8ecadb1758336956e60b79c546ce2754fe23839344f72e42fb6e60a","first_seen":"2025-04-07T11:27:09.63149Z","last_seen":"2026-05-20T20:13:39.076165Z","times_seen":4828,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanpalace.rest/verify.php","fqdn":"fanpalace.rest","domain":"fanpalace.rest","tld":"rest"},"ip":{"addr":"104.21.60.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-15T16:03:55.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanpalace.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Apr 2025 20:59:15 GMT","end":"Sat, 12 Jul 2025 21:57:42 GMT"},"fingerprint":{"sha1":"41:DB:55:AF:C2:C5:E8:4B:FE:36:74:88:AA:46:0D:5D:D2:85:49:12","sha256":"F4:C7:40:0B:6C:42:82:60:C4:F7:5C:0B:33:B9:1A:84:4B:48:6E:1E:92:3D:42:F1:BC:B7:E4:F8:12:15:97:06"}}},"request":{"raw":"POST /verify.php HTTP/1.1\r\nHost: fanpalace.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 189\r\nOrigin: https://fanpalace.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanpalace.rest/verify.php\r\nCookie: PHPSESSID=ji9p2p4snu71cl7mdpok9qt94b\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":189,"data":"challenge=3be795d16e9b8c218ff34e978418951c\u0026fingerprint=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjB8MTI4MHgxMDI0fGVuLVVTfDA%3D"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 15 Apr 2025 16:03:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=l19WXPNH9pwaVo3htxsrYtvda6436dX6zFRLucEeatTZsG6rrNTamJe%2FQ05kCkGed4WpV3EjyYbLozMIE85pzYxmZnxTQsMkQUvLun7ZInHEd3%2FEFZocP4%2FOqioK%2BiQyMw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfL4;desc=\"?proto=QUIC\u0026rtt=28823\u0026min_rtt=25846\u0026rtt_var=12603\u0026sent=21\u0026recv=21\u0026lost=0\u0026retrans=0\u0026sent_bytes=4209\u0026recv_bytes=1885\u0026delivery_rate=1266\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=b4aa25ffd2aa461b\u0026ts=561\u0026x=16\"\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /favicon.ico\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 930cad01de70312a-AMS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanpalace.rest/favicon.ico","fqdn":"fanpalace.rest","domain":"fanpalace.rest","tld":"rest"},"ip":{"addr":"104.21.60.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-15T16:03:55.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanpalace.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Apr 2025 20:59:15 GMT","end":"Sat, 12 Jul 2025 21:57:42 GMT"},"fingerprint":{"sha1":"41:DB:55:AF:C2:C5:E8:4B:FE:36:74:88:AA:46:0D:5D:D2:85:49:12","sha256":"F4:C7:40:0B:6C:42:82:60:C4:F7:5C:0B:33:B9:1A:84:4B:48:6E:1E:92:3D:42:F1:BC:B7:E4:F8:12:15:97:06"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fanpalace.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fanpalace.rest/verify.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ji9p2p4snu71cl7mdpok9qt94b\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":189,"data":"challenge=16acd75ab36860cf7a00052a3a9a0833\u0026fingerprint=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjB8MTI4MHgxMDI0fGVuLVVTfDA%3D"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 15 Apr 2025 16:03:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver-timing: cfCacheStatus;desc=\"BYPASS\", cfL4;desc=\"?proto=QUIC\u0026rtt=28823\u0026min_rtt=25846\u0026rtt_var=12603\u0026sent=21\u0026recv=21\u0026lost=0\u0026retrans=0\u0026sent_bytes=4209\u0026recv_bytes=1885\u0026delivery_rate=1266\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=b4aa25ffd2aa461b\u0026ts=634\u0026x=16\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8CYiTkqezWX0FiDYnxte%2BqBPyPn%2F1d9GpmVFd3Dzst1KmuZJaUf4dlWLLgbwZFmksFvQVcNzwwZrE8mgH%2B2Un3a9uSpIPXpTnNL18ZLkClArVxaAjXuVrIW1r1Y9Dgia0Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://nrb2mr0.wild-match-network.com/t6pp7e3?t=CasualDating\u0026cid=1\r\ncf-cache-status: BYPASS\r\ncf-ray: 930cad024e87312a-AMS\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fanpalace.rest/verify.php","date":"2025-04-15T16:03:55.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Feb 2025 14:42:34 GMT","end":"Wed, 28 May 2025 15:42:17 GMT"},"fingerprint":{"sha1":"AD:90:D1:30:C9:77:BF:DE:1F:AB:8C:0D:6E:67:CB:6A:E8:42:DB:18","sha256":"AB:2F:E3:38:97:FA:46:8A:37:A7:4D:96:89:7C:D8:52:76:B0:24:E6:A0:EE:4C:11:CC:13:50:2F:2F:74:2C:8B"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fanpalace.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanpalace.rest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 15 Apr 2025 16:03:55 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 930cad01082bb4fd-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-21T09:11:46.973158Z","times_seen":336074,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanpalace.rest/favicon.ico","fqdn":"fanpalace.rest","domain":"fanpalace.rest","tld":"rest"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fanpalace.rest/verify.php","date":"2025-04-15T16:03:55.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanpalace.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Apr 2025 20:59:15 GMT","end":"Sat, 12 Jul 2025 21:57:42 GMT"},"fingerprint":{"sha1":"41:DB:55:AF:C2:C5:E8:4B:FE:36:74:88:AA:46:0D:5D:D2:85:49:12","sha256":"F4:C7:40:0B:6C:42:82:60:C4:F7:5C:0B:33:B9:1A:84:4B:48:6E:1E:92:3D:42:F1:BC:B7:E4:F8:12:15:97:06"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fanpalace.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanpalace.rest/verify.php\r\nCookie: PHPSESSID=ji9p2p4snu71cl7mdpok9qt94b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":189,"data":"challenge=e025ac3237aad3fc580b3450bfa47107\u0026fingerprint=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjB8MTI4MHgxMDI0fGVuLVVTfDA%3D"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click","fqdn":"chggcba.datesoffrs.com","domain":"datesoffrs.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-15T16:03:56.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datesoffrs.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jan 2025 22:02:47 GMT","end":"Fri, 25 Apr 2025 22:02:46 GMT"},"fingerprint":{"sha1":"B3:2D:DE:88:67:6B:C6:9D:BB:3A:79:0E:D5:FF:A7:7B:FC:0F:6C:80","sha256":"1B:97:FE:2A:8C:BC:C3:FC:B8:BC:2B:16:A7:08:3D:C4:A2:5C:3C:FA:4A:37:B7:31:30:69:F2:F6:9E:13:86:E9"}}},"request":{"raw":"GET /s/de7a371da04e4?sub1=Click HTTP/1.1\r\nHost: chggcba.datesoffrs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":3553,"data":"{\"events\":[{\"xdm\":{\"eventType\":\"Vendor\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.marriott.com/about/terms-of-use.mi?enrollmentSourceCode=INCK\u0026nck=559471315\u0026ck=2187475%20%20\u0026lk=1000301970\",\"server\":\"true\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"\",\"type\":\"vendor\"}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\",\"type\":\"desktop\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-04-15T16:03:53.331+00:00\"},\"timestamp\":\"2025-04-15T16:03:53.332Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.24.0+2.27.0\",\"environment\":\"browser\"},\"channel\":{\"mediaAction\":\"vendor\"},\"marketing\":{\"trackingCode\":\"\"},\"endUserIDs\":{\"_experience\":{\"aaid\":{\"id\":\"\"},\"emailid\":{\"id\":\"\"}}},\"eventMergeId\":\"d92675fd-c83c-4506-9b7e-de243d411c97\",\"_marriott_intl\":{\"affiliate\":\"\",\"prop_name\":\"\",\"sessionId\":\"\",\"env_site_id\":\"US\",\"mr_enrolled\":\"\",\"promotion_id\":\"\",\"search_brands\":\"\",\"res_num_adults\":\"\",\"vendor_value_1\":\"\",\"vendor_value_2\":\"6825893b-bc34-4e59-8c99-28ec8885ff35\",\"vendor_value_3\":0,\"mr_id_alternate\":\"\",\"prop_brand_code\":\"\",\"prop_brand_name\":\"\",\"prop_brand_tier\":\"\",\"res_market_code\":\"\",\"res_stay_length\":\"\",\"mr_cei_SttBhvSeg\":\"\",\"prop_marsha_code\":\"\",\"res_isRedemption\":\"\",\"res_num_children\":\"\",\"prop_address_city\":\"\",\"res_revenue_total\":\"\",\"user_optin_status\":\"optout\",\"res_rooms_per_night\":\"\",\"search_cluster_code\":\"standard\",\"search_currency_type\":\"\",\"search_date_check_in\":\"\",\"facebook_content_type\":\"hotel,destination\",\"mr_prof_address_state\":\"\",\"mr_prof_rewards_level\":\"\",\"search_date_check_out\":\"\",\"search_dates_flexible\":\"\",\"selected_cluster_code\":\"\",\"search_guests_per_room\":\"\",\"prop_address_state_abbr\":\"\",\"res_confirmation_number\":\"\",\"reservation_iata_number\":\"\",\"search_destination_city\":\"\",\"mr_prof_stay_in_progress\":\"\",\"res_revenue_adr_rate_usd\":\"\",\"res_revenue_total_locale\":\"\",\"search_destination_state\":\"\",\"search_list_page_current\":\"\",\"device_language_preferred\":\"\",\"prop_address_country_abbr\":\"\",\"res_revenue_currency_type\":\"\",\"search_list_records_total\":\"\",\"browser_akamai_loc_country\":\"NO\",\"search_destination_country\":\"\",\"search_list_marsha_on_page\":\"\",\"search_list_records_on_page\":\"\",\"mr_prof_address_country_abbr\":\"\",\"mr_prof_authentication_state\":\"\",\"search_advance_purchase_days\":\"\",\"marketingCampaignTrackingData\":\"\",\"res_guest_address_country_abbr\":\"\",\"prop_address_city_state_country\":\"\",\"search_date_check_in_yyyy_mm_dd\":\"\",\"search_date_check_out_yyyy_mm_dd\":\"\",\"lowercase_marsha_code_comma_seprated\":\"\",\"search_destination_city_state_country\":\"\"}},\"query\":{\"personalization\":{\"schemas\":[\"https://ns.adobe.com/personalization/default-content-item\",\"https://ns.adobe.com/personalization/html-content-item\",\"https://ns.adobe.com/personalization/json-content-item\",\"https://ns.adobe.com/personalization/redirect-item\",\"https://ns.adobe.com/personalization/ruleset-item\",\"https://ns.adobe.com/personalization/message/in-app\",\"https://ns.adobe.com/personalization/message/content-card\",\"https://ns.adobe.com/personalization/dom-action\"],\"decisionScopes\":[\"__view__\"],\"surfaces\":[\"web://www.marriott.com/about/terms-of-use.mi\"]}}}],\"meta\":{\"target\":{\"migration\":true},\"state\":{\"domain\":\"marriott.com\",\"cookiesEnabled\":true}},\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}},\"xdm\":{\"identityMap\":{\"ECID\":[{\"id\":\"66255823686224574429174644944466526478\"}]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 15 Apr 2025 16:03:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"8bf906833cc7aea8084f552217ed9c1d","sha1":"794696a720669c524ad273a139db0fd375e6608b","sha256":"e392a3891c070abe312d9c08bb6a4a9f5342424dd15c80f1d5cf67d14b79650a","sha512":"a09b07416032ece46ee992fa743fbb119ff2b87f24c0c0794e7b3c5ac4054243f3d4dd3b373440df1634a17ff842a8ef5116ebd6ea59bb2bedacfdb0245262e1","ssdeep":"","tlshash":"2650000000033000c00000c00c0000300c000000000cc0c00000000c000c003000c000","first_seen":"2024-11-26T21:45:12.768417Z","last_seen":"2026-05-20T11:53:32.207427Z","times_seen":415,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":394,"dns":187,"connect":20,"send":0,"wait":29,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanpalace.rest/join/401904/verify.php/verify.php/verify.php/verify.php/verify.php","fqdn":"fanpalace.rest","domain":"fanpalace.rest","tld":"rest"},"ip":{"addr":"104.21.60.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-15T16:03:55.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanpalace.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Apr 2025 20:59:15 GMT","end":"Sat, 12 Jul 2025 21:57:42 GMT"},"fingerprint":{"sha1":"41:DB:55:AF:C2:C5:E8:4B:FE:36:74:88:AA:46:0D:5D:D2:85:49:12","sha256":"F4:C7:40:0B:6C:42:82:60:C4:F7:5C:0B:33:B9:1A:84:4B:48:6E:1E:92:3D:42:F1:BC:B7:E4:F8:12:15:97:06"}}},"request":{"raw":"GET /join/401904/verify.php/verify.php/verify.php/verify.php/verify.php HTTP/1.1\r\nHost: fanpalace.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 15 Apr 2025 16:03:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 930cacfe1c8a9875-AMS\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /verify.php\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ap7X4GZTkKKuujmzDzJSdQXFA2juWWztVRNAFaYA4rdasCQ3r%2FzsswIoMsktTEf4KfCnFQLLy78QFGUl6r20yLbhmzauqAW8a7DuQLgzt9sQ13JUfRmvNfYVT8uj755B1A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: PHPSESSID=ji9p2p4snu71cl7mdpok9qt94b; Path=/\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfL4;desc=\"?proto=TCP\u0026rtt=19558\u0026min_rtt=19520\u0026rtt_var=3135\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3282\u0026recv_bytes=1300\u0026delivery_rate=221192\u0026cwnd=161\u0026unsent_bytes=0\u0026cid=63d5addd869a682f\u0026ts=87\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":76,"dns":2,"connect":20,"send":0,"wait":56,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanpalace.rest/verify.php","fqdn":"fanpalace.rest","domain":"fanpalace.rest","tld":"rest"},"ip":{"addr":"104.21.60.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-15T16:03:55.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanpalace.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Apr 2025 20:59:15 GMT","end":"Sat, 12 Jul 2025 21:57:42 GMT"},"fingerprint":{"sha1":"41:DB:55:AF:C2:C5:E8:4B:FE:36:74:88:AA:46:0D:5D:D2:85:49:12","sha256":"F4:C7:40:0B:6C:42:82:60:C4:F7:5C:0B:33:B9:1A:84:4B:48:6E:1E:92:3D:42:F1:BC:B7:E4:F8:12:15:97:06"}}},"request":{"raw":"GET /verify.php HTTP/1.1\r\nHost: fanpalace.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ji9p2p4snu71cl7mdpok9qt94b\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 15 Apr 2025 16:03:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 930cacfe8da69875-AMS\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=78epj7CSmZlqL5IlQIqxiSi1updZzYfhudfepM5K3JkGKv2%2F3C%2BMgbuZKxZeEs5wmo16Jh4r4tYUiJqGA4lGzyDaV4G22Y1%2FYebwf%2Bsocs1XJuW2jjaB5LJTNImg05Xvsw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfL4;desc=\"?proto=TCP\u0026rtt=24866\u0026min_rtt=19520\u0026rtt_var=10114\u0026sent=9\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=4072\u0026recv_bytes=1405\u0026delivery_rate=221192\u0026cwnd=164\u0026unsent_bytes=0\u0026cid=63d5addd869a682f\u0026ts=134\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (471)","md5":"2bda52315d161700640b714fdb6cc58d","sha1":"0e6245fc73cbf3d8cebcf71b110325d28d0ae2dc","sha256":"9ff63457889857d6c531e920e75334ab68908d0f07fe583c05c08b006f48ce92","sha512":"335e11425007e36365e8fbf2d121eac0bf0f0c7d58ba16dd1206ce1ed2d20761c1e9ba79689038cb72543597c8e43433055775e34d246ded6f1b455c16a8b908","ssdeep":"","tlshash":"053186934c7308316513d25913e1eb442f63c5674997f4463bcda2948fc299991bb78c","first_seen":"2025-04-15T16:04:18.157574Z","last_seen":"2025-04-15T16:04:18.157574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}