{"report_id":"f71799e4-4408-4afb-9c68-0cb8ffa3a730","version":6,"status":"done","tags":[],"date":"2025-04-22T17:01:09Z","url":{"schema":"http","addr":"fanhunter.rest/join/522551/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php","fqdn":"fanhunter.rest","domain":"fanhunter.rest","tld":"rest"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click","fqdn":"chggcba.datesoffrs.com","domain":"datesoffrs.com","tld":"com"},"title":"chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T17:01:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fanhunter.rest","ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-16","domain_rank":0,"first_seen":"2025-04-17T03:24:26.726243Z","last_seen":"2025-04-17T03:24:26.726243Z","alert_count":0,"request_count":5,"received_data":7859,"sent_data":3170,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nrb2mr0.auras-loves-dreams.com","ip":{"addr":"185.155.184.184","port":443,"asn":6898,"as":"AS5398 SA","country":"Switzerland","country_code":"CH"},"domain_registered":"2025-04-01","domain_rank":0,"first_seen":"2025-04-03T16:09:57.895463Z","last_seen":"2025-04-18T05:53:51.071546Z","alert_count":1,"request_count":1,"received_data":356,"sent_data":556,"comment":"","tags":null,"fingerprints":null},{"fqdn":"chggcba.datesoffrs.com","ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"domain_registered":"2024-11-06","domain_rank":0,"first_seen":"2025-02-08T17:55:32.093525Z","last_seen":"2025-04-17T20:45:43.509363Z","alert_count":0,"request_count":2,"received_data":15943,"sent_data":994,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":1294,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-04-16T02:30:19.319003Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":506,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-22","alert":"Sinkholed","trigger":"auras-loves-dreams.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fanhunter.rest/verify.php","fqdn":"fanhunter.rest","domain":"fanhunter.rest","tld":"rest"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d250f965f47630c6301bf4681b1fe26","sha1":"dabf66066e04a1f82dc57b3963a5a391d9cfbbc0","sha256":"966df4c70bd6f38e56187df4be553a46fbd9ec157c34563ec1ac1ac7c41b778a","sha512":"0388056925a8943ee6b03f074a174a8e888e0aae11d0fcc772d161f50a004dae279f36b4b3e39545cf8a25c68859ca465498b3628e68b9ffd49c13bee49fc265","ssdeep":"","tlshash":"5fe068773a231c301667a56b6154a344292396633ca1b40b3a2c45800f85e9a72bbeac","size":413,"data":"","first_seen":"2025-03-04T07:54:27.402297Z","last_seen":"2025-12-09T12:16:17.261105Z","times_seen":1251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-05T14:47:32.922261Z","times_seen":330414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fanhunter.rest/verify.php","fqdn":"fanhunter.rest","domain":"fanhunter.rest","tld":"rest"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-22T17:00:37.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanhunter.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Apr 2025 00:48:05 GMT","end":"Tue, 15 Jul 2025 01:46:31 GMT"},"fingerprint":{"sha1":"96:BB:0F:1E:95:43:D5:97:55:70:97:DB:CD:F8:35:48:64:96:6D:5B","sha256":"D1:89:F4:08:62:C4:A6:68:C5:4E:AF:7D:F5:57:4E:67:93:4A:2D:4B:B7:14:53:3A:F9:D0:3A:CF:BB:2A:CB:9E"}}},"request":{"raw":"POST /verify.php HTTP/1.1\r\nHost: fanhunter.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 189\r\nOrigin: https://fanhunter.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanhunter.rest/verify.php\r\nCookie: PHPSESSID=8nfc84qshf30n8gdqun14q0460\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":189,"data":"challenge=be3c7cddad4b1c5f050fd0cf0e581f04\u0026fingerprint=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjB8MTI4MHgxMDI0fGVuLVVTfDA%3D"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 22 Apr 2025 17:00:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4Y5vOqnlqBaKQl4PgmmSlWtqaNk%2B1of6BWQ4wfKM3f%2Fk9jNEV2Q0q2VooYlwXzM%2FmoOn1HrWt4RPQOVHZbUbEEyIAUTBVsbw7WngHpdw9N%2Fy4sV9z0YcqF6KQ5qGiz8FFg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfL4;desc=\"?proto=QUIC\u0026rtt=25322\u0026min_rtt=23063\u0026rtt_var=6898\u0026sent=20\u0026recv=21\u0026lost=0\u0026retrans=0\u0026sent_bytes=4130\u0026recv_bytes=2402\u0026delivery_rate=428\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=6ff4d90bfd2e6a90\u0026ts=762\u0026x=16\"\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /join/522551/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9346adb08fa19309-CPH\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanhunter.rest/join/522551/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php","fqdn":"fanhunter.rest","domain":"fanhunter.rest","tld":"rest"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-22T17:00:38.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanhunter.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Apr 2025 00:48:05 GMT","end":"Tue, 15 Jul 2025 01:46:31 GMT"},"fingerprint":{"sha1":"96:BB:0F:1E:95:43:D5:97:55:70:97:DB:CD:F8:35:48:64:96:6D:5B","sha256":"D1:89:F4:08:62:C4:A6:68:C5:4E:AF:7D:F5:57:4E:67:93:4A:2D:4B:B7:14:53:3A:F9:D0:3A:CF:BB:2A:CB:9E"}}},"request":{"raw":"GET /join/522551/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php HTTP/1.1\r\nHost: fanhunter.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fanhunter.rest/verify.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8nfc84qshf30n8gdqun14q0460\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 22 Apr 2025 17:00:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5ioyik60%2F5DhFrcUtLkURUaLld3yFGPRHI%2FTQAWNPcUlDnfCrb6PfFmRRIK84g7QleoTFiKVQvTMRi56I%2Bf9XKHhQZoSQs4yoP1MMmPxmYeueeFsCP9vGf5%2Fc010zXhVdA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfL4;desc=\"?proto=QUIC\u0026rtt=25890\u0026min_rtt=23063\u0026rtt_var=6309\u0026sent=22\u0026recv=23\u0026lost=0\u0026retrans=0\u0026sent_bytes=5038\u0026recv_bytes=2952\u0026delivery_rate=17688\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=6ff4d90bfd2e6a90\u0026ts=917\u0026x=16\"\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://nrb2mr0.auras-loves-dreams.com/t62p7e0?s1=Dating\u0026cid=1\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9346adb1afb79309-CPH\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nrb2mr0.auras-loves-dreams.com/t62p7e0?s1=Dating\u0026cid=1","fqdn":"nrb2mr0.auras-loves-dreams.com","domain":"auras-loves-dreams.com","tld":"com"},"ip":{"addr":"185.155.184.184","port":443,"asn":6898,"as":"AS5398 SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-22T17:00:38.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"auras-loves-dreams.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Apr 2025 20:47:35 GMT","end":"Mon, 30 Jun 2025 20:47:34 GMT"},"fingerprint":{"sha1":"B3:7E:B7:5D:85:32:C8:EE:B7:37:AE:A4:63:0C:DC:C0:A1:20:90:B6","sha256":"63:73:0B:D6:EB:54:5D:8F:A0:8D:AD:F0:B3:4E:C2:65:1C:25:13:87:EA:46:D0:8B:94:1A:F6:D4:57:CD:0F:FE"}}},"request":{"raw":"GET /t62p7e0?s1=Dating\u0026cid=1 HTTP/1.1\r\nHost: nrb2mr0.auras-loves-dreams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fanhunter.rest/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Tue, 22 Apr 2025 17:00:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 174\r\nlocation: https://chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click\r\nset-cookie: sid=t6~xl3psk3ghtz1kbc0ey4j1x00; path=/\r\nreferrer-policy: no-referrer\r\ncache-control: private, no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":758,"timings":{"blocked":277,"dns":46,"connect":34,"send":0,"wait":208,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-22","alert":"Sinkholed","trigger":"auras-loves-dreams.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chggcba.datesoffrs.com/favicon.ico","fqdn":"chggcba.datesoffrs.com","domain":"datesoffrs.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click","date":"2025-04-22T17:00:39.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datesoffrs.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Mar 2025 16:08:15 GMT","end":"Thu, 26 Jun 2025 16:08:14 GMT"},"fingerprint":{"sha1":"26:9F:B7:DC:B6:49:77:CE:3B:82:8E:99:F6:94:44:58:23:BB:C0:8A","sha256":"3A:2F:D7:BE:B1:55:EF:D6:41:E7:98:94:1A:55:C7:E2:08:2D:F1:B7:55:FF:0F:DC:0D:3F:C5:09:3D:4D:26:D3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chggcba.datesoffrs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 22 Apr 2025 17:00:39 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Mon, 07 Apr 2025 10:40:14 GMT\r\netag: \"67f3ab8e-3c2e\"\r\nexpires: Tue, 29 Apr 2025 17:00:39 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3dee16bbbc5f6765d0f7f5af5b0a854d","sha1":"6df4c718df2c6e96be91c7f7c6b96ec0a9f085cd","sha256":"77b36f6189bd94a6b360681983a60bfe4c3f33f2e1746a08b1520777e378212d","sha512":"74893d14b6b9c16c3f7e0c1c59af33f63b4326a59d81df6c3a79eae78a879dc8765bd13d396693a86096efe8402b5ce81344110c6c613e0e5ecb05d42ed16df2","ssdeep":"96:nvy3aVUX8WgWuao80oyAWyN6Q9qkNXC2v:6+mTGaV05Fy19PV3v","tlshash":"156230b6840131b8ecadb1758336956e60b79c546ce2754fe23839344f72e42fb6e60a","first_seen":"2025-04-07T11:27:09.63149Z","last_seen":"2026-04-05T13:53:54.062535Z","times_seen":4495,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanhunter.rest/join/522551/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php","fqdn":"fanhunter.rest","domain":"fanhunter.rest","tld":"rest"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-22T17:00:37.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanhunter.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Apr 2025 00:48:05 GMT","end":"Tue, 15 Jul 2025 01:46:31 GMT"},"fingerprint":{"sha1":"96:BB:0F:1E:95:43:D5:97:55:70:97:DB:CD:F8:35:48:64:96:6D:5B","sha256":"D1:89:F4:08:62:C4:A6:68:C5:4E:AF:7D:F5:57:4E:67:93:4A:2D:4B:B7:14:53:3A:F9:D0:3A:CF:BB:2A:CB:9E"}}},"request":{"raw":"GET /join/522551/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php/verify.php HTTP/1.1\r\nHost: fanhunter.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 22 Apr 2025 17:00:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9346adabedb7eb52-CPH\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /verify.php\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Omc8agRfeqHsmrqqsBs7AV9a8Od%2BwxxFPKZV%2FxHDa7pM5kGzgjRz6sZQuu93KwwX%2BGVjZqYOciR7mlZOyNIKdWJACkPtY%2BYdfkWpQzT0hBNcHfkVqKfgvl3u1LhlbH%2BtBw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: PHPSESSID=8nfc84qshf30n8gdqun14q0460; Path=/\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfL4;desc=\"?proto=TCP\u0026rtt=22433\u0026min_rtt=21908\u0026rtt_var=4411\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3283\u0026recv_bytes=1400\u0026delivery_rate=197670\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=3c6f055a69ae1515\u0026ts=120\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1854,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":81,"dns":2,"connect":22,"send":0,"wait":88,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fanhunter.rest/verify.php","date":"2025-04-22T17:00:37.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Feb 2025 14:42:34 GMT","end":"Wed, 28 May 2025 15:42:17 GMT"},"fingerprint":{"sha1":"AD:90:D1:30:C9:77:BF:DE:1F:AB:8C:0D:6E:67:CB:6A:E8:42:DB:18","sha256":"AB:2F:E3:38:97:FA:46:8A:37:A7:4D:96:89:7C:D8:52:76:B0:24:E6:A0:EE:4C:11:CC:13:50:2F:2F:74:2C:8B"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fanhunter.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanhunter.rest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 22 Apr 2025 17:00:37 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9346adaf7ab3b4f9-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-05T14:47:32.922261Z","times_seen":330414,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":34,"dns":0,"connect":1,"send":0,"wait":22,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanhunter.rest/favicon.ico","fqdn":"fanhunter.rest","domain":"fanhunter.rest","tld":"rest"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fanhunter.rest/verify.php","date":"2025-04-22T17:00:37.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanhunter.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Apr 2025 00:48:05 GMT","end":"Tue, 15 Jul 2025 01:46:31 GMT"},"fingerprint":{"sha1":"96:BB:0F:1E:95:43:D5:97:55:70:97:DB:CD:F8:35:48:64:96:6D:5B","sha256":"D1:89:F4:08:62:C4:A6:68:C5:4E:AF:7D:F5:57:4E:67:93:4A:2D:4B:B7:14:53:3A:F9:D0:3A:CF:BB:2A:CB:9E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fanhunter.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanhunter.rest/verify.php\r\nCookie: PHPSESSID=8nfc84qshf30n8gdqun14q0460\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chggcba.datesoffrs.com/s/de7a371da04e4?sub1=Click","fqdn":"chggcba.datesoffrs.com","domain":"datesoffrs.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-22T17:00:38.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datesoffrs.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Mar 2025 16:08:15 GMT","end":"Thu, 26 Jun 2025 16:08:14 GMT"},"fingerprint":{"sha1":"26:9F:B7:DC:B6:49:77:CE:3B:82:8E:99:F6:94:44:58:23:BB:C0:8A","sha256":"3A:2F:D7:BE:B1:55:EF:D6:41:E7:98:94:1A:55:C7:E2:08:2D:F1:B7:55:FF:0F:DC:0D:3F:C5:09:3D:4D:26:D3"}}},"request":{"raw":"GET /s/de7a371da04e4?sub1=Click HTTP/1.1\r\nHost: chggcba.datesoffrs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 22 Apr 2025 17:00:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"8bf906833cc7aea8084f552217ed9c1d","sha1":"794696a720669c524ad273a139db0fd375e6608b","sha256":"e392a3891c070abe312d9c08bb6a4a9f5342424dd15c80f1d5cf67d14b79650a","sha512":"a09b07416032ece46ee992fa743fbb119ff2b87f24c0c0794e7b3c5ac4054243f3d4dd3b373440df1634a17ff842a8ef5116ebd6ea59bb2bedacfdb0245262e1","ssdeep":"","tlshash":"2650000000033000c00000c00c0000300c000000000cc0c00000000c000c003000c000","first_seen":"2024-11-26T21:45:12.768417Z","last_seen":"2026-01-16T02:21:11.402123Z","times_seen":401,"resource_available":true,"data":null}},"time_used":1214,"timings":{"blocked":509,"dns":209,"connect":21,"send":0,"wait":194,"receive":0,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanhunter.rest/verify.php","fqdn":"fanhunter.rest","domain":"fanhunter.rest","tld":"rest"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-22T17:00:37.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanhunter.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Apr 2025 00:48:05 GMT","end":"Tue, 15 Jul 2025 01:46:31 GMT"},"fingerprint":{"sha1":"96:BB:0F:1E:95:43:D5:97:55:70:97:DB:CD:F8:35:48:64:96:6D:5B","sha256":"D1:89:F4:08:62:C4:A6:68:C5:4E:AF:7D:F5:57:4E:67:93:4A:2D:4B:B7:14:53:3A:F9:D0:3A:CF:BB:2A:CB:9E"}}},"request":{"raw":"GET /verify.php HTTP/1.1\r\nHost: fanhunter.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8nfc84qshf30n8gdqun14q0460\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 22 Apr 2025 17:00:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 9346adac8802eb52-CPH\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PHDNjQ2pUyVZMi03fKcv8hnphmphsdYjP0Jm5H63Vo6Lgh5w3y43QJxzgZttVjBHV7V7zoi0BfzKwDPmj0AIAHYgnTklbZExnsrkmj7BAtgNm9ScCnYWkSJHcXMkg3Za7Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfL4;desc=\"?proto=TCP\u0026rtt=22638\u0026min_rtt=21908\u0026rtt_var=3719\u0026sent=9\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=4080\u0026recv_bytes=1505\u0026delivery_rate=197670\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=3c6f055a69ae1515\u0026ts=189\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1854,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (482)","md5":"b4a8fa577780117c559eb1bed5ee458e","sha1":"5d76aff62fa4328fc1d2a812379048b539920f3a","sha256":"fcb85847f082497a2653149657842f7d868b46ae40fc4208436e5745c798f64e","sha512":"514cb5ba515cce9bb800174ccee4260eb29a0b253855815aa476af8bd016ceb58ab5e8e7745c6cc85ce406fad0bf57cec02115cbff5369dd3a9ac971057b8d6e","ssdeep":"","tlshash":"5f31849748b308716403c66913e1eb402f63c527489bf8433bcea2948fc298d91bbb8c","first_seen":"2025-04-22T17:01:09.627403Z","last_seen":"2025-04-22T17:01:09.627403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}