{"report_id":"3af8a4c2-dc97-4028-9e09-2da052460ce2","version":6,"status":"done","tags":[],"date":"2025-08-31T02:29:21Z","url":{"schema":"http","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"104.21.35.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"title":"FCTV33 live sports today"},"submit":{"url":{"schema":"http","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"104.21.35.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-05T02:29:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T02:28:57Z","timestamp":1756607337,"ip_dst":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":54814,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-08-31T02:28:57.502351+0000\",\"flow_id\":2128060520958060,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":54814,\"dest_ip\":\"172.67.181.197\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"www.fctv33.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3438,\"start\":\"2025-08-31T02:28:57.493676+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"statics2.mfgati65.xyz","ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-10","domain_rank":0,"first_seen":"2025-06-19T15:10:51.688613Z","last_seen":"2025-08-15T16:22:21.881136Z","alert_count":0,"request_count":38,"received_data":2402457,"sent_data":16934,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"logos1.mfgati65.xyz","ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-10","domain_rank":0,"first_seen":"2025-06-19T15:10:51.682944Z","last_seen":"2025-08-21T13:03:50.107152Z","alert_count":0,"request_count":1,"received_data":1009,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"apis-data.mfgati65.xyz","ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-10","domain_rank":0,"first_seen":"2025-06-19T15:10:51.679144Z","last_seen":"2025-08-21T13:03:50.279001Z","alert_count":0,"request_count":3,"received_data":24393,"sent_data":1459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-27T15:12:56.836113Z","alert_count":0,"request_count":5,"received_data":1879031,"sent_data":2228,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.fctv33.icu","ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":70612,"sent_data":899,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"apis-data-defra.mfgati65.xyz","ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-10","domain_rank":0,"first_seen":"2025-05-11T22:29:56.187768Z","last_seen":"2025-08-15T22:35:42.935122Z","alert_count":0,"request_count":7,"received_data":110402,"sent_data":3788,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T02:28:57Z","timestamp":1756607337,"ip_dst":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":54814,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-08-31T02:28:57.502351+0000\",\"flow_id\":2128060520958060,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":54814,\"dest_ip\":\"172.67.181.197\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"www.fctv33.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3438,\"start\":\"2025-08-31T02:28:57.493676+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"060ebe1c30861a2969de410bf2f019b4","sha1":"1d4961379e9eb0630fe641ff04005bffbd16accf","sha256":"850896ea50c824db471fc3649fcfaf9b0ac1456baaadb4a18a52502996b25e3c","sha512":"5d7da5f20e28750536df5a7b2f30712618b546a6b751aef3083a81558d8c5659b61982d4da98407f9180a7007b2c5db319f24577c26ff9b14c258801192fdfe6","ssdeep":"","tlshash":"97e026a026ca5010b267b2a00c0b000df322803cf8596d832b80c071b5446204cf9cd9","size":295,"data":"","first_seen":"2023-07-26T05:15:23Z","last_seen":"2026-05-06T12:27:45.629297Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JH5Z1V4NG6\u0026cx=c\u0026gtm=4e58r1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f81cc8b2c08662f14e69a0289446986","sha1":"76ea511ca7f1d57a7fe2cf464c959a5eca648da9","sha256":"2b5a5a7fe0b6ecb827cff4e046361cd7616b09f8945e99458d6dfec1d68b8d36","sha512":"5a8292df8cb6175dd38b2dcf12335e29cc7685db02e1cd8fe3083e3da3be8aa854ce791bc5aca22fa56c65f236c76920c43d570253a9e2f57eefa4a75c563682","ssdeep":"6144:pmukTixgjXLgL52RZpq4UZeYHD9WvLwDo:0zT8gjMLHDMR","tlshash":"a69419ce73d670269396f478503f018ba57b29a2b44dc899f189cce42e34a9a4177f7c","size":411997,"data":"","first_seen":"2025-08-31T02:29:29.012616Z","last_seen":"2025-08-31T02:29:29.012616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e44a6f13a46f9579cadd8c9364390f1","sha1":"e78120b97fd2d03c1a4ee5c6ec113b6adb376c63","sha256":"770306fb8c5fc7be2436a74cada72afdc03c98885dc7fda7fe78c12d0371dae4","sha512":"3661fac65ad699fbc61f70690b671b093ffbcca285006b8f62f1d7e42a67857ec7018bc97230661fb2d27f9c1434d58930448369e17f20a242adcee4d23b6f0e","ssdeep":"","tlshash":"09f052c975b17800e33300b0988f29a163478c08af698ca244f9e26cf3709da5bcf0a8","size":458,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2025-09-28T12:08:49.280207Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"907ba5d120566fdfc6b354957ea88572","sha1":"f0d49fa0f2d8fdda839a55eb5878fadee1a1991c","sha256":"63e7515058aca591b4032ba96e1a486940abb0682fc4a9545ba4592d91f3e585","sha512":"3d1ce2f33d5433987faf3e4f637f6c0c8ae41778443929b8454197290305c30f199018688b6464a33a19f56522e8af8a9f5c0643db2bbd432d30cde26737e180","ssdeep":"","tlshash":"d1f09e96f9eac0007f5b7080140d044df125c4acd999d9d07a90c0bab5fc5138fbb66e","size":465,"data":"","first_seen":"2024-02-02T03:21:08Z","last_seen":"2026-05-03T10:21:04.960299Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"66bf09d24ec4b4f1985dba06e285a9cb","sha1":"0e4b66a737bdc10d87eb8f4ec40a2fb85636d7a1","sha256":"4a61762e108ae9d683c87907b49259512a147a0094569c066a534d6f9573f244","sha512":"9b9ab5daa9c9c189db616dd99aa360cb2802169431e63289a7c7e8975adc8fed396b1ec94ec1d253593c7ec03331093367253843b7fd68afa27c1c57a76056b8","ssdeep":"","tlshash":"ede02b9438da600571a7f0a009074d8ef218991ac5ec4dd37de4c875b698615a8b746e","size":377,"data":"","first_seen":"2023-07-26T05:15:25Z","last_seen":"2026-05-10T05:34:02.213804Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f3edb99388f55af940e82ce32673d835","sha1":"114503546d16ba270e38f3f3e2aa9d922fcf42a8","sha256":"a931fa9c99c70ec88c9cd397e9ad3947ba89fa0f0ff8b895403a125d15269f8f","sha512":"ba21727c46ee3085e5d4de50589cb88bd4a3391e96214db655341dbb3d470d43ef2663c6005f9188c030b88fc323f5df0e4241dbac62db4bf9a7b3ac8bb2f022","ssdeep":"","tlshash":"93e0cdd87fd9e174915391905c0f1845f23ac46c9e5cbecb4d50d1a1f4447519dc9cda","size":302,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-05-10T22:45:34.623176Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43d0f0ca61ca5d664314e4550392aa10","sha1":"b149fffc1a280816a579ad7822a425b6749673cc","sha256":"1ac01e97156dea8541cf4b1469f7bada37ef52d05d9d1be55e7af531c1dbdb09","sha512":"164d92ade4c8676a0fd89afa6bfdc5eb3d5d3b5f6f7ccb08b7ae52df86d3f48d5ab72e74fabda0ac392edb2084029ea938c01b48acd9dc17613a831eed1d6b57","ssdeep":"","tlshash":"b6c022f7329fa000b38667c40c4f2084612ac4ab8c8a8884a8b0c7d224e1715692acf6","size":191,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-05-04T17:38:07.986662Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"95b677cb865ba022bb00e16cfc4ddf73","sha1":"8afb7027ba6045b1c627cc59bc90f5f78505477a","sha256":"71e9753794e720a5ed9d3cb1ef4279ef9a6c1b92b3ab6307e92d575e7dc68927","sha512":"c805ef5f785003c39b174bc63907ad9319a2748eafc3d0bb8d976390fd70664544a85c6e2a0bf6ee6582251bc6c4631188a25ac3c1f3d7630e7e440b81a43e38","ssdeep":"","tlshash":"024159cc78688216c3a216f8001b397565735c1ca6c93dc768f8d2a8b2645865beb3f8","size":2193,"data":"","first_seen":"2024-12-01T17:00:16.380798Z","last_seen":"2026-01-05T15:49:04.782787Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/dabebf01d1.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43098f4164521ddc7a27f211c4a2dd50","sha1":"ef7103de8a91eed5aafd3aa27ddc571c736db31a","sha256":"0778c3ab9326de6493d3442be83a059aade9bd2b450c49f854480119325ccf1d","sha512":"61f038adeffc8a1e9c9116d818e1d02f2f85f084f0e4a044e5f4bc84606bddce8bc199bc9f4eb6bec7b3844eaf19fdd564b98e137b684877e19eab6729f25929","ssdeep":"384:G6e3fE5VffERtrFJ/C++Qq4puISlv2+Y0vO+bGWGCG6P2oMrEBmZdXl:Gc5NfUt51jtjpi/Y0PFmvl","tlshash":"95f2f075c100e5bcf85cc656ae3d9f2cac3227e8e0ace462a56e701e5f824569c5cced","size":37369,"data":"","first_seen":"2025-07-04T14:45:17.772595Z","last_seen":"2025-11-23T17:32:53.634526Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RWYKQ7ZE0Q\u0026cx=c\u0026gtm=4e58r1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40678342d76f048883b1022c0bdd2523","sha1":"41274d8045324b5d6e88a0dbc33b38d823bafff1","sha256":"028dd88fda550685d9b1eb0a9c95cf2d9d9bd781a88b6e5c9d7ec32519861fff","sha512":"2fed1b5b617e15949bcd71e321f4eddea12109e616a7f0558a9e60286eb279cb67db0cd92d64a14e8751a504494c015c897f62bca29ba9364bfbc028c26e85a5","ssdeep":"3072:VdTmSgS819uk43Oz0ex3hNe5zzDXajPOLgL0dYBuoJM4uRiqNxpq4U7teGIFOfW/:5mukmixgjXLgL5uRZpq4UZenoWvLwPI","tlshash":"637419cd73d6706693a2b478503f008ba17b69a2f84cc899f186dce42e7469a4177f7c","size":355583,"data":"","first_seen":"2025-08-31T02:29:28.986832Z","last_seen":"2025-08-31T02:29:28.986832Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"804e11f9b3218dab8ce7d4b585cae851","sha1":"4477522526446b5052977f2125dd13e62f87a145","sha256":"63128412d26e85246e7fe349cce27410d1aa5b17d24713f72a5cd54301a1d553","sha512":"b89c10d1405a28fda7e983924f32f5ab94feb56fea6a4dfda923bce2330ce8d3c841975e530fec22e1299cb18e57fe0ec1b0e0ab64ac7ab0ea119f75e9ff4df0","ssdeep":"","tlshash":"e0e05cd556d52400f33760e1850f1556f3428c2cc95d889161a0e228b2a06958ede5ac","size":408,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-05-10T05:34:02.204426Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"081f4b851602f54cc00b9e909d519fbc","sha1":"bb96062c5a45b998ebed1e3bd6646e3350c1a177","sha256":"7beaca19c3fc6dde128f9961e57d1d3494cec9483c67a9094a193b3ead7a5b35","sha512":"537edd5b9c3fd7412f3dd94f995af2e6dd23980572631ba49f0ae5c2f3c65f71cf7dc3a1f9e5f9f56f4ec8b7f7f18c1b48f287a9bfb7f24f5add3fbce46973ae","ssdeep":"","tlshash":"9cc012da329ea050935627d10c8b2444542885e88cc8998158b0979234d5716a54a8bb","size":175,"data":"","first_seen":"2023-05-27T20:30:02Z","last_seen":"2026-05-10T22:45:34.723822Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c9b8c476a62798dad6293ef6f6767490","sha1":"9538589d76e1a6e6f4926caf0a996b753d78ff89","sha256":"4926fdd00d2bb7dc6aa4ee9958c4fc9dae255c4d1fb2531da845c1f3a37ea6dd","sha512":"5380e638ca994e9a67c53f5cb265d7e50c317b0b3c5ab9b2be4f7cf9df921ca07381ebfed380a8fb0d5b0652d2697c9820fcd02568c3507df088f9b4c23529dd","ssdeep":"","tlshash":"56214ccd28b51602eaa6c6b01463b4d3ba1d9d1f45ad3cc3bdfcda507388585d8a34f6","size":1138,"data":"","first_seen":"2024-12-01T17:00:16.284171Z","last_seen":"2026-01-02T03:02:02.717Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TXMZ5WN2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70e7770dd90c28d00d24ddce8b706f0c","sha1":"c32a1ba73382b710f1162c8ecac599c6853e9f33","sha256":"2b4e7adc3b06109db2dccc055f3768ff73bd555a970ab41393c75de6ae4b9378","sha512":"1bd9825197f2bc992b606560f8471e1a41a9f4febea6117da8398386151284bcf071320f14857388a217bfd02a94f5e2e861fee8981ea078e81f0ae411a2966e","ssdeep":"3072:J3UpgS819uN610ex3hNqjzzDXajPOLgL0/W8Nxpq4U7teGqhkoqL:+mu6xKjXLgLkTpq4UZeRfqL","tlshash":"9f5419cd73d6742683a2a474403f018bb27b79a2f84cd894f185d8d42e74aaa4277f7d","size":303856,"data":"","first_seen":"2025-08-31T02:29:28.971584Z","last_seen":"2025-08-31T02:29:28.971584Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"83ccc08d031bd64eb66b05ac297fd881","sha1":"46ce58e0cfb801866cea0ac726d6dc241b91eb79","sha256":"7951acc6be0acac25d3bfd08cbe57398c638e5da6332eda867abc446ae4cb214","sha512":"cd244351f7d6bd460da22b5640e27f583d19ca9feb8d34100c7b6c97178ec825f0a57a15c64fd3488be99e785b605dc41ded0ae2a479dc7ae840e00016cfc2a0","ssdeep":"","tlshash":"75014cd23599290462e7c05021dba883730df90b45fc2de2eed9aa60c398525eca3575","size":684,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2025-09-28T12:08:49.156138Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/42ee472eb72.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41b2b43348564a1b3918652ab30efcd1","sha1":"199e2dfb56375f761c19b02de2ddf146e080469b","sha256":"3bf3944ec1addfdbcd2495e2845e296800b9783e10678f43744d3039dee3cc9a","sha512":"e9f6cd64354f114ba6deeaf09528150550689f2ca364fa3cdfb72d2b9720f0ef83caabba99ebd6f6d44b3f3ed4aea16714700ffd58f4db3a4e75da351e9801d8","ssdeep":"96:WBBBGlSgsoBCFnQvpbBKwlRfeckUmjR1d4lL1Y4/MvpMBuNE5xqgKu:WBBBMSgsoBkcpbBKwlRTkUmoY9MBlt/","tlshash":"bae198682630e77d4bde29f7e93c50786da804dba58dc8b8e4a45d38b71de04c219c6e","size":6804,"data":"","first_seen":"2025-07-23T04:34:24.84291Z","last_seen":"2025-11-23T17:32:53.613756Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/263acc2270.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd4864b00f84b3805b38698ae67a6540","sha1":"d398c9de0dab73959d4453817659261a8f1ee993","sha256":"b8893d54a506b1bb58db55602eefdab1cc6a5e23b2761485458a965df5484e7b","sha512":"0dcb39fdcebd54cc23a397bd53151c933377f4abde172b7e0ef6a0191e54c013e9aa0ba1e0ca4c8562eb91981e948f2e99c8c8e6a4b7cee0a967cfa6c6a8240c","ssdeep":"","tlshash":"1731aabee195ebf04b36517a63779219902f022b680838f0c1b866a4939820ca476e7c","size":1687,"data":"","first_seen":"2025-07-13T14:59:37.172901Z","last_seen":"2025-11-23T17:32:53.607229Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c18428c407a30170c61a4140f9969f00","sha1":"e653e617c6cc95953279ce85d6f5926222541e7e","sha256":"d650888569d1001a2b3074c9e3b38a9a568e790af498fa95d7e94cf43aadc4db","sha512":"99e5a2e3abe72cf77f9f949183f38caf754cbd75e1548f90acde3649aa33ee5b98db1cef5e8dde4142b86cf00933ee0b498cff5c55dde39c899952f0e06cbb34","ssdeep":"","tlshash":"def024c045f09d1043ebb6c121c32082f34aa60aa0f97cd14ec9a3c021504ca281b17e","size":503,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2025-09-28T12:08:49.213146Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"33152c313ff86f95039cf270ace96712","sha1":"79039abc854f57dbd1835a98da07cc7c6a78c933","sha256":"e30ecaa16a932088f453f22e4647d460d69ab82d8746a48285c86545727768e3","sha512":"b3438b9a047968ad2e0b6a2ba5dd32f80041acd612367a16e6aba26951fe0fdeecdd0d2e1fa57b8333da07c2ac5480e56955fc74c65805a9cdb2e3c15d3b6ba8","ssdeep":"","tlshash":"d0211dccb8788619c6610ab8102b3db50a231c08aa953dcb64fcd79cb7244c753e63f8","size":1171,"data":"","first_seen":"2024-12-01T17:00:16.222711Z","last_seen":"2026-01-02T03:02:02.754204Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/b2b11c7b87.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8eafba818580968d1451f14b44e9cc5","sha1":"efa41bdd9d34575ed1b15d5908b2e3dc6fedf417","sha256":"a92c8ca33b0085e6fb74f4136cd628fbff78909fa70c789be800d28a4fdbefcc","sha512":"5ccc79fe62dcb348af8e47d1c431b1873e157ef928cbc0f28d03820b4277d505b2607b6cdfc7bda6ee5688eb3a3d2d00fc52a26a3c7f85d84567d53aa5c068dd","ssdeep":"","tlshash":"d461b75e20181bf593d56e77fa1e90c8892b085b62c1ecb1d160cf15ea7bb0c5473d59","size":3465,"data":"","first_seen":"2025-07-23T04:34:24.860838Z","last_seen":"2025-11-23T17:32:53.635275Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ba25d6442940ff4a72f3eaa96be531d","sha1":"f7a70392d3053644ea7ae2008adea1bb3f8e6396","sha256":"94a60f585202f2017c653b044be292aa2f1bc7dd73528fd3c51c9e39bbf1c4b6","sha512":"51dbf036fb03e3266396e1abbedb072e661743e9ea6d4836c4a243dc2a093a55306e0cb1cc2ac755d9b515af3ac3f64c676c34ac15ce1295935c5de6956ab5a8","ssdeep":"384:0NgZQzLCESGtnbE7DKzgUQr7ZwZqHgzL+8aj1SPlgHgZZFXz8:agZ+mEptnbw2zgUgaqHIL+NR","tlshash":"8d72d86b2326354c0a8162a56dff3f9df3feaa37c952ac1398dd861c10744192e6f364","size":16083,"data":"","first_seen":"2025-08-31T02:29:29.075659Z","last_seen":"2025-08-31T02:29:29.075659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/93f8a4e7190.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"900a3e4d2e3736ce6b48d9fb8dd834d1","sha1":"1de7f4c873b9c0e86a069ca7ad2958ee9516861e","sha256":"a38c78d6962c7bc34dfcc23498e8805f585a3640a2c42b727ff06b917448f9b5","sha512":"9299baff3b766f45608610e813f6dc6997de98a4d09b3ece64e12fd6b9de7b1d4b5959b86a84f9b339f77853eb384573f950846dc91461a2b75206d4b6db4f2b","ssdeep":"12288:7tGfe9jJDAFDsS4BFhFvb+j+Z+YP2f2rOlStul81EtlXbgHh:7+e9j/rOlSbEtlXbgHh","tlshash":"5da41b44fa80b17c8b9b51b5522b501af22f4855606c5cb4f2b5e9e02ff1a4ca17ebfc","size":459493,"data":"","first_seen":"2025-07-23T04:34:24.840084Z","last_seen":"2025-10-20T17:32:58.192977Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"60862cfa2e80d0befd8f852d676d21c4","sha1":"e885970d1f6b09908957bd725d80be120d2daf02","sha256":"84beaf5615053c9d82dfcac51f2545b68199d93f633b166a8196ebe63fe9cd0b","sha512":"1f9be85361563359b6107c0c894140ee1b5842c68ae00266c9ddc6a3918277c33e88a1fa2234da623b9dadf2c550ceaa974c2d43778540b306d2d399db231ec2","ssdeep":"","tlshash":"0be026c528f2d8019256a9d088475488f599a2ade0fd6cc749e0b720719855e08af47a","size":336,"data":"","first_seen":"2023-05-27T20:30:02Z","last_seen":"2026-05-10T22:45:34.697049Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e43f0717009c712315f78a107ce05f6d","sha1":"68126ebeb66256bd48ad3a8ecfb365eb3c842e44","sha256":"5a61f4a9f95e8c5555bcca3fcb7d37f1f0cef075a52f4f4985f262864f509b72","sha512":"b456b063ceb55ba272c1ecc69e031aaf073a75bc39580455d11e303a1fa05ae10d98940c72e386ec4716578f6c8ce685630fd491b17d768e2059b172328aa470","ssdeep":"","tlshash":"fc2159d823dc1256e2a791e9205b1407b2739c5f1cfc3fc6a9c49b9171642041cc9ab5","size":1324,"data":"","first_seen":"2024-06-29T17:47:23Z","last_seen":"2026-05-10T22:45:34.68688Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b06bb73b018c163c7a36cc8a911f7a49","sha1":"ed4d95b94fb57e1935ace77468ca04ba648e4631","sha256":"09feeded1ca6b6221837883b30e821804d65ed22fbc54b1033467dbd818b7d93","sha512":"18d1ce1a13298b3c20589bf56ce8cb7e2569cde41b9dc14918c61808cfec09ea2a560d46a3421488fa959712b81b2da06e587334dd159b6dc06ec1cf47d7ba68","ssdeep":"","tlshash":"07e02bd0329981261ea689b534af1c0de133990e08bd3dd661a4a7d45154a041a81ffd","size":400,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-05-10T05:34:02.219707Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/dbcb5d1d92.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a0c664a32fd20909c2f0719d3b9add9","sha1":"76f20f5bcd846a262b756647e58c8f954e97120e","sha256":"d0a5f105873d364ac97a5ab697d3076b94453c3c98ee6b3e03212a22b4c71f8a","sha512":"479c1bfb9656254e5869f1cff0e1baa9c983b460fbe481b5202244f9f16c51ff758eeff1e6a4046d0aec3951efe2b87883d57e41d5770fe27fffd300090c3efa","ssdeep":"192:WrPfOF3kGohwGrfnR0cok2nriQ9nPiB12Qu73ykCJyIctctZ4p:WrPfOF0GohwGrZ0++iQpiB12j73yyxu0","tlshash":"6d12b5b86574d3bc13c906b7e9f66120a9b9044eb44de8b0f0bd8d75bb72708d89083e","size":9346,"data":"","first_seen":"2025-07-23T04:34:24.856507Z","last_seen":"2025-10-20T17:32:58.180439Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/8b8bacb9a52.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47543ddf6ebd58d312edf3cbb0e045c0","sha1":"5c1acf26527a28bf5be3cf5793e2256be1fe46c5","sha256":"73498a0cff156edf50b1d0a0fd82f08d7cac55dc2f471628e62afc1e63d37793","sha512":"1eef0cef945121a28301d1090ef1f7a21cf9317b31b3b06f3b630eb8cfb41f721f170903489c26bf046ec783d7a74e6e4ed952826212142dab6642b0fb51d6af","ssdeep":"96:GcmJzSEq3/gpLM9MupT1VTLVCXChmRLEi0yu6POx6I:GZs53IxiPhV3VGVp50yu6CP","tlshash":"dda1e91c62159efc03d76f73e66f60cad629244e6180f8b0e250dfa5aea5b1cd073c66","size":5083,"data":"","first_seen":"2025-07-23T04:34:24.855479Z","last_seen":"2025-10-20T17:32:58.136836Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-05-13T17:23:31.77414Z","times_seen":70553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/20da8b5573.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd21a3973e59c3679294f8a39bce18b5","sha1":"9459ce597ef77487354b4c34686b79d0f757771e","sha256":"110377ecd6096e190a3442f4c8ecb5af6e34162d286007dde5b2be7dff5d6623","sha512":"81e03b0ba7440292926ac9926ec9158fc6119b4f37bc7482bf9c8062f6bcbe660157c1e3756b17cdffec43950ba04d501b57d102caa293d30040c884297facd6","ssdeep":"192:IBBx6OoTLwVuiwc2ViRfFrnxmuu3XZk71IW:Z9TLwYVijJuKRIW","tlshash":"39f1ea1ef365f9b803e669f3a93b9101e13e7646a044f470d2608e69bcb870dd17ac76","size":8115,"data":"","first_seen":"2025-07-23T04:34:24.833151Z","last_seen":"2025-10-20T17:32:58.173939Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"957f6d11a00f60f2c031229680093117","sha1":"6ddc327b522e0e337b1928518058cf92b21c6a06","sha256":"ce3f8b513491bbb1ab27b3dd8117a793fb513dd500c81a542cba90ba4e77552e","sha512":"06486f3c27f59d60d316738f6a1e62ab6dda813e0755a610048c5a2ecdfd8157f364ad48250043f8b71ea70527ffdcdee6dc788d2c53c9ec051c048ea0ed9b87","ssdeep":"","tlshash":"2c112bc405b49e53a3e7bbe411472086f76baa0e21f97cc079e4974031506cb145e97e","size":1036,"data":"","first_seen":"2024-06-29T17:47:24Z","last_seen":"2026-05-10T22:45:34.615766Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fa2c6879bfadf00020fe70be42eb0722","sha1":"977ae1989dbd8143f7de52ae6682744b6c5eceb9","sha256":"b7df9285369d5442d673af7e553c8d50f590f2bc273e3e103873ab012497f8fe","sha512":"a53c57b139c2d0f1de24650046dd80d12c16bdd2553043e092dc48d84a8d97458164b560801dd544a90d9f6b87d359f49399e3b8c96349bd5d042adb4461232e","ssdeep":"","tlshash":"eec080d6319b6100e34b27c50c8b6044503485948c88588054f0975234e1315221a4ba","size":152,"data":"","first_seen":"2023-07-26T05:15:23Z","last_seen":"2026-05-04T17:38:08.002198Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/fb8b61121.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df7d61d2a701497176281fb0d10642bf","sha1":"7cd4e6c7b76a8a95877468687593e575894d7beb","sha256":"9e38d35128e9fac52b5fce1e633798833f6483b84a574b2606b7cab580192c19","sha512":"580d415d0b9504dec9bb098f3bb6442cacd5f2cff7da6475869fc8e9eb7300e04832ade9b2426537507ae494d4187ac7844b3540fdbf76c731647e0798665cd1","ssdeep":"192:jE/9lNRZtUV6CvuTzqwWJd4ojZtUV6CvuTzY5b9B5CSLoKOgsdQazp:2N/Q6B+wW8SQ6BU5JATzp","tlshash":"12125193b318fd78a669622bf7352094e4399073c1dbd6ecc036fc90f95cb446e1166a","size":9139,"data":"","first_seen":"2025-07-23T04:34:24.852646Z","last_seen":"2025-08-31T02:29:29.050104Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-05-13T17:23:31.77414Z","times_seen":70553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/7f6bffe4f15.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29b6dbc5472f334927b923d7df5fcb7a","sha1":"767b5ac66cfc19dfb515a1e14039ec18e55399bf","sha256":"4c49106f7f1d67d8719dd8503c44ac5f65c0ad50538b45144ed425202ff9923a","sha512":"0c79f96916e3cca268a6e91998e21612dff83781a1af7d69edd17c86a4ee098d982b8f4bbc12c4c1972f18982665225f10e737ee4e8abf4fceed121b14f12c8c","ssdeep":"3072:52gjIe1uXZNdDmNUKskm1B7NdK1pplk/W9Hwix8y15xpFtG:52de1MpDmNUK9mf7N4dlk+hwix8yPxpO","tlshash":"ee64e998f790b1b847a762b1923f102fb23f5855508c9ca4e266e5e03e7494cd53feac","size":307001,"data":"","first_seen":"2025-07-23T04:34:24.813719Z","last_seen":"2025-10-20T17:32:58.178712Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2dd495a1cf12e8b2d097ed1aa756c17b","sha1":"f661c4bcdafe685bfbc9c2c8e103f9b3ef71e4ba","sha256":"76d43b0fedc341541b8b0611ed3685ba52639da7f21d928d640f64d534fb400b","sha512":"6b0bbf4f7017786321a59e428fce1848120434a5f7dc4bbc14a01bd73ff84849ea8d3e98475edbef809706a670605d3cdb5d66f1cb59edb13bef8e98816a4791","ssdeep":"","tlshash":"33c012da32ae6000d35627c54c8b6185517484e5ac88588064f49a9234e5315314aeba","size":170,"data":"","first_seen":"2023-05-27T20:30:02Z","last_seen":"2026-05-10T22:45:34.68501Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JH5Z1V4NG6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34e7f50b2aed0d01144d61df162555fc","sha1":"b5791fed6352e34dafe92d2901da994d8762089c","sha256":"45dd3a2633b938638f9388631a4479c36bccfc4dd46403e486a8dbfec9810f76","sha512":"2ba284f380b2a39762b907d0718595f53af261dfc377f89409ab54e0ff6800e17e0cf664109b1b5b540a616624df9a5d2d6eeaefe9f3f9c11a7a7b9074b0c15d","ssdeep":"","tlshash":"d2113a06f01aedb684219771f08d658672be88f147ac2800974e8e9c3ca58b13d3b627","size":1000,"data":"","first_seen":"2024-11-12T12:14:29.919585Z","last_seen":"2026-05-13T15:04:11.959045Z","times_seen":2295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5b6998d5799d028d21a59924466b25ce","sha1":"9cc523df56149590f8ffa42a8b9b76a61cb5989a","sha256":"b48c8c9f1e3b88371c5dfea29bd58bc981fa6b8c68f2bd4b35d1c48624d04410","sha512":"8ee4dbe19edf930c62f5ddbb1cbef46c2253eb0851b338943ab559547f5675d191a4a2158a07ea1b3db7d6ee7502385b302ff44f4f854257a258f6bc09e41f9f","ssdeep":"96:yu9MWPshZIUlAv00Qu30wq/0BdARLGPGHbqtZGRZtD9uPoS1CVcsvu6hO/VqScWS:7Ivy4jM/gB","tlshash":"70a1e1e005759f5653e6fbeca2c3304bea5ba90e19f5bdc53fa44b602150acb108e53e","size":4698,"data":"","first_seen":"2024-12-01T17:00:16.366765Z","last_seen":"2026-05-10T22:45:34.701876Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/js/mtg.js?v=2","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec69d6340f06231b3176a610695d3c6d","sha1":"7545891318097ff79b293b9cc3d3bcb68a0619d0","sha256":"5e6f4fc27aa96f524f3ac23d099a1f2f3c29c30f4f942d634139995652916bb4","sha512":"c053a155ffda4f89b5d75a54eeb2d83458c78eb84fe57950945449b4298a47f61e2c53f1ddf946a146629f50fee55ab554a57ef48ded631911f63de86e18889e","ssdeep":"","tlshash":"e8e0c0da70510871b5ae86b573b5a1247153550cb4191922cdfdc824681c987482208c","size":351,"data":"","first_seen":"2025-02-02T18:21:06.747357Z","last_seen":"2026-05-10T22:45:34.581132Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7659427ca2f5804ce48c3c313a59b55d","sha1":"b1bb46a17f58075dba494ae315593a9340f15171","sha256":"64f46db256fff74458924ed8d63a48575acc11b6abb85ae484ba2b4acb5dce9b","sha512":"9268c94c973d3dbb24b12796a236f60f0fc97ca82ac9d951a636d8b87004776634623224c39d2045ad232867656fe08fe463a3524106cc82cb0808fc3a742287","ssdeep":"","tlshash":"51f04ec875f45810a32254b0494f18a29746881ced9dddd244f1e258f37468a8ade6ac","size":607,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-05-10T22:45:34.682913Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0Y1BWVPR65\u0026cx=c\u0026gtm=4e58r1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc393c928b301a4e5108c9f1e7bf1e6","sha1":"c4d6a1a70c602b44282193567b052ba82fe1cc20","sha256":"55fedea51c6fe2d3fb7d3d293ba945f5abd6e3400475403625d412d20baca580","sha512":"abd548dac66ff266d9d1c7db2df692d7c72b17d23cf9ab1e3e74206b1750817355429ec4321de06bbaa9f6e996cfb563fc0025406d4899df456dd7f9157d24c4","ssdeep":"3072:40mLhOgS819uk4uOz0ex3hNewzzDXajPOLgL0dYBuoJM42RiqNxpq4U7teG3Y1fF:LmukhixpjXLgL52RZpq4UZeiAWvLweS","tlshash":"a78429cd73c6742693a2b478503f018ba57b29a2f44cc899f189dce42e74a9a4177f7c","size":390663,"data":"","first_seen":"2025-08-31T02:29:29.036683Z","last_seen":"2025-08-31T02:29:29.036683Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f6f1baa0652f8cea502d48160d5d8fe","sha1":"5e8118495c8b86fbfb5b699e76a7d670c57f8549","sha256":"c99512e420be80ea88341038717a088ac3b503d1d03651efea043b04f355e59b","sha512":"e9e73d4894c992f52fe79abb3fd2bb0782f738c870cb85fca001a0441308490bab6ca9c6737ca1d02ffde3f38386bc6ec71671bfd0c0787505d81be0d98f62ee","ssdeep":"","tlshash":"0e5161dc95715581b3a5523cd58734b666461c10aa6088873ff8e37af3708ea43cb2bc","size":2497,"data":"","first_seen":"2024-12-01T17:00:16.371563Z","last_seen":"2026-05-10T22:45:34.727545Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"da28da0f75721ca65858a54982a17fff","sha1":"386f7f823750e15c4e905766aeac22ef2122f65d","sha256":"09d7fed9c04996f71bf3e897a45212a2f6d294e7f852fe204f3e9cccdc17f104","sha512":"ffb7546134abe52fd97f8b60c3abfe0bedf03cbde5bc926cb69ef29608ed528c4bde86050dc6e373d5c5d4179a9e6f7444ec42c2b2201acdbf3b3bbb973fd6e0","ssdeep":"","tlshash":"ccf0c29438b65102ea6687b4207778f66e2b5c1e02a92cc33dfcda94735810599935f9","size":592,"data":"","first_seen":"2024-12-01T17:00:16.313819Z","last_seen":"2026-01-02T03:02:02.710494Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9a95ea56d433c24894ac8de60db048a3","sha1":"ff1afcf053551c5762afffb503d2987008ae87c8","sha256":"a8d1e3d5d8a236b9a1a76b4b4007dbb30a36584e2c5a5d9d17954f99ae03dc36","sha512":"3a9e4f7616026aa1c39695386d44c08e602914e4f96fbfc567fde4da7f5dfcef15519a11847790a595adc74f48a7fb31d31f2a619a4f4159dfb5c711c3438392","ssdeep":"","tlshash":"04f024d53ab4a58043f70160a4cf1345a146fc0d25ad5cbb8ed898e46b64e917e9bb24","size":500,"data":"","first_seen":"2023-05-27T20:30:02Z","last_seen":"2025-09-28T12:08:49.130335Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8a031c04aed4d47a689d533fa6090b44","sha1":"22958b1ab98734bdc4908244cfb8d43943479917","sha256":"60567e421c95cfaf53e53b95bbe3b91234011ad0d5a67548c8645dac6518c6d3","sha512":"79b0962128fb1bd61611e71df4dd6937875b2fc6b21d3618a6ada3106cdc389cceffeb6726c961b95e5802442d0ae4f0f91b7f8aeabb8978793710303d4b88ae","ssdeep":"","tlshash":"36e07dc060e05d112bd7bae0205ba84ef767961e50f93cc025e45780314115d10195be","size":312,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-05-10T05:34:02.219107Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"127a205519acab3c5b732b7d5adf5b8e","sha1":"c3ff7dc85fd2cbb2c8f61b38cd230817a8ac1850","sha256":"bcecbb3b9174a2f29b75aa66fb43eb885e2194b64c98ae6dffff623b02f6ba81","sha512":"7e956ae759d51842b7bb85c0f387d3856c7c1ad13932f711decad64a2acb4c5705611d97bdb3935f3c4312ad3d1a3934745f1a1569f664b299265fc9fe8cdec6","ssdeep":"","tlshash":"14f02eda28dad4445697c0e06813dc46f21ca51e84fc3cc5bde0d860a2cc665e8a2867","size":471,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-05-10T22:45:34.699596Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0733627bede5cd138d79f2e0408cdcf","sha1":"cc9714260c3b7caf5e5152913c6557ea9f57a49c","sha256":"49cd9075cebab64fc5929b8d33bc560f0f1f36dfdf283755ae3199703248a6d5","sha512":"8112c3c66b008514aa98d44d3b03ab328c16d1d1a7ffc724bf93b9d863600289e65172ed7d1ce289011217bee0c41a71ae380b0b3fa66dfce285c0602bd772e4","ssdeep":"","tlshash":"afc080e6316f7100d35677d14c8b7444503485949ccc588054f09b5334d1715321e5f7","size":158,"data":"","first_seen":"2023-05-27T20:30:04Z","last_seen":"2026-05-10T22:45:34.644172Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-05-13T17:23:31.77414Z","times_seen":70553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-05-13T17:23:31.77414Z","times_seen":70553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f3facbfdfb54d7eee4bd3962621a78c5","sha1":"4633493763b547c9110479208628d93fa46161f4","sha256":"47eb78f5c8961a6f603393d78451d3133afc7566805443e7aa9aad1328a01583","sha512":"7ec9372cb524031f695688ddbdf8f56a4063309c93aac69fa17fdbaab7193e728ebf6ab2bfcfccd7ade3fb73c76ce5b958074adb016dad62722fa229a1ec4837","ssdeep":"","tlshash":"c8012dd03aac195853bb816135cb2555b30bfc0f19bc6e960ac9afd057606157c437b9","size":711,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2025-09-28T12:08:49.145495Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/5a7b49eb010.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63d1ea7c0f47191d7380359ab0d1fd58","sha1":"1a872905d49b4d4e840a68c463856ff2600be156","sha256":"97df20c0529139404ffd8d344ec726aaccac7bbdef73c0c4d0415f7f1fe840cc","sha512":"cbcee0855a966905868cf513f80b846d0e229252ad90bf4fa1a88f357f6a5b3804b1faebfc67ca11632ef40428bfc5e58b6560d0e368958a2d013ca53a14c4ef","ssdeep":"1536:uA5Jz1rzAr4rqG/mcI/V1Ic/41Ic/tcI/2uq8S4Xe:uOJz1EG/mcSjIuAIutcS2uqx","tlshash":"6063ea58a295f6fc4b9615b3933b6058d57b1ada70c8f830e272cfe07a34285d529cbc","size":71905,"data":"","first_seen":"2025-07-23T04:34:24.834526Z","last_seen":"2025-10-20T17:32:58.168013Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/5dfafc97814.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ff2d1683b29969f808bfae25389a9f8","sha1":"89cae11d2b293a160f16c4921fa65fc5e00aac66","sha256":"3bfbc24f69c0a3a8e6bd44c560c669ca9558d40e8b356b8dac79e30ac60dca61","sha512":"6879af8896ad527fe674dee4ebd48a50ca78ed3dbec487ab52acffc63e873d2b4652c60c6eff3e6006d7bc9f45045ba53c4406f51bd19f4a9f9087cb6ec63bde","ssdeep":"12288:bG+6Pw+7Ku1XNtRYUnGSmpH43AnAOfqSSAK43k2buL5o5zH11f+1eSCF1fKYqH+m:bG+6Pw+7Ku1XNDYU01f+1eSCF1fKYUgE","tlshash":"fbd44c28e354e2a5a27351b33a2e314764a52a9459f8fc12d7cbfcb438e474da07f478","size":612942,"data":"","first_seen":"2025-07-23T04:34:24.841409Z","last_seen":"2025-08-31T02:29:28.991346Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1598479b5c42e3fa04f72001d6c7d291","sha1":"748a21dfede4052e4e2526a03c536b55259a5e90","sha256":"0a86a11914b2986b163a4c80924d8c2ad8dbb19565a66246a73c05aadca5dba6","sha512":"930147d5e9b619bb33311c82362cba98d732413337ff8cf0ec7f2cbf2ea6559b1906435aa61c4ea7fe8b52b81e8a16b787e110529e7a4026a3aa40879ff59dd0","ssdeep":"","tlshash":"5fe02bc575e26810e32314b4994f1a6253579d14ae9d989150f1e22cf3a02969bcf5ac","size":375,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-05-06T12:27:45.620391Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fa5137cb8bfc62804b86824218a285f8","sha1":"1e184df54ec92153a82a5162e8d45d399409ffd1","sha256":"ba46cd8ae43d9af7817c85e8abd034c19c3401979eb11139447605438bdd84cb","sha512":"e4ac92f70eb88dc68184510e7b7dfeb1e8c97f7022c2f6d26414e616ad71383f78ac74d9c7c97464b4f59b748d9ec231d16861adbaadd77f27e09cf45e2dd73e","ssdeep":"","tlshash":"1cc080d6355f7140e39627c14c4b244450248494cc88988054b0db5238d1315210e5bb","size":153,"data":"","first_seen":"2023-05-27T20:30:04Z","last_seen":"2026-05-10T22:45:34.726775Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/972e431ff5.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9265adc21a90c43d57de5c99f790ec27","sha1":"6f5fc9a58ad1e898df6d806052137e76ecd000e1","sha256":"7d2fcc870d207ff6a6dee8149d328b3515083c4ce423980664f448d0c132cfd6","sha512":"be68836c52470ec6e4f0fac0fe2915d9ba89c8f6e2737e37da743ea223093ee7d86a1eb340c8541a25130db369f779ab473303fc88e41cf7488f5f56f6a75b70","ssdeep":"192:kH/1nmtHNTPmdDsqasWVVT/aiYofxxwFe8HKod1bYRj9jq/Xp:kH/1nmADUsMtnYo98HKoHsROXp","tlshash":"0d02c84c7341b5b883da79b3963f618ef529649420a9f8b4d122d6e0af3130ce43bd6d","size":8408,"data":"","first_seen":"2025-07-23T04:34:24.807784Z","last_seen":"2025-10-20T17:32:58.151306Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b437d08402bed2ff0bf162fec2b1afe0","sha1":"3207296c8d54e6b96e6de23db11dbb0eb7083d18","sha256":"2ca4736e8396481d0e7ee68d5addceaf66756e861ad7ba9ca5edc93f60853293","sha512":"d655a6866d47b880f15e41b834355a0ddc6572991106a4ccf2642d18bf466667e5bf852336060e0107efc380ca7309e12033d27fbf8228fa28aae60fd2805689","ssdeep":"","tlshash":"1bf0e1f409945040f3330060850f1551b7d74c1e4959898295f0e234b1b0ad54ede6fc","size":525,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-05-10T05:34:02.229746Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0eff048a5f0fb066b72a4128a13c1e51","sha1":"3e3d042be03d68b2a8c08590b403d7c0a6c31f61","sha256":"448e0063a69e24cc3e19dd2b729a648b93ba11244d8c4c82701f58ee7084cc85","sha512":"365be40158fb4896343b737a6ccbddfd749c66b905560e51c4931b2b94bc554ed0b2cba2fc52e75681cf8d702374d5d5e0d8af77a427507bad943016976fddfb","ssdeep":"","tlshash":"6ce068ca7bebd00022174890184f2845f12988ac88dc9cea1ca0e2e170cc157cfda8bf","size":374,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-05-10T22:45:34.724548Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0d60aa3c4aac81d10936eab7cca0d458","sha1":"b9b1e0265d06232d6c5bff115e4a220c112669b1","sha256":"609d1da169eae1fd9c27a0e2a4d23e007204670da54b5143bcd85aa6eadc56ff","sha512":"e487f263cc9bc92c7c19e6eba0ab2f2f37a9b406345f63deb18ec899032d7b4e1d589da7c2610b4d8ad1b28954e58e7af61d4c2246ccbf89eb53b7dac38924b7","ssdeep":"","tlshash":"54c012e6329e6040a35a67c10d4b2048602584a5cc89988064f0979334e5725691a9f6","size":174,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-05-04T17:38:07.995505Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7ac92cf511ce2ce8d38f7d980c6fe580","sha1":"ae451fd4030fb621ebc1788a0d7e8f0f6f85f99d","sha256":"a4973cd8943ca66ca1e6914c377b3a630c03bb8dcbb6ea2908aefae07073330d","sha512":"9333dfa693b1c5022583e0870961aab603b15233d5b958b117fb9ffeb7936afacc5682b0b1114763f32528ba53939055260be1699c1e72a8968196b5339feba1","ssdeep":"","tlshash":"02d02ba024d5d800a72a71e1884b814cf2289869d8682c833ce0a718729595e14fa87d","size":262,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-05-06T12:27:45.636656Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/fc/web_logo_fc.svg","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/fc/web_logo_fc.svg HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 14 Jul 2025 11:13:46 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 977918f70b6956c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b5a6684f65e079040e2f7dd2546006c","sha1":"b282d2742a9b03cb586de69cdfdde1cf2b89e831","sha256":"728520b1aa63f59d676051416ce5f41249e0791dcf4140cb3d98c67f43dd836b","sha512":"cf3d475fb352c35ceabe5c07f46d0c2d7bdc5285f1303cb102e622b996fe7bfdb01ebf84bbc1bd17accdf838665b8b415b30f5b9fe49057704fc6b6178356a01","ssdeep":"","tlshash":"8a712296933c43fce58646548a38607336f2a4ef7574e2ecd633aa51a6c6bf04074878","first_seen":"2025-07-23T04:34:24.830315Z","last_seen":"2026-05-10T05:34:02.199517Z","times_seen":77,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/webp/icon_st_live_active.webp","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:59.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/webp/icon_st_live_active.webp HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11366\r\ncf-ray: 97791902f88656c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 16 Jun 2025 07:39:19 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b0de0136c71d8f1b9642ad0497ecd8c","sha1":"3e9e9674f4997b577f518a4c9bfa246dcf86c4f3","sha256":"a26ca8f54630317d041a33517cb92094441eea8d8101fc0e9ab21ea6cceaf1f9","sha512":"5893dfd3324d8288db7c724e550c13043e9fffe30ed1fbccee1c76b545996f1884b236df32749cf547c5665ca114c74f628ed1d71a827e52f738079c6dcbfed5","ssdeep":"192:buwTg+1VfIcUsWkFnT01/5tCgAPKc9SNFMAUPlNOAlcfLViuSWJ+LZsoQkZmM:buwTg6Vvp90zogsKc9SNnulEdVipW0sY","tlshash":"4232af0616a8818bde4a823455319dc1ffb274f2093d90f64fa7ae08681b7c969bcdc4","first_seen":"2024-08-21T05:28:08Z","last_seen":"2026-05-10T05:34:02.156526Z","times_seen":148,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/webp/icon_st_ots.webp","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:00.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/webp/icon_st_ots.webp HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8464\r\ncf-ray: 97791903089156c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 09 Aug 2025 02:50:18 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ba4bcd92de606fdd1ae94b18a5c5c47","sha1":"26debf25d3477c674d960bcf9c14cff1fa1dc798","sha256":"fd121c61e1b7a28cbb2a4e90fff27569ed8c77917ec6bcc6073a5623bbc1f50c","sha512":"0755a7c1b2a65b1fa0cd07766411f5ee272fcd944c95a782d742f61dece8b7bf0f1b67a55e3b43ae821a1db757f33ca6c164f0ce397763b0b350d9d70a9c4608","ssdeep":"192:+rlPd2EiSP8AQBm51yI8C7IZrNI94+HcigyK1nKpRbRwjkGrS:+rlPdLtPf51B8C73K+8fnURw/S","tlshash":"d802afbe82a29b45c24b487da67fced09d44d09814d132ff0f820ea395e79c81375019","first_seen":"2025-03-28T18:40:52.589788Z","last_seen":"2026-05-10T05:34:02.170819Z","times_seen":142,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logos1.mfgati65.xyz/aelogo/country/ad50592d7219911e8c4895a39fdf25c6.png","fqdn":"logos1.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:01.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /aelogo/country/ad50592d7219911e8c4895a39fdf25c6.png HTTP/1.1\r\nHost: logos1.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 31 Aug 2025 02:29:01 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nx-oss-cdn-auth: success\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mYSyIGmqd7OoQJdAS3cBDG14oQ1f6B28Oz63KOOQLTTpVjQYpkQ%2Bk3oDu8fXa1pVoWU%2Fk7cyGucDUfgMh2QhVukf5WI%2BrUzCgOWgaQ%3D%3D\"}]}\r\nlast-modified: Sat, 15 Feb 2025 08:42:29 GMT\r\ncontent-md5: BSf/EkuziwlL+W9VID/cEQ==\r\nali-swift-global-savetime: 1756606945\r\nx-swift-error: orig response 4XX error\r\nx-swift-savetime: Sun, 31 Aug 2025 02:22:25 GMT\r\nx-swift-cachetime: 1\r\ntiming-allow-origin: *\r\neagleid: a3b5239e17566069449591911e\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9779190bcc7056c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T17:27:39.929878Z","times_seen":15121638,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data.mfgati65.xyz/api-cf/common/timesync","fqdn":"apis-data.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:59.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /api-cf/common/timesync HTTP/1.1\r\nHost: apis-data.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 31 Aug 2025 02:28:59 GMT\r\ncf-ray: 9779190148f956b5-OSL\r\ncache-control: public, max-age=10\r\nrb-ray: aCplghdDelS-0-FRA\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nrtimestampunix: 1756607339\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T17:27:39.929878Z","times_seen":15121638,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/dbcb5d1d92.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/dbcb5d1d92.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f6fb5256c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 13 Jul 2025 00:26:57 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9346,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9342), with no line terminators","md5":"7a0c664a32fd20909c2f0719d3b9add9","sha1":"76f20f5bcd846a262b756647e58c8f954e97120e","sha256":"d0a5f105873d364ac97a5ab697d3076b94453c3c98ee6b3e03212a22b4c71f8a","sha512":"479c1bfb9656254e5869f1cff0e1baa9c983b460fbe481b5202244f9f16c51ff758eeff1e6a4046d0aec3951efe2b87883d57e41d5770fe27fffd300090c3efa","ssdeep":"192:WrPfOF3kGohwGrfnR0cok2nriQ9nPiB12Qu73ykCJyIctctZ4p:WrPfOF0GohwGrZ0++iQpiB12j73yyxu0","tlshash":"6d12b5b86574d3bc13c906b7e9f66120a9b9044eb44de8b0f0bd8d75bb72708d89083e","first_seen":"2025-07-23T04:34:24.856507Z","last_seen":"2025-10-20T17:32:58.180439Z","times_seen":12,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TXMZ5WN2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"GET /gtm.js?id=GTM-TXMZ5WN2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\nexpires: Sun, 31 Aug 2025 02:28:58 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 31 Aug 2025 00:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1348:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1348:0\r\nreport-to: {\"group\":\"ascgcycc:1348:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1348:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 103967\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":303856,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5198)","md5":"70e7770dd90c28d00d24ddce8b706f0c","sha1":"c32a1ba73382b710f1162c8ecac599c6853e9f33","sha256":"2b4e7adc3b06109db2dccc055f3768ff73bd555a970ab41393c75de6ae4b9378","sha512":"1bd9825197f2bc992b606560f8471e1a41a9f4febea6117da8398386151284bcf071320f14857388a217bfd02a94f5e2e861fee8981ea078e81f0ae411a2966e","ssdeep":"3072:J3UpgS819uN610ex3hNqjzzDXajPOLgL0/W8Nxpq4U7teGqhkoqL:+mu6xKjXLgLkTpq4UZeRfqL","tlshash":"9f5419cd73d6742683a2a474403f018bb27b79a2f84cd894f185d8d42e74aaa4277f7d","first_seen":"2025-08-31T02:29:28.971584Z","last_seen":"2025-08-31T02:29:28.971584Z","times_seen":1,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":125,"dns":3,"connect":16,"send":0,"wait":46,"receive":50,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/93f8a4e7190.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:57.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/93f8a4e7190.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f70b7456c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 17 Jul 2025 23:18:01 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459493,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"900a3e4d2e3736ce6b48d9fb8dd834d1","sha1":"1de7f4c873b9c0e86a069ca7ad2958ee9516861e","sha256":"a38c78d6962c7bc34dfcc23498e8805f585a3640a2c42b727ff06b917448f9b5","sha512":"9299baff3b766f45608610e813f6dc6997de98a4d09b3ece64e12fd6b9de7b1d4b5959b86a84f9b339f77853eb384573f950846dc91461a2b75206d4b6db4f2b","ssdeep":"12288:7tGfe9jJDAFDsS4BFhFvb+j+Z+YP2f2rOlStul81EtlXbgHh:7+e9j/rOlSbEtlXbgHh","tlshash":"5da41b44fa80b17c8b9b51b5522b501af22f4855606c5cb4f2b5e9e02ff1a4ca17ebfc","first_seen":"2025-07-23T04:34:24.840084Z","last_seen":"2025-10-20T17:32:58.192977Z","times_seen":12,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":91,"dns":61,"connect":5,"send":0,"wait":27,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/css/a9079791a.css","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/css/a9079791a.css HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: 977918f70b5f56c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 12 Jul 2025 02:52:40 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26792,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26788), with no line terminators","md5":"cdbcd9f8d9f00586ff8b46eed9927ac6","sha1":"cfa8402b49c63ec3efc20ee04a3daaa53e54be72","sha256":"bc20d461ae6a5fa88eb88ebdc71bf42a0c13201c0f8e99fccb615d8fcdbafe45","sha512":"3aba074f2ebd739e2ecd0ae1e217e629092d9b7ac471f1175ea1b1748b120f6808770629e0cd026ac32bd2364862f52a528c417133530d4c2b770fa8a703dea8","ssdeep":"384:trd1g2Iwo8jYhG+zYapQYhG+i1bSYo873Ex:trd1g2IwoUYhG+8YhG+i9NoT","tlshash":"99c2621b0541331db127ac680ba82565966ac0abd70723fdd4d73f29c7c7f861beb60a","first_seen":"2025-07-23T04:34:24.825177Z","last_seen":"2025-09-28T12:08:48.96284Z","times_seen":5,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T02:28:57.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fctv33.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 09:14:08 GMT","end":"Thu, 27 Nov 2025 10:11:36 GMT"},"fingerprint":{"sha1":"41:85:9B:7C:34:47:99:2A:DE:60:72:02:76:5A:D9:5F:93:B3:22:8C","sha256":"93:BE:89:4D:A3:76:AA:AD:3E:6F:D6:94:64:80:75:21:B4:DC:93:A0:9D:55:13:AA:FC:EA:60:2A:74:88:97:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.fctv33.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"10c02-LuERWCh+qUDevN6m1JX9VksXyG8\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-cache-key: www.fctv33.icu/\r\nrb-ray: SxolN4wZLJs-300-SIN\r\ncache-control: public,max-age=30\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzN5ZQihf9J%2FEi58gvq83tLnW2y5xVDyUjVq%2BNVWoSDv2xIn5MzGiGgD2RjObWEHnNRaGRQ5n78Rra8mjSdhc6kFJS0wWaNTgQ2jfA%3D%3D\"}]}\r\ncf-ray: 977918f379b356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68610,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23283)","md5":"073583f0d38dddc9ca2e0ac1714a323c","sha1":"2ee11158287ea940debcdea6d495fd564b17c86f","sha256":"ac54c9596bd964a3c8248aee0cecb86d540fb6c10b4d314b96f6a21988249611","sha512":"1b6fb22762ade13a0c6a1f6d72604dc41402777a74e9ee5c64c9bc3a6d8b9212ca628e7ccaccbdb974fa3fbd3509449aee80fa6503f874f70688dd0a720be8f5","ssdeep":"1536:53e0cmQHOCfAsLB8Djun4i+6rlNa3GhPlNQa+bT0zvN9Izg4mzDeiX3azIsPfqX1:5TqXNHj","tlshash":"be631b72a650a16d0143c7d9fa363b1cb24ba2bfec93d95192ed4b5817e3ce4f90b844","first_seen":"2025-08-31T02:29:28.979052Z","last_seen":"2025-08-31T02:29:28.979052Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":52,"dns":32,"connect":2,"send":0,"wait":237,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/7f6bffe4f15.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:57.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/7f6bffe4f15.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f6fb4956c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 09 Aug 2025 01:06:50 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"29b6dbc5472f334927b923d7df5fcb7a","sha1":"767b5ac66cfc19dfb515a1e14039ec18e55399bf","sha256":"4c49106f7f1d67d8719dd8503c44ac5f65c0ad50538b45144ed425202ff9923a","sha512":"0c79f96916e3cca268a6e91998e21612dff83781a1af7d69edd17c86a4ee098d982b8f4bbc12c4c1972f18982665225f10e737ee4e8abf4fceed121b14f12c8c","ssdeep":"3072:52gjIe1uXZNdDmNUKskm1B7NdK1pplk/W9Hwix8y15xpFtG:52de1MpDmNUK9mf7N4dlk+hwix8yPxpO","tlshash":"ee64e998f790b1b847a762b1923f102fb23f5855508c9ca4e266e5e03e7494cd53feac","first_seen":"2025-07-23T04:34:24.813719Z","last_seen":"2025-10-20T17:32:58.178712Z","times_seen":12,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":83,"dns":62,"connect":1,"send":0,"wait":19,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/css/0c274a3ca.css","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:57.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/css/0c274a3ca.css HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: 977918f70b7356c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 09 Aug 2025 02:50:11 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100320,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b6d6c144a0771341ca38ed4a4164d04f","sha1":"d6f7939a0ab63652fabd3f21a2ff23274dc5d99a","sha256":"f2314e6af249f8e0c6bd588bf89bd57c134543b6bee82a23c4ced2933cb29f45","sha512":"9df420469da1011be65ff703504ae02d1cbf0cefba88608ce9ef036e8b681bdb437148d3e213919c98e4a77af5cd90d1d287f6a20722c788266cf6bab0c2a246","ssdeep":"1536:V6QbFNJ+jqkiHcarx3WqyrtpqoSWEDZorsYl15hCLYNYvT:VZrxmNH9yDNT","tlshash":"f6a3e77b80c5129cb31bcc118fcc6694e6e6d423d6415ab9f0556a3d8fdbf890263e2e","first_seen":"2025-07-23T04:34:24.80253Z","last_seen":"2025-09-28T12:08:48.846412Z","times_seen":5,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":92,"dns":62,"connect":5,"send":0,"wait":23,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/contact/icon_email@2x.png","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/contact/icon_email@2x.png HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 913\r\ncf-ray: 977918f70b6f56c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 11 Jul 2025 22:13:35 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"8865088214e917170c0b18392237fccd","sha1":"20f1ca5069ef3a70138e848e12073bc892658d3b","sha256":"bcc6103d7599b15debad85832520f04032d3a8e3173e7b3f03d9191e63ac7eaa","sha512":"a1c95e7608dd4c8f4d34d4074252b63873ef1a9f5b8ca6d5a84a007d9f7ee80dc7bce05eddfd5e8788a1570163022aec3c29460c87e3f1a8ae96c1bca0c4d7e5","ssdeep":"","tlshash":"66116792e9d62e18da414d713091bef0dadc30a131cf93790d5e6c3553a5a4f9cd43da","first_seen":"2023-07-26T05:15:25Z","last_seen":"2026-05-10T05:34:02.138194Z","times_seen":119,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/b2b11c7b87.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/b2b11c7b87.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f70b6556c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 13 Aug 2025 16:41:56 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3465), with no line terminators","md5":"c8eafba818580968d1451f14b44e9cc5","sha1":"efa41bdd9d34575ed1b15d5908b2e3dc6fedf417","sha256":"a92c8ca33b0085e6fb74f4136cd628fbff78909fa70c789be800d28a4fdbefcc","sha512":"5ccc79fe62dcb348af8e47d1c431b1873e157ef928cbc0f28d03820b4277d505b2607b6cdfc7bda6ee5688eb3a3d2d00fc52a26a3c7f85d84567d53aa5c068dd","ssdeep":"","tlshash":"d461b75e20181bf593d56e77fa1e90c8892b085b62c1ecb1d160cf15ea7bb0c5473d59","first_seen":"2025-07-23T04:34:24.860838Z","last_seen":"2025-11-23T17:32:53.635275Z","times_seen":26,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/webp/icon_apktv.webp","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/webp/icon_apktv.webp HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8050\r\ncf-ray: 977918f70b6c56c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 09 Jul 2025 07:23:54 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8050,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8072e44ed0728849788b0fc2625fd17","sha1":"30ff7a4919270a2189dcd307266653fe094c8a0c","sha256":"82f0aba4e16bb1d4eabe75a535c0755de8e4598b83ad8c0a2250b1d2dfce8e0c","sha512":"e1504fcac00cbd7e8af4ddb0d15c3676217b779561b8148c4e83ddeb39c87e6415385b4f63f3e5608957e6fe1e1faae0853a7e34214f674ce95a5c504da1c01b","ssdeep":"192:rwTJM3CEKOUtGf94nAmVr3vOZ+zIdIoBZeMkzlMNF3utXGNdIb:rwT6gOUkf90AmNfOZsNecBz2jy","tlshash":"baf19d10b393557ae307023a40e80566eb67af49631b96e3e3d24a70b9cc1b21b0b94b","first_seen":"2024-06-29T17:47:25Z","last_seen":"2026-05-10T22:45:34.613276Z","times_seen":187,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RWYKQ7ZE0Q\u0026cx=c\u0026gtm=4e58r1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:59.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"GET /gtag/js?id=G-RWYKQ7ZE0Q\u0026cx=c\u0026gtm=4e58r1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 31 Aug 2025 02:28:59 GMT\r\nexpires: Sun, 31 Aug 2025 02:28:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1106:0\r\nreport-to: {\"group\":\"ascgcycc:1106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1106:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 123743\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355583,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"40678342d76f048883b1022c0bdd2523","sha1":"41274d8045324b5d6e88a0dbc33b38d823bafff1","sha256":"028dd88fda550685d9b1eb0a9c95cf2d9d9bd781a88b6e5c9d7ec32519861fff","sha512":"2fed1b5b617e15949bcd71e321f4eddea12109e616a7f0558a9e60286eb279cb67db0cd92d64a14e8751a504494c015c897f62bca29ba9364bfbc028c26e85a5","ssdeep":"3072:VdTmSgS819uk43Oz0ex3hNe5zzDXajPOLgL0dYBuoJM4uRiqNxpq4U7teGIFOfW/:5mukmixgjXLgL5uRZpq4UZenoWvLwPI","tlshash":"637419cd73d6706693a2b478503f008ba17b69a2f84cc899f186dce42e7469a4177f7c","first_seen":"2025-08-31T02:29:28.986832Z","last_seen":"2025-08-31T02:29:28.986832Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/com/icon_top@2x.png","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:00.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/com/icon_top@2x.png HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 422\r\ncf-ray: 97791903189b56c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 17 Jun 2025 22:12:54 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"fb5954b769c3c80b0b3890d84e5c9e82","sha1":"1ae9550e68df4495e22ed9a7255b8448cc4b1f0d","sha256":"8ca9ed7f371938e77d704df48da347a9722d1024aa1d7dc2f65122e2c1db8d99","sha512":"9678211b925e3dd60526b82ed4dc840945840042fd6a08484938c3e36679e0af6783d55ecfa345913d2998a050a06e5d434b0d0890ee50ba6aa8e52cbb24928e","ssdeep":"","tlshash":"b3e02bf3db9b3c69d40095b473ea0231c3b624b24141a89c98c3e1e88240b2a8a83284","first_seen":"2023-07-26T05:15:25Z","last_seen":"2026-05-10T05:34:02.151556Z","times_seen":178,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/webp/icon_st_bsk.webp","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:00.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/webp/icon_st_bsk.webp HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11474\r\ncf-ray: 97791902f88c56c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Wed, 27 Aug 2025 22:10:17 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4859985570397fab4de91a9a3def06e7","sha1":"b409b881d6166df6b1cd1c7ce729eef0a085d8d4","sha256":"8d90cfd8f536498777f330c3a45353fb9f8b293b025a1587f8ee74bc9e35afa0","sha512":"5f783fd0b447338ab80f234940ea70aac9a738a427351bb876712bf2875c71160b4e3da393f44f5562f24f67c019d205f7f8d8160bd0eee89bd703913c075997","ssdeep":"192:uOGnvW8ZgMYMN3tMATjFXvP7B2DtKXpj+kvI5pECuRpEkB+cHZsCdng:uOWW8ZggtFXvzB2DtKXpbfUkdJng","tlshash":"5032c00ebc6cd232fc98271d990934b0b9fa90074c6f87a3fb4ab3159ebc05a019525b","first_seen":"2025-03-28T18:40:52.601513Z","last_seen":"2026-05-10T05:34:02.158529Z","times_seen":141,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/5dfafc97814.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/5dfafc97814.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f71b7756c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 15 Aug 2025 14:31:30 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":612942,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65493), with no line terminators","md5":"9ff2d1683b29969f808bfae25389a9f8","sha1":"89cae11d2b293a160f16c4921fa65fc5e00aac66","sha256":"3bfbc24f69c0a3a8e6bd44c560c669ca9558d40e8b356b8dac79e30ac60dca61","sha512":"6879af8896ad527fe674dee4ebd48a50ca78ed3dbec487ab52acffc63e873d2b4652c60c6eff3e6006d7bc9f45045ba53c4406f51bd19f4a9f9087cb6ec63bde","ssdeep":"12288:bG+6Pw+7Ku1XNtRYUnGSmpH43AnAOfqSSAK43k2buL5o5zH11f+1eSCF1fKYqH+m:bG+6Pw+7Ku1XNDYU01f+1eSCF1fKYUgE","tlshash":"fbd44c28e354e2a5a27351b33a2e314764a52a9459f8fc12d7cbfcb438e474da07f478","first_seen":"2025-07-23T04:34:24.841409Z","last_seen":"2025-08-31T02:29:28.991346Z","times_seen":3,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":92,"dns":60,"connect":5,"send":0,"wait":20,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/dabebf01d1.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/dabebf01d1.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f6fb4e56c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 30 Jun 2025 14:35:24 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37369,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37369), with no line terminators","md5":"43098f4164521ddc7a27f211c4a2dd50","sha1":"ef7103de8a91eed5aafd3aa27ddc571c736db31a","sha256":"0778c3ab9326de6493d3442be83a059aade9bd2b450c49f854480119325ccf1d","sha512":"61f038adeffc8a1e9c9116d818e1d02f2f85f084f0e4a044e5f4bc84606bddce8bc199bc9f4eb6bec7b3844eaf19fdd564b98e137b684877e19eab6729f25929","ssdeep":"384:G6e3fE5VffERtrFJ/C++Qq4puISlv2+Y0vO+bGWGCG6P2oMrEBmZdXl:Gc5NfUt51jtjpi/Y0PFmvl","tlshash":"95f2f075c100e5bcf85cc656ae3d9f2cac3227e8e0ace462a56e701e5f824569c5cced","first_seen":"2025-07-04T14:45:17.772595Z","last_seen":"2025-11-23T17:32:53.634526Z","times_seen":59,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/263acc2270.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/263acc2270.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f70b5d56c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 13 Aug 2025 04:43:55 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1687,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1687), with no line terminators","md5":"fd4864b00f84b3805b38698ae67a6540","sha1":"d398c9de0dab73959d4453817659261a8f1ee993","sha256":"b8893d54a506b1bb58db55602eefdab1cc6a5e23b2761485458a965df5484e7b","sha512":"0dcb39fdcebd54cc23a397bd53151c933377f4abde172b7e0ef6a0191e54c013e9aa0ba1e0ca4c8562eb91981e948f2e99c8c8e6a4b7cee0a967cfa6c6a8240c","ssdeep":"","tlshash":"1731aabee195ebf04b36517a63779219902f022b680838f0c1b866a4939820ca476e7c","first_seen":"2025-07-13T14:59:37.172901Z","last_seen":"2025-11-23T17:32:53.607229Z","times_seen":39,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data.mfgati65.xyz/api/common/params","fqdn":"apis-data.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:59.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /api/common/params HTTP/1.1\r\nHost: apis-data.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:59 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncf-ray: 9779190088bd56b5-OSL\r\nx-request-id: 3730a0f2d2106a521a2d\r\netag: W/\"0aca26c1250bf1ddd9bee8325f5e3a620\"\r\nrb-port-server: 0.003\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=60\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22610,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (22553), with no line terminators","md5":"63cba7263115c42a3bf6db2054435355","sha1":"4597d192908d072f9e2486228b72dbc03d65a3d6","sha256":"72e2d7c152d45fb45becc172d82e18f9b375d7ab744d3a543c7d1a2d5a7740d6","sha512":"217c1580ded3ad5d8c520fadf2011d159dbc8510c8a2ba1b28f0e5e7a4b6fd0ba8ab37dcc430cfa347aa080fd0e49aa3a7b3b0f2f5b1309cd4960b64edc30836","ssdeep":"384:xno1VOgiWgEROymPd0VbD7pqREe6LDdeuHhi7ZAcw+6qZiPQN1h40E1D2S29gFJY:3uPYym2bzHpO8D9aQjvasNj6","tlshash":"81a254dadfd259247cc821560068f849eb0d9dd92853ae71d00e7e0ec8bfb2a14fb5b5","first_seen":"2025-08-31T02:29:28.994545Z","last_seen":"2025-08-31T02:29:28.994545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":87,"dns":72,"connect":1,"send":0,"wait":62,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/css/b88ea7fbb.css","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/css/b88ea7fbb.css HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: 977918f6fb4f56c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 05 Aug 2025 06:21:27 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29046,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (29042), with no line terminators","md5":"1cdec41705bb651860f1739bb3cd9c52","sha1":"93cce3cd8fa34859c5dd65aea9ef10cca17f6eac","sha256":"d2c6ed8423fb884c0dfe0790df0d038e2d31ff9fea5fe80576237ab99fead430","sha512":"35ea0a2e8faba33af28fe899372a2c387d16bd91dff141e4417eb78a756869782853b7772458c63ab17c544006045a35cba0666d194b9cae00de47a6cdc8aa8e","ssdeep":"384:3TK4i4bxVpkYhDbi3pTlYhdzEiX/riLDW:3TK4i4bxVmYhDbypTlYhWK/riLDW","tlshash":"59d2531b14e2232d7127fc941ba8a6528265c532a34653f9d4b2772cc7dbf8327b724b","first_seen":"2025-07-23T04:34:24.872738Z","last_seen":"2025-09-28T12:08:48.797925Z","times_seen":5,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/css/c61ff238e.css","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/css/c61ff238e.css HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: 977918f6fb5456c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 13 Jul 2025 11:59:52 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25963,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (25959), with no line terminators","md5":"28e43433f66679d1e418443f249d67e6","sha1":"f4b8f9b510f32f4b5e357324bc518031843a6431","sha256":"6e53a72eb3e44537b512923d24b291f2c818a98636e7c3dac7d402cf25c18f38","sha512":"d72f9cefadcd29f3a85b53c7057f9448214d38c6c3c823d597cbb24a44132dcc883e0829824b93168ccdd0369c8d0e59aace4059f315383da55b737d7b559e3a","ssdeep":"192:t6UOhCfrO6kdmLoJ+SX/YXh/xHgNXdzj+YhehV5VSGGQ0urPwjuP3p/AYkYh4zMX:t6UOhCfrO6WBaqyYhgVeYhQbGAigePI8","tlshash":"6dc285274159131ca593cc701be93b26d154c477ea667bfe95206e2acfc3bf20bb124a","first_seen":"2025-07-23T04:34:24.835963Z","last_seen":"2025-09-28T12:08:48.833598Z","times_seen":5,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/5a7b49eb010.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/5a7b49eb010.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f70b6856c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 03 Aug 2025 09:52:42 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71905,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"63d1ea7c0f47191d7380359ab0d1fd58","sha1":"1a872905d49b4d4e840a68c463856ff2600be156","sha256":"97df20c0529139404ffd8d344ec726aaccac7bbdef73c0c4d0415f7f1fe840cc","sha512":"cbcee0855a966905868cf513f80b846d0e229252ad90bf4fa1a88f357f6a5b3804b1faebfc67ca11632ef40428bfc5e58b6560d0e368958a2d013ca53a14c4ef","ssdeep":"1536:uA5Jz1rzAr4rqG/mcI/V1Ic/41Ic/tcI/2uq8S4Xe:uOJz1EG/mcSjIuAIutcS2uqx","tlshash":"6063ea58a295f6fc4b9615b3933b6058d57b1ada70c8f830e272cfe07a34285d529cbc","first_seen":"2025-07-23T04:34:24.834526Z","last_seen":"2025-10-20T17:32:58.168013Z","times_seen":12,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/webp/icon_apk.webp","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/webp/icon_apk.webp HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2820\r\ncf-ray: 977918f70b6a56c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 08 Jul 2025 05:48:55 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2820,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cde3652b67f0c439a963b00d486a712","sha1":"bf0da4e99be1cb817332094f6e86cc3e0fa5d1ea","sha256":"5e8a3e31da17b01e26a69c6042efbda4b0028315c0360ef002e1b889401e854d","sha512":"5a9f91328e89f84fc67f4f486cce2cffb8450cf4131b22efee9c755e0e6f23903f6d7e0cc53d7698a6b21230241ea8f398b8222021bdc7609d0336deaa4b1e63","ssdeep":"","tlshash":"40515b61116ce03006f6dd611152d7f83eef6fe8c70a5ac8e6c8a81ecab94c933b0d20","first_seen":"2024-06-29T17:47:25Z","last_seen":"2026-05-10T22:45:34.494318Z","times_seen":187,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/webp/icon_st_ftb.webp","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:59.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/webp/icon_st_ftb.webp HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11570\r\ncf-ray: 97791902f88756c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Wed, 27 Aug 2025 22:10:17 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d788fff350579afbdcc0ccfdf5241960","sha1":"7af71241884eb116369edc74ee84496c42786ce4","sha256":"17f3c1f6917c0ec3a717314466aba38428c9cc8a0c3ddb48ac00933921855267","sha512":"db4a72be4baf1748e5a60e6bc20c1cc4404f002b4a64337082d87fe5a1495339c2c2477093b4d1909f9bb93056f5cfd9e47b6caff03df2888aee524b03d4cecb","ssdeep":"192:3ocF+aBOti3m4X0rt0VZhUljpPm0bwWXTrhJj9uSPsU+s:3dLMi2W+kZIPm0kWJjNss","tlshash":"7d32cf8a6e53c4b3c16685b4ae1f7cc92444f4cf01464b676871e788d76f4a6cfe900e","first_seen":"2025-03-28T18:40:52.588545Z","last_seen":"2026-05-10T05:34:02.157428Z","times_seen":133,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra.mfgati65.xyz/api/common/bs?code=100\u0026sportType=0\u0026stream=true","fqdn":"apis-data-defra.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:00.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /api/common/bs?code=100\u0026sportType=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:00 GMT\r\ncontent-type: application/x-protobuf;charset=UTF-8\r\ncontent-encoding: gzip\r\nx-request-id: 3890a1c37194f3961a2d\r\netag: W/\"0e8a8df2f1562b3587186a1efdf187d12\"\r\nrb-port-server: 0.003\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.007, HIT\r\nrb-ray: vaBzihdHklq-2-HKG, aCplghdDelS-2-FRA\r\ncache-control: public, max-age=4\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nserver: cloudflare\r\ncf-ray: 9779190399c256b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/x-protobuf; charset=UTF-8","magic":"data","md5":"e8a8df2f1562b3587186a1efdf187d12","sha1":"fe9500b1da85978b7274683acf237a5487290030","sha256":"e528dd179d58500cb059d5d05b54cf3302a170dc143708fe2f749426d9972a8c","sha512":"b907a8d1576cedba4dfffa9a583054b591efa854ef78c803631a63cc18ff7f5ea05b221c7c315fc183d7721e5b56923eb4cc046a389a0b00e2059ffc26352bcc","ssdeep":"","tlshash":"8d900211a2920bd849d0760211d90bc0651c14d26a451591435104385664111569e600","first_seen":"2025-08-31T02:29:29.001447Z","last_seen":"2025-08-31T02:29:29.001447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra.mfgati65.xyz/api/common/bs?code=100\u0026sportType=0\u0026stream=true","fqdn":"apis-data-defra.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:08.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /api/common/bs?code=100\u0026sportType=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:08 GMT\r\ncontent-type: application/x-protobuf;charset=UTF-8\r\ncontent-encoding: gzip\r\nx-request-id: 7270a1d0119437ca1a2d\r\netag: W/\"0666d845bc3d9c3c0339f63c2845371dd\"\r\nrb-port-server: 0.001\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.006, HIT\r\nrb-ray: vaBzihdHklq-2-HKG, aCplghdDelS-2-FRA\r\ncache-control: public, max-age=4\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nserver: cloudflare\r\ncf-ray: 977919369e6556b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/x-protobuf; charset=UTF-8","magic":"data","md5":"666d845bc3d9c3c0339f63c2845371dd","sha1":"ed45f12d1508d2fe8d7b9b6044f722aee6cc1616","sha256":"8429ceb7828940cf0b7e83fc97430956413c37e9bd5a046900dd0df9f27089d0","sha512":"21631d30d2a031d37b8e1ba0dba9a8d3a6e06786719ef39e4e8b8608d681fffcf9ebdc9723cbb3a1560f7453adaa863ae7fe2f0c0427c25f216e785da2d6d7fb","ssdeep":"","tlshash":"ab900231464961c646186308008414d6910206609fbab25040500d48462560252ab7e5","first_seen":"2025-08-31T02:29:29.003728Z","last_seen":"2025-08-31T02:29:29.003728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/42ee472eb72.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/42ee472eb72.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f70b5a56c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 15 Jul 2025 08:24:54 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6804), with no line terminators","md5":"41b2b43348564a1b3918652ab30efcd1","sha1":"199e2dfb56375f761c19b02de2ddf146e080469b","sha256":"3bf3944ec1addfdbcd2495e2845e296800b9783e10678f43744d3039dee3cc9a","sha512":"e9f6cd64354f114ba6deeaf09528150550689f2ca364fa3cdfb72d2b9720f0ef83caabba99ebd6f6d44b3f3ed4aea16714700ffd58f4db3a4e75da351e9801d8","ssdeep":"96:WBBBGlSgsoBCFnQvpbBKwlRfeckUmjR1d4lL1Y4/MvpMBuNE5xqgKu:WBBBMSgsoBkcpbBKwlRTkUmoY9MBlt/","tlshash":"bae198682630e77d4bde29f7e93c50786da804dba58dc8b8e4a45d38b71de04c219c6e","first_seen":"2025-07-23T04:34:24.84291Z","last_seen":"2025-11-23T17:32:53.613756Z","times_seen":26,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/webp/fc/icon_favot2_inactive.webp","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:00.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/webp/fc/icon_favot2_inactive.webp HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2396\r\ncf-ray: 977919092b4056c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 12 Aug 2025 11:34:46 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aeebd213c331043a469ed65cfbae936f","sha1":"7d7ffc5e44f5da62473f79141503e1cd9d805d64","sha256":"b4f6d6e3a0fa6ef6c3e2367892f7abdce6d9b592daf5ecd06ae409bb42cba650","sha512":"6e7a63a65e6d4a30e0bc6c7acfde925a10ea2606851037bba3184b84340cb8bc29217d87a7a3a504e51f189d01e9f85cc8d5805d946c4590f4697138be41a4e8","ssdeep":"","tlshash":"8a41f96163236b8cf81953b84b416f51d230bc175799533b8282096d9f3adad6cd434a","first_seen":"2025-06-29T02:02:02.29441Z","last_seen":"2026-05-10T05:34:02.202743Z","times_seen":76,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra.mfgati65.xyz/api/common/bs?code=100\u0026sportType=0\u0026stream=true","fqdn":"apis-data-defra.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:15.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /api/common/bs?code=100\u0026sportType=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:15 GMT\r\ncontent-type: application/x-protobuf;charset=UTF-8\r\ncontent-encoding: gzip\r\nx-request-id: 4330a1d07194aa3a1a2d\r\netag: W/\"046800b14aa5ca77eae08635c7b9a960e\"\r\nrb-port-server: 0.001\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.005, HIT\r\nrb-ray: vaBzihdHklq-2-HKG, aCplghdDelS-2-FRA\r\ncache-control: public, max-age=4\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nserver: cloudflare\r\ncf-ray: 9779196259b856b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/x-protobuf; charset=UTF-8","magic":"data","md5":"46800b14aa5ca77eae08635c7b9a960e","sha1":"72d0e077aa2b6a3495ede43d767d8fe86ef8c953","sha256":"3cbe93104eec31bbcd1409bb45722d9ef07ec97dcd4bb82961c2e2511ac54391","sha512":"ce7f9c4afc666ab8533330d77564d22393f16f88f37dc5ca7d0c118e37c4093df94201364a58ac03bf77573bfc529b2809e068788fab00ce9a631de9bc0f09e3","ssdeep":"","tlshash":"07900202514247dd86b1616c50a40ad0b4489d150f0c155d95441c80015150235b5605","first_seen":"2025-08-31T02:29:29.008102Z","last_seen":"2025-08-31T02:29:29.008102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/20da8b5573.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/20da8b5573.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f70b6256c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 13 Aug 2025 01:24:41 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8115,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8115), with no line terminators","md5":"cd21a3973e59c3679294f8a39bce18b5","sha1":"9459ce597ef77487354b4c34686b79d0f757771e","sha256":"110377ecd6096e190a3442f4c8ecb5af6e34162d286007dde5b2be7dff5d6623","sha512":"81e03b0ba7440292926ac9926ec9158fc6119b4f37bc7482bf9c8062f6bcbe660157c1e3756b17cdffec43950ba04d501b57d102caa293d30040c884297facd6","ssdeep":"192:IBBx6OoTLwVuiwc2ViRfFrnxmuu3XZk71IW:Z9TLwYVijJuKRIW","tlshash":"39f1ea1ef365f9b803e669f3a93b9101e13e7646a044f470d2608e69bcb870dd17ac76","first_seen":"2025-07-23T04:34:24.833151Z","last_seen":"2025-10-20T17:32:58.173939Z","times_seen":12,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/webp/icon_lang@1.webp","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/webp/icon_lang@1.webp HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1542\r\ncf-ray: 977918f70b6d56c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 16 Jun 2025 07:39:17 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80c68d2dbe70d29d35f7ab7dbddb5fc8","sha1":"fd810a3b0c2b253b39b701b1bd96d3bf7cc6c49e","sha256":"4b089a057b495f7676eebc4b496f5946fd1b7d00395b10e8cb2c088d28a189fe","sha512":"2f00f0649d2ac2102106c9a4fa751e532aa1080b7a806ea3ccd2e9acf1d7bc5c189f7dbd584fb29721497f52040344255bc164756a68e9f6470fa559a9127ef7","ssdeep":"","tlshash":"9431e78920364d5bbc03f44d636083803df26e9e7e0217abd79b8d06491e252471dc81","first_seen":"2024-06-29T17:47:25Z","last_seen":"2026-05-10T22:45:34.596629Z","times_seen":187,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JH5Z1V4NG6\u0026cx=c\u0026gtm=4e58r1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:59.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"GET /gtag/js?id=G-JH5Z1V4NG6\u0026cx=c\u0026gtm=4e58r1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 31 Aug 2025 02:28:59 GMT\r\nexpires: Sun, 31 Aug 2025 02:28:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1106:0\r\nreport-to: {\"group\":\"ascgcycc:1106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1106:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 136865\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":411997,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"8f81cc8b2c08662f14e69a0289446986","sha1":"76ea511ca7f1d57a7fe2cf464c959a5eca648da9","sha256":"2b5a5a7fe0b6ecb827cff4e046361cd7616b09f8945e99458d6dfec1d68b8d36","sha512":"5a8292df8cb6175dd38b2dcf12335e29cc7685db02e1cd8fe3083e3da3be8aa854ce791bc5aca22fa56c65f236c76920c43d570253a9e2f57eefa4a75c563682","ssdeep":"6144:pmukTixgjXLgL52RZpq4UZeYHD9WvLwDo:0zT8gjMLHDMR","tlshash":"a69419ce73d670269396f478503f018ba57b29a2b44dc899f189cce42e34a9a4177f7c","first_seen":"2025-08-31T02:29:29.012616Z","last_seen":"2025-08-31T02:29:29.012616Z","times_seen":1,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/webp/icon_st_tns.webp","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:00.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/webp/icon_st_tns.webp HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11214\r\ncf-ray: 97791903088e56c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: HIT\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 10 Jul 2025 01:14:33 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa93b4932a79a2b904363a3263409837","sha1":"e4d56834dec9b360a44c834da6df70e2103c3c88","sha256":"0b7ba9c1d5c692b6757842b60a3589b6c1b62893f97b055e322ff4a01d5df459","sha512":"56b2ea592d48e589697c43c274f040403fa3af4ed82aa99d120ac4051ff94197b446e89a15588314d57ebe47c210dd7d26a098a64c18abefe534eee18e38528f","ssdeep":"192:5JJNEmpJkITcH8BdCkeOo+VcORacsDCrmt+T5DVPjcjFjjyC7f:57KIVBUkeOHOOuIa+VVPgjByG","tlshash":"2932d098d30b3633c62ea525798a4357dd6ecbb4cce7690b2ae202347cde7554448ee3","first_seen":"2025-03-28T18:40:52.579246Z","last_seen":"2026-05-10T05:34:02.122086Z","times_seen":142,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/972e431ff5.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/972e431ff5.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f6fb5556c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 10 Aug 2025 09:58:03 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8408,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8408), with no line terminators","md5":"9265adc21a90c43d57de5c99f790ec27","sha1":"6f5fc9a58ad1e898df6d806052137e76ecd000e1","sha256":"7d2fcc870d207ff6a6dee8149d328b3515083c4ce423980664f448d0c132cfd6","sha512":"be68836c52470ec6e4f0fac0fe2915d9ba89c8f6e2737e37da743ea223093ee7d86a1eb340c8541a25130db369f779ab473303fc88e41cf7488f5f56f6a75b70","ssdeep":"192:kH/1nmtHNTPmdDsqasWVVT/aiYofxxwFe8HKod1bYRj9jq/Xp:kH/1nmADUsMtnYo98HKoHsROXp","tlshash":"0d02c84c7341b5b883da79b3963f618ef529649420a9f8b4d122d6e0af3130ce43bd6d","first_seen":"2025-07-23T04:34:24.807784Z","last_seen":"2025-10-20T17:32:58.151306Z","times_seen":12,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.icu/js/mtg.js?v=2","fqdn":"www.fctv33.icu","domain":"fctv33.icu","tld":"icu"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:57.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fctv33.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 09:14:08 GMT","end":"Thu, 27 Nov 2025 10:11:36 GMT"},"fingerprint":{"sha1":"41:85:9B:7C:34:47:99:2A:DE:60:72:02:76:5A:D9:5F:93:B3:22:8C","sha256":"93:BE:89:4D:A3:76:AA:AD:3E:6F:D6:94:64:80:75:21:B4:DC:93:A0:9D:55:13:AA:FC:EA:60:2A:74:88:97:0E"}}},"request":{"raw":"GET /js/mtg.js?v=2 HTTP/1.1\r\nHost: www.fctv33.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncontent-encoding: br\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 31 Aug 2025 02:28:58 GMT\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ia1tEM9lVwpE3YrSpiyY6lnBm0R3wUwGkoJL20VV1jNJ4IX5ZLhDJyPAUKx4LUjhh7n2n2a09Ug5q5BVz0Qsl4%2BBwDFi2HefWMLUhg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 977918f64c16b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"ec69d6340f06231b3176a610695d3c6d","sha1":"7545891318097ff79b293b9cc3d3bcb68a0619d0","sha256":"5e6f4fc27aa96f524f3ac23d099a1f2f3c29c30f4f942d634139995652916bb4","sha512":"c053a155ffda4f89b5d75a54eeb2d83458c78eb84fe57950945449b4298a47f61e2c53f1ddf946a146629f50fee55ab554a57ef48ded631911f63de86e18889e","ssdeep":"","tlshash":"e8e0c0da70510871b5ae86b573b5a1247153550cb4191922cdfdc824681c987482208c","first_seen":"2025-02-02T18:21:06.747357Z","last_seen":"2026-05-10T22:45:34.581132Z","times_seen":164,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/css/cdf4e1374.css","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:57.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/css/cdf4e1374.css HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: 977918f70b7656c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 10 Aug 2025 01:26:53 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89535,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"07dcb48ad09277866891dc1bd287672d","sha1":"12daedd80c4590297097ac53e636ec143f0ff089","sha256":"0323e37d33f58de678f16d082843c79fdc7990c3f30603c7080fde05af389d96","sha512":"f9fb39a98b9b3cda7cb3182bbcf2d1aacebb255bc9efd3b84cd9a3a252cac84a584569f922bcb98a4153fecd80715c87eff4c32710950b7015bc61b136af4c4a","ssdeep":"1536:rlsBHcNiSUzYHYDVVsYl15hClYQYvFfmoru3T7YGYp8A:ZUjNv8A","tlshash":"1c93847b4182231da1178c210bac265697e6c473e24763fde9a13a39c7c7f8617b364b","first_seen":"2025-07-23T04:34:24.847985Z","last_seen":"2025-09-28T12:08:48.894524Z","times_seen":5,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":90,"dns":60,"connect":5,"send":0,"wait":29,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra.mfgati65.xyz/sfverbb37114fd8f2a55ad958eea69bb198ed11567f/api/match/live?sportType=0\u0026language=0\u0026stream=true","fqdn":"apis-data-defra.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:08.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /sfverbb37114fd8f2a55ad958eea69bb198ed11567f/api/match/live?sportType=0\u0026language=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:08 GMT\r\ncontent-type: application/json\r\ncf-ray: 977919371e9756b5-OSL\r\nx-request-id: 3210a1d0319474331a2d\r\netag: W/\"02b1e5542b7f7b33fbbbf693ac2f58849\"\r\nrb-port-server: 0.339\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.347, HIT\r\nrb-ray: vaBzihdHklq-60-HKG, aCplghdDelS-60-FRA\r\ncache-control: public, max-age=60\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34919,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"6dd9325df79aa056bd42b5f7ccbffbbf","sha1":"f5fcbe989e92d9ef8c2aa43fb9d85035893b412b","sha256":"7a27a2c98f7768115ea9a5814440e4d37ae59f6c909ebd317b4d7eddc81ea8f1","sha512":"8cf01c755fd5bb2c2fef21ceaa405ca1c4a9b63d83558f8467471e9b9eb8d6aee1cb87e5ae8c915dc7809899592b79cab6c05848afc617240c708f4c75e4ed64","ssdeep":"768:CVkaJAqc53sQvdzi24ecW2NcjLFc81cU3c8UcXwcqSFU1Mem:KkaJGxPvti29cW2Ncjpc81cU3c8UcXwc","tlshash":"4d0374ff59ac49772a9f33be42d7321ac5520a8dbb65a139fc42900260fbe71049fd58","first_seen":"2025-08-31T02:29:29.02344Z","last_seen":"2025-08-31T02:29:29.02344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra.mfgati65.xyz/sfverbb37113d2eb1ee996d787a097566afa4f7cda2/api/match/live?sportType=0\u0026language=0\u0026stream=true","fqdn":"apis-data-defra.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:15.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /sfverbb37113d2eb1ee996d787a097566afa4f7cda2/api/match/live?sportType=0\u0026language=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:15 GMT\r\ncontent-type: application/json\r\ncf-ray: 97791962c9e656b5-OSL\r\nx-request-id: 4490a1d09210b76f1a2d\r\netag: W/\"0dd5fb5bfc8183dbc8c31885a454802c2\"\r\nrb-port-server: 0.491\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.497, HIT\r\nrb-ray: vaBzihdHklq-60-HKG, aCplghdDelS-60-FRA\r\ncache-control: public, max-age=60\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34919,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"69fdf04caeb4bf35a7ae700863432a0b","sha1":"addfc45edcebea40af95342045353e8c87e02f7a","sha256":"cd47351a497ebd2a18d9346082de01de33a1dcd21ffb3c42afe09fb47619422d","sha512":"12ac2b3209f4547a5c8d6d0f6f5008e6b2c7a5bf4866a0dc4d402555a34c3e9a6e0ae552502c22c0ca4546aa14236aa6694a8576b2bc57eaa4cea2a2cb929dcf","ssdeep":"768:CVkaJAqc53sfdUzA24ecb2NcaLFco1cU3c8UcXwcoa+U1Mem:KkaJGx4dwA29cb2Ncapco1cU3c8UcXwx","tlshash":"620373ff59ac49772a9f33be42d7221ac5520a8dfb65a139fc42904260fbe71048fd58","first_seen":"2025-08-31T02:29:29.026262Z","last_seen":"2025-08-31T02:29:29.026262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/webp/icon_st_more.webp","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:00.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/webp/icon_st_more.webp HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2862\r\ncf-ray: 97791903089256c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 12 Aug 2025 03:01:40 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2074071d7c42652bd2cdaed7a9da7398","sha1":"30b0a47493ac522f8bfdca563d1c922ed9f788e2","sha256":"93d6388e5764f7de138adb562e3c0c17294e4edd832fec9e66f70800f58ec88b","sha512":"dccbbf63106726cee6327af4506d22c42cfa9a9ee8faf728346497a73a5a235bee161f99c8b509f1a408e52b5faa3920488bc7dacbc5b4df697c6845625a9004","ssdeep":"","tlshash":"79514b5aed77c0a4f8151ff6b8e15211fc49c1e5a206d74a6fe0672a58ab8161325b0c","first_seen":"2025-03-28T18:40:52.575042Z","last_seen":"2026-05-10T05:34:02.145811Z","times_seen":139,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra.mfgati65.xyz/sfverbb3711ae32e0429e1b9b739f367ea0e009ffb2/api/match/live?sportType=0\u0026language=0\u0026stream=true","fqdn":"apis-data-defra.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:00.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /sfverbb3711ae32e0429e1b9b739f367ea0e009ffb2/api/match/live?sportType=0\u0026language=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:00 GMT\r\ncontent-type: application/json\r\ncf-ray: 977919059a7856b5-OSL\r\nx-request-id: 6390a1c3919435941a2d\r\netag: W/\"02b1e5542b7f7b33fbbbf693ac2f58849\"\r\nrb-port-server: 0.293\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.298, HIT\r\nrb-ray: vaBzihdHklq-60-HKG, aCplghdDelS-60-FRA\r\ncache-control: public, max-age=60\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34919,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"6dd9325df79aa056bd42b5f7ccbffbbf","sha1":"f5fcbe989e92d9ef8c2aa43fb9d85035893b412b","sha256":"7a27a2c98f7768115ea9a5814440e4d37ae59f6c909ebd317b4d7eddc81ea8f1","sha512":"8cf01c755fd5bb2c2fef21ceaa405ca1c4a9b63d83558f8467471e9b9eb8d6aee1cb87e5ae8c915dc7809899592b79cab6c05848afc617240c708f4c75e4ed64","ssdeep":"768:CVkaJAqc53sQvdzi24ecW2NcjLFc81cU3c8UcXwcqSFU1Mem:KkaJGxPvti29cW2Ncjpc81cU3c8UcXwc","tlshash":"4d0374ff59ac49772a9f33be42d7321ac5520a8dbb65a139fc42900260fbe71049fd58","first_seen":"2025-08-31T02:29:29.02344Z","last_seen":"2025-08-31T02:29:29.02344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/webp/fc/icon_live_stream2_active.webp","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:00.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/webp/fc/icon_live_stream2_active.webp HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2310\r\ncf-ray: 977919092b3d56c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 08 Aug 2025 05:03:36 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"24177643a431b881e42372c55021a5ca","sha1":"c4a497adafa1b781cfe7b3b212283c916945899d","sha256":"94353c4d231eeb620e4fc510fd0dba10debda24699b6c3ba705041c5bd8a0b20","sha512":"4a29dbb70743f05bc94fa49d694ae49deaff61b34217d90496d6acc277441c332e942a3844db4b44140b4042b6383bf5e35cd40702f030c19c91792ce3d111db","ssdeep":"","tlshash":"f8410b73a3336329d3104df4a0b26f12a53da312e79de985d380c2300b54ac2393d287","first_seen":"2025-06-29T02:02:02.269042Z","last_seen":"2026-05-10T05:34:02.161636Z","times_seen":74,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/8b8bacb9a52.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/8b8bacb9a52.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f6fb4c56c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 15 Jul 2025 00:20:09 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5083,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5083), with no line terminators","md5":"47543ddf6ebd58d312edf3cbb0e045c0","sha1":"5c1acf26527a28bf5be3cf5793e2256be1fe46c5","sha256":"73498a0cff156edf50b1d0a0fd82f08d7cac55dc2f471628e62afc1e63d37793","sha512":"1eef0cef945121a28301d1090ef1f7a21cf9317b31b3b06f3b630eb8cfb41f721f170903489c26bf046ec783d7a74e6e4ed952826212142dab6642b0fb51d6af","ssdeep":"96:GcmJzSEq3/gpLM9MupT1VTLVCXChmRLEi0yu6POx6I:GZs53IxiPhV3VGVp50yu6CP","tlshash":"dda1e91c62159efc03d76f73e66f60cad629244e6180f8b0e250dfa5aea5b1cd073c66","first_seen":"2025-07-23T04:34:24.855479Z","last_seen":"2025-10-20T17:32:58.136836Z","times_seen":12,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/css/2623432ff.css","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/css/2623432ff.css HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: 977918f70b5856c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 17 Jul 2025 00:31:32 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32796,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (32792), with no line terminators","md5":"cf497a9978e15e6b4e3d917fd57583d5","sha1":"eb6a279d83f5336dff80a4b14941e40e5efa6b56","sha256":"6c5c3a5fe4c67f2d39eac7d745801ab17ac55612ef50919d63e484a1517f386e","sha512":"4a4b1e3e713db3c6c37ac0914121e14af0d19f4953b08ea06af425ce9be7d69fbd3b747d09f67c1fa5cbb3d57364edb8102bc6d48160aa258dcf492ca11dec5f","ssdeep":"384:RTmN+iXsIDRYhN2YhErz1p1L4z7nOu74QMzsQX8alNZZr2SlwV0v0iHK:RTmN+iXsIlYhwYhErz1pJs7Ouwug7k","tlshash":"98e2231782913b1cb537ac640f696b5595a4c827f21223fdbda27e38c7d7b8102a234f","first_seen":"2025-07-23T04:34:24.865626Z","last_seen":"2025-09-28T12:08:48.914716Z","times_seen":5,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/css/2df4b9404.css","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/css/2df4b9404.css HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: 977918f70b5c56c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 15 Jul 2025 00:31:51 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31054,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (31050), with no line terminators","md5":"9e69dcb4d8992cc829063ad70e4e228e","sha1":"f49f53dd06e24a4e387fc20847f1e6c302ab99dd","sha256":"3a45fdbb9454bb2699bf1cf17a3115b17d81116eb97305c5f068a4989761d22a","sha512":"3b596067120a4f75ad61d97a1f1570522b48fff2c42725451f015971465901a695b0f1e5d141706a20669cd0f9935030f84366c56b11379d35461000e689db1b","ssdeep":"192:CsYl15hCDdmLa2Qg8dxjYh5ngVSzpIYh2ngou34Evrxl4wi0NDP:CsYl15hCgvmYh0SyYh+EjLTZ","tlshash":"a0d2c13f8195131c9217ac155f9c2611bfe2cc53e70293bde9a05b3a8b97f4a1772a0e","first_seen":"2025-07-23T04:34:24.857553Z","last_seen":"2025-09-28T12:08:49.02509Z","times_seen":5,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/css/6a859f929.css","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/css/6a859f929.css HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: 977918f70b6656c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 13 Jul 2025 06:27:41 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":341500,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"7ca28c8a91e5cd33b487db5985934a55","sha1":"952a1202afdcedfcdeb834fcd98af88fa666c41c","sha256":"694dcadc143dca3dba725f2b86791b0d513f876142ebbaf13c64bac583fbda00","sha512":"e0a603219364d6ab67ae99e6297de9a93d7fb302520951156ca1d7e8d7b8efa33d41a8e097eaddfcf687d64c22052cc1a19bb5589f430016b9d6873086e63d1c","ssdeep":"6144:ArSt5iH9k0bH/O9g2nldu1n7jE9Scb1dkb5Wc5:ArSt5iH9k0bH/O9g2nldu1n7jE9Scb1e","tlshash":"1574753b6156271c9127dc210b9c2602abd5c977e212a3fcd9a06b39cfd7f86177360a","first_seen":"2025-07-23T04:34:24.810459Z","last_seen":"2025-09-28T12:08:49.006077Z","times_seen":5,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0Y1BWVPR65\u0026cx=c\u0026gtm=4e58r1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:59.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"GET /gtag/js?id=G-0Y1BWVPR65\u0026cx=c\u0026gtm=4e58r1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 31 Aug 2025 02:28:59 GMT\r\nexpires: Sun, 31 Aug 2025 02:28:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1106:0\r\nreport-to: {\"group\":\"ascgcycc:1106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1106:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 132666\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":390663,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"ddc393c928b301a4e5108c9f1e7bf1e6","sha1":"c4d6a1a70c602b44282193567b052ba82fe1cc20","sha256":"55fedea51c6fe2d3fb7d3d293ba945f5abd6e3400475403625d412d20baca580","sha512":"abd548dac66ff266d9d1c7db2df692d7c72b17d23cf9ab1e3e74206b1750817355429ec4321de06bbaa9f6e996cfb563fc0025406d4899df456dd7f9157d24c4","ssdeep":"3072:40mLhOgS819uk4uOz0ex3hNewzzDXajPOLgL0dYBuoJM42RiqNxpq4U7teG3Y1fF:LmukhixpjXLgL52RZpq4UZeiAWvLweS","tlshash":"a78429cd73c6742693a2b478503f018ba57b29a2f44cc899f189dce42e74a9a4177f7c","first_seen":"2025-08-31T02:29:29.036683Z","last_seen":"2025-08-31T02:29:29.036683Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data.mfgati65.xyz/api-cf/user/info","fqdn":"apis-data.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:59.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /api-cf/user/info HTTP/1.1\r\nHost: apis-data.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 31 Aug 2025 02:28:59 GMT\r\ncf-ray: 9779190148fb56b5-OSL\r\ncache-control: public, max-age=120\r\nrb-ray: aCplghdDelS-0-FRA\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nruserinfo: EU|NO|91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T17:27:39.929878Z","times_seen":15121638,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JH5Z1V4NG6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:59.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"GET /gtag/js?id=G-JH5Z1V4NG6 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 31 Aug 2025 02:28:59 GMT\r\nexpires: Sun, 31 Aug 2025 02:28:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1106:0\r\nreport-to: {\"group\":\"ascgcycc:1106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1106:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 136891\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":411961,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"3cbce8f544461ae8663af76966238328","sha1":"623d29930b36fa39b9c996c41c08feb8591bc85b","sha256":"7619edcfa44422b34e47e23ee92975cdabd94299abdd56b0b5a840b5bca2e1fc","sha512":"32fcffeb1f2eebc795c5bb24364df6b7092fee9680a606ed84b4a24042462140b37063771d162f339d82d50978bc9474df038143334a6f723ee21322bfdd7b9e","ssdeep":"6144:SmukaixgjXLgL52RZpq4UZeYHD9WvLwD1:/za8gjMLHDMk","tlshash":"259419ce73d670269396f478503f018ba57b29a2b44dc899f189cce42e34a9a4177f7c","first_seen":"2025-08-31T02:29:29.039447Z","last_seen":"2025-08-31T02:29:29.039447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/img/sp/icon_team_def@sp.svg","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:01.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /img/sp/icon_team_def@sp.svg HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 12 Jul 2025 07:25:22 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 97791909ab9b56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3284f5bc2e60ef3773ae17f6f7efe3f","sha1":"69cd363c8c4fc6f35867af95ca55ababb6d0abec","sha256":"6d6843fc41e60b84c0dfcd0b4e5a35cd78ab3e7ad0fdab194afbd4785c88f5d1","sha512":"27f81d58229007a6cc772c5b825ff6f809ec0ca30f1b47c0998a4eaaf4ab9aefe3f265cb270bca0aff430bfbaece93ce5729d2f3fa580085db8a6003150444ee","ssdeep":"","tlshash":"e5e05cf3d7641624c6c59375b9a9aca3502618d930494c8eb4e2b247e4418fb1d11a49","first_seen":"2025-04-21T06:26:47.838996Z","last_seen":"2026-05-10T05:34:02.16017Z","times_seen":106,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra.mfgati65.xyz/sfver71c6449abd3580f1cce2861e63158eaf/api/match/count","fqdn":"apis-data-defra.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.17.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:29:01.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /sfver71c6449abd3580f1cce2861e63158eaf/api/match/count HTTP/1.1\r\nHost: apis-data-defra.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:29:01 GMT\r\ncontent-type: application/x-protobuf;charset=UTF-8\r\ncontent-encoding: gzip\r\nx-request-id: 6090a1c2f1946d221a2d\r\netag: W/\"0b6bdce1a2e14696e6705e877cd8afa77\"\r\nrb-port-server: 0.516\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.519, HIT\r\nrb-ray: vaBzihdHklq-60-HKG, aCplghdDelS-60-FRA\r\ncache-control: public, max-age=60\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nserver: cloudflare\r\ncf-ray: 9779190acc4656b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106,"size_decoded":0,"mime_type":"application/x-protobuf; charset=UTF-8","magic":"data","md5":"b6bdce1a2e14696e6705e877cd8afa77","sha1":"d5b3a87d069a04f80fc70ab2fc79e6963d936409","sha256":"764ce1662995d10b465d8a890d8e571db4b60037279d7953897a9b55345b4608","sha512":"0152b686ec7e5711476b8fef51d176d7d2a33b05ea50301afe042518707295cf3e2a60d4976f6be7de3d7732f07d0e0f8941cba2d0f04cbf717c5d21808af14e","ssdeep":"","tlshash":"e1b01200124a15c90320030400b3b74842402d38198577b764d93004598c52d307f513","first_seen":"2025-08-31T02:29:29.045634Z","last_seen":"2025-08-31T02:29:29.045634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/fb8b61121.js","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:57.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/fb8b61121.js HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 977918f70b7256c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 15 Aug 2025 14:36:14 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9139,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9139), with no line terminators","md5":"df7d61d2a701497176281fb0d10642bf","sha1":"7cd4e6c7b76a8a95877468687593e575894d7beb","sha256":"9e38d35128e9fac52b5fce1e633798833f6483b84a574b2606b7cab580192c19","sha512":"580d415d0b9504dec9bb098f3bb6442cacd5f2cff7da6475869fc8e9eb7300e04832ade9b2426537507ae494d4187ac7844b3540fdbf76c731647e0798665cd1","ssdeep":"192:jE/9lNRZtUV6CvuTzqwWJd4ojZtUV6CvuTzY5b9B5CSLoKOgsdQazp:2N/Q6B+wW8SQ6BU5JATzp","tlshash":"12125193b318fd78a669622bf7352094e4399073c1dbd6ecc036fc90f95cb446e1166a","first_seen":"2025-07-23T04:34:24.852646Z","last_seen":"2025-08-31T02:29:29.050104Z","times_seen":3,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":96,"dns":64,"connect":1,"send":0,"wait":26,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/css/d35cd0266.css","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/css/d35cd0266.css HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: 977918f6fb4a56c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 30 Jun 2025 14:35:24 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57482,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (57474), with no line terminators","md5":"85611c595ca5b23d90e34fc6dc1c9fca","sha1":"be96cfd03c0d925750bd8a40d3c976150ab59663","sha256":"1b91875d676687979ad7542f07aea2d97c0c3c2d2222764ebd0db657df348002","sha512":"993eac837ebb6d79562ac4926854f47482ddbde4d57147c36b56aab2fa0af753555ac24b0429cc31b3113b20b9e70cda78c6fe976fc1eb74ece336429fca6511","ssdeep":"768:CsYl15hCg+Yh+YhNPTpYdwkl1EVkJXYhqYhKO3X+Xh:CsYl15hClYQYvtYdwkl1EVkZY4YH+x","tlshash":"ff43423f5192131ca5179c211f9c2a12a7e2c863e31363fed9916a3acbd7f46167260f","first_seen":"2025-07-23T04:34:24.854076Z","last_seen":"2025-09-28T12:08:48.93293Z","times_seen":5,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.mfgati65.xyz/statics/css/925e91d61.css","fqdn":"statics2.mfgati65.xyz","domain":"mfgati65.xyz","tld":"xyz"},"ip":{"addr":"104.18.16.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.icu/","date":"2025-08-31T02:28:58.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mfgati65.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 09:03:58 GMT","end":"Sat, 04 Oct 2025 10:03:37 GMT"},"fingerprint":{"sha1":"87:49:B0:3D:2C:A4:1C:86:52:7B:85:E4:55:BA:F0:D5:51:E3:F1:56","sha256":"03:62:7C:F4:18:44:16:67:C6:5B:B0:7C:44:FE:37:BE:A6:9A:A8:B8:5A:64:E2:01:25:E0:E5:EB:BD:67:96:7C"}}},"request":{"raw":"GET /statics/css/925e91d61.css HTTP/1.1\r\nHost: statics2.mfgati65.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 02:28:58 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: 977918f70b6356c1-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 13 Jul 2025 11:59:52 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25596,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (25592), with no line terminators","md5":"d1e5ea7cb0f24cac5b2f58405e90d8b5","sha1":"b1e102c42d83982555156f284028113835b039fc","sha256":"2d879f9f07736499e14c130d9af3de274888042fd211273d74189711b3e63145","sha512":"b97891495acf306702236f93d591d623d57b342d65883c1a06cf881fdea10d56c6054d94a90b014f4ef9fe2ab9dd8543d9909ab761aa4924134080c345a752ac","ssdeep":"384:1CQ1wwC5w/2bDifEYh+RYhRWb5RK6cfPgREQTn:1CQ1wwC5w/8+cYhwYhRcn/rTn","tlshash":"28b2515b02512f2ea927cd6d0ba92f9a5665c537c71b23fc98523e14cbfbb4106f2306","first_seen":"2025-07-23T04:34:24.829027Z","last_seen":"2025-09-28T12:08:48.836595Z","times_seen":5,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}