{"report_id":"da581171-2d05-47bf-a6b2-8a4332e6b98a","version":6,"status":"done","tags":[],"date":"2025-11-27T04:11:54Z","url":{"schema":"http","addr":"rbtvplus17.xyz/","fqdn":"rbtvplus17.xyz","domain":"rbtvplus17.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"title":"FCTV33 live sports today","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rbtvplus17.xyz/","fqdn":"rbtvplus17.xyz","domain":"rbtvplus17.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-01T04:11:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"d3jzhqnvnvdy34.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"dcbbwymp1bhlf.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"emovementxview.com","ip":{"addr":"3.164.240.100","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-08-08","domain_rank":0,"first_seen":"2025-11-24T14:31:43.728681Z","last_seen":"2025-11-24T14:31:43.728682Z","alert_count":0,"request_count":1,"received_data":4111,"sent_data":1028,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-23T22:16:03.791483Z","alert_count":0,"request_count":5,"received_data":1967008,"sent_data":2227,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2025-11-24T11:25:21.470708Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":989,"comment":"","tags":null,"fingerprints":null},{"fqdn":"statics2.tcgfs39a2.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2025-10-05T14:44:14.421136Z","last_seen":"2025-11-22T15:15:54.435639Z","alert_count":0,"request_count":39,"received_data":2485270,"sent_data":17448,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-11-23T22:41:16.042989Z","alert_count":0,"request_count":6,"received_data":13784,"sent_data":3780,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"cesosfultrbriol.com","ip":{"addr":"172.67.206.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-11-23T09:35:45.960537Z","last_seen":"2025-11-23T09:35:45.960537Z","alert_count":0,"request_count":2,"received_data":1032,"sent_data":1156,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"logos2.tcgfs39a2.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2025-10-05T14:44:14.421983Z","last_seen":"2025-11-22T15:15:54.318922Z","alert_count":0,"request_count":1,"received_data":5755,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.fctv33.casa","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-18","domain_rank":0,"first_seen":"2025-11-21T07:18:07.239228Z","last_seen":"2025-11-21T07:18:07.239228Z","alert_count":0,"request_count":2,"received_data":69346,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ukankingwithea.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-11-24T14:31:44.175228Z","alert_count":3,"request_count":1,"received_data":835,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"apis-data-defra11.tcgfs39a2.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2025-10-05T14:44:14.422749Z","last_seen":"2025-11-22T15:15:54.500192Z","alert_count":0,"request_count":7,"received_data":97382,"sent_data":3823,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"apis-data11.tcgfs39a2.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2025-10-05T14:44:14.425053Z","last_seen":"2025-11-18T12:17:53.813489Z","alert_count":0,"request_count":3,"received_data":23643,"sent_data":1474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d3jzhqnvnvdy34.cloudfront.net","ip":{"addr":"3.167.7.191","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2024-01-02T06:30:20Z","last_seen":"2025-11-19T23:26:13.183132Z","alert_count":1,"request_count":1,"received_data":232833,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"rbtvplus17.xyz","ip":{"addr":"172.67.136.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":67858,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dcbbwymp1bhlf.cloudfront.net","ip":{"addr":"3.167.7.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2024-01-03T03:40:06Z","last_seen":"2025-11-19T22:27:11.177501Z","alert_count":1,"request_count":1,"received_data":232771,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-04-16T21:13:41.053365Z","times_seen":66291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8a031c04aed4d47a689d533fa6090b44","sha1":"22958b1ab98734bdc4908244cfb8d43943479917","sha256":"60567e421c95cfaf53e53b95bbe3b91234011ad0d5a67548c8645dac6518c6d3","sha512":"79b0962128fb1bd61611e71df4dd6937875b2fc6b21d3618a6ada3106cdc389cceffeb6726c961b95e5802442d0ae4f0f91b7f8aeabb8978793710303d4b88ae","ssdeep":"","tlshash":"36e07dc060e05d112bd7bae0205ba84ef767961e50f93cc025e45780314115d10195be","size":312,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-04-14T12:03:10.237542Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"da28da0f75721ca65858a54982a17fff","sha1":"386f7f823750e15c4e905766aeac22ef2122f65d","sha256":"09d7fed9c04996f71bf3e897a45212a2f6d294e7f852fe204f3e9cccdc17f104","sha512":"ffb7546134abe52fd97f8b60c3abfe0bedf03cbde5bc926cb69ef29608ed528c4bde86050dc6e373d5c5d4179a9e6f7444ec42c2b2201acdbf3b3bbb973fd6e0","ssdeep":"","tlshash":"ccf0c29438b65102ea6687b4207778f66e2b5c1e02a92cc33dfcda94735810599935f9","size":592,"data":"","first_seen":"2024-12-01T17:00:16.313819Z","last_seen":"2026-01-02T03:02:02.710494Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"30145169cc11173a729d24e95c3b6ad8","sha1":"6d46a3a23ad7ed0aa73767fda6886a2711f7e1d8","sha256":"16d9da55ebe842e289861c5b20b97e06c523a61f70695610073b0b42f8250423","sha512":"c9e48c6c663a5886dc1d1370bcc0fc4e0115882bcd4493790079f1fc80fda0d080588e9ded43f4703e295a0e2d27111c8ba44ba7631c1dfd770b2bacb6d21636","ssdeep":"","tlshash":"aff024c975b16400e33201b4988f29b167479c08ef698c9644f9e36df3709da5bcf0a8","size":496,"data":"","first_seen":"2025-10-05T14:44:22.615406Z","last_seen":"2026-04-14T12:03:10.225994Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b022c05d979bfdbd510c37ffa59f226","sha1":"fd3cc532ae7c26760e14d4f8d482f1f2979252b8","sha256":"f1c583c5313c4d325f78ce2a6d4ba75eeab64b9f36423462c5c79222a83097f6","sha512":"380417bf37b73a77c4521ccaf7ac88f22736348e3430f50c86f899b558062f3881afef2296e8a211b1f21878a6fb9a27cbc7be7c7e5ddc76958b4f29ffb933bf","ssdeep":"","tlshash":"49f07dcc58f05f4167e7fed01043648bf356a61e55fa7cc12ae4978031506ce186e57e","size":626,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-04-14T12:03:10.230631Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/539b2324f15.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54abd291dbd3e3e3039445f4767f76af","sha1":"706d9cd6cf0d249f6b56685eff24ec4676e2d075","sha256":"ec90c3310ed4d5815f2f5568b9e847430889f9426b2a55b6e809149db7209d5e","sha512":"7f934e9acc5cc400cea738bb3af5a77a30dba49989c9bd7ee807410b00a671f5982bb32ae2c4d2aea6cad93ae70bf86f8de72d2f4e31d9c7af7159f1f448ed85","ssdeep":"3072:52gjIe1u/ENU3ANwKQkm1BiNdyqpplk/W9HCHg8715xpFtG:52de1GN3ANwK5mfiNsClk+hCHg87PxpO","tlshash":"5f64e898f790b1b847a762b1923f102fb23f5855508c9ca4e266e5e03e7494cd53feac","size":307001,"data":"","first_seen":"2025-10-25T20:37:41.345896Z","last_seen":"2026-01-05T15:49:04.777302Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1d73e7bd253a96d8db16a54451d777af","sha1":"923ca4ad35d4a605211bcb48478a684f0c2cb722","sha256":"8ab5082607d0ae8b34724e6d1401ef8924f72884b825be9975d7e128bf0b89b6","sha512":"06260d2188b3f77f6dd1bc9fc013543358c810045c595c839a8c0b001877c390059bc4982a7d72cc60df3c0bdd0fd94e127e65b520b1e1143e45f462e2ded099","ssdeep":"","tlshash":"d7312cd928e51502e6abc1f41467a4927b2d9c0f01fc2dc3bdf8da607398645dce64f6","size":1612,"data":"","first_seen":"2024-12-01T17:00:16.38704Z","last_seen":"2026-01-02T03:02:02.7222Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"22a29a92c1d9b3a5eaa158c67c48f245","sha1":"15fefb67ef585ab0e2a855b5da1131fa2144e9e6","sha256":"7471faeb1bd17f8cd9bacf099e30888635a469f49156e506cce3db2f3f1625fb","sha512":"57d3ada7a513c40b6c99495c5c9d54c120125c19ab12f722b2a377f66ba910d0a3715e3007d145d211fa8b0298329adf121d90ebc5d8d5851362235730361e41","ssdeep":"","tlshash":"d8e0abc872e12800e33220b4958f2c62b2938c20de6d88e190e5e52cb3a05998bdf468","size":389,"data":"","first_seen":"2023-07-16T14:54:01Z","last_seen":"2026-04-14T12:03:10.191591Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/35841cd600.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c006e00ade32246640c725700e279a41","sha1":"d17200e7c9851eb14353f92d17741d7f27757db2","sha256":"ef06ea50fc86fe5774049fc7d2a6792402e5f83f57a6a3ea4a8cda1501589cc3","sha512":"02bde3f5478e29b8c664c347506994be9f051710a83cfabcd054197d377c10c588bd0870feeaf1b7cc4b9b07d415e0ad659244b50702dc6915b5526e412dbc06","ssdeep":"","tlshash":"f131aef9e195ebf05e37517963779119902f122b680838b0d1bc7564939820ca477e7c","size":1687,"data":"","first_seen":"2025-11-22T15:31:01.127658Z","last_seen":"2026-02-01T08:43:19.150223Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/e98ee9e7190.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fe8f8f8523e1f5df26a09fef18c3838","sha1":"68aea5ff4ab5f439a5085c0777d91d611accdbe2","sha256":"4ebf7934781c5cc9522f2c89835f1ab345c9a0baf72b6d6813aa1d4b932f836d","sha512":"667442aba6743676f8d32738b33c929f390c6835bc9d020a1ad7ae1e6693536ba0f3e9068dcb1fd743906d1cc6686c7f7f57388a934a51e4732db2cf6610da9a","ssdeep":"12288:7tGfe9jJDAFDsS4BFhFvb+j+Z+YP2f2tOlLtul81EtlXbgHh:7+e9j/tOlLbEtlXbgHh","tlshash":"fda41b44fa80b17c8b9b51b5522b501af22f4855606c5cb4f2b5e9e02ff1a4ca17ebfc","size":459493,"data":"","first_seen":"2025-10-25T20:37:41.31378Z","last_seen":"2026-01-05T15:49:04.7322Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ef607affa1e52b84f2ba91131d900c11","sha1":"5490a0d7757e9f59d05a8138edcc3ea31c538c0b","sha256":"e58ffc7e9997a02ee0fdf9bed545477441cc6f5ca9d0d4ea734853540167be05","sha512":"0b58005e21c8bc714eef9e88ff29814547f893b6de6967d6e6065512e2a1ba61098282c740815d323ab021615e1621baa3fdd9403f85824b5d3b8e60973483f6","ssdeep":"","tlshash":"39019cc56aa065c05bf3006050cf0201e113bc4864dc1cb79ee494f46660ec17d9b730","size":685,"data":"","first_seen":"2025-10-05T14:44:22.620577Z","last_seen":"2026-04-14T12:03:10.250744Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1dd0f5bf6cd3b92ba4681950cfe961d9","sha1":"632f1f1c3fce96023267e219c66cb604e7edd1f6","sha256":"5229d19f0ec947e22e5a74c6da8ebc552c6ebd645b7b154600627ee85f4f4fdd","sha512":"91e2e9b1ba174eaed50f3caa9a0e908adc011808789f295d2906648d35ba36bf1bef98f3e2f53c2c6068a1dce47c8984b244513aaa7d74853e09f82abc49f4c6","ssdeep":"","tlshash":"521150c03aac19dc27ab82a035cb1455f70bfc4e98bc6ddb09c85fe082a06556c42778","size":1006,"data":"","first_seen":"2025-10-05T14:44:22.605636Z","last_seen":"2026-04-14T12:03:10.226746Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TXMZ5WN2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22a6f556c7e5e962d07eb0f12d6a8eae","sha1":"3048d3c0e73022eae621d734537150cbae361590","sha256":"9a31350344c818e8c87df1d8eaa1e90c70181a4f9d87964f851c5b592d24e738","sha512":"18b9b8ca7593d9f21c68449bfdc2f35a366b772fcc173b7386db16002cc8d0d41eccad0b92afe1ac9082b2656d8b2e01c7ee59dd28e79d2e30731638d00cb2ac","ssdeep":"3072:JjRvNC205vkzUrnMo0ulFe1dRGeefSJQWfQXr2XdArNbE0fcVWo6O7nGQUO7ZTLc:o2BULt+eUI2X6u0UVWo6O7GQUO7Z/fE","tlshash":"ae6418cdb3d6746283a2a474403f118ba17b78d2f84cc895f186c9d52e70aaa4277f7d","size":318428,"data":"","first_seen":"2025-11-27T04:12:05.507489Z","last_seen":"2025-11-27T04:12:05.507489Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"66bf09d24ec4b4f1985dba06e285a9cb","sha1":"0e4b66a737bdc10d87eb8f4ec40a2fb85636d7a1","sha256":"4a61762e108ae9d683c87907b49259512a147a0094569c066a534d6f9573f244","sha512":"9b9ab5daa9c9c189db616dd99aa360cb2802169431e63289a7c7e8975adc8fed396b1ec94ec1d253593c7ec03331093367253843b7fd68afa27c1c57a76056b8","ssdeep":"","tlshash":"ede02b9438da600571a7f0a009074d8ef218991ac5ec4dd37de4c875b698615a8b746e","size":377,"data":"","first_seen":"2023-07-26T05:15:25Z","last_seen":"2026-04-14T12:03:10.176703Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/2df69bfe55.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a6641188cb3b8a34a5cb18f4421db22","sha1":"e25f1d746f57b96419dea85c330eace5dc26ff1b","sha256":"0e5e502dd96f6a5c3f9fdf7a4303d052a2aedcf59f2a9b6f8e62e8831bf5d2a0","sha512":"038e3ab3195af40193054933618f410c03efad5a88c20d944345a4b8eac4d510cca50142d0d2c75948fc5f57a3e2bbea02687501af9d0b515b4b0eb3c239140a","ssdeep":"192:x/1nmtHzMaul+ofJax3tboiYofxxtFH8HKod1bYRj9jFKXp:x/1nm3oa9B9Yo/8HKoHsRiXp","tlshash":"c802c84c7341b5b983da69b3963f618ef529649430a9e8b4d122d6e0af3130ca43bd6d","size":8408,"data":"","first_seen":"2025-11-27T04:12:05.481288Z","last_seen":"2026-01-05T15:49:04.709678Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e029ce60f0b93420ed1d0af36d2b8792","sha1":"e22a781c395fa2086be19eafc350a35200efc57b","sha256":"1b901c54f446b8c1bb88694c753ac7f2dbacdc9fb1559928e5d14cae8c1aeed6","sha512":"55a30ff49368812b3296c982cc429c637eac1a4fd7ca2ef71c83f00a0a8dbdaf0bc1f24911c65c5e0a8fb37b0327eb83524ca32568f779bcfbbcc3b6293c7e47","ssdeep":"","tlshash":"3ad0c2d57aeaa041d3a760a5b08f6542f1f28c5904a849f3c7a0ccb836a51549b4efa8","size":283,"data":"","first_seen":"2023-07-16T14:54:01Z","last_seen":"2026-04-14T12:03:10.247102Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"804e11f9b3218dab8ce7d4b585cae851","sha1":"4477522526446b5052977f2125dd13e62f87a145","sha256":"63128412d26e85246e7fe349cce27410d1aa5b17d24713f72a5cd54301a1d553","sha512":"b89c10d1405a28fda7e983924f32f5ab94feb56fea6a4dfda923bce2330ce8d3c841975e530fec22e1299cb18e57fe0ec1b0e0ab64ac7ab0ea119f75e9ff4df0","ssdeep":"","tlshash":"e0e05cd556d52400f33760e1850f1556f3428c2cc95d889161a0e228b2a06958ede5ac","size":408,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-04-14T12:03:10.18156Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/f80da25ba72.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2281d42665971986d34d751c93ad1daf","sha1":"41c2146e66ea5d35682e8de2d7e7b2ffb1b5cc72","sha256":"f94b457be55be2cec3c6e1a8018a92af856599c001c5805d8ea7618d8cccdaf0","sha512":"3bca1bb98969759a2e1872cdf3336ce325abddd28e381e0d1fb9a5d042d555fb639f821c2e55630f8b7f3b243afc3d4bc709d0709cac0a173f778e1c99587c4d","ssdeep":"96:lcBBBGlSgsoBCFnQvpbBKwlRfeckUmjD1d4lL1Y4/MvpMBuNE5xqgLu:lcBBBMSgsoBkcpbBKwlRTkUYoY9MBltS","tlshash":"ace198682630e77d4bde29f7e93c50786da804dba58dc8b8e4a45d38b71de04c219c6e","size":6804,"data":"","first_seen":"2025-11-27T04:12:05.482335Z","last_seen":"2026-01-05T15:49:04.711955Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43d0f0ca61ca5d664314e4550392aa10","sha1":"b149fffc1a280816a579ad7822a425b6749673cc","sha256":"1ac01e97156dea8541cf4b1469f7bada37ef52d05d9d1be55e7af531c1dbdb09","sha512":"164d92ade4c8676a0fd89afa6bfdc5eb3d5d3b5f6f7ccb08b7ae52df86d3f48d5ab72e74fabda0ac392edb2084029ea938c01b48acd9dc17613a831eed1d6b57","ssdeep":"","tlshash":"b6c022f7329fa000b38667c40c4f2084612ac4ab8c8a8884a8b0c7d224e1715692acf6","size":191,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-04-14T12:03:10.177704Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"08768ffedc272f56be1b6ded58aa506c","sha1":"1e9a54dc5c65e2593f62d6fdb3d840f008cc9864","sha256":"9ba177bcf7bf28c7db8d9e3a27f86e51e3ce6d7198497135e2677d062bee7d81","sha512":"8febd38d56bd835f57d2a0612ab6c4310f2fc8c91bca5af3c6ac2cdea21e7e7daabda2afea7dd8021f4c641d951ab26701fe080880ca280eb0d85e9ddc5d59d2","ssdeep":"","tlshash":"28117bcd36981b21aab6a660306f1407b3139e2e4d763dd665c8d3d192452c019c9aee","size":948,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-04-14T12:03:10.246623Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"03d7f2ff1fca0af63b0505189dfb8762","sha1":"bc39b48b63d3fa7319022960f6e46bd218588bfb","sha256":"d619935eddb0431acc3cfed81e7f70fcefd9b47f3b852d07c9ee8c0fe664bddb","sha512":"efd85d72880d2732eeeed68f50eefaea23af6ec3e10f0407ad089bff810cd38242ecb95ff27c19c9973d4fdebfeadd368ba493966846843668ac8450db6ecf57","ssdeep":"","tlshash":"8bf0448036ac444022bacde010ae280bf223941f28bc3fc2b1d0fba451582281dc9afa","size":614,"data":"","first_seen":"2023-05-27T20:30:02Z","last_seen":"2026-04-14T12:03:10.182664Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/6c848c44352.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7acc9d451a0ee898ebdf085e42c9c224","sha1":"79f8fa607e39a049739f818df19e0cbc0c7a2c9f","sha256":"5c473b7c531cb67c474347902e1d305fc3381f279e3e458f74e57682bbc155bb","sha512":"e98c39f358184b6ab50ec8aa9a0c4ac947fbad640822ae72464c5f2094df08090c048a8b258a75815fe030d4c0be4f89963fe3f4ebae9bed64a9fec1ae8350f7","ssdeep":"96:x+L4zSEL3ZgpLM9MupfItV4LVCXChmRLEi0yu6POx6K:x67I3uxiPgtVAVGVp50yu6C9","tlshash":"38a1d91c62159efc03d76f73e62f60c9e629244e6140f8b0e250dfa5aaa5b1dd073c67","size":5083,"data":"","first_seen":"2025-11-27T04:12:05.476311Z","last_seen":"2026-01-05T15:49:04.73734Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JH5Z1V4NG6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9bc59828c606e8dbb84f865c86af754","sha1":"9f88742db99e8ba6a4eef98216cdba6226ac5428","sha256":"e5496fb49313fcd1a0a19b48697fb5bbb46062f9bfb1a4c93426b0b7b9e2228b","sha512":"36a207625393058258cb43ae3ec3d97213c71b0ca86e434a3402ea400b4cac48cec4ce9ab7d009f62dfa5d7948dcdcf0fa823345d5b1695833dc52cf22268712","ssdeep":"6144:lJvPWgKZtdDUI23ECULUVW66O7GQEO71skIaV0sBLatgFvu:rvO3Z3UHECUfO71KgM","tlshash":"c09418ce73d674225396f078502f018ba57b28a2b45cc896f1c9cde42e74a9a4277f7c","size":431492,"data":"","first_seen":"2025-11-27T04:12:05.50293Z","last_seen":"2025-11-27T04:12:05.50293Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aaaaf24a0f33bf7ad140aac567d05781","sha1":"1aaa0d9a1204766e497da893b12137bb24db447e","sha256":"9c2ec565eb00710ef17c30facb570168966b8f899c2b873e87c862778e5680db","sha512":"0801f7f1dc827427b6e7b2908519fefe9956b2ded84f302b7b364b89db7ce0373b880ebc85a4fdefc3cbd6425a8795dc7b894416b1a1cc3c48422e111b1c1eb5","ssdeep":"","tlshash":"c8f0fef438e6500461b6c0b059074b457a69981f45e85dc2b9d4c870e5a4644acf757a","size":617,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-04-14T12:03:10.18935Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b4b974bc8e87a9f59eccbfca92ae2f29","sha1":"fda00ff4dcef8915bee718b422e96873a49898a3","sha256":"680febba0525bcca51dcc1d92dc39ccc7872cc6acba75a3ba595aadab922bfd0","sha512":"96eb8e7918f176b748a44c1865c3adb78186595d41ef9eb4b8f0aed77dfaaaf955f25b962aa8daf399efdfc80a96da0c76668a62808d5a959b16ed2efd44195f","ssdeep":"","tlshash":"66c012fa32ae6010a35667d14c8f64445025c4a5dc89988068b09f9324d5716294eaf6","size":174,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-04-14T12:03:10.249273Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a62b12f587ff1f859725a2b28ebe342d","sha1":"209ba731fa65dd394324be5c2414e5d8ea3c68b7","sha256":"65e8fe7a4b54f057fb37e1b4277663e736f2af93e179d76cebcf4e5e2c36b7a1","sha512":"06d35b09f3d7b466255bb3647036b540e6d5def08debeb1938ad07de0fe6040d51418349a09b27addb53102475ab9bbdafef315faf05ab5c7160712d6050b11a","ssdeep":"","tlshash":"65c012da32ae6100e35667c14ccb6184512984a59c88588065f0979238e1355254adb7","size":171,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-04-14T12:03:10.20753Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fa2c6879bfadf00020fe70be42eb0722","sha1":"977ae1989dbd8143f7de52ae6682744b6c5eceb9","sha256":"b7df9285369d5442d673af7e553c8d50f590f2bc273e3e103873ab012497f8fe","sha512":"a53c57b139c2d0f1de24650046dd80d12c16bdd2553043e092dc48d84a8d97458164b560801dd544a90d9f6b87d359f49399e3b8c96349bd5d042adb4461232e","ssdeep":"","tlshash":"eec080d6319b6100e34b27c50c8b6044503485948c88588054f0975234e1315221a4ba","size":152,"data":"","first_seen":"2023-07-26T05:15:23Z","last_seen":"2026-04-14T12:03:10.199604Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/js/mtg.js?v=2","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec69d6340f06231b3176a610695d3c6d","sha1":"7545891318097ff79b293b9cc3d3bcb68a0619d0","sha256":"5e6f4fc27aa96f524f3ac23d099a1f2f3c29c30f4f942d634139995652916bb4","sha512":"c053a155ffda4f89b5d75a54eeb2d83458c78eb84fe57950945449b4298a47f61e2c53f1ddf946a146629f50fee55ab554a57ef48ded631911f63de86e18889e","ssdeep":"","tlshash":"e8e0c0da70510871b5ae86b573b5a1247153550cb4191922cdfdc824681c987482208c","size":351,"data":"","first_seen":"2025-02-02T18:21:06.747357Z","last_seen":"2026-04-14T12:03:10.167456Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"70e63784c609c4ec6b1a97f1bf72c1a2","sha1":"ea99d6caec46406ed67e8e37792c04af3641715b","sha256":"be585273d70eee8be6789560ea221d366996980ef04b3aec591c237737bc4054","sha512":"09bcc1300be0a27114357843448d4cf689996a46c8aab9f5c2200a670f20b480cf9eb59952df18e80bdbcb54582206c5050365f844b4cbbfc0337b6290bf721b","ssdeep":"192:MsP/J8YDu2sJ/31gedTtkvstxcI9n+WeAwjr3FIjBCW:nXJlFs7ttkvstxcI9n+WeVjr3FIjBCW","tlshash":"d4d18bb416fe0b8512e5cb9d22d6354aa713d82f5cb43ed3bfc88e72a054b1818dda71","size":6517,"data":"","first_seen":"2024-12-01T17:00:16.324581Z","last_seen":"2026-04-14T12:03:10.243871Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0eff048a5f0fb066b72a4128a13c1e51","sha1":"3e3d042be03d68b2a8c08590b403d7c0a6c31f61","sha256":"448e0063a69e24cc3e19dd2b729a648b93ba11244d8c4c82701f58ee7084cc85","sha512":"365be40158fb4896343b737a6ccbddfd749c66b905560e51c4931b2b94bc554ed0b2cba2fc52e75681cf8d702374d5d5e0d8af77a427507bad943016976fddfb","ssdeep":"","tlshash":"6ce068ca7bebd00022174890184f2845f12988ac88dc9cea1ca0e2e170cc157cfda8bf","size":374,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-04-14T12:03:10.251228Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"33152c313ff86f95039cf270ace96712","sha1":"79039abc854f57dbd1835a98da07cc7c6a78c933","sha256":"e30ecaa16a932088f453f22e4647d460d69ab82d8746a48285c86545727768e3","sha512":"b3438b9a047968ad2e0b6a2ba5dd32f80041acd612367a16e6aba26951fe0fdeecdd0d2e1fa57b8333da07c2ac5480e56955fc74c65805a9cdb2e3c15d3b6ba8","ssdeep":"","tlshash":"d0211dccb8788619c6610ab8102b3db50a231c08aa953dcb64fcd79cb7244c753e63f8","size":1171,"data":"","first_seen":"2024-12-01T17:00:16.222711Z","last_seen":"2026-01-02T03:02:02.754204Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-04-16T21:13:41.053365Z","times_seen":66291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0733627bede5cd138d79f2e0408cdcf","sha1":"cc9714260c3b7caf5e5152913c6557ea9f57a49c","sha256":"49cd9075cebab64fc5929b8d33bc560f0f1f36dfdf283755ae3199703248a6d5","sha512":"8112c3c66b008514aa98d44d3b03ab328c16d1d1a7ffc724bf93b9d863600289e65172ed7d1ce289011217bee0c41a71ae380b0b3fa66dfce285c0602bd772e4","ssdeep":"","tlshash":"afc080e6316f7100d35677d14c8b7444503485949ccc588054f09b5334d1715321e5f7","size":158,"data":"","first_seen":"2023-05-27T20:30:04Z","last_seen":"2026-04-14T12:03:10.185605Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f68e44a108c001d9304002cbf7bcdcf9","sha1":"b6bbea17b61a9e65f86252bdf57484020f5e7f11","sha256":"576dd6bfce57640b2519b7176d7d449c76ba2bd77e8612ea447b16f0683e8d15","sha512":"a813aba30d4a93a90fdc431e5f1edb9e9525125a68a769c9e087a98e11870c192015e4175aab991259613dc093266667de36057c5d44d567506ce59acd8e3381","ssdeep":"","tlshash":"b1e026d018e1180093e7ba86a0976846f6fa552a50f83cc297d0cf50303224a911a87d","size":340,"data":"","first_seen":"2024-12-07T17:47:22.425737Z","last_seen":"2026-03-07T22:46:22.467991Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"23cf450e6f30f878708015656c8370e0","sha1":"b9f77fec56e8d9117dd6656516c32c9ddced861e","sha256":"f0397c5ab0800398ea8c4097c2f4561a0d07381ca55119e39b536396f2001ed1","sha512":"d9e162b309085f62a278598ef783d75bb664a886e4d8808208b05d90ab6ebae5309cf09d5f7c8e6c5a8307e24e9eba69701fecf916c8fdf5bb7a7a8f3fbdbee3","ssdeep":"","tlshash":"68e0ecc129c51504f7a3d051b047ac43f1fc941709bc2cc1fbf5dc60b27c526e862526","size":423,"data":"","first_seen":"2024-12-07T17:47:22.211006Z","last_seen":"2026-03-07T22:46:22.47411Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dcbbwymp1bhlf.cloudfront.net/?wbbcd=1215328","fqdn":"dcbbwymp1bhlf.cloudfront.net","domain":"dcbbwymp1bhlf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d55a2cde98705ef5d231e3996f5335e5","sha1":"3d9ed0529c3876e0bbed113764b449100a97b573","sha256":"8a9f5ad03dbbdc8198d64b6c6a7af883e41f00ce80a959930e85d8f9cf638feb","sha512":"2550b97d7b8c9bc95d6d740b7046c09b304d36564b6276eda2cf45f051e59711789ed446128599eb06b8cb16f99e01718424f1d8b9a2c3264f2edf6c28d66160","ssdeep":"3072:XBUNP5+Ya/06R42Da7oV6+53UOng7L9vN9Wm+Zc53+Zc0M8Ec:XuNR+t/06G2D02bLZU3+iA3","tlshash":"b9344cc9ba923429836374f540bf524ab23f5a69b8084dd4f496d4d07db8d0a437bfac","size":232310,"data":"","first_seen":"2025-11-27T04:12:05.463329Z","last_seen":"2025-11-27T04:12:05.463329Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"60862cfa2e80d0befd8f852d676d21c4","sha1":"e885970d1f6b09908957bd725d80be120d2daf02","sha256":"84beaf5615053c9d82dfcac51f2545b68199d93f633b166a8196ebe63fe9cd0b","sha512":"1f9be85361563359b6107c0c894140ee1b5842c68ae00266c9ddc6a3918277c33e88a1fa2234da623b9dadf2c550ceaa974c2d43778540b306d2d399db231ec2","ssdeep":"","tlshash":"0be026c528f2d8019256a9d088475488f599a2ade0fd6cc749e0b720719855e08af47a","size":336,"data":"","first_seen":"2023-05-27T20:30:02Z","last_seen":"2026-04-14T12:03:10.177196Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bc5d5ba25125f6c2a146e2f3ea0e2cba","sha1":"fd2deeaf82afa06dfe1683ae37ed2c3d585d559b","sha256":"0f866e6e2711445088ef495fe6a11d4e72ac0a3e85861255b9b202963f9cfd5b","sha512":"3fc5a9eb96caac2a91c95a38371ec6c7e69e8b761fab7b9885649f11def4213111694b0e682f6e2d562e0a5e2361aa74ea1b7d982e75ac1941b8a21f7fabd831","ssdeep":"","tlshash":"2311e1ccbab05411e36211b4884b29b256475c08be999dc658f4e369f3345da4bcf6ec","size":923,"data":"","first_seen":"2024-06-29T17:47:23Z","last_seen":"2026-04-14T12:03:10.185166Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"81e485bf88fe068614984c6abd9d23f8","sha1":"8607ae3fcf4cffebaf3266a8992a084b85b97d64","sha256":"7fc1df3579342fd591d8bb6ce2b6a5aed1d39f166f5517c9618eab22ab28c203","sha512":"97f080e688751c231c0504aa004310f2cf248b6efde64c2086c0270c83eed1d59875eb2a48e6cd3d8567598aa8ffd22f9f38912b5c8c5f657741b15e6b2a9230","ssdeep":"","tlshash":"27e0abc472e12800e33610b5d58f2c62b3938c10dd6d88e294e5e52cf3a06958bdf468","size":394,"data":"","first_seen":"2024-12-07T17:47:22.215681Z","last_seen":"2026-03-07T22:46:22.483398Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"42de0182ba44947f606d7fe8a4005a18","sha1":"7fbec2341442b9c9a0b9754a6adaa15034a1f335","sha256":"83b9fd2d8b80441821ccf73fbd63a5eef200a45f1fa2384574fd0548b63c94b0","sha512":"1d2c6083e9ddd7212570d76232222825d9e8304e8d87a0f83e2ade993edae97d6399700061a753240f06d9345c00c3b92c778f05dd5c0d76eea9a5b50b62e60a","ssdeep":"","tlshash":"c1c012da32ae6000d35627c14c8b6184522488a59c89588074b0969224d1315214adb6","size":168,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-04-14T12:03:10.178482Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2dd495a1cf12e8b2d097ed1aa756c17b","sha1":"f661c4bcdafe685bfbc9c2c8e103f9b3ef71e4ba","sha256":"76d43b0fedc341541b8b0611ed3685ba52639da7f21d928d640f64d534fb400b","sha512":"6b0bbf4f7017786321a59e428fce1848120434a5f7dc4bbc14a01bd73ff84849ea8d3e98475edbef809706a670605d3cdb5d66f1cb59edb13bef8e98816a4791","ssdeep":"","tlshash":"33c012da32ae6000d35627c54c8b6185517484e5ac88588064f49a9234e5315314aeba","size":170,"data":"","first_seen":"2023-05-27T20:30:02Z","last_seen":"2026-04-14T12:03:10.233632Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8f9300681a807ae5e0e3b405c95f9f77","sha1":"9dd54989d70cb8213e57126fe38772e4fc06f44e","sha256":"37c43fbce7b6ea37564027cf015956bae69e48ea7ca8f9ec6821032c719e72e8","sha512":"651248dfdcac58c61ad38cd1b5d6f76524bc941d90dc0e1dbb15f2b4adecd9acbdccbe3d016535a749585c22151739c99ccf488463531ef8b29634f430609d03","ssdeep":"","tlshash":"4a016bc808b45e42b3e7bae050876487f74bb60f51f97cc17ae4978032506ce145a5be","size":820,"data":"","first_seen":"2024-06-29T17:47:23Z","last_seen":"2026-04-14T12:03:10.180299Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/5a0fc54567.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"830c12e837e300a29894a2f09e882108","sha1":"235557e99da69582fd5acfd0cccf1b2c4a752efb","sha256":"82c73b1c5570e561a550afb9988eab01bd4bda8c75b6e619a64b63fa9c481f1c","sha512":"2d35f9c75dd0381dc16dd6ad6d344fc48003a7282634f599a8c15822b6edf22015fbec8cd4223f1ca0c7f343a7bc97ab98995475b7a86802cbe8e90f8b6e0b23","ssdeep":"","tlshash":"3361b65e20280bf593d55e7bfa1ea0c8892b089fa2c1ecb1d560cf15ea7bb0c5473d59","size":3465,"data":"","first_seen":"2025-11-27T04:12:05.48749Z","last_seen":"2026-01-05T15:49:04.769479Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4c3f5024655c01f9fb166712f525d786","sha1":"29aca177b2a3fbb77c5f7c6fb541672e098ee12e","sha256":"785989a01d41df84149891fe93acab23ae2d618d54b578a444d1d02af7b0cc19","sha512":"b087e8117fd16324676ab1530ca78eeffa5ff6eb65626be00704dec33b9c305c28eb14e9a084d59ebc5d6df1d353a3bfbe7c8de94b1428a4e33d8e29e035ad9a","ssdeep":"","tlshash":"af0129c27599190466e7c0902097e883b30df80b89fc3dd3eed96a61c398559eca3576","size":844,"data":"","first_seen":"2025-10-05T14:44:22.610245Z","last_seen":"2026-04-14T12:03:10.187179Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bc6843ee96b551348634f82778729bc5","sha1":"ead2746a3842e8f1918f8a8e6504efcfe8b57357","sha256":"f4dce277df89ca54c726287315c2986d0fe057e1654e86334a87c9bbf2ac83af","sha512":"2e7812dadc43c121efdb7288b97bbfb9b7ccd9232fba05f37b3ff21b083353dee716bb15fd74bcc74d47a79bb6630e6151eae189759b36021962d44284fb5b9b","ssdeep":"","tlshash":"27e02bf029ead881923564a08d878248dcbed82f58647cc66ce0eb216194ecd24da9b9","size":405,"data":"","first_seen":"2023-07-26T05:15:25Z","last_seen":"2026-04-14T12:03:10.227883Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa5f4d9757475d35d60afa230be9edf8","sha1":"950ef0947262adfec37481ac5adfeeb6cade94cb","sha256":"c18963e166ae040964fa975ff0f633187df8fd5d9373dc32e774e0c36d5715af","sha512":"66e068d42afeda5bd7a9041947a361421bd64bb9da172b87987245f1fc46ab48328d2a33d371e41fae0163c14077d2b78d27564c942f1f1e8e4ff8273ccce42d","ssdeep":"","tlshash":"140126ccb9b45810f33254b0488b29b257479818ae99add244f5e358f3345c94bcf6ec","size":729,"data":"","first_seen":"2023-05-27T20:30:04Z","last_seen":"2026-04-14T12:03:10.211531Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"02b84b8a34899459c91c2bda42433724","sha1":"6d45f2925db64ba541fe2cbb4ee8da7423ed1b6e","sha256":"4c058d8167c0a49aeb69cfca73189872b00c671e07eb12b1efb73199b3e4d6cb","sha512":"5a3f7bb95e1371ab653e70f95c98f1865adef3d5668519db35a1bb81ffbbacd90b3c4b05e1e1a6f41e6d32cd434a9d0f5609021b1051887611fd2a98ab5026c8","ssdeep":"","tlshash":"04e026d404e11800c3ebb68560972842f6ea552a50f83cc197d0cf50303214e911a87d","size":335,"data":"","first_seen":"2023-07-16T14:54:01Z","last_seen":"2026-04-14T12:03:10.24157Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"696932b62e9421569dfdedb69a6dc8f7","sha1":"14378cc51fe4cfe05f4ad18878e9529e0e67e94f","sha256":"86606565ad988dd0fe3d15c3256df6c332eef60b13cbcc28051263987866c8a4","sha512":"aa823e3ae53e7d3e1732637ba6147a5b80bebc3a9b8a67e25f84f94769bfa6383a449b8db4d349c3216cf468502f6fc03a7076b136adea9e0bd9c83304c30458","ssdeep":"","tlshash":"2f0166f6bdebc004136a48d014290a4df427d87f258498a8a990c4b164b5d46cfaf6fe","size":794,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-04-14T12:03:10.239737Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"95b677cb865ba022bb00e16cfc4ddf73","sha1":"8afb7027ba6045b1c627cc59bc90f5f78505477a","sha256":"71e9753794e720a5ed9d3cb1ef4279ef9a6c1b92b3ab6307e92d575e7dc68927","sha512":"c805ef5f785003c39b174bc63907ad9319a2748eafc3d0bb8d976390fd70664544a85c6e2a0bf6ee6582251bc6c4631188a25ac3c1f3d7630e7e440b81a43e38","ssdeep":"","tlshash":"024159cc78688216c3a216f8001b397565735c1ca6c93dc768f8d2a8b2645865beb3f8","size":2193,"data":"","first_seen":"2024-12-01T17:00:16.380798Z","last_seen":"2026-01-05T15:49:04.782787Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RWYKQ7ZE0Q\u0026cx=c\u0026gtm=4e5bi1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cebf223f5dd61774bc53857d3134d569","sha1":"02cdf53b4299ee9d3f3777f525c68fe48d06ffbc","sha256":"336ed178ae1b1e39596fcfdf2b3033d33ca18d25709a050078a8cc494910b85c","sha512":"1a5f69a38e533b981e4c01713154de26399d8003f00b0e9d278f74fc6b3a776a61e5dc8b1f12a030f591aff5dd4f0d0898905020647652b56b3132b7f52ab535","ssdeep":"6144:xv4BUKitJeUI2XVUULUVWo6O7GQEO7u1URoOr+OO:1sDi2UnVUUtO7o","tlshash":"a08409ce73d670665392b478503f018ba57b68a2f44cc899f186cde52e70a9a4277f3c","size":374177,"data":"","first_seen":"2025-11-27T04:12:05.47841Z","last_seen":"2025-11-27T04:12:05.47841Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"081f4b851602f54cc00b9e909d519fbc","sha1":"bb96062c5a45b998ebed1e3bd6646e3350c1a177","sha256":"7beaca19c3fc6dde128f9961e57d1d3494cec9483c67a9094a193b3ead7a5b35","sha512":"537edd5b9c3fd7412f3dd94f995af2e6dd23980572631ba49f0ae5c2f3c65f71cf7dc3a1f9e5f9f56f4ec8b7f7f18c1b48f287a9bfb7f24f5add3fbce46973ae","ssdeep":"","tlshash":"9cc012da329ea050935627d10c8b2444542885e88cc8998158b0979234d5716a54a8bb","size":175,"data":"","first_seen":"2023-05-27T20:30:02Z","last_seen":"2026-04-14T12:03:10.17433Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7659427ca2f5804ce48c3c313a59b55d","sha1":"b1bb46a17f58075dba494ae315593a9340f15171","sha256":"64f46db256fff74458924ed8d63a48575acc11b6abb85ae484ba2b4acb5dce9b","sha512":"9268c94c973d3dbb24b12796a236f60f0fc97ca82ac9d951a636d8b87004776634623224c39d2045ad232867656fe08fe463a3524106cc82cb0808fc3a742287","ssdeep":"","tlshash":"51f04ec875f45810a32254b0494f18a29746881ced9dddd244f1e258f37468a8ade6ac","size":607,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-04-14T12:03:10.174838Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emovementxview.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","fqdn":"emovementxview.com","domain":"emovementxview.com","tld":"com"},"ip":{"addr":"3.164.240.100","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d940d91e63561a00a5740801bb9f02f0","sha1":"b240f0f5db50b121019fbc9bc8ecafcfcce13543","sha256":"daeefbea3561929e3141807bea0d7a95db769b3f9929409623e3d570012dc961","sha512":"ed35afd89699e081d8bf5b2af41c8a37f363ca36da77fdf17277503654fe250968797e07469803edded4354ffa51715687544aa295772ae5fe562d7a4559e19d","ssdeep":"","tlshash":"fe51e19d30f3608282f6a064402bb5a6fa388a91834cdf14863d96bcbd715dd6367f4c","size":3006,"data":"","first_seen":"2025-11-27T04:12:05.571143Z","last_seen":"2025-11-27T04:12:05.571143Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4c14750c8990a4ccd9eeaa85c629b1c5","sha1":"11b7cc9d589a472b3f82ab17135a892f6740d519","sha256":"d2a4a9dbbb35c07144c6acd942d36c3e0ae579f404f0987925fef3ce6d0e9270","sha512":"ec58a6a81bf9084879963fb24d2dfab05c21ceaa7078d22a00fd40e476cf573edfdbe1510e06092a94d744b8c8d5ddbb829b70f3178e7d09e967dde00a8e077c","ssdeep":"","tlshash":"b5f0f6c875b06400f33614b4c48f29a263564c04aea9889264f4f26df3a05e98bcf2ac","size":499,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-04-14T12:03:10.22873Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1598479b5c42e3fa04f72001d6c7d291","sha1":"748a21dfede4052e4e2526a03c536b55259a5e90","sha256":"0a86a11914b2986b163a4c80924d8c2ad8dbb19565a66246a73c05aadca5dba6","sha512":"930147d5e9b619bb33311c82362cba98d732413337ff8cf0ec7f2cbf2ea6559b1906435aa61c4ea7fe8b52b81e8a16b787e110529e7a4026a3aa40879ff59dd0","ssdeep":"","tlshash":"5fe02bc575e26810e32314b4994f1a6253579d14ae9d989150f1e22cf3a02969bcf5ac","size":375,"data":"","first_seen":"2023-07-26T05:15:24Z","last_seen":"2026-04-14T12:03:10.220373Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/431546b7e3.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14646b517fb766059ef9c8b1543022d3","sha1":"26670f7f42423a509263aa7b311443290d3a3604","sha256":"c9585d950f34e3912ded1d2705f25b445e2968000a2a79c96a7f86e17b41c52b","sha512":"c90dd32b009a4d269f1c6eeb8e51f74c475b02476d41431fe486af4312f3176a82f3e42259c3701a33f6b05099025602047040da4ebdba988194c6d4703d0d72","ssdeep":"192:tBBx6OoTLwVk6Il2KEsRfFrny0muu3XZYa1If:W9TLw9Dsj9u6iIf","tlshash":"2402e91ef765f9b807e629f3e93b9100e03e36479044f470d6608e69bda870de17a876","size":8548,"data":"","first_seen":"2025-11-27T04:12:05.47263Z","last_seen":"2026-01-05T15:49:04.76415Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f3edb99388f55af940e82ce32673d835","sha1":"114503546d16ba270e38f3f3e2aa9d922fcf42a8","sha256":"a931fa9c99c70ec88c9cd397e9ad3947ba89fa0f0ff8b895403a125d15269f8f","sha512":"ba21727c46ee3085e5d4de50589cb88bd4a3391e96214db655341dbb3d470d43ef2663c6005f9188c030b88fc323f5df0e4241dbac62db4bf9a7b3ac8bb2f022","ssdeep":"","tlshash":"93e0cdd87fd9e174915391905c0f1845f23ac46c9e5cbecb4d50d1a1f4447519dc9cda","size":302,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-04-14T12:03:10.237998Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"13316b3d6a468239ef9838f9b39aa61a","sha1":"c25757427afdecce9f1d10a537d65a5ad6ed333f","sha256":"d1f26f4fee51ec3c68b72808d1147444e4239c4d6dc1260baf47f4f5a73dcfb7","sha512":"c597a784e031e2623afa780c0a5f5f52d8462af865e006e269c9f852cbc37e7422dc21e37b7e8ef54fd79d1c8375bf5d07da40afaea9034d6495fa6dd7b7912d","ssdeep":"","tlshash":"9e01e9d038b51001f266c6b0006368f67a2a9c0f02bc5dd37dfcea647358205ada75f5","size":834,"data":"","first_seen":"2024-12-01T17:00:16.373147Z","last_seen":"2026-01-02T03:02:02.740146Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8362bd67dcc8aaed7d2563a8ea217d8d","sha1":"e389ee3093f18ec3c867e23579e00ac358bc0bd4","sha256":"94aa2cb04f931b1a44f1e356694e8f36d11c98983dd78b7e3360bdc6e5640c15","sha512":"9432ebe891e9747fe80a0f7e04e21df32a81a54f60c70ae1d83c01f1c7ed52b1857bf94a6645c6a45214181c2165e475036ba1fdcc65789bb5aa9d8dc3f3b184","ssdeep":"192:EAs6znCyuPd3VaC26qZ3KroqgntHwUshVLv6R10WMqZEh6nwjTiJMMsNxYtrsdJy:lsECyAd3VaMqVKroqgntHwjaDJ7sN6tF","tlshash":"c822c2e968b9820453f083681193642a55239c2d8dc53dc37ffcc5b5b164e8a9bde3f9","size":10047,"data":"","first_seen":"2024-12-01T17:00:16.339087Z","last_seen":"2026-01-02T03:02:02.758525Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/e85a3e5631.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6b7982d02262a9560980c88d35c4e49","sha1":"9bc5b283b7272ccc552a57d684ce0e3924c2b5dd","sha256":"14e97e30ab31a62ef9d03cadf6e5ce0235eecf47c821253136f645d97e418d43","sha512":"4dd6a14b6afd195eaaea0714c357cd747545231341f3a9443d800d2b6ff0ed9263ea742800aebea02c1a910f864e0eed8fb96247f40c265520616b013f18dde4","ssdeep":"384:56e3fE5VffERtrFJ/C++Qq4puISlv2+Y0vO+bGWGCG6P2oMrEBmZdXl:5c5NfUt51jtjpi/Y0PFmvl","tlshash":"83f2f075c100e5bcf85cc656ae3d9f2cac3227e8e0ace462a56e701e5f824569c5cced","size":37369,"data":"","first_seen":"2025-11-22T15:31:01.156716Z","last_seen":"2026-02-01T08:43:19.202315Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"957f6d11a00f60f2c031229680093117","sha1":"6ddc327b522e0e337b1928518058cf92b21c6a06","sha256":"ce3f8b513491bbb1ab27b3dd8117a793fb513dd500c81a542cba90ba4e77552e","sha512":"06486f3c27f59d60d316738f6a1e62ab6dda813e0755a610048c5a2ecdfd8157f364ad48250043f8b71ea70527ffdcdee6dc788d2c53c9ec051c048ea0ed9b87","ssdeep":"","tlshash":"2c112bc405b49e53a3e7bbe411472086f76baa0e21f97cc079e4974031506cb145e97e","size":1036,"data":"","first_seen":"2024-06-29T17:47:24Z","last_seen":"2026-04-14T12:03:10.20237Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"907ba5d120566fdfc6b354957ea88572","sha1":"f0d49fa0f2d8fdda839a55eb5878fadee1a1991c","sha256":"63e7515058aca591b4032ba96e1a486940abb0682fc4a9545ba4592d91f3e585","sha512":"3d1ce2f33d5433987faf3e4f637f6c0c8ae41778443929b8454197290305c30f199018688b6464a33a19f56522e8af8a9f5c0643db2bbd432d30cde26737e180","ssdeep":"","tlshash":"d1f09e96f9eac0007f5b7080140d044df125c4acd999d9d07a90c0bab5fc5138fbb66e","size":465,"data":"","first_seen":"2024-02-02T03:21:08Z","last_seen":"2026-04-14T12:03:10.249807Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d391f87a0d8333d4c9db57c3dfb1e1ad","sha1":"bbb8dae38ad5616a835231b745f66754bbb7060d","sha256":"7da45dd5b0e3eb260a0d099865500438fbf7e6a132c164d8449156ad92826a67","sha512":"5117b8d6cf027e846cdb3393215407b1346b57d2cabc20ff4758a3aaaba76d74e1237ced2fe832a1629b090aef6f1ce5afb809facf618f06eca3e31ff1a6aaa4","ssdeep":"","tlshash":"8ae0d8c02add5065e3b2b41230972803f1f5881f08786d824790dc6435305346949aad","size":355,"data":"","first_seen":"2024-12-07T17:47:22.26029Z","last_seen":"2026-03-07T22:46:22.520922Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"70767caacf13a4d9504ee60c3fd671c5","sha1":"08b58e5ca58994ee677bb33c3a5306aa7d2799c6","sha256":"14b9360e6691b2b56ea0b0845420ddbb746a69f4274f336db96388a4fc7c3ce4","sha512":"6d7cbc46223a4367605dd15ad84e4468e2ed5ca584070be7f24435f577c4dc921375e08f9f34b60b7bb405402e09155ceb764e5af015c7a7c4fbb8c474a42a89","ssdeep":"","tlshash":"a8d0c2d17aea904193a760a6b08f6546f1f28c5904a84df3d6a0ccb835a51549b4afa8","size":288,"data":"","first_seen":"2024-12-07T17:47:22.394537Z","last_seen":"2026-03-07T22:46:22.501121Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c081e7069992d183a2eb9050538a8d81","sha1":"7ff2a71443f51f5db930fea9e31d6c9ec83f5a37","sha256":"2758d8318704c75038c2ae6f2bef4e933027493d31848fcac52ba222bca7f6dd","sha512":"a7b56124b880f61c8d66cbca97984447c8fba7fa2ff9efcfe2c949074d3fccd30ad58e9a36adcc7d5347dbce9057d1793d265c52bb77d0db82583b1368af1cb0","ssdeep":"384:P7FRfYQzvE9GtnwE7ZKzfHQr7Z2ZMHgzL+8aj1SPlgHgZZFXmiH:3fY+vEYtnwwgzfHgsMHIL+NpS","tlshash":"2c62095b2317354c0a5162a67dff3f9db2fe6a2bcd525c03a8dd861c00744152e6f7a8","size":15499,"data":"","first_seen":"2025-11-27T04:12:05.577958Z","last_seen":"2025-12-01T03:44:45.151665Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"127a205519acab3c5b732b7d5adf5b8e","sha1":"c3ff7dc85fd2cbb2c8f61b38cd230817a8ac1850","sha256":"bcecbb3b9174a2f29b75aa66fb43eb885e2194b64c98ae6dffff623b02f6ba81","sha512":"7e956ae759d51842b7bb85c0f387d3856c7c1ad13932f711decad64a2acb4c5705611d97bdb3935f3c4312ad3d1a3934745f1a1569f664b299265fc9fe8cdec6","ssdeep":"","tlshash":"14f02eda28dad4445697c0e06813dc46f21ca51e84fc3cc5bde0d860a2cc665e8a2867","size":471,"data":"","first_seen":"2023-05-27T20:30:03Z","last_seen":"2026-04-14T12:03:10.204752Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/75a3ee3152.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/75a3ee3152.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 24 Nov 2025 08:21:39 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 236311\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMJSGNeMmEdLDmtYHf24ss5eBOJi8vfbuLR2WcPJEbc8BBcoEqherLLHq4D2upUA6AOiD9AwVV7UZ5xfPEJhmK3VmfeAk1XUUwPhUBOXhWv5Dwb%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e6b5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9346,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9342), with no line terminators","md5":"9146e94a950c11dfd4bdd8c36868c74d","sha1":"17de432ce1c47dfbbf33ee0f91f24162448e5b89","sha256":"774318fd7561002026069b44ed1328c8f471c65ec571ea4d4702a1513f3292e8","sha512":"b0dae08106b63ba4769010ce777b9b3fcf4790b898e49f9bf8ad57e3cd9543263420fbdb87f9060fbb032503ff1e79f55436a80cb6f31df07bcfc7e95221c726","ssdeep":"192:/WPfOF3kGoUwGrfnR0cok2nriQ9nPiB12Qu73yVCJyIctctZ4p:/WPfOF0GoUwGrZ0++iQpiB12j73yHxu0","tlshash":"2412a5b86574d3bc13c906b7e9a66124a9f9044ab44de8b0f1bd8d75bb72708d89083e","first_seen":"2025-11-27T04:12:05.430993Z","last_seen":"2026-01-05T15:49:04.707437Z","times_seen":11,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/css/e4d6e9cea.css","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/css/e4d6e9cea.css HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 01 Nov 2025 01:10:58 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 1886897\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5P76VTz%2FQ1xQRy58BWiOdvI76YFbu81mcBXXA4xp%2BzZssToWCRExFxLc5oa5nYPxaANkn8DQajVhTuOE9ccPXMCq6K8%2F9QM6pYIU9dyHnh%2BxTHgn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e755693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25572,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (25568), with no line terminators","md5":"9f4f8b09075797f19278bbb3e6bb5002","sha1":"d3e1178a4830e2ed026f9b50d94b0cd9e848f02a","sha256":"4f0f0089122695b95c8d93644a36920a1097f02b7142a28630bf31e545837ce2","sha512":"07402a6336747afae6a378716e60d20b31f5850cd58b1ff9e2ecfdff01b53c1dc4d2d5639214c4e91270fd3cfb59c075ed17ec5041ce94401bc1991004f93dd0","ssdeep":"384:1CfOltCiv6zbDifEYh+RYhRWb5RK6cfPgREQTn:1CfOltCiv6H+cYhwYhRcn/rTn","tlshash":"39b2515f02512f2ea927cd6d0ba92e9a5665c537c71b23fc98523e14cbfbb4106f2306","first_seen":"2025-10-05T14:44:22.565112Z","last_seen":"2026-01-11T18:57:02.004872Z","times_seen":33,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/css/25b2c269a.css","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/css/25b2c269a.css HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 05 Nov 2025 06:40:02 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 1886897\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NsqoHV1DuAtpg9GIEAJxZu52G55xbRIL5Vlg%2Fypr0mvzbVwvp%2F%2BZkT%2Bdxd1vdri05uPXsDHIZDDQ5TePSoRI2VUwGZg26mdwgpMhsztWZD4pBEUg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e785693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":341284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"ef3d48bb0f9ddf0bf30c8ba5418df2e0","sha1":"079d4ebd702d4e138826a45f271a303f9e6df700","sha256":"f8aed495947d89163344e0bfa3ec0cde5569e1b92e4d2a4c091625719f4e28d8","sha512":"c5b11b2efad4a5c14754f1253e719588ee3e27644afa5e3ad0aade5688ce14804bd417ed6951976ffd31a89fd0804f4b2bad86bd2eeb6e27c29db1ef30a26e63","ssdeep":"6144:YreVtuH9k0bH/O9g2nldu1n7jE9Scb1dkn9qI5:YreVtuH9k0bH/O9g2nldu1n7jE9Scb1O","tlshash":"2e74753b6156272c9137dc210b9c2601abd5c963e212a3fcd9a06b39cfd7f86177364a","first_seen":"2025-10-05T14:44:22.547032Z","last_seen":"2026-01-11T18:57:01.979865Z","times_seen":33,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/webp/icon_apk.webp","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/webp/icon_apk.webp HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2820\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: HIT\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Tue, 28 Oct 2025 20:22:11 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1886896\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVdBZ97Pq8a9mvY4HxJVgptLP553DmjQa33ZNA%2Bvt4R3H48TQsZ%2FcYFcrBvULwJsI%2Bb4m9ZqJr8gBUoT6tBPJKX2K7ZMljHUjeWg8Hm8exgqmX4G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d4e7c5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2820,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cde3652b67f0c439a963b00d486a712","sha1":"bf0da4e99be1cb817332094f6e86cc3e0fa5d1ea","sha256":"5e8a3e31da17b01e26a69c6042efbda4b0028315c0360ef002e1b889401e854d","sha512":"5a9f91328e89f84fc67f4f486cce2cffb8450cf4131b22efee9c755e0e6f23903f6d7e0cc53d7698a6b21230241ea8f398b8222021bdc7609d0336deaa4b1e63","ssdeep":"","tlshash":"40515b61116ce03006f6dd611152d7f83eef6fe8c70a5ac8e6c8a81ecab94c933b0d20","first_seen":"2024-06-29T17:47:25Z","last_seen":"2026-04-14T12:03:10.164528Z","times_seen":170,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/webp/icon_st_ots.webp","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/webp/icon_st_ots.webp HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8464\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Wed, 19 Nov 2025 19:19:57 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 524767\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QXH%2B1YUVuD36wxPvWsikeJmxHcj2X7FXeyrz8Ojj5374H%2FtI80RbGa3u%2FmfogHIaEKCSWYzXZ807W2XGfa1rdr%2Bgply8crNePcZRb9i2MRmDS%2FAk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83a3a045693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ba4bcd92de606fdd1ae94b18a5c5c47","sha1":"26debf25d3477c674d960bcf9c14cff1fa1dc798","sha256":"fd121c61e1b7a28cbb2a4e90fff27569ed8c77917ec6bcc6073a5623bbc1f50c","sha512":"0755a7c1b2a65b1fa0cd07766411f5ee272fcd944c95a782d742f61dece8b7bf0f1b67a55e3b43ae821a1db757f33ca6c164f0ce397763b0b350d9d70a9c4608","ssdeep":"192:+rlPd2EiSP8AQBm51yI8C7IZrNI94+HcigyK1nKpRbRwjkGrS:+rlPdLtPf51B8C73K+8fnURw/S","tlshash":"d802afbe82a29b45c24b487da67fced09d44d09814d132ff0f820ea395e79c81375019","first_seen":"2025-03-28T18:40:52.589788Z","last_seen":"2026-04-14T12:03:10.166868Z","times_seen":128,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra11.tcgfs39a2.xyz/sfverbb3711e6f71fe5d770af00ba65ae0944224a09/api/match/live?sportType=0\u0026language=0\u0026stream=true","fqdn":"apis-data-defra11.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apis-data-defra11.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:41:28 GMT","end":"Sun, 28 Dec 2025 14:41:27 GMT"},"fingerprint":{"sha1":"D4:E0:E2:2A:77:82:32:8D:4E:16:CA:0A:19:A9:BD:5B:69:CD:5D:DF","sha256":"E0:BE:3D:ED:50:D3:A2:F2:0B:C8:9B:C4:55:79:D2:84:A0:28:DF:B8:4B:D1:DD:55:5F:E2:94:0C:F9:46:9C:F8"}}},"request":{"raw":"GET /sfverbb3711e6f71fe5d770af00ba65ae0944224a09/api/match/live?sportType=0\u0026language=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra11.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:33 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nsa-host: apis-data-defra11.tcgfs39a2.xyz\r\nx-request-id: 2530c0b05_210f9b61a2d\r\netag: W/\"0fbf292ae85ed143ec72346471340019e\"\r\nrb-port-server: 0.002\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.007, HIT\r\nrb-ray: vaBzihdHklq-60-HKG, aCplghdDelS-60-FRA\r\ncache-control: public, max-age=60\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4JTMnlpI6FePx%2BJOWLxAaJxnIh3on6ueoQRcqJo%2FhJVFbyHxeH6mlPzvbTw7hQV80wtBFwAnC6Tw3AklMOKve5nKkv0gLBkTypklDAYsRHovN4O%2BVBiT3K8A9P%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83b9d93712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29689,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"d9fca37c64268dc4601f45cb8636e5d1","sha1":"567ac39d43d4fdc808fbfc5d6ac9ca40e93ff0b2","sha256":"1d982f3cde8134ecb63946d15db1e43de6e0655c9ed518bc89c3eeda7bea415b","sha512":"5d7dbf1697d4a8f79fa25e078f7814989f970a6fb6e10876a0ac849b22925fcfc6a86142dd0700400d7433efe0d865542b99c1efccb71cb8a6772da51ea4ec25","ssdeep":"768:EISr5wkXhbCqfcoZQkNTEE2sV4rOt0QvyTx:EISr5wqrc4QkN8su00QvyTx","tlshash":"0be283ff461a2b73d7af75ee4623131fc4b7268abda5b02fe80c11414166b19464fca8","first_seen":"2025-11-27T04:12:05.441715Z","last_seen":"2025-11-27T04:12:05.441715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra11.tcgfs39a2.xyz/sfver670cebb3e2a64608519c5814cd7ffead/api/match/count","fqdn":"apis-data-defra11.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apis-data-defra11.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:41:28 GMT","end":"Sun, 28 Dec 2025 14:41:27 GMT"},"fingerprint":{"sha1":"D4:E0:E2:2A:77:82:32:8D:4E:16:CA:0A:19:A9:BD:5B:69:CD:5D:DF","sha256":"E0:BE:3D:ED:50:D3:A2:F2:0B:C8:9B:C4:55:79:D2:84:A0:28:DF:B8:4B:D1:DD:55:5F:E2:94:0C:F9:46:9C:F8"}}},"request":{"raw":"GET /sfver670cebb3e2a64608519c5814cd7ffead/api/match/count HTTP/1.1\r\nHost: apis-data-defra11.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:33 GMT\r\ncontent-type: application/x-protobuf;charset=UTF-8\r\nserver: cloudflare\r\nsa-host: apis-data-defra11.tcgfs39a2.xyz\r\nx-request-id: 7140c0a3a_21015251a2d\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nrb-port-server: 0.002\r\naccess-control-allow-credentials: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.005, HIT\r\nrb-ray: vaBzihdHklq-60-HKG, aCplghdDelS-60-FRA\r\ncache-control: public, max-age=60\r\nsa-cache-status: HIT\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\netag: W/\"044f508d6954bdda1e8248b811e74a9b4\"\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9kJ5vOjANJPvuQqVoG5TTqtfwTnEZQWAAiQsR583Cz%2BcQ%2F3BCJEBIf8ufrIUnOcQYsjrm08J9OnpuVYijRTMO4GvabrbnpKy0OoCwEgCT8KED8EFKK3Ty1bkB8b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83ebe47712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/x-protobuf; charset=UTF-8","magic":"data","md5":"44f508d6954bdda1e8248b811e74a9b4","sha1":"58c19c804530a26de9aedd5aeab6d322ae96763a","sha256":"d4110d2f24f0ae9da758064733c3cfa3431d311558ce6a1fe60254c22692522a","sha512":"64050a3d2557c546742ae1d32a33e67be947a7ded3e3cca217c6b2b8197b0ed412d1ad0cdb55e76fcf9b1d8c5914cd3efe4badea0579b8257fc2d12fb8eaecb8","ssdeep":"","tlshash":"f3b0122667932658834a06c86241745314c1403c0f811ffba0d31540127160d346318f","first_seen":"2025-11-27T04:12:05.44312Z","last_seen":"2025-11-27T04:12:05.44312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data11.tcgfs39a2.xyz/api/common/params","fqdn":"apis-data11.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:31.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apis-data11.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:42:11 GMT","end":"Sun, 28 Dec 2025 14:41:59 GMT"},"fingerprint":{"sha1":"4B:02:F1:58:67:AC:F8:72:FB:80:B1:A2:62:DB:3B:14:97:ED:2C:74","sha256":"4E:CB:B6:AD:15:2D:4D:6A:14:CB:76:ED:1E:70:44:63:F3:EE:07:F0:0D:85:D0:6C:7B:6E:61:99:F6:B3:4C:22"}}},"request":{"raw":"GET /api/common/params HTTP/1.1\r\nHost: apis-data11.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nsa-host: apis-data11.tcgfs39a2.xyz\r\nx-request-id: 8800c0a25_194164c1a2d\r\netag: W/\"0d0b194bbb9ea2080683e911e0d83186f\"\r\nrb-port-server: 0.002\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=60\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nraOYh1t0ovJiXJY8We%2B9k2QdlxflimN6d0SiBc55gpq0VSXtyBXc1NiibAZBAGnlMAxCofRqfel6JShVGMrE%2BX5l2mScBFM63ltbdfSCMNQZGU4mTPB1iQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec8352ae8b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20683,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (20622), with no line terminators","md5":"9f01e457508213cbf97494b456abcea3","sha1":"c0e9be9bea24895a2a68688a722043fd35d2a4cc","sha256":"698984af01e6153e6eb55ecdd266299dba08d05f01aa632596794f85432880e7","sha512":"811bb936111eeaa0b415748877e7455095cc8636a9128acf17a4127edea18ed92a37d120d1bf7e6722e3085a519f6f59ea0c75f4969927c9f8282ca4441e0ccb","ssdeep":"384:gpQJVOgiWJi+70qNZ7pXKdtSRPoVsVbObBtFNN2c87QC4h220C204nznmnpnkn/g:euJi+77KyBzmpk/yFAtID250PCVQcblk","tlshash":"7092529ddc9229297cc831a44138f94a6f0caeb93432ae76801e6f0dd98f72754f25f5","first_seen":"2025-11-27T04:12:05.444686Z","last_seen":"2025-11-27T04:12:05.444686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":101,"dns":78,"connect":1,"send":0,"wait":228,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data11.tcgfs39a2.xyz/api-cf/common/timesync","fqdn":"apis-data11.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apis-data11.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:42:11 GMT","end":"Sun, 28 Dec 2025 14:41:59 GMT"},"fingerprint":{"sha1":"4B:02:F1:58:67:AC:F8:72:FB:80:B1:A2:62:DB:3B:14:97:ED:2C:74","sha256":"4E:CB:B6:AD:15:2D:4D:6A:14:CB:76:ED:1E:70:44:63:F3:EE:07:F0:0D:85:D0:6C:7B:6E:61:99:F6:B3:4C:22"}}},"request":{"raw":"GET /api-cf/common/timesync HTTP/1.1\r\nHost: apis-data11.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\nserver: cloudflare\r\naccess-control-allow-credentials: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=10\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nrb-ray: kexodfaehKlM-0-HKG\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nrtimestampunix: 1764216692\r\nsa-cache-status: HIT\r\nsa-host: apis-data11.tcgfs39a2.xyz\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FIEQuxTo5B%2FfKQ4wtk6WW99h9%2BlIklnGQEPqyzf7uME35J2hcJcQ6rmfPtR0Y9YCJrxpyhu32I45yWkc0vyIDv5LbMoAGGHGGGXD4Eik6ycSIj2v0sAb6k%3D\"}]}\r\ncf-ray: 9a4ec8374d03b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S1309491115%3A1764216693457653\u0026hl=en\u0026ifkv=ARESoU3pUwfWlDVg8K_qrz2hBO-ylbsV2gdpnR2GDXZ3nBshZj2GKBOIr7bBEjZSvpAFRXTkbuBNYA\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:34.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:51 GMT","end":"Mon, 19 Jan 2026 08:33:50 GMT"},"fingerprint":{"sha1":"99:FF:FA:35:E4:FB:4B:28:B0:D5:C1:D4:AD:3F:43:AA:85:22:87:8B","sha256":"30:D1:CE:98:2F:EB:E2:4A:53:22:1C:BF:BB:4E:BC:2C:CA:E1:CE:CF:B7:9D:20:26:F9:55:2A:6B:ED:AD:DA:83"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S1309491115%3A1764216693457653\u0026hl=en\u0026ifkv=ARESoU3pUwfWlDVg8K_qrz2hBO-ylbsV2gdpnR2GDXZ3nBshZj2GKBOIr7bBEjZSvpAFRXTkbuBNYA\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.fctv33.casa/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 27 Nov 2025 04:11:34 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-OdSvTHP78HEhEcj630GArA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.KEYUHSehrM0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra11.tcgfs39a2.xyz/sfverbb3711e6f71fe5d770af00ba65ae0944224a09/api/match/live?sportType=0\u0026language=0\u0026stream=true","fqdn":"apis-data-defra11.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:40.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apis-data-defra11.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:41:28 GMT","end":"Sun, 28 Dec 2025 14:41:27 GMT"},"fingerprint":{"sha1":"D4:E0:E2:2A:77:82:32:8D:4E:16:CA:0A:19:A9:BD:5B:69:CD:5D:DF","sha256":"E0:BE:3D:ED:50:D3:A2:F2:0B:C8:9B:C4:55:79:D2:84:A0:28:DF:B8:4B:D1:DD:55:5F:E2:94:0C:F9:46:9C:F8"}}},"request":{"raw":"GET /sfverbb3711e6f71fe5d770af00ba65ae0944224a09/api/match/live?sportType=0\u0026language=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra11.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nsa-host: apis-data-defra11.tcgfs39a2.xyz\r\nx-request-id: 2530c0b05_210f9b61a2d\r\netag: W/\"0fbf292ae85ed143ec72346471340019e\"\r\nrb-port-server: 0.002\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.007, HIT\r\nrb-ray: vaBzihdHklq-60-HKG, aCplghdDelS-60-FRA\r\ncache-control: public, max-age=60\r\nvary: accept-encoding\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 7\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nj1UMujGE2PjmNyPj5qEMdYNrKTwfTgBe%2BGWUs4Qh6ZcfB2Za0%2FmS8wwu3DmU4nE2i8h%2F96VTnKop7sVepLXhsFljPB6us%2BYbIvMIV5t79MYHMlRS161oB28vyPg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec86abfce712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29689,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"d9fca37c64268dc4601f45cb8636e5d1","sha1":"567ac39d43d4fdc808fbfc5d6ac9ca40e93ff0b2","sha256":"1d982f3cde8134ecb63946d15db1e43de6e0655c9ed518bc89c3eeda7bea415b","sha512":"5d7dbf1697d4a8f79fa25e078f7814989f970a6fb6e10876a0ac849b22925fcfc6a86142dd0700400d7433efe0d865542b99c1efccb71cb8a6772da51ea4ec25","ssdeep":"768:EISr5wkXhbCqfcoZQkNTEE2sV4rOt0QvyTx:EISr5wqrc4QkN8su00QvyTx","tlshash":"0be283ff461a2b73d7af75ee4623131fc4b7268abda5b02fe80c11414166b19464fca8","first_seen":"2025-11-27T04:12:05.441715Z","last_seen":"2025-11-27T04:12:05.441715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/css/d48cd89a4.css","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/css/d48cd89a4.css HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 29 Oct 2025 01:09:18 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 1886897\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tltiJzcoUy3DJ9rBXxm%2FTnRFQ4XKtJr0rdiq9WaLlskttPIbJ5rOF%2B36gfluzuUxEVfSHZF9xfEnlRT93%2FGimehW27p7s3Y8cnhFR7SQMm%2B49md2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d4e865693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89463,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"fc136867340e16c73746fcd402330319","sha1":"36292bab8438e69e49550ebb9c0dd636f2f07fbf","sha256":"52a9fc7b54fc92c67bea8d127689839a41638ea6cce878f255b72d6ce5d5790a","sha512":"ec42427fa52c9d6dc994d652618050d28e32c4576dc4a09abf977c0e28cafe311515cc3aaa3a86b9ba272d6e602d240493a21266d8efb6419233b33d25f0505a","ssdeep":"1536:rqjoMfeTPUzYHYDVVnzwKWWf8YQYvFo9p4NYSCYGYp8A:9Ujp/8A","tlshash":"5c93747b4182231da1178c210bac265697e6c473e24763fde9a13a39c7c7f8617b364b","first_seen":"2025-10-05T14:44:22.541118Z","last_seen":"2026-01-11T18:57:02.013619Z","times_seen":34,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":66,"dns":28,"connect":5,"send":0,"wait":19,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/e98ee9e7190.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/e98ee9e7190.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 19 Nov 2025 19:48:25 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 507227\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3CxW8szsLHtr%2F3QHwzfTePrZPGgEuKUVTOsji2DikzMxV6Pv42gzZG3v%2BL2OeGDoEsV4rEC%2FACnmm2WCt84vuvllBMAdTvgupFEN6Me8OmTSR8g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d4e855693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459493,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3fe8f8f8523e1f5df26a09fef18c3838","sha1":"68aea5ff4ab5f439a5085c0777d91d611accdbe2","sha256":"4ebf7934781c5cc9522f2c89835f1ab345c9a0baf72b6d6813aa1d4b932f836d","sha512":"667442aba6743676f8d32738b33c929f390c6835bc9d020a1ad7ae1e6693536ba0f3e9068dcb1fd743906d1cc6686c7f7f57388a934a51e4732db2cf6610da9a","ssdeep":"12288:7tGfe9jJDAFDsS4BFhFvb+j+Z+YP2f2tOlLtul81EtlXbgHh:7+e9j/tOlLbEtlXbgHh","tlshash":"fda41b44fa80b17c8b9b51b5522b501af22f4855606c5cb4f2b5e9e02ff1a4ca17ebfc","first_seen":"2025-10-25T20:37:41.31378Z","last_seen":"2026-01-05T15:49:04.7322Z","times_seen":25,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":68,"dns":27,"connect":5,"send":0,"wait":18,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/css/e479fde6b.css","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/css/e479fde6b.css HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 01 Nov 2025 00:49:29 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 690287\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwPTON%2FstgD9JV3xlni2XkSDyBdD4kus6dyX94rdt5sd4n3iebhRmHEov9Ruh53y7spg7KX7P66TOuizVsaZcsSdfioBuQCDRF85MOjkxpC2M8c7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e695693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29022,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (29018), with no line terminators","md5":"c8d14f062afd280665bc9c1bfaba51a6","sha1":"9ed831cf7f347d0c74099c16129dad6231bb7029","sha256":"5de7ec931fe0b402e6d88b62f6b942a962e462b08635ff54f44a52856779d7b5","sha512":"20f3392335bbc54bbc2110079d040baa4ccf64e8d2a10541ff3237c307ea544ba4398277a6a9a8416e2da043f5e0d501f6405d68f06616542d8d9037f36ac834","ssdeep":"384:3+NfPFAy6pkYhDbi3pTlYhdzEiX/riLDW:3+NfPFAy6mYhDbypTlYhWK/riLDW","tlshash":"35d2421b14e2232d7127fc540aa8a6668265c532a34653f994b2772cc7dbf8227f724b","first_seen":"2025-10-05T14:44:22.537509Z","last_seen":"2026-01-11T18:57:01.989661Z","times_seen":34,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/2fa11e88210.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/2fa11e88210.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 24 Nov 2025 08:21:40 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 236311\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RL1FL1ObDCyhnBioASzSLkf7GhwKUhGcw0FV6KJbfpzToV86TXRohtnD3GdE7MCrJx5sNa9jIQ5JMJHPEJoO%2FOcbKD2xoLmNoE34McFIhLhARLwv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e795693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71830,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e14a536c890ba8e6dd7a6d497dc67cb8","sha1":"3374044166dfa7d94427ab61794b18fc12e1a072","sha256":"4071a4f082cc8f7b368f2664d5484e2d5cd148dcffbceddabef5f5b19fc09902","sha512":"1b442b8f768625a8fe640e5f9b7d544c83e57f281b1bac925210cf995c606c652797a08c3aeef53aefdb5773d4b0f815aa983ade89f3e35cdb0c626802a9f814","ssdeep":"1536:x1XW2orzft4wXNcI/q1Ic/J1Ic/ucI/6Eq8SNKu:xBW2oX2wXNcSKIuHIuucS6Eql","tlshash":"2a63eb58a295f6fc4b9615b3933b6058d57b1ada70ccf830e272cee07a34289d529c7c","first_seen":"2025-11-27T04:12:05.452092Z","last_seen":"2026-01-05T15:49:04.69567Z","times_seen":10,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/fc/web_logo_fc.svg","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/fc/web_logo_fc.svg HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nsa-cache-status: HIT\r\nlast-modified: Wed, 05 Nov 2025 01:39:47 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 711509\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k0MRhKPDRGRw1CzY7NfKXxZI3Mp4ESMe8bjk7oUytcOw1IMguhvmxLT0GB4X%2BKYWvXVpqvTYC61qIDhHT0UeZfQ1BMomDzPpmIKvJ29%2BEg6IEEfw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d4e7b5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b5a6684f65e079040e2f7dd2546006c","sha1":"b282d2742a9b03cb586de69cdfdde1cf2b89e831","sha256":"728520b1aa63f59d676051416ce5f41249e0791dcf4140cb3d98c67f43dd836b","sha512":"cf3d475fb352c35ceabe5c07f46d0c2d7bdc5285f1303cb102e622b996fe7bfdb01ebf84bbc1bd17accdf838665b8b415b30f5b9fe49057704fc6b6178356a01","ssdeep":"","tlshash":"8a712296933c43fce58646548a38607336f2a4ef7574e2ecd633aa51a6c6bf04074878","first_seen":"2025-07-23T04:34:24.830315Z","last_seen":"2026-04-14T12:03:10.171293Z","times_seen":68,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3jzhqnvnvdy34.cloudfront.net/?qhzjd=1215328","fqdn":"d3jzhqnvnvdy34.cloudfront.net","domain":"d3jzhqnvnvdy34.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.191","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?qhzjd=1215328 HTTP/1.1\r\nHost: d3jzhqnvnvdy34.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.fctv33.casa/\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 79137\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.fctv33.casa\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 53019ee090f087ca6c6fa860098bcd80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: gY9-3WlbW8tREpcesbtFDxmWpl_BWM7odwxgG_W4OH9itlwFXCF-MQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":232310,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"9cbd796a59cf0d286df9c8f5db29e51c","sha1":"004be2594df70605734ff58aa61df5767195d19e","sha256":"b98c445463a4255cfba4818c5d6f352f207a1ae68bb28f32357b01cfabcfb4de","sha512":"22448e272ef7ec9ad15fb32fd1fc90e151dfae9ba8c81d77032d92d77c84316d234412890dd17abcec0cf7683afe602ded55d3e034d4d39910c987a40f6a3fc0","ssdeep":"3072:XBUNP5+Ya/06R42Da7oV6+53UOng7L9vN9Ws+Zc53+Zc0M8Ec:XuNR+t/06G2D02bRZU3+iA3","tlshash":"57344cc9ba923429836374f540bf524ab23f5a69b8084dd4f496d4d07db8d0a437bfac","first_seen":"2025-11-27T04:12:05.454704Z","last_seen":"2025-11-27T04:12:05.454704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":9,"dns":37,"connect":2,"send":0,"wait":175,"receive":3,"ssl":7},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"d3jzhqnvnvdy34.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-97591864:1764216693374346\u0026ifkv=ARESoU0O47anHB5MmwkaYItd_lTruX4-3VOlZ1A8nIsBUY0YfbmFMGCwaQt4I23vUgNPmVMVeO6LRQ","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:34.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:51 GMT","end":"Mon, 19 Jan 2026 08:33:50 GMT"},"fingerprint":{"sha1":"99:FF:FA:35:E4:FB:4B:28:B0:D5:C1:D4:AD:3F:43:AA:85:22:87:8B","sha256":"30:D1:CE:98:2F:EB:E2:4A:53:22:1C:BF:BB:4E:BC:2C:CA:E1:CE:CF:B7:9D:20:26:F9:55:2A:6B:ED:AD:DA:83"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-97591864:1764216693374346\u0026ifkv=ARESoU0O47anHB5MmwkaYItd_lTruX4-3VOlZ1A8nIsBUY0YfbmFMGCwaQt4I23vUgNPmVMVeO6LRQ HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.fctv33.casa/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:AbOKbM6xU2mNJB9Za5D0mFXX0NstPg:u2eqLgMFxNoDnao-;Path=/;Expires=Sat, 27-Nov-2027 04:11:34 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 27 Nov 2025 04:11:34 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-97591864%3A1764216693374346\u0026hl=en\u0026ifkv=ARESoU3PcJz9Fi74yCmvjXF0tECt3HswStEhEKhZXreRAgFQ5A9fTE3AWHqab4f39Hb3fpEHe9c2kg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: script-src 'nonce-leF8RUfiKBDlxwanTvN2Zw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 416\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbtvplus17.xyz/","fqdn":"rbtvplus17.xyz","domain":"rbtvplus17.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-27T04:11:30.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbtvplus17.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 17:46:08 GMT","end":"Wed, 18 Feb 2026 18:44:46 GMT"},"fingerprint":{"sha1":"71:F6:56:F8:C4:1D:27:65:76:00:51:D0:7A:77:AF:35:45:6C:49:D0","sha256":"05:5C:53:D9:BB:72:6F:F8:EE:B5:C1:C0:CA:16:CA:6B:A2:E1:3D:50:8D:F2:59:C6:0E:FB:ED:EF:F6:90:EA:B8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rbtvplus17.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-length: 0\r\nlocation: https://www.fctv33.casa/\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7mF%2BnlixMpW0RT01PQ0%2BCcJ4iv0i%2FY2xHN29TO05Ph4M4tulMNp2hRXau56r7lhNWeE70IVDR%2FD%2BNfxiG5fQWcW%2Bt3Y1gxdS01%2BQLTTw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a4ec82b0c12723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67280,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":75,"dns":49,"connect":1,"send":0,"wait":3,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/539b2324f15.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/539b2324f15.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 06 Nov 2025 02:29:53 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 507227\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6DjCEdfzrkzozgIyYJ5UtkCBCflcLn4R9RCEWwF3gMXZqz8DJupMZPQS7pZxmqS5aYfIUAqxAgQxV%2BQb%2Bl4Ap%2Fw1gB2PfStPicgGv%2FrPhkNtVyE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d6e8e5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54abd291dbd3e3e3039445f4767f76af","sha1":"706d9cd6cf0d249f6b56685eff24ec4676e2d075","sha256":"ec90c3310ed4d5815f2f5568b9e847430889f9426b2a55b6e809149db7209d5e","sha512":"7f934e9acc5cc400cea738bb3af5a77a30dba49989c9bd7ee807410b00a671f5982bb32ae2c4d2aea6cad93ae70bf86f8de72d2f4e31d9c7af7159f1f448ed85","ssdeep":"3072:52gjIe1u/ENU3ANwKQkm1BiNdyqpplk/W9HCHg8715xpFtG:52de1GN3ANwK5mfiNsClk+hCHg87PxpO","tlshash":"5f64e898f790b1b847a762b1923f102fb23f5855508c9ca4e266e5e03e7494cd53feac","first_seen":"2025-10-25T20:37:41.345896Z","last_seen":"2026-01-05T15:49:04.777302Z","times_seen":25,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":90,"dns":33,"connect":1,"send":0,"wait":8,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/f7305f4c814.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/f7305f4c814.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 24 Nov 2025 08:21:40 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 236311\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4iGUKGyp5Zegyj6kY2mK1PASOLOSbfuHmp3JuLb1iGzcrJCYRomc0cTs0Xe49qNFqVqNjiMFZkqeH5PatX1tGSmdXNKPMMoIHg7fJVFqaFSrac2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d4e875693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":615250,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65493), with no line terminators","md5":"352fdec4d7abc7f109b114d1e1e0386e","sha1":"80f77f039d7cf36ef3f6821f9549d7687eadf74f","sha256":"3591ef58bced8b010c071842fbd3fe2f9198c5c8307f9583fe8283c1c17630da","sha512":"f8cc2220c5a4f243950108ee78b511e774466f51eac251b399e440caadef954231de6981b8e27262524419bdc42bf1370b61cba33ae46dc273e332704c7ecf98","ssdeep":"12288:kgaCrEKoIuOESDUAhGSmpH43AnAOfqSSAK43k2buL5o5zHbkVczPIEF18EI9/y9x:kgaCrEKoIuOESBkkVczPIEF18EI9/2BP","tlshash":"77d43c24d365e2a5a27211b37a2e310365a91aa469fcfc01d7cefc7439e474eb07f468","first_seen":"2025-11-27T04:12:05.46205Z","last_seen":"2026-01-05T15:49:04.756021Z","times_seen":11,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":63,"dns":30,"connect":5,"send":0,"wait":19,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dcbbwymp1bhlf.cloudfront.net/?wbbcd=1215328","fqdn":"dcbbwymp1bhlf.cloudfront.net","domain":"dcbbwymp1bhlf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?wbbcd=1215328 HTTP/1.1\r\nHost: dcbbwymp1bhlf.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 79136\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 42b1b4c2d68cc43ab5019609cede1d92.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 3OmtfV_7zKQwy0Sx0WFMQSy2gZZsV9tXY0suW1Uhc67GvG84frVeQA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":232310,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"d55a2cde98705ef5d231e3996f5335e5","sha1":"3d9ed0529c3876e0bbed113764b449100a97b573","sha256":"8a9f5ad03dbbdc8198d64b6c6a7af883e41f00ce80a959930e85d8f9cf638feb","sha512":"2550b97d7b8c9bc95d6d740b7046c09b304d36564b6276eda2cf45f051e59711789ed446128599eb06b8cb16f99e01718424f1d8b9a2c3264f2edf6c28d66160","ssdeep":"3072:XBUNP5+Ya/06R42Da7oV6+53UOng7L9vN9Wm+Zc53+Zc0M8Ec:XuNR+t/06G2D02bLZU3+iA3","tlshash":"b9344cc9ba923429836374f540bf524ab23f5a69b8084dd4f496d4d07db8d0a437bfac","first_seen":"2025-11-27T04:12:05.463329Z","last_seen":"2025-11-27T04:12:05.463329Z","times_seen":1,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":10,"dns":0,"connect":1,"send":0,"wait":178,"receive":3,"ssl":7},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"dcbbwymp1bhlf.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emovementxview.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","fqdn":"emovementxview.com","domain":"emovementxview.com","tld":"com"},"ip":{"addr":"3.164.240.100","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emovementxview.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0E:BE:04:FE:60:92:12:EA:DC:FB:9E:42:CE:90:90:B8:E7:06:95:14","sha256":"04:B1:83:C6:D5:07:2E:DF:23:83:D6:14:C8:AA:50:21:0A:9C:81:05:39:69:EB:DC:12:71:71:CD:EC:D3:E5:1F"}}},"request":{"raw":"GET /SVZiS3ooNAEmRShrAG0POzpfbkgPc1ANHio0ADwDJCZTKRIlMEwoFiYjBi0IJjgWZRQsIkd5PA0PCQYAGxMNCTYPZgsvKBAnNHgWfgMqAj0tZQoqIBwbUAcNG3NQCSgNG1sfOR8HLw8CGzUgexQCLiciPBpiVw8peBIHGA0BFyQSEws/BRovLmMbCgAtBSgcDR4ZNC9PLD0zPS8gORYTSB8BKSIWLzUKHhYFMSBuSAsUUAJfexQnIgIQMzYCPwI6ASExPgcQHD4DJSQyMwYdMR4jAjpaJDF5MhovIg89NyYjCzIlAiwCOlIsMBsDFQ0UE2AmDxkeMgw7LiouT3pKK2cnCTwnDFQNKTkyASVPATUqDRIsECt8OBEUFB4rDAEGJRUYGDARSQpnLDw4eyZUGEgQFAYISgEfJCwIK2cjDTsRBFUeFAQVBgMOATUzBhMALiMmLBolGxlJD2cGExYeNDMFExlnWzJcIyUNJQp0MAcIHy8aKBgbA24DPxso HTTP/1.1\r\nHost: emovementxview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1220\r\ndate: Thu, 27 Nov 2025 04:11:33 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=/QWH45nUONxCcOFcblqtrmzVsj87cs9Nxv4XFZYniJaMCKzKyrxr5D48eopWB6sGYKpEKaYDYiqt0YJt9jFbsBsdtTk2dVfdv9iJ45ulQJECyiOMy165tWK82sP3; Expires=Thu, 04 Dec 2025 04:11:33 GMT; Path=/\nAWSALBCORS=/QWH45nUONxCcOFcblqtrmzVsj87cs9Nxv4XFZYniJaMCKzKyrxr5D48eopWB6sGYKpEKaYDYiqt0YJt9jFbsBsdtTk2dVfdv9iJ45ulQJECyiOMy165tWK82sP3; Expires=Thu, 04 Dec 2025 04:11:33 GMT; Path=/; SameSite=None\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36f6f4783c54484f0285e84da74ad1c6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: F8uLCQ3dXb5Ad9eoXBFC4Ru91KB_PFM_xR0bMEb3fYvxFhUPiYnr4A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3077,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3077), with no line terminators","md5":"823686756a28a8455c8b8fd63e9ae39d","sha1":"3a0bbfb872e91cdcd1ce49ac9425c2c9c8037649","sha256":"ef81fee6027b6ae1cdb9e754808df958261d2cd9637afc7884bd6aad0f0391f9","sha512":"01d830b5837101771987c3d071fe71f94b7f9c70e34a72f7774ba4c739cf67101fdf419d8c3eba09310f5502a03d5252d8ca896552dcf4844bb8a7d0bdf07bff","ssdeep":"","tlshash":"475101dd34f3608282f6a054442bb5a6fa388aa1834cdf14867d96bcbd715dd6327f4c","first_seen":"2025-11-27T04:12:05.464113Z","last_seen":"2025-11-27T04:12:05.464113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":54,"dns":22,"connect":10,"send":0,"wait":120,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/css/173b94d52.css","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/css/173b94d52.css HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 06 Oct 2025 03:49:42 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 1886897\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csd2HpJrKoO2QOZqJN57KOiU94JeOVA0t2HySDrPX9oC%2FlcfnuXeJPPuy6GU0RZb6XrRw2Z7Cpd4buZjUxHJyuoovklGe1zzvzn8Y9pqa8Td3eGM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e665693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57434,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (57426), with no line terminators","md5":"344e1929ef503c8a269ea518249701a5","sha1":"cd4aa3d4cfd6bc2907fc88b5cff50419c510ecf5","sha256":"badd5b1b6aa0cf8b28b1cdcf0b728d3785d3f481925e35f859fb6260c269f198","sha512":"4910e052974114eee9aad350d0e86098a0faa799f2a619942ce36aa93ca5d5866d3f195499d774d04a83030d3ed22ec99e3305f303ea9466ed833bd8109a0fb4","ssdeep":"768:CnzwKWWfJ+Yh+YhNPTpfa3kOOPGkmXYhqYhKO3X+Xh:CnzwKWWf8YQYvtfa3kOOPGkwY4YH+x","tlshash":"7f43433f5192131ca5179c210f9c2a12a7e6c863e31363fed9916a3acbd7f46167260f","first_seen":"2025-10-05T14:44:22.545827Z","last_seen":"2026-01-11T18:57:01.997225Z","times_seen":33,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/webp/icon_apktv.webp","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/webp/icon_apktv.webp HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8050\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Sun, 02 Nov 2025 00:42:54 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1886896\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcpBQfMhPiCpCe0PHgn1lOCOHxCPhLg7bJgsZZ0FkFsg9rGoVAWTb%2B0Nh5nTghqmdWF2N9DCeAJL%2Bg07iMfKXdRfUf%2BJtj3gr9KrFBAOSYd5nfzz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d4e7d5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8050,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8072e44ed0728849788b0fc2625fd17","sha1":"30ff7a4919270a2189dcd307266653fe094c8a0c","sha256":"82f0aba4e16bb1d4eabe75a535c0755de8e4598b83ad8c0a2250b1d2dfce8e0c","sha512":"e1504fcac00cbd7e8af4ddb0d15c3676217b779561b8148c4e83ddeb39c87e6415385b4f63f3e5608957e6fe1e1faae0853a7e34214f674ce95a5c504da1c01b","ssdeep":"192:rwTJM3CEKOUtGf94nAmVr3vOZ+zIdIoBZeMkzlMNF3utXGNdIb:rwT6gOUkf90AmNfOZsNecBz2jy","tlshash":"baf19d10b393557ae307023a40e80566eb67af49631b96e3e3d24a70b9cc1b21b0b94b","first_seen":"2024-06-29T17:47:25Z","last_seen":"2026-04-14T12:03:10.124896Z","times_seen":170,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data11.tcgfs39a2.xyz/api-cf/user/info","fqdn":"apis-data11.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apis-data11.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:42:11 GMT","end":"Sun, 28 Dec 2025 14:41:59 GMT"},"fingerprint":{"sha1":"4B:02:F1:58:67:AC:F8:72:FB:80:B1:A2:62:DB:3B:14:97:ED:2C:74","sha256":"4E:CB:B6:AD:15:2D:4D:6A:14:CB:76:ED:1E:70:44:63:F3:EE:07:F0:0D:85:D0:6C:7B:6E:61:99:F6:B3:4C:22"}}},"request":{"raw":"GET /api-cf/user/info HTTP/1.1\r\nHost: apis-data11.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\nserver: cloudflare\r\naccess-control-allow-credentials: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=10\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nrb-ray: kexodfaehKlM-0-HKG\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nruserinfo: EU|NO|91.90.42.154\r\nsa-cache-status: HIT\r\nsa-host: apis-data11.tcgfs39a2.xyz\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8z7uH6H5PNcWytQiyVgr5TKTUjpv%2Frdx2ftN8Q22yI90skBCYoRmmrJkdKo11t1BlCmjwroZNqIB36pn%2FXdIz0589WDkceM10yn56MDgXX%2Brxp41nnL0g1I%3D\"}]}\r\ncf-ray: 9a4ec8374d05b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/webp/fc/icon_favot2_inactive.webp","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/webp/fc/icon_favot2_inactive.webp HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2396\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Thu, 09 Oct 2025 02:09:01 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1883242\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dj4aohDelKnT5ano7rQokVKRu7JCsxoCcoCUNW8eZw05y%2FSwEH%2F919B77EenbA%2F36rP2Iwi8oU%2BOvPurZnnlGyAzJbytqoOrbSu7MYNd9xhfA6CE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83d7b0b5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aeebd213c331043a469ed65cfbae936f","sha1":"7d7ffc5e44f5da62473f79141503e1cd9d805d64","sha256":"b4f6d6e3a0fa6ef6c3e2367892f7abdce6d9b592daf5ecd06ae409bb42cba650","sha512":"6e7a63a65e6d4a30e0bc6c7acfde925a10ea2606851037bba3184b84340cb8bc29217d87a7a3a504e51f189d01e9f85cc8d5805d946c4590f4697138be41a4e8","ssdeep":"","tlshash":"8a41f96163236b8cf81953b84b416f51d230bc175799533b8282096d9f3adad6cd434a","first_seen":"2025-06-29T02:02:02.29441Z","last_seen":"2026-04-14T12:03:10.141799Z","times_seen":67,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S1309491115:1764216693457653\u0026ifkv=ARESoU3zs2SnzmUzkfb0sEboTptmbhAfEOcUPtDvaThtVClmlMvvfAIBmVisE3M5vggKKYj-gANu8g","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:34.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:51 GMT","end":"Mon, 19 Jan 2026 08:33:50 GMT"},"fingerprint":{"sha1":"99:FF:FA:35:E4:FB:4B:28:B0:D5:C1:D4:AD:3F:43:AA:85:22:87:8B","sha256":"30:D1:CE:98:2F:EB:E2:4A:53:22:1C:BF:BB:4E:BC:2C:CA:E1:CE:CF:B7:9D:20:26:F9:55:2A:6B:ED:AD:DA:83"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S1309491115:1764216693457653\u0026ifkv=ARESoU3zs2SnzmUzkfb0sEboTptmbhAfEOcUPtDvaThtVClmlMvvfAIBmVisE3M5vggKKYj-gANu8g HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.fctv33.casa/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:tOVI75B-2saC6L1g6DDwOiqJE2oYjA:JxGdV2TNkXQ-py75;Path=/;Expires=Sat, 27-Nov-2027 04:11:34 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 27 Nov 2025 04:11:34 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S1309491115%3A1764216693457653\u0026hl=en\u0026ifkv=ARESoU3pUwfWlDVg8K_qrz2hBO-ylbsV2gdpnR2GDXZ3nBshZj2GKBOIr7bBEjZSvpAFRXTkbuBNYA\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-0LjB17c6ulhoJD1URpK9Ow' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 417\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/195cc98d4.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/195cc98d4.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 24 Nov 2025 08:21:40 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 236311\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JgvL4u8OBfu0K8nGR2EruQkPqdqGb0wBK7AlW6gldCSScEA6NUHUw3zLzGHMM4b0pNem9SJMy5N4%2FGO5sVyJZirFDWrULqHuwhAEt1fij9nx7sCE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e655693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9140,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9140), with no line terminators","md5":"91f79286ef7589784aeefe57c5304e4b","sha1":"63312f46179bc269378c8b0068b8edd1c5dcf2b4","sha256":"a2e89ccec0b386ee588abab6ed0668207f1543aeaf68740ec19d8bed6a9265ce","sha512":"d1da6c0da32f704c1e09f99841679f90d7ba05c14b0417e14dc741b36a894ca59c2fcbdbc28618ece3ab90fcb7b31cff4a1639689c24c209fc9d23ab97d12442","ssdeep":"192:jE/9lN+/kkbCjE1wWJd4os/kkbCjEnucA/sKC4JhLoKOgsdQagp:2N4kKbwW8vkKxuEKjJETgp","tlshash":"a4126282b314fd7896bea32bf3312458e83991a7c1d7d6ecc136ec50f918b446e505ae","first_seen":"2025-11-27T04:12:05.470542Z","last_seen":"2026-01-05T15:49:04.719509Z","times_seen":11,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":62,"dns":32,"connect":1,"send":0,"wait":16,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/css/bddf2f806.css","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/css/bddf2f806.css HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 24 Nov 2025 08:21:39 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 236310\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=03XxhToSGAMFlKRuufHY2A8q5s71h1c5goDPSjg7FX6gT7WuN%2BvauGqEzg0EEAm0MS4i4uDiKLBrCAlKc8YPdok54pbeyxrN3NAGFvpGBbw44Sef\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e735693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26927,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26923), with no line terminators","md5":"ae36f072dc81f5746bdc2a5debc33711","sha1":"7f51d190e4edb0616f6c0dd3f2280c5b23b84990","sha256":"22b31c657517a2f40e2c337745c7dba21a053cfb132a1d51e3973790a937b40e","sha512":"45871ea5aa2269cde197d873961bcff99a4d4980998e15941810e5ecf7dca4bde03a993c0e1ca593af88f5eb621477346d92335d7ec0fda43b43a1ce8d9d2ca0","ssdeep":"384:tMGiV93rH8jYhG+zYapQYhG+i1bSYoj7YEx:tMGiV93rHUYhG+8YhG+i9Non","tlshash":"d5c2631b0541331db127ac680ba82565966ac0abd70723fdd4d73f29c7c7f861beb60a","first_seen":"2025-11-27T04:12:05.471537Z","last_seen":"2026-01-05T15:49:04.715146Z","times_seen":10,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/431546b7e3.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/431546b7e3.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 24 Nov 2025 08:21:40 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 236310\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSzn3C3I%2FPDNKADVJ4K0qJSjKYkJk%2BqFJr%2FrAgqCkOVUXvD9FDOL7lEmP8blce3zqm59TOGugarJbIiO%2FBCSPA%2BlJhiltB4BpoSeNpD9l%2FdJxsn5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e745693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8548,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8548), with no line terminators","md5":"14646b517fb766059ef9c8b1543022d3","sha1":"26670f7f42423a509263aa7b311443290d3a3604","sha256":"c9585d950f34e3912ded1d2705f25b445e2968000a2a79c96a7f86e17b41c52b","sha512":"c90dd32b009a4d269f1c6eeb8e51f74c475b02476d41431fe486af4312f3176a82f3e42259c3701a33f6b05099025602047040da4ebdba988194c6d4703d0d72","ssdeep":"192:tBBx6OoTLwVk6Il2KEsRfFrny0muu3XZYa1If:W9TLw9Dsj9u6iIf","tlshash":"2402e91ef765f9b807e629f3e93b9100e03e36479044f470d6608e69bda870de17a876","first_seen":"2025-11-27T04:12:05.47263Z","last_seen":"2026-01-05T15:49:04.76415Z","times_seen":10,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/webp/icon_st_bsk.webp","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/webp/icon_st_bsk.webp HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11474\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Thu, 20 Nov 2025 17:31:45 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 438298\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8fWDr%2BOCeDc6fArfbKcSY82KKJvRECRIppCySQ%2FQJmwiAEezmacDcTO9G6xmAxG7d%2F7fbftceUZbdtnAwGL%2FgRWRF%2FcNUhT1ehh%2Bzs4vrURBWx5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83a39fc5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4859985570397fab4de91a9a3def06e7","sha1":"b409b881d6166df6b1cd1c7ce729eef0a085d8d4","sha256":"8d90cfd8f536498777f330c3a45353fb9f8b293b025a1587f8ee74bc9e35afa0","sha512":"5f783fd0b447338ab80f234940ea70aac9a738a427351bb876712bf2875c71160b4e3da393f44f5562f24f67c019d205f7f8d8160bd0eee89bd703913c075997","ssdeep":"192:uOGnvW8ZgMYMN3tMATjFXvP7B2DtKXpj+kvI5pECuRpEkB+cHZsCdng:uOWW8ZggtFXvzB2DtKXpbfUkdJng","tlshash":"5032c00ebc6cd232fc98271d990934b0b9fa90074c6f87a3fb4ab3159ebc05a019525b","first_seen":"2025-03-28T18:40:52.601513Z","last_seen":"2026-04-14T12:03:10.16504Z","times_seen":127,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:52 GMT","end":"Mon, 19 Jan 2026 08:35:51 GMT"},"fingerprint":{"sha1":"95:94:D2:A2:42:3D:9B:2F:BB:65:03:35:EA:85:1D:B6:C0:BB:E5:07","sha256":"53:9A:55:C8:25:B4:4A:38:C0:A9:FD:A8:38:B3:FD:CA:8E:7E:1F:2A:79:A9:52:76:8C:00:7C:7B:96:1E:45:33"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:n4G9dWdIjYtUKjOWANbaVxaAt2QimQ:RkJuLVOUhVdPGk9z; Expires=Sat, 27-Nov-2027 04:11:33 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 27 Nov 2025 04:11:33 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S1309491115:1764216693457653\u0026ifkv=ARESoU3zs2SnzmUzkfb0sEboTptmbhAfEOcUPtDvaThtVClmlMvvfAIBmVisE3M5vggKKYj-gANu8g\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: script-src 'nonce-_7tsmyUV3PE3XDuElfJxEg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":180,"dns":0,"connect":29,"send":0,"wait":24,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra11.tcgfs39a2.xyz/api/common/bs?code=100\u0026sportType=0\u0026stream=true","fqdn":"apis-data-defra11.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:47.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apis-data-defra11.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:41:28 GMT","end":"Sun, 28 Dec 2025 14:41:27 GMT"},"fingerprint":{"sha1":"D4:E0:E2:2A:77:82:32:8D:4E:16:CA:0A:19:A9:BD:5B:69:CD:5D:DF","sha256":"E0:BE:3D:ED:50:D3:A2:F2:0B:C8:9B:C4:55:79:D2:84:A0:28:DF:B8:4B:D1:DD:55:5F:E2:94:0C:F9:46:9C:F8"}}},"request":{"raw":"GET /api/common/bs?code=100\u0026sportType=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra11.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:47 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nsa-host: apis-data-defra11.tcgfs39a2.xyz\r\nx-request-id: 2120c0b04_210bd9e1a2d\r\nsa-age: 14\r\nrb-port-server: 0.187\r\naccess-control-allow-credentials: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.190, HIT\r\nrb-ray: vaBzihdHklq-2-HKG, aCplghdDelS-2-FRA\r\ncache-control: public, max-age=4\r\nsa-cache-status: HIT\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\netag: W/\"0949db916a759133beb432bb80ad59b2f\"\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8k3UjoIMhdAnac%2BxukoKAYFGNPEuaGvHmfynhtBRC0Z3GJZIT1kDoSZax7UEYYw88208Wj2p%2Fv3I%2B4qqm4XThFrkQWPDz1YGWOHD%2BEllrRAYyir4UPN6hgE3P8B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec89648d6712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"949db916a759133beb432bb80ad59b2f","sha1":"44b55b0fe7a2b6407878fded4e10d19777adee48","sha256":"43202c92c96e8bf91067bbea43eb50f5b6f660322c4d66a5a68d228466c62270","sha512":"6fb408a1833ab1ac530d59191cda5c29bfd24b7720a1dfa307af766e3c0258a6db4d8ddf4e5dcc21a319a016f786cdf0fc56ea2011b8d407fb45d09aeef79bdb","ssdeep":"","tlshash":"57900201514e059537839b6154421483514346144e0466d056f529400b6461616d6144","first_seen":"2025-11-27T04:12:05.474565Z","last_seen":"2025-11-27T04:12:05.474565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:52 GMT","end":"Mon, 19 Jan 2026 08:35:51 GMT"},"fingerprint":{"sha1":"95:94:D2:A2:42:3D:9B:2F:BB:65:03:35:EA:85:1D:B6:C0:BB:E5:07","sha256":"53:9A:55:C8:25:B4:4A:38:C0:A9:FD:A8:38:B3:FD:CA:8E:7E:1F:2A:79:A9:52:76:8C:00:7C:7B:96:1E:45:33"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:f2ShfH7kbz4B2jne7Fgw6BhTQ2CiKA:xx7HdwhV5m2s19cK; Expires=Sat, 27-Nov-2027 04:11:33 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 27 Nov 2025 04:11:33 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-97591864:1764216693374346\u0026ifkv=ARESoU0O47anHB5MmwkaYItd_lTruX4-3VOlZ1A8nIsBUY0YfbmFMGCwaQt4I23vUgNPmVMVeO6LRQ\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-nN6MjIfLfV32jUQnksa7wg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-opener-policy: unsafe-none\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":94,"dns":0,"connect":17,"send":0,"wait":27,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/6c848c44352.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/6c848c44352.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 24 Nov 2025 08:21:40 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 236311\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bmd9L8ZGSoIafrv1kQEd1LTOWAGjr0wWQVu5ozbB9KWqTJClVme4WxqBJWpYdQbfVhAxEtL3WsuvCmu960Nr7IzkxDRm6lSrKadvxtdFlkltGL71\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e675693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5083,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5083), with no line terminators","md5":"7acc9d451a0ee898ebdf085e42c9c224","sha1":"79f8fa607e39a049739f818df19e0cbc0c7a2c9f","sha256":"5c473b7c531cb67c474347902e1d305fc3381f279e3e458f74e57682bbc155bb","sha512":"e98c39f358184b6ab50ec8aa9a0c4ac947fbad640822ae72464c5f2094df08090c048a8b258a75815fe030d4c0be4f89963fe3f4ebae9bed64a9fec1ae8350f7","ssdeep":"96:x+L4zSEL3ZgpLM9MupfItV4LVCXChmRLEi0yu6POx6K:x67I3uxiPgtVAVGVp50yu6C9","tlshash":"38a1d91c62159efc03d76f73e62f60c9e629244e6140f8b0e250dfa5aaa5b1dd073c67","first_seen":"2025-11-27T04:12:05.476311Z","last_seen":"2026-01-05T15:49:04.73734Z","times_seen":10,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RWYKQ7ZE0Q\u0026cx=c\u0026gtm=4e5bi1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-RWYKQ7ZE0Q\u0026cx=c\u0026gtm=4e5bi1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\nexpires: Thu, 27 Nov 2025 04:11:32 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 129859\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":374177,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"cebf223f5dd61774bc53857d3134d569","sha1":"02cdf53b4299ee9d3f3777f525c68fe48d06ffbc","sha256":"336ed178ae1b1e39596fcfdf2b3033d33ca18d25709a050078a8cc494910b85c","sha512":"1a5f69a38e533b981e4c01713154de26399d8003f00b0e9d278f74fc6b3a776a61e5dc8b1f12a030f591aff5dd4f0d0898905020647652b56b3132b7f52ab535","ssdeep":"6144:xv4BUKitJeUI2XVUULUVWo6O7GQEO7u1URoOr+OO:1sDi2UnVUUtO7o","tlshash":"a08409ce73d670665392b478503f018ba57b68a2f44cc899f186cde52e70a9a4277f3c","first_seen":"2025-11-27T04:12:05.47841Z","last_seen":"2025-11-27T04:12:05.47841Z","times_seen":1,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/webp/icon_st_more.webp","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/webp/icon_st_more.webp HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2862\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Wed, 29 Oct 2025 01:38:23 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1883992\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=daf%2BaPS0Ox0yfxf1caGZzTFvzvD9Q0FaDgXeouZcyzfjj8zHUJLqzWQdI4Z5LFBgSITYtPIoUBgnrTRfHkoFjDDtVpcxfrQwypWp8BSyHJ7rYZ9S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83a3a065693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2074071d7c42652bd2cdaed7a9da7398","sha1":"30b0a47493ac522f8bfdca563d1c922ed9f788e2","sha256":"93d6388e5764f7de138adb562e3c0c17294e4edd832fec9e66f70800f58ec88b","sha512":"dccbbf63106726cee6327af4506d22c42cfa9a9ee8faf728346497a73a5a235bee161f99c8b509f1a408e52b5faa3920488bc7dacbc5b4df697c6845625a9004","ssdeep":"","tlshash":"79514b5aed77c0a4f8151ff6b8e15211fc49c1e5a206d74a6fe0672a58ab8161325b0c","first_seen":"2025-03-28T18:40:52.575042Z","last_seen":"2026-04-14T12:03:10.153097Z","times_seen":125,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra11.tcgfs39a2.xyz/api/common/bs?code=100\u0026sportType=0\u0026stream=true","fqdn":"apis-data-defra11.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apis-data-defra11.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:41:28 GMT","end":"Sun, 28 Dec 2025 14:41:27 GMT"},"fingerprint":{"sha1":"D4:E0:E2:2A:77:82:32:8D:4E:16:CA:0A:19:A9:BD:5B:69:CD:5D:DF","sha256":"E0:BE:3D:ED:50:D3:A2:F2:0B:C8:9B:C4:55:79:D2:84:A0:28:DF:B8:4B:D1:DD:55:5F:E2:94:0C:F9:46:9C:F8"}}},"request":{"raw":"GET /api/common/bs?code=100\u0026sportType=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra11.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nsa-host: apis-data-defra11.tcgfs39a2.xyz\r\nx-request-id: 2120c0b04_210bd9e1a2d\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\nrb-port-server: 0.187\r\naccess-control-allow-credentials: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.190, HIT\r\nrb-ray: vaBzihdHklq-2-HKG, aCplghdDelS-2-FRA\r\ncache-control: public, max-age=4\r\nsa-cache-status: HIT\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\netag: W/\"0949db916a759133beb432bb80ad59b2f\"\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wlkwebGhDcsFnRakys9T4UqSMuUSjkRB66qDRuVTr96nCoECvE41whcWA2K6GnWQ6le%2BqK49Zw6%2Fyu6Rk490vE22yFxO3K0QREI3tsBTqYs5%2FqJoDeAacJlU4O%2B0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83aad66712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"949db916a759133beb432bb80ad59b2f","sha1":"44b55b0fe7a2b6407878fded4e10d19777adee48","sha256":"43202c92c96e8bf91067bbea43eb50f5b6f660322c4d66a5a68d228466c62270","sha512":"6fb408a1833ab1ac530d59191cda5c29bfd24b7720a1dfa307af766e3c0258a6db4d8ddf4e5dcc21a319a016f786cdf0fc56ea2011b8d407fb45d09aeef79bdb","ssdeep":"","tlshash":"57900201514e059537839b6154421483514346144e0466d056f529400b6461616d6144","first_seen":"2025-11-27T04:12:05.474565Z","last_seen":"2025-11-27T04:12:05.474565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":52,"dns":35,"connect":2,"send":0,"wait":56,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra11.tcgfs39a2.xyz/sfverbb3711e6f71fe5d770af00ba65ae0944224a09/api/match/live?sportType=0\u0026language=0\u0026stream=true","fqdn":"apis-data-defra11.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:47.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apis-data-defra11.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:41:28 GMT","end":"Sun, 28 Dec 2025 14:41:27 GMT"},"fingerprint":{"sha1":"D4:E0:E2:2A:77:82:32:8D:4E:16:CA:0A:19:A9:BD:5B:69:CD:5D:DF","sha256":"E0:BE:3D:ED:50:D3:A2:F2:0B:C8:9B:C4:55:79:D2:84:A0:28:DF:B8:4B:D1:DD:55:5F:E2:94:0C:F9:46:9C:F8"}}},"request":{"raw":"GET /sfverbb3711e6f71fe5d770af00ba65ae0944224a09/api/match/live?sportType=0\u0026language=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra11.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:47 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nsa-host: apis-data-defra11.tcgfs39a2.xyz\r\nx-request-id: 2530c0b05_210f9b61a2d\r\netag: W/\"0fbf292ae85ed143ec72346471340019e\"\r\nrb-port-server: 0.002\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.007, HIT\r\nrb-ray: vaBzihdHklq-60-HKG, aCplghdDelS-60-FRA\r\ncache-control: public, max-age=60\r\nvary: accept-encoding\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 14\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JmxJj2VRKJht%2BJSwpSBh5lFkJQXVwTivBviITrABtU8RciuRSkoJQbk8onQBbkZC5mq5aDXwCpHhBIJmMs1d2014M8Z%2FQ8THXIW%2F9zx14yo6hKN8cjhADyL1chhx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec89668e1712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29689,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"d9fca37c64268dc4601f45cb8636e5d1","sha1":"567ac39d43d4fdc808fbfc5d6ac9ca40e93ff0b2","sha256":"1d982f3cde8134ecb63946d15db1e43de6e0655c9ed518bc89c3eeda7bea415b","sha512":"5d7dbf1697d4a8f79fa25e078f7814989f970a6fb6e10876a0ac849b22925fcfc6a86142dd0700400d7433efe0d865542b99c1efccb71cb8a6772da51ea4ec25","ssdeep":"768:EISr5wkXhbCqfcoZQkNTEE2sV4rOt0QvyTx:EISr5wqrc4QkN8su00QvyTx","tlshash":"0be283ff461a2b73d7af75ee4623131fc4b7268abda5b02fe80c11414166b19464fca8","first_seen":"2025-11-27T04:12:05.441715Z","last_seen":"2025-11-27T04:12:05.441715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/com/icon_top@2x.png","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/com/icon_top@2x.png HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 422\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Thu, 09 Oct 2025 04:31:34 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1883992\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b8mtJjE8zVtf28qFu%2BRCHHzVbbt33%2BvRrQlTM9%2BkrmYA2cw7paHnBgrna57Ha2gE3hK6tJlCYG4RKKrUSZs0RS91lr1Gn6GUt8M8x6U%2BoFGaoyCu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83a4a0c5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"fb5954b769c3c80b0b3890d84e5c9e82","sha1":"1ae9550e68df4495e22ed9a7255b8448cc4b1f0d","sha256":"8ca9ed7f371938e77d704df48da347a9722d1024aa1d7dc2f65122e2c1db8d99","sha512":"9678211b925e3dd60526b82ed4dc840945840042fd6a08484938c3e36679e0af6783d55ecfa345913d2998a050a06e5d434b0d0890ee50ba6aa8e52cbb24928e","ssdeep":"","tlshash":"b3e02bf3db9b3c69d40095b473ea0231c3b624b24141a89c98c3e1e88240b2a8a83284","first_seen":"2023-07-26T05:15:25Z","last_seen":"2026-04-14T12:03:10.120871Z","times_seen":164,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/webp/fc/icon_live_stream2_active.webp","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/webp/fc/icon_live_stream2_active.webp HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2310\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Oct 2025 22:26:31 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1883242\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnwy710FNBWugxYsOpZgrVbFCNgLXJt7mr6e24I8lpexDi5%2B5C0Qm4zD8qq9pGOoJP6pYDY0K%2BIxOAP1A0MLcN%2BjcZEthfuFCRoT%2FYzJa6dOGSAr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83d7b095693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"24177643a431b881e42372c55021a5ca","sha1":"c4a497adafa1b781cfe7b3b212283c916945899d","sha256":"94353c4d231eeb620e4fc510fd0dba10debda24699b6c3ba705041c5bd8a0b20","sha512":"4a29dbb70743f05bc94fa49d694ae49deaff61b34217d90496d6acc277441c332e942a3844db4b44140b4042b6383bf5e35cd40702f030c19c91792ce3d111db","ssdeep":"","tlshash":"f8410b73a3336329d3104df4a0b26f12a53da312e79de985d380c2300b54ac2393d287","first_seen":"2025-06-29T02:02:02.269042Z","last_seen":"2026-04-14T12:03:10.155577Z","times_seen":65,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/2df69bfe55.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/2df69bfe55.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 24 Nov 2025 08:21:39 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 236311\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZsKAkD9MOhzJ7br74MUSnHMQeUQiaTK9vvIfCYIUom8OqbG%2F8O3VRHw0EpKhI%2FI4itjEBP27mxTETSxusMNqmv0Ad3wO2kkYITSlY%2BXgTisW79e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e6d5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8408,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8408), with no line terminators","md5":"9a6641188cb3b8a34a5cb18f4421db22","sha1":"e25f1d746f57b96419dea85c330eace5dc26ff1b","sha256":"0e5e502dd96f6a5c3f9fdf7a4303d052a2aedcf59f2a9b6f8e62e8831bf5d2a0","sha512":"038e3ab3195af40193054933618f410c03efad5a88c20d944345a4b8eac4d510cca50142d0d2c75948fc5f57a3e2bbea02687501af9d0b515b4b0eb3c239140a","ssdeep":"192:x/1nmtHzMaul+ofJax3tboiYofxxtFH8HKod1bYRj9jFKXp:x/1nm3oa9B9Yo/8HKoHsRiXp","tlshash":"c802c84c7341b5b983da69b3963f618ef529649430a9e8b4d122d6e0af3130ca43bd6d","first_seen":"2025-11-27T04:12:05.481288Z","last_seen":"2026-01-05T15:49:04.709678Z","times_seen":10,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/f80da25ba72.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/f80da25ba72.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 24 Nov 2025 08:21:39 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 236310\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KewHj8XFaDwT44f6HwJa8tKVdzQlZ1otphEqOjsSG8%2Fqm1JzSn41XJt7P%2B3SVxzlT9Y8NJeCuPpvXzo%2Fw3CofugMfZsBWx6PkNgHvQIk43sMcPXr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e705693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6804), with no line terminators","md5":"2281d42665971986d34d751c93ad1daf","sha1":"41c2146e66ea5d35682e8de2d7e7b2ffb1b5cc72","sha256":"f94b457be55be2cec3c6e1a8018a92af856599c001c5805d8ea7618d8cccdaf0","sha512":"3bca1bb98969759a2e1872cdf3336ce325abddd28e381e0d1fb9a5d042d555fb639f821c2e55630f8b7f3b243afc3d4bc709d0709cac0a173f778e1c99587c4d","ssdeep":"96:lcBBBGlSgsoBCFnQvpbBKwlRfeckUmjD1d4lL1Y4/MvpMBuNE5xqgLu:lcBBBMSgsoBkcpbBKwlRTkUYoY9MBltS","tlshash":"ace198682630e77d4bde29f7e93c50786da804dba58dc8b8e4a45d38b71de04c219c6e","first_seen":"2025-11-27T04:12:05.482335Z","last_seen":"2026-01-05T15:49:04.711955Z","times_seen":10,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cesosfultrbriol.com/c2JEem1cXScJUD4MChU4OysCKFwDBRYdNzU6AywpMgkKHDQYJ2IOBBdfdUhcRlF2QksDCyBHXFURMBsZBhF5S0saDCIVUFUUeUtDQFZqSVtdVWIPUEJEMAoMFF91XB0HFihHXERUcEhcRVR9SFREUg","fqdn":"cesosfultrbriol.com","domain":"cesosfultrbriol.com","tld":"com"},"ip":{"addr":"172.67.206.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cesosfultrbriol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 08:26:47 GMT","end":"Mon, 05 Jan 2026 09:25:24 GMT"},"fingerprint":{"sha1":"9B:01:A5:12:04:64:63:D9:8C:A6:C2:D6:9D:21:50:E0:3E:C9:7E:87","sha256":"2E:78:51:9A:BC:EF:9B:2F:8E:82:3E:C7:8E:BE:FF:CA:90:04:62:30:34:65:45:7E:28:FA:E1:77:66:2A:3A:8B"}}},"request":{"raw":"GET /c2JEem1cXScJUD4MChU4OysCKFwDBRYdNzU6AywpMgkKHDQYJ2IOBBdfdUhcRlF2QksDCyBHXFURMBsZBhF5S0saDCIVUFUUeUtDQFZqSVtdVWIPUEJEMAoMFF91XB0HFihHXERUcEhcRVR9SFREUg HTTP/1.1\r\nHost: cesosfultrbriol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 27 Nov 2025 04:11:33 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NJ%2FJ81sDK375AYGgLKbGXTHXrVb4699YCA0KOII08bjPnml7DvrbWxuLBjkKevtf%2FxrX14X6waNiC0hyBgknYSmzgpdhEdPCCMhtYSN4hQS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a4ec83b9fd7569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":56,"dns":3,"connect":6,"send":0,"wait":122,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cesosfultrbriol.com/QldXWDNtaDQrDhU9EiB9BRElGnIhGgFqegUWFmllIzAaGXEUBnEsWiZqZmoBc2RuYRUyPjNlAnpxJCxSNiIkZQJkPjk+XH9xIWUCbGd5ah13cSJlAmQjJzlUf2ZxKEc2O2ppBHRjZWkFdG5lYQt0","fqdn":"cesosfultrbriol.com","domain":"cesosfultrbriol.com","tld":"com"},"ip":{"addr":"172.67.206.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cesosfultrbriol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 08:26:47 GMT","end":"Mon, 05 Jan 2026 09:25:24 GMT"},"fingerprint":{"sha1":"9B:01:A5:12:04:64:63:D9:8C:A6:C2:D6:9D:21:50:E0:3E:C9:7E:87","sha256":"2E:78:51:9A:BC:EF:9B:2F:8E:82:3E:C7:8E:BE:FF:CA:90:04:62:30:34:65:45:7E:28:FA:E1:77:66:2A:3A:8B"}}},"request":{"raw":"GET /QldXWDNtaDQrDhU9EiB9BRElGnIhGgFqegUWFmllIzAaGXEUBnEsWiZqZmoBc2RuYRUyPjNlAnpxJCxSNiIkZQJkPjk+XH9xIWUCbGd5ah13cSJlAmQjJzlUf2ZxKEc2O2ppBHRjZWkFdG5lYQt0 HTTP/1.1\r\nHost: cesosfultrbriol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 27 Nov 2025 04:11:33 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAQGnrPaig727GeutuePb64erDXIjWRKBEw34UPuS10KSoYyflbT4Kf5XQvFn%2FH3iCAv0DPt%2B8wZGmfE3kOLR8bKNRGgBcFgxnU4uye%2FszIx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a4ec83b8fd5569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":34,"dns":0,"connect":3,"send":0,"wait":123,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/TUhGNUssKiVYdCx1JBM+PyR7EHkLbXRzLy4qJEIyIDh3VyMhLmhWJyI9IlM5IiYyGyUoPGMHDR4FAn8cGSIqYRMZLyl3IB8qC1sGBAkhdyUrGQd/DQ4Rfm0NFBgPYScCACpkegIjfnEKFS8yYg4DHCV2GQYQd0ImLnlzXSgeAQ9sDXQjDFtyHgl1VjMdGS1iGSQ/N3cKDB0JXHIVHjEMPAZ5ImEPfywpYg0fGScGJCsaEHs5BHkcfhw3Jy9iCRgJA304FQkEUSArIAB9HDcvN2MgKQolBjwHEC1vMSsJLXcKIyBjBwkFCQhCKH4/DGd6PnwjdHsbCRQYGT8LMXcAFAApVgp+CjxTCiELFH0FdC0HcAkUJQd/DB8sLVMneB4TYXslAAd/excAcnwKDAIoUywqHgdyEiIdA38TAAsAdw0cCRdTPCINDnIRIhwHBQ9rIjVaJT11IWQIOQ4fWh09eS0GDio7dg","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.016Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /TUhGNUssKiVYdCx1JBM+PyR7EHkLbXRzLy4qJEIyIDh3VyMhLmhWJyI9IlM5IiYyGyUoPGMHDR4FAn8cGSIqYRMZLyl3IB8qC1sGBAkhdyUrGQd/DQ4Rfm0NFBgPYScCACpkegIjfnEKFS8yYg4DHCV2GQYQd0ImLnlzXSgeAQ9sDXQjDFtyHgl1VjMdGS1iGSQ/N3cKDB0JXHIVHjEMPAZ5ImEPfywpYg0fGScGJCsaEHs5BHkcfhw3Jy9iCRgJA304FQkEUSArIAB9HDcvN2MgKQolBjwHEC1vMSsJLXcKIyBjBwkFCQhCKH4/DGd6PnwjdHsbCRQYGT8LMXcAFAApVgp+CjxTCiELFH0FdC0HcAkUJQd/DB8sLVMneB4TYXslAAd/excAcnwKDAIoUywqHgdyEiIdA38TAAsAdw0cCRdTPCINDnIRIhwHBQ9rIjVaJT11IWQIOQ4fWh09eS0GDio7dg HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logos2.tcgfs39a2.xyz/aelogo/v2/team/eb394e4f6f8923d91fef731bcae9211c.png!w80","fqdn":"logos2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logos2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:39:41 GMT","end":"Sun, 28 Dec 2025 14:39:25 GMT"},"fingerprint":{"sha1":"07:D1:03:98:07:0A:D4:71:95:DB:B4:08:6F:25:00:C4:D8:9C:EC:C3","sha256":"E7:3B:FD:EC:A8:B6:AC:97:6F:2D:2E:51:D1:B0:44:69:46:FA:D9:49:B2:07:9F:CD:93:B1:F6:69:23:A7:E4:D7"}}},"request":{"raw":"GET /aelogo/v2/team/eb394e4f6f8923d91fef731bcae9211c.png!w80 HTTP/1.1\r\nHost: logos2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4506\r\nserver: cloudflare\r\nsa-host: logos2.tcgfs39a2.xyz\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-cdn-auth: success\r\netag: \"3C937D17B619EF2CC66ACE074B89A2FC\"\r\nlast-modified: Tue, 28 Sep 2021 06:40:41 GMT\r\ncontent-disposition: inline; filename=\"eb394e4f6f8923d91fef731bcae9211c.png\"; filename*=utf-8''eb394e4f6f8923d91fef731bcae9211c.png\r\naccess-control-allow-origin: *\r\ncontent-md5: PJN9F7YZ7yzGas4HS4mi/A==\r\nali-swift-global-savetime: 1759422137\r\nx-swift-savetime: Thu, 02 Oct 2025 16:22:17 GMT\r\nx-swift-cachetime: 31536000\r\ntiming-allow-origin: *\r\neagleid: a3b54d9d17594221378334763e\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JYbUZ1YAgMYKZLPn0OYIHl07n0sUn1dQ9bgR%2Bbp95GcntUR7ZAPpFcWCsoV9qtHjYL8Pp9SiM9uoB9%2Bey8c0NcQOqw%2FUr6pfA5P%2BmIKe\"}]}\r\naccept-ranges: bytes\r\nrb-cache-status: HIT\r\nrb-ray: kexoleswlaed-30-SIN\r\ncache-control: public, max-age=2592000\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-cache-status: HIT\r\ncf-ray: 9a4ec8401dbe5696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4506,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c937d17b619ef2cc66ace074b89a2fc","sha1":"59c1464c8f5be08a90c7732f4263f32c8884b61e","sha256":"e7ce51661509b86afeb3400eacabf0cfd8ef68e7d92d2b4d8d1f506312f66ef9","sha512":"0600bf5927cad9cdb8a8c3d5a6b1c6836c96e85276c5ea3c4d474b39403ef6ddb77e55ddf57433a97c1c8972f1989b64b3e73f1ec3d9e33fcc011dda13981131","ssdeep":"96:8LLWhWu3Iof0AUZTePYYmYWkyo50+7GjysiKhRYBfpD+5XaYlNsFym:8LLk3Hf0AUTaYYHWO1G0cDNI","tlshash":"f6915d717dca0d1d984a753262157a897cf2b2cb60c71930a12f35240eb233b6bbd982","first_seen":"2025-11-02T02:56:23.062074Z","last_seen":"2026-03-01T05:00:47.422591Z","times_seen":5,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":232,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/webp/icon_st_tns.webp","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/webp/icon_st_tns.webp HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11214\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Fri, 17 Oct 2025 03:51:28 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1883992\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dx8C3PmJvCgm6IIzrKhTsV9EFdqBJGtWk4aVicJDCDKxAe%2Bs1gh3WwIFCR2P5liOeJi5rMKJpmsbz%2F0eQRMhE8%2FSEWnJ2i3Q3pOPIhaKl94eEc%2BJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83a3a035693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa93b4932a79a2b904363a3263409837","sha1":"e4d56834dec9b360a44c834da6df70e2103c3c88","sha256":"0b7ba9c1d5c692b6757842b60a3589b6c1b62893f97b055e322ff4a01d5df459","sha512":"56b2ea592d48e589697c43c274f040403fa3af4ed82aa99d120ac4051ff94197b446e89a15588314d57ebe47c210dd7d26a098a64c18abefe534eee18e38528f","ssdeep":"192:5JJNEmpJkITcH8BdCkeOo+VcORacsDCrmt+T5DVPjcjFjjyC7f:57KIVBUkeOHOOuIa+VVPgjByG","tlshash":"2932d098d30b3633c62ea525798a4357dd6ecbb4cce7690b2ae202347cde7554448ee3","first_seen":"2025-03-28T18:40:52.579246Z","last_seen":"2026-04-14T12:03:10.152591Z","times_seen":128,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-27T04:11:30.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fctv33.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 14:32:23 GMT","end":"Fri, 16 Jan 2026 15:30:05 GMT"},"fingerprint":{"sha1":"ED:A9:62:CD:80:74:8E:4E:3D:6D:0F:E1:B9:2F:90:16:F6:EB:FD:FB","sha256":"54:09:6E:AA:43:D4:40:93:64:5B:8A:BC:62:80:C6:47:EF:77:2D:F5:B2:2C:5B:B0:7A:0B:CA:F8:B6:99:0E:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.fctv33.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"106d0-P1MGU2y8aWcYtAwjf4k6qz5VdWM\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-cache-key: www.fctv33.casa/\r\nrb-ray: SxolN4wZLJs-300-SIN\r\ncache-control: public,max-age=30\r\nvary: accept-encoding\r\nage: 4261\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YG2TR1niV5oD93XORdxL7SVr4G9uuzArl5rjA91XyS458UA576AxTdhN8GGaSGeDazHEmt1mfKpfEopX7LDWSLSno34%2B7qKX6p17Nw4%3D\"}]}\r\ncf-ray: 9a4ec82b4c1c56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67280,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23283)","md5":"4ba90e27af1a9d0fff392da71a0ec16d","sha1":"3f5306536cbc696718b40c237f893aab3e557563","sha256":"e17617371dd14739aa13afc30f36a313f9cf848b9d2ad482b5acb7b819c872e9","sha512":"9be156940bb35bac5a6a2322efe9fcebb93b035b56454acde0c08f114ec97ddcf41fb91ede74c2cb57e6018aee83921aa45e27996a2d2bc51b5a4ab97473c52c","ssdeep":"1536:53eFBp/+rVnXdaeq4NvlyPtupHVlxzbjfMHp0mXe0KxZrW7+1q++l+3azIsPfq+9:5yq+YHQ","tlshash":"f0630b72e340a26d0153c7ddea357b2cb15b727fed92c95192ad4b580ae2ca4f90ec44","first_seen":"2025-11-27T04:12:05.484996Z","last_seen":"2025-12-01T03:44:45.118192Z","times_seen":5,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":37,"dns":22,"connect":1,"send":0,"wait":8,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/35841cd600.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/35841cd600.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 20 Nov 2025 17:03:07 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 550642\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWdZ1FePfGkDgldjwyDCuCrGaV52azKu4qEcb%2F%2B3byJhmxInzdAlfgXgHJKnb9b03bE72PpGAajx37u%2FKLDOyFPK%2FyMY6s8diaPrN%2BAxuYvKXLif\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e725693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1687,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1687), with no line terminators","md5":"c006e00ade32246640c725700e279a41","sha1":"d17200e7c9851eb14353f92d17741d7f27757db2","sha256":"ef06ea50fc86fe5774049fc7d2a6792402e5f83f57a6a3ea4a8cda1501589cc3","sha512":"02bde3f5478e29b8c664c347506994be9f051710a83cfabcd054197d377c10c588bd0870feeaf1b7cc4b9b07d415e0ad659244b50702dc6915b5526e412dbc06","ssdeep":"","tlshash":"f131aef9e195ebf05e37517963779119902f122b680838b0d1bc7564939820ca477e7c","first_seen":"2025-11-22T15:31:01.127658Z","last_seen":"2026-02-01T08:43:19.150223Z","times_seen":37,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/5a0fc54567.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/5a0fc54567.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 24 Nov 2025 08:21:39 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 236310\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmXNgLkZAOa%2FbV9yVja%2BOZQu3KWomjIl0vhoFDKGuQ5Hy2iJjCOuPCaEP25aXzirOIc8w47VRD%2FRMpWT2VNPG8jp9W2Am3di%2BLeRTxqepb057F5l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e775693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3465), with no line terminators","md5":"830c12e837e300a29894a2f09e882108","sha1":"235557e99da69582fd5acfd0cccf1b2c4a752efb","sha256":"82c73b1c5570e561a550afb9988eab01bd4bda8c75b6e619a64b63fa9c481f1c","sha512":"2d35f9c75dd0381dc16dd6ad6d344fc48003a7282634f599a8c15822b6edf22015fbec8cd4223f1ca0c7f343a7bc97ab98995475b7a86802cbe8e90f8b6e0b23","ssdeep":"","tlshash":"3361b65e20280bf593d55e7bfa1ea0c8892b089fa2c1ecb1d560cf15ea7bb0c5473d59","first_seen":"2025-11-27T04:12:05.48749Z","last_seen":"2026-01-05T15:49:04.769479Z","times_seen":10,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/contact/icon_email@2x.png","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/contact/icon_email@2x.png HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 913\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Sun, 12 Oct 2025 21:54:53 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1886896\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MgbIgvd5TTkHflYi7M9PTZp8xryn0tY2ziN3z0sTOHd%2Be%2Bf5oQ1cPX7oI9S5%2FuIvOZqaS5g6mVi5uqmZa4%2BG97saVHAZmQRwTUGwuGdIGsUmC%2Bpv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d4e825693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"8865088214e917170c0b18392237fccd","sha1":"20f1ca5069ef3a70138e848e12073bc892658d3b","sha256":"bcc6103d7599b15debad85832520f04032d3a8e3173e7b3f03d9191e63ac7eaa","sha512":"a1c95e7608dd4c8f4d34d4074252b63873ef1a9f5b8ca6d5a84a007d9f7ee80dc7bce05eddfd5e8788a1570163022aec3c29460c87e3f1a8ae96c1bca0c4d7e5","ssdeep":"","tlshash":"66116792e9d62e18da414d713091bef0dadc30a131cf93790d5e6c3553a5a4f9cd43da","first_seen":"2023-07-26T05:15:25Z","last_seen":"2026-04-14T12:03:10.170218Z","times_seen":109,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JH5Z1V4NG6\u0026cx=c\u0026gtm=4e5bi1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-JH5Z1V4NG6\u0026cx=c\u0026gtm=4e5bi1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\nexpires: Thu, 27 Nov 2025 04:11:32 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143130\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":431402,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"b792dc76d2b95878ea789dec211a20a8","sha1":"b12aa3aaf18ba4e0231037eeb4ed8844fcdf9300","sha256":"ed7115c63ca672bf2eb72a91e984720a2f87c40d79115cbb0914c83397c2242c","sha512":"18fe5ed73cba19b3e3739af8916018e348f265b74737e0f4fa703b904192758ab42256670004497b56922c72b1aa24424dbb5edc5393e6cfdcd6293f0d19fe6b","ssdeep":"6144:lJUsBUKitJeUI2XVUULUVWo6O7GQEO7QZ2ElVFBoOr+Lu:rUwDi2UnVUUtO7QZ/","tlshash":"ef941ace73d674225396f078502f018ba57b28a2b45cc896f1c9cde42e74a9a4277f7c","first_seen":"2025-11-27T04:12:05.489635Z","last_seen":"2025-11-27T04:12:05.489635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:37 GMT","end":"Wed, 21 Jan 2026 15:26:07 GMT"},"fingerprint":{"sha1":"9D:07:9C:6F:57:10:86:CD:16:B0:52:82:27:D1:5A:15:62:C4:01:4D","sha256":"45:86:DC:CE:A9:11:84:B3:7C:78:71:DB:1D:F8:E8:6C:0F:4A:58:72:2C:CF:60:ED:8D:11:60:CB:9F:03:63:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.fctv33.casa/\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:33 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://www.fctv33.casa\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgytQWSqbPnpJZ8cMIa4KTP%2F3s7iTXswTJ1EHe%2Few6ymLkSVpt9R2n1WgT8DDqrvYG6%2FYB%2BlyKhyuLq4%2FoLXvRKHSW3XKoM9bUgX8XRkbn8%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: csu=237301987240312@1@1764216693; SameSite=None; Secure; Max-Age=31104000\r\ncf-ray: 9a4ec83cfbfab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"0bdfee040387ad9481388a95cd910c87","sha1":"01c904e80adf8b69b1fe8b452dfaa61c80dcdf73","sha256":"0ede56e894f87fb4d017387d55c56d415dd16c6fd85f3f832c595689f428f8e5","sha512":"8aa85425d259b3cf4ff94a4f807a6812964170ce051075ecf2a8f21088b4fb7ff59e63fb7d85d8ff0d35d6f61bbc2222519ebbdcc72fd872e7ad4fcb58fcdc95","ssdeep":"","tlshash":"878000308080800f022f8c800a8020c2c2a000802003030800a232a80803a808b020a0","first_seen":"2025-11-27T04:12:05.490594Z","last_seen":"2025-11-27T04:12:05.490594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":15,"dns":35,"connect":2,"send":0,"wait":166,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/css/9def902da.css","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/css/9def902da.css HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 01 Nov 2025 20:11:46 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 1886897\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqnN0ayiim2viU8xh8uibtmNDxfOU%2FaOZPLwKb8uhc6wg2A5S9tq75S7oMzDNflgwZbJ2NU%2BOk%2Ffoick55dWhNoeRaIR0nZd4v9Eig8bTNXyx%2FFy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e6c5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25939,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (25935), with no line terminators","md5":"1414bd0066207cffceb6cd244560f00b","sha1":"e17397769b6999a0381378cbefa1692abdd50434","sha256":"e9127f9f6acdf58f27f428f9b5b8e30c4d3c5c40386a06a1d9b60463c0af2385","sha512":"75045f80542d273af181fffc9d70c2bed1c6f68deffb83cd99c693da8b696e4ac1e479d1b90592df7605fd69c9aa137603d2c942b1327dae603cc3cf087c1a58","ssdeep":"192:t1pOI1cmOzhdmLoJ+SX/YXh/xHgNXdzj+YhehV5VSGGQ0urPwjuP3p/AYkYh4zMX:t1pOI1cmOzJBaqyYhgVeYhQbGAigePI8","tlshash":"cac295270159131ca593cc701be53b26d154c477ea667bfe95246f2acbc3bf20bb128a","first_seen":"2025-10-05T14:44:22.523256Z","last_seen":"2026-01-11T18:57:01.9772Z","times_seen":33,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/webp/icon_st_live_active.webp","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/webp/icon_st_live_active.webp HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11366\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Sat, 01 Nov 2025 00:50:14 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1883992\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LlHsLv2AM2V%2BlBRv6zSX4yx964HU8%2FblvaMvN4xzt72kBT1gS5EF8Hj58CNW5XkdS5X%2Bkl7grbOUvRWTkA8yLvPv93lhLTpNJrc72u6Ggb99BL%2F4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83a29f65693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b0de0136c71d8f1b9642ad0497ecd8c","sha1":"3e9e9674f4997b577f518a4c9bfa246dcf86c4f3","sha256":"a26ca8f54630317d041a33517cb92094441eea8d8101fc0e9ab21ea6cceaf1f9","sha512":"5893dfd3324d8288db7c724e550c13043e9fffe30ed1fbccee1c76b545996f1884b236df32749cf547c5665ca114c74f628ed1d71a827e52f738079c6dcbfed5","ssdeep":"192:buwTg+1VfIcUsWkFnT01/5tCgAPKc9SNFMAUPlNOAlcfLViuSWJ+LZsoQkZmM:buwTg6Vvp90zogsKc9SNnulEdVipW0sY","tlshash":"4232af0616a8818bde4a823455319dc1ffb274f2093d90f64fa7ae08681b7c969bcdc4","first_seen":"2024-08-21T05:28:08Z","last_seen":"2026-04-14T12:03:10.136521Z","times_seen":135,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/sp/icon_team_def@sp.svg","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:33.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/sp/icon_team_def@sp.svg HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nsa-cache-status: HIT\r\nlast-modified: Mon, 06 Oct 2025 06:38:37 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1886362\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXFqBmHZeBVaq48v7kp5hikOm627MAc%2B3owgvn8Cpj4lMTSTWEhL7Yp4Rj0eafhtwovQRz8cmnw9PIpgUfGc2qCDmdOilM55tIh0JiuJ1tQNwbtg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83d8b125693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3284f5bc2e60ef3773ae17f6f7efe3f","sha1":"69cd363c8c4fc6f35867af95ca55ababb6d0abec","sha256":"6d6843fc41e60b84c0dfcd0b4e5a35cd78ab3e7ad0fdab194afbd4785c88f5d1","sha512":"27f81d58229007a6cc772c5b825ff6f809ec0ca30f1b47c0998a4eaaf4ab9aefe3f265cb270bca0aff430bfbaece93ce5729d2f3fa580085db8a6003150444ee","ssdeep":"","tlshash":"e5e05cf3d7641624c6c59375b9a9aca3502618d930494c8eb4e2b247e4418fb1d11a49","first_seen":"2025-04-21T06:26:47.838996Z","last_seen":"2026-04-14T12:03:10.165905Z","times_seen":92,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/css/5eaf6443d.css","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/css/5eaf6443d.css HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 05 Nov 2025 06:37:30 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 1255331\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EH1uWxyuH9D5HRIoV4h8hD1YZjCWjL7hpGg%2B4YhZFCG3mOqmfht7NJ%2BkA2KREcO86XxE6%2FVW5NPZtqkrVWopdQwQWw0RIHuq449mPdTg4RhG%2BUeK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d4e885693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100296,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"32aa4521f05a0f601bb788c04ff908f6","sha1":"9b8a6c7974b02ca8f4f9907cb838ee7d6b388ed8","sha256":"736b27e77d3e155ce0ace0dc38720c0c8d4f068fddb29b53ee7b2cf6a39e0469","sha512":"f48b6541ee044e47e95f15fa2791ae581b36268c6bd8d82606f16dceef9ddeb8f6ed7694c5a4500f2d9b2db2a9e288884af9fb89e0d5bebba2f1cfe8dd537536","ssdeep":"1536:V6QbFNJ+jqkiHcarx3WqyrtpqoSWEDZornzwKWWfcYNYvT:VZrxmNH9yDRT","tlshash":"daa3e77b80c5129cb31bcc118fcc6694e6e6d423d6414ab9f0556a3d8fdbf890267e2e","first_seen":"2025-10-05T14:44:22.55954Z","last_seen":"2026-01-11T18:57:02.004134Z","times_seen":34,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":70,"dns":31,"connect":1,"send":0,"wait":19,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/css/0e5e381b2.css","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/css/0e5e381b2.css HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 05 Nov 2025 06:41:20 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 1886897\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyfh6210LgjNDMgloItBgBMkYtXwgILL3FPorSFSqCjUUVkJyZYEOXc%2BijNGJp%2FXQMnrn582Bb%2BVbV%2BzPN3ozXOnMQ87fv1abyDyulZ9rlC085MG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e6f5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32772,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (32768), with no line terminators","md5":"3d25dc4588d1c91d473b8950cc6ad404","sha1":"42ec69dd6729199d386aae00d5c9855edb685b27","sha256":"1151d719df1bd74856e31a62d903683ef12b8bfb24a3bba2b5aef1cf36cdbb6a","sha512":"81884aa252b7e1ae7919d34d18fdd60a0a03f8cf44bfeaf3d78c8ce1356efe1c01917cbd0b708a458242b3b0e6c551ec7f181a6f8f994285a93deb379f8c27f3","ssdeep":"384:RclW5Jo7zDRYhN2YhErz1p1L4z7nOu74QMzsQX8alNZZr2SlwV0v0iHK:RclW5Jo7zlYhwYhErz1pJs7Ouwug7k","tlshash":"16e2341782913b1cb537ac640f696b5595a4c867f21223fdbda27e38c3d7b8106a234f","first_seen":"2025-10-05T14:44:22.563423Z","last_seen":"2026-01-11T18:57:01.998565Z","times_seen":33,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/webp/icon_lang@1.webp","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/webp/icon_lang@1.webp HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1542\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Fri, 31 Oct 2025 00:05:51 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1886896\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNW5iZ7hpaq032Uk%2BIqj9G8v0%2BGdtr6WlGC13Y566j%2BHWzN%2FmNpNE6o1uwLXxLQ7QNjzHWHEoeRiWXk9G0ax%2B%2Bawqpuu3%2FfE49lsaZOcAFI%2FSKxI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d4e7e5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80c68d2dbe70d29d35f7ab7dbddb5fc8","sha1":"fd810a3b0c2b253b39b701b1bd96d3bf7cc6c49e","sha256":"4b089a057b495f7676eebc4b496f5946fd1b7d00395b10e8cb2c088d28a189fe","sha512":"2f00f0649d2ac2102106c9a4fa751e532aa1080b7a806ea3ccd2e9acf1d7bc5c189f7dbd584fb29721497f52040344255bc164756a68e9f6470fa559a9127ef7","ssdeep":"","tlshash":"9431e78920364d5bbc03f44d636083803df26e9e7e0217abd79b8d06491e252471dc81","first_seen":"2024-06-29T17:47:25Z","last_seen":"2026-04-14T12:03:10.134916Z","times_seen":170,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0Y1BWVPR65\u0026cx=c\u0026gtm=4e5bi1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-0Y1BWVPR65\u0026cx=c\u0026gtm=4e5bi1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\nexpires: Thu, 27 Nov 2025 04:11:32 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 138196\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":408523,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"4db5c9761cea47fe8130076d9c925705","sha1":"a8e5ef0014c42e674168599398a003ab968bbaa6","sha256":"3c229a34d4f42055232140285bac5e3808f920242c42f40ed30dee96eb03eef8","sha512":"af8989825d04ebc93a4754b867afa643173311264e694e0db386fadd315e5742f0f2755fa7cd6f386363c8286702078f10d2ed43e0d6a9a34facf5ce2f16d06c","ssdeep":"6144:EGKBUKltJeUI2XVUULUVWo6O7GQEO7fSxVFBoOr+rD:EG+Dl2UnVUUtO7B","tlshash":"089418ce73d6742653d6f078402f018ba57b28a2b44cc899f1c9c9e52e74a9a4277f7c","first_seen":"2025-11-27T04:12:05.501641Z","last_seen":"2025-11-27T04:12:05.501641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JH5Z1V4NG6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-JH5Z1V4NG6 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\nexpires: Thu, 27 Nov 2025 04:11:32 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143128\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":431492,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"a9bc59828c606e8dbb84f865c86af754","sha1":"9f88742db99e8ba6a4eef98216cdba6226ac5428","sha256":"e5496fb49313fcd1a0a19b48697fb5bbb46062f9bfb1a4c93426b0b7b9e2228b","sha512":"36a207625393058258cb43ae3ec3d97213c71b0ca86e434a3402ea400b4cac48cec4ce9ab7d009f62dfa5d7948dcdcf0fa823345d5b1695833dc52cf22268712","ssdeep":"6144:lJvPWgKZtdDUI23ECULUVW66O7GQEO71skIaV0sBLatgFvu:rvO3Z3UHECUfO71KgM","tlshash":"c09418ce73d674225396f078502f018ba57b28a2b45cc896f1c9cde42e74a9a4277f7c","first_seen":"2025-11-27T04:12:05.50293Z","last_seen":"2025-11-27T04:12:05.50293Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/css/340596d47.css","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/css/340596d47.css HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 04 Nov 2025 01:35:08 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 1886897\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yjCjHCqVBmhsK52eVEYGZkdNQis%2BVf16Nzm6xoauaBIDYAAIG5kUnVFFhV1MaGY%2FIuJ%2FpGhxks2HnYHJ%2B1D20gsS42DGrIy3or2%2Bz%2B18qd1kB9hL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e715693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31030,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (31026), with no line terminators","md5":"cec38ccc8d5a1fb0757bbfbb4ed765f2","sha1":"11e91a3b2ae5a2b9e87e773acc031ea06aa589cf","sha256":"1afefa706c87d2af106c750ac2c684c3a62f62e86fd18069e35d0e96bbe4281d","sha512":"cbdc4d24dc067b53caabab36a25927e8c0067adae37775508c7283a34f1f480ce4d172e23522bf91ef29150c5ad2a0f31a6dd996cebbad6b080803e0ecd12129","ssdeep":"192:CnzwKWWf8dmLa2Qg8dxjYh5ngVSzpIYh2ngou34Evrxl4wi0NDP:CnzwKWWfJvmYh0SyYh+EjLTZ","tlshash":"43d2d23f8195131c9217ac155f9c2611bfe6cc53e30293bde5a05b3a8b97f4a177290a","first_seen":"2025-10-05T14:44:22.586768Z","last_seen":"2026-01-11T18:57:02.015385Z","times_seen":34,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-97591864%3A1764216693374346\u0026hl=en\u0026ifkv=ARESoU3PcJz9Fi74yCmvjXF0tECt3HswStEhEKhZXreRAgFQ5A9fTE3AWHqab4f39Hb3fpEHe9c2kg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:34.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:51 GMT","end":"Mon, 19 Jan 2026 08:33:50 GMT"},"fingerprint":{"sha1":"99:FF:FA:35:E4:FB:4B:28:B0:D5:C1:D4:AD:3F:43:AA:85:22:87:8B","sha256":"30:D1:CE:98:2F:EB:E2:4A:53:22:1C:BF:BB:4E:BC:2C:CA:E1:CE:CF:B7:9D:20:26:F9:55:2A:6B:ED:AD:DA:83"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-97591864%3A1764216693374346\u0026hl=en\u0026ifkv=ARESoU3PcJz9Fi74yCmvjXF0tECt3HswStEhEKhZXreRAgFQ5A9fTE3AWHqab4f39Hb3fpEHe9c2kg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.fctv33.casa/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 27 Nov 2025 04:11:34 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-WmJKcgQU9KBZ4V5tKm1Avg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.KEYUHSehrM0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis-data-defra11.tcgfs39a2.xyz/api/common/bs?code=100\u0026sportType=0\u0026stream=true","fqdn":"apis-data-defra11.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:40.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apis-data-defra11.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:41:28 GMT","end":"Sun, 28 Dec 2025 14:41:27 GMT"},"fingerprint":{"sha1":"D4:E0:E2:2A:77:82:32:8D:4E:16:CA:0A:19:A9:BD:5B:69:CD:5D:DF","sha256":"E0:BE:3D:ED:50:D3:A2:F2:0B:C8:9B:C4:55:79:D2:84:A0:28:DF:B8:4B:D1:DD:55:5F:E2:94:0C:F9:46:9C:F8"}}},"request":{"raw":"GET /api/common/bs?code=100\u0026sportType=0\u0026stream=true HTTP/1.1\r\nHost: apis-data-defra11.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fctv33.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nsa-host: apis-data-defra11.tcgfs39a2.xyz\r\nx-request-id: 2120c0b04_210bd9e1a2d\r\nsa-age: 7\r\nrb-port-server: 0.187\r\naccess-control-allow-credentials: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: BYPASS0.190, HIT\r\nrb-ray: vaBzihdHklq-2-HKG, aCplghdDelS-2-FRA\r\ncache-control: public, max-age=4\r\nsa-cache-status: HIT\r\naccess-control-expose-headers: *,Content-Length,Content-Range,rtimestampunix,ruserinfo,rb-session,rb-ray\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\netag: W/\"0949db916a759133beb432bb80ad59b2f\"\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kL0VvgYLTvbxpfFnd%2BGe6FuXjKGF84udXA%2B0vCRrtQDIx04P%2B%2BW8xs0TRKAz4akDkr5pOZRxTQBsIFRCzUyhhCiEvHQvgdtbmkO5lBnTS0OBYwf2XqSx%2BX0wxsg%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec86a8fb6712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"949db916a759133beb432bb80ad59b2f","sha1":"44b55b0fe7a2b6407878fded4e10d19777adee48","sha256":"43202c92c96e8bf91067bbea43eb50f5b6f660322c4d66a5a68d228466c62270","sha512":"6fb408a1833ab1ac530d59191cda5c29bfd24b7720a1dfa307af766e3c0258a6db4d8ddf4e5dcc21a319a016f786cdf0fc56ea2011b8d407fb45d09aeef79bdb","ssdeep":"","tlshash":"57900201514e059537839b6154421483514346144e0466d056f529400b6461616d6144","first_seen":"2025-11-27T04:12:05.474565Z","last_seen":"2025-11-27T04:12:05.474565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/statics/e85a3e5631.js","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /statics/e85a3e5631.js HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 20 Nov 2025 17:03:06 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 556993\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=voj20jeC8GQB7GlBWkxQXtPcEyzyC0tQpDQ7E35qJHY%2BbEgmkEzdaN70DHB22NA8GwL38cdAEXVK1AS%2Bq91kKZMb63qttWnhY6WuNQcWtAVxQoQY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec82d3e685693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37369,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37369), with no line terminators","md5":"a6b7982d02262a9560980c88d35c4e49","sha1":"9bc5b283b7272ccc552a57d684ce0e3924c2b5dd","sha256":"14e97e30ab31a62ef9d03cadf6e5ce0235eecf47c821253136f645d97e418d43","sha512":"4dd6a14b6afd195eaaea0714c357cd747545231341f3a9443d800d2b6ff0ed9263ea742800aebea02c1a910f864e0eed8fb96247f40c265520616b013f18dde4","ssdeep":"384:56e3fE5VffERtrFJ/C++Qq4puISlv2+Y0vO+bGWGCG6P2oMrEBmZdXl:5c5NfUt51jtjpi/Y0PFmvl","tlshash":"83f2f075c100e5bcf85cc656ae3d9f2cac3227e8e0ace462a56e701e5f824569c5cced","first_seen":"2025-11-22T15:31:01.156716Z","last_seen":"2026-02-01T08:43:19.202315Z","times_seen":37,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TXMZ5WN2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:31.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtm.js?id=GTM-TXMZ5WN2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 27 Nov 2025 04:11:31 GMT\r\nexpires: Thu, 27 Nov 2025 04:11:31 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 27 Nov 2025 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 108469\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":318428,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5372)","md5":"22a6f556c7e5e962d07eb0f12d6a8eae","sha1":"3048d3c0e73022eae621d734537150cbae361590","sha256":"9a31350344c818e8c87df1d8eaa1e90c70181a4f9d87964f851c5b592d24e738","sha512":"18b9b8ca7593d9f21c68449bfdc2f35a366b772fcc173b7386db16002cc8d0d41eccad0b92afe1ac9082b2656d8b2e01c7ee59dd28e79d2e30731638d00cb2ac","ssdeep":"3072:JjRvNC205vkzUrnMo0ulFe1dRGeefSJQWfQXr2XdArNbE0fcVWo6O7nGQUO7ZTLc:o2BULt+eUI2X6u0UVWo6O7GQUO7Z/fE","tlshash":"ae6418cdb3d6746283a2a474403f118ba17b78d2f84cc895f186c9d52e70aaa4277f7d","first_seen":"2025-11-27T04:12:05.507489Z","last_seen":"2025-11-27T04:12:05.507489Z","times_seen":1,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":120,"dns":50,"connect":8,"send":0,"wait":26,"receive":21,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/img/webp/icon_st_ftb.webp","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /img/webp/icon_st_ftb.webp HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11570\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Mon, 03 Nov 2025 11:28:05 GMT\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nsa-age: 1883992\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUchqLGzDyaRp%2BoA6ZJhKJBYqASZoUCsF1Qcf598pgB49MDYexz9WwhZyaXByprvDcBWIRCKWVEah0IgpQPVwGoKxqty1RjuWZSFAMPqER%2BwuOF3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83a29f85693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d788fff350579afbdcc0ccfdf5241960","sha1":"7af71241884eb116369edc74ee84496c42786ce4","sha256":"17f3c1f6917c0ec3a717314466aba38428c9cc8a0c3ddb48ac00933921855267","sha512":"db4a72be4baf1748e5a60e6bc20c1cc4404f002b4a64337082d87fe5a1495339c2c2477093b4d1909f9bb93056f5cfd9e47b6caff03df2888aee524b03d4cecb","ssdeep":"192:3ocF+aBOti3m4X0rt0VZhUljpPm0bwWXTrhJj9uSPsU+s:3dLMi2W+kZIPm0kWJjNss","tlshash":"7d32cf8a6e53c4b3c16685b4ae1f7cc92444f4cf01464b676871e788d76f4a6cfe900e","first_seen":"2025-03-28T18:40:52.588545Z","last_seen":"2026-04-14T12:03:10.140487Z","times_seen":120,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics2.tcgfs39a2.xyz/static/328et99f04dcm.js?a=5","fqdn":"statics2.tcgfs39a2.xyz","domain":"tcgfs39a2.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:32.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statics2.tcgfs39a2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 13:35:34 GMT","end":"Sun, 28 Dec 2025 14:35:23 GMT"},"fingerprint":{"sha1":"F3:BD:1D:13:97:36:10:F7:97:AD:47:4D:C4:FF:05:24:3E:14:98:9B","sha256":"E2:AD:EE:E9:C5:9D:E0:3B:8F:0C:3C:6B:D3:08:89:16:3C:0A:9B:BA:F7:25:78:D5:01:54:5B:47:2E:39:84:19"}}},"request":{"raw":"GET /static/328et99f04dcm.js?a=5 HTTP/1.1\r\nHost: statics2.tcgfs39a2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nsa-host: statics2.tcgfs39a2.xyz\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 19 Nov 2025 20:12:19 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nsa-age: 507227\r\nsa-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVN8hfcY%2BjI0OWl8PWH6MMWf89BlcLYyNVWX%2BZUdadsGzGOQEsOHWfBY%2FHBO4n7dToLknL8rJkd%2BmicBw5ixN%2FzvSieyCE34QkRWo%2FeqRqFY9GV5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4ec83a7a295693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65189,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65188)","md5":"7b6fcd3ef3c8698b2620388077cfac6b","sha1":"064dce30730b6dea1708b9210795b59ed87ceabf","sha256":"687a83ca5a202b3aba3f20aa03edf66320e2f32025e252f2c68574d6d3a374a8","sha512":"8830e3f897f1e1987b4eaed68c1cf72435cc8659beeee07c023f12a7d2161fcad9e167ecaf3572f02b97e289fad2d3e079c9b6296e7cebcd1e97d21a188e8983","ssdeep":"1536:ffAwr2CjuMOAyUdG1uFuyLHIt6+d5Ar/LdZQBLTjcrD5IrWd:fIMjIAyUdGeuyLHIt66edZQBLTjcX5Ld","tlshash":"8453c77ab2d31c91ce90fb64247ff942bcaa741090adfae57c41fa4019b51dd80e7a39","first_seen":"2025-10-25T20:37:41.363539Z","last_seen":"2026-04-14T12:03:10.154261Z","times_seen":61,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fctv33.casa/js/mtg.js?v=2","fqdn":"www.fctv33.casa","domain":"fctv33.casa","tld":"casa"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fctv33.casa/","date":"2025-11-27T04:11:30.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fctv33.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 14:32:23 GMT","end":"Fri, 16 Jan 2026 15:30:05 GMT"},"fingerprint":{"sha1":"ED:A9:62:CD:80:74:8E:4E:3D:6D:0F:E1:B9:2F:90:16:F6:EB:FD:FB","sha256":"54:09:6E:AA:43:D4:40:93:64:5B:8A:BC:62:80:C6:47:EF:77:2D:F5:B2:2C:5B:B0:7A:0B:CA:F8:B6:99:0E:59"}}},"request":{"raw":"GET /js/mtg.js?v=2 HTTP/1.1\r\nHost: www.fctv33.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fctv33.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Nov 2025 04:11:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nrb-cache-status: MISS\r\nrb-ray: kexolN4wZLed-30-SIN\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 27 Nov 2025 02:40:44 GMT\r\nage: 4261\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EKVjL8Arhsb9TBsTf%2FKMCWbl0s087owJnMVDhZnfju%2FWVPKELge9eVkqCymgfRMvO4Wdn%2FCRMr7h047HoqcUXLWUBrSi%2BoWBQ0sDn4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a4ec82cb92b56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":351,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"ec69d6340f06231b3176a610695d3c6d","sha1":"7545891318097ff79b293b9cc3d3bcb68a0619d0","sha256":"5e6f4fc27aa96f524f3ac23d099a1f2f3c29c30f4f942d634139995652916bb4","sha512":"c053a155ffda4f89b5d75a54eeb2d83458c78eb84fe57950945449b4298a47f61e2c53f1ddf946a146629f50fee55ab554a57ef48ded631911f63de86e18889e","ssdeep":"","tlshash":"e8e0c0da70510871b5ae86b573b5a1247153550cb4191922cdfdc824681c987482208c","first_seen":"2025-02-02T18:21:06.747357Z","last_seen":"2026-04-14T12:03:10.167456Z","times_seen":147,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
