| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash7a008f7018d5b98d787afdc07ddf2066 88ae935b7f05301000668ad6fb1d83f6a86e82b4 d98004d3571e1a51d26420f00a34d03ba467da831291574a99d2a920aabc60de
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D98004D3571E1A51D26420F00A34D03BA467DA831291574A99D2A920AABC60DE"
Last-Modified: Fri, 27 Sep 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14045
Expires: Sun, 29 Sep 2024 17:24:07 GMT
Date: Sun, 29 Sep 2024 13:30:02 GMT
Connection: keep-alive
|
|
| | 104.21.68.12 | 200 OK | 42 kB |
URL User Request GET HTTP/2IP 104.21.68.12:443
CertificateIssuerGoogle Trust Services Subjectshrinkme.ink Fingerprint4A:F3:C4:FB:2E:74:A9:21:18:C8:8B:5C:E8:ED:3C:17:E8:57:D9:A2 ValidityWed, 28 Aug 2024 11:09:18 GMT - Tue, 26 Nov 2024 11:09:17 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1062), with CRLF, LF line terminators Hashfbf8d2a532fa231c99de41de1655f30f c75073fd0041e112fb4295a6133486ac9c5ad9dd 32f93d1fed6883df89250aaa2551f62f71fccf8aece10cd12851e3ad1f91f2b2
GET /f2SNgCqb HTTP/1.1
Host: shrinkme.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:02 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-robots-tag: noindex, nofollow
set-cookie: lang=en_US; expires=Wed, 24-Sep-2025 13:29:58 GMT; Max-Age=31104000; path=/
AppSession=c08f48629a3ad1e55824b20ace34cfcb; path=/; HttpOnly
csrfToken=4cec5279ed837584030c2d58fadb5e7e67ef646f66b392763a74538124ccc0f942f1bfe7bc74c5d7f556367c570f612860506076c9abec61e1a1bfbc5df3f146; path=/; HttpOnly
app_visitor=Q2FrZQ%3D%3D.ZWIyNzk0NDA0MDZkYmIxMDBlM2I4MzFiMDAxY2JlYzNkNzg1NDRjZGFjMDY1MGUxYjgxZjk0ODYyOGJlNzlhNBD%2FUyhPau1MB4aNA3BjwkR%2FOrtStL92zQJ2SWKVPb2K8LbarNcjKu0EUSfpoxkwTQ7NQilrXrRvTNTFY13HugO3EIiILCxqb%2BXaqBvJ3Ioe; expires=Mon, 30-Sep-2024 13:29:58 GMT; Max-Age=86400; path=/; HttpOnly
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4XXWW8jLUSTU0UdTqQEucKFmBqAa299y%2BH4J5tapLl%2FGHlsqi28%2FsER6YpcRwl44bmkPMVlLC8pxMzv5SesONWiJXFEBhIBM0leyB0lMhr40%2FjRMHm9bmJXze61Z0EA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8cac5357baf162c5-HAM
content-encoding: br
X-Firefox-Spdy: h2
|
|
| shrinkme.ink/js/ads.js | 104.21.68.12 | 200 OK | 160 B |
IP 104.21.68.12:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectshrinkme.ink Fingerprint4A:F3:C4:FB:2E:74:A9:21:18:C8:8B:5C:E8:ED:3C:17:E8:57:D9:A2 ValidityWed, 28 Aug 2024 11:09:18 GMT - Tue, 26 Nov 2024 11:09:17 GMT
File typeASCII text, with no line terminators Hash17787a2eab84e597896283209c237ef4 8f981359046b81a2c99061fc68d7a6d214fc98bc 347f6365abfcb020615486b3d7e0a6021a507bc720e5fc70efb8bacce6a160ca
GET /js/ads.js HTTP/1.1
Host: shrinkme.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/f2SNgCqb
Cookie: lang=en_US; AppSession=c08f48629a3ad1e55824b20ace34cfcb; csrfToken=4cec5279ed837584030c2d58fadb5e7e67ef646f66b392763a74538124ccc0f942f1bfe7bc74c5d7f556367c570f612860506076c9abec61e1a1bfbc5df3f146; app_visitor=Q2FrZQ%3D%3D.ZWIyNzk0NDA0MDZkYmIxMDBlM2I4MzFiMDAxY2JlYzNkNzg1NDRjZGFjMDY1MGUxYjgxZjk0ODYyOGJlNzlhNBD%2FUyhPau1MB4aNA3BjwkR%2FOrtStL92zQJ2SWKVPb2K8LbarNcjKu0EUSfpoxkwTQ7NQilrXrRvTNTFY13HugO3EIiILCxqb%2BXaqBvJ3Ioe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:03 GMT
content-type: text/javascript
content-length: 160
x-frame-options: SAMEORIGIN
last-modified: Tue, 09 Jan 2024 20:35:39 GMT
etag: "bf-60e8941e5ce80-gzip"
cache-control: max-age=2592000
expires: Sun, 27 Oct 2024 12:55:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 174873
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dvfXIMvjEeE%2BnzzlP%2BJDIHkC8wpm7w%2Fayzxc8Ng9K98o6O262MzRx8M9b4UlneE0F4ns1IQPK7W%2BxpxKpxnWDL7cq8wTtInUCuQQMi5tA3RGhz%2BV4wSooXVKRMt4YbQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cac535a797062c5-HAM
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.67 | | 471 B |
IP 142.250.74.67:0
Hash88296bbf038fb007332e95ffd2bc0cb8 b67dc3668b4a960b641373849c77ef5bb34d4438 7f2f2560e851c2ec8be7331af2413250a3096770752d567819651f60e3e31da4
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Sep 2024 13:30:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.67 | | 471 B |
IP 142.250.74.67:0
Hash88296bbf038fb007332e95ffd2bc0cb8 b67dc3668b4a960b641373849c77ef5bb34d4438 7f2f2560e851c2ec8be7331af2413250a3096770752d567819651f60e3e31da4
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Sep 2024 13:30:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| d34gjfm75zhp78.cloudfront.net/?mfjgd=792297 | 54.230.241.63 | 200 OK | 69 kB |
URL GET HTTP/2d34gjfm75zhp78.cloudfront.net/?mfjgd=792297 IP 54.230.241.63:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (15945) Hash406d47dea3bc7cd8a6d4b435719727b2 7fc9853a6e4ec82c477ebd5affe7bc06cdce1a59 7655bed3898ce5683e38a7c2fc8b60c7099be2d69ece141b78cda3f13e902595
GET /?mfjgd=792297 HTTP/1.1
Host: d34gjfm75zhp78.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 69333
date: Sun, 29 Sep 2024 13:30:03 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Lq4XA58Y0CpElr-M2Arem7L7h8g77li2ysI79-HtucYSqQI_X5PRsg==
X-Firefox-Spdy: h2
|
|
| shrinkme.ink/modern_theme/build/fonts/fontawesome-webfont.woff2 | 104.21.68.12 | 200 OK | 77 kB |
URL GET HTTP/2shrinkme.ink/modern_theme/build/fonts/fontawesome-webfont.woff2 IP 104.21.68.12:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectshrinkme.ink Fingerprint4A:F3:C4:FB:2E:74:A9:21:18:C8:8B:5C:E8:ED:3C:17:E8:57:D9:A2 ValidityWed, 28 Aug 2024 11:09:18 GMT - Tue, 26 Nov 2024 11:09:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /modern_theme/build/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: shrinkme.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/modern_theme/build/css/styles.min.css?ver=6.4.0
Cookie: lang=en_US; AppSession=c08f48629a3ad1e55824b20ace34cfcb; csrfToken=4cec5279ed837584030c2d58fadb5e7e67ef646f66b392763a74538124ccc0f942f1bfe7bc74c5d7f556367c570f612860506076c9abec61e1a1bfbc5df3f146; app_visitor=Q2FrZQ%3D%3D.ZWIyNzk0NDA0MDZkYmIxMDBlM2I4MzFiMDAxY2JlYzNkNzg1NDRjZGFjMDY1MGUxYjgxZjk0ODYyOGJlNzlhNBD%2FUyhPau1MB4aNA3BjwkR%2FOrtStL92zQJ2SWKVPb2K8LbarNcjKu0EUSfpoxkwTQ7NQilrXrRvTNTFY13HugO3EIiILCxqb%2BXaqBvJ3Ioe
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:03 GMT
content-type: font/woff2
content-length: 77160
x-frame-options: SAMEORIGIN
last-modified: Tue, 09 Jan 2024 20:35:39 GMT
etag: "12d68-60e8941e62c40"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1318
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZBDHYe7S%2BPR7%2FukPR0F%2F8MBkKN9QCDnuX0j86eBUBNTe5Op1OYWKkaSNWDyDsgU6zhz0fF%2B83CEDAuGZZL%2FWWcM%2BFzOaHMiX9KGeAP%2FXVRwx18ATjmgURDbkxTsci2Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cac535bdcca62c5-HAM
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 142.250.74.99 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP 142.250.74.99:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintEA:6A:C6:A3:F6:90:16:40:23:03:8F:A5:6F:71:11:F6:FA:B7:5F:C3 ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0 Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shrinkme.ink
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Sep 2024 11:03:57 GMT
expires: Fri, 26 Sep 2025 11:03:57 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
age: 267966
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/muli/v29/7Auwp_0qiz-afTLGLQ.woff2 | 142.250.74.99 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/muli/v29/7Auwp_0qiz-afTLGLQ.woff2 IP 142.250.74.99:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintEA:6A:C6:A3:F6:90:16:40:23:03:8F:A5:6F:71:11:F6:FA:B7:5F:C3 ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 32796, version 1.0 Hashb2a264e3e87b58b54b76483238805a40 169d6f17c82024fe0cfc2d19884a14dae2ec0bdb f68d37d474952b1fbe30def1b69e63e79c46a70263433285783b69ac0107b929
GET /s/muli/v29/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shrinkme.ink
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 32796
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Sep 2024 11:05:47 GMT
expires: Fri, 26 Sep 2025 11:05:47 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:41:22 GMT
content-type: font/woff2
age: 267856
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| shrinkme.io/logo-sm.webp | 172.67.193.134 | 200 OK | 31 kB |
IP 172.67.193.134:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectshrinkme.io Fingerprint9B:55:5C:5A:D5:C9:DB:CE:D3:75:33:89:63:67:DA:2F:3E:8D:86:CA ValiditySun, 22 Sep 2024 09:54:06 GMT - Sat, 21 Dec 2024 09:54:05 GMT
File typeRIFF (little-endian) data, Web/P image Hash53658e8a7ae22169e5b89744bfa9f9cc 157a684bdf8e3be19cbfabc80cf3a53bfbeaa175 9777428de88c524584f0133c3c0d9becf5a3840597eb16dc873bbc29b9a0bf58
GET /logo-sm.webp HTTP/1.1
Host: shrinkme.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:03 GMT
content-type: image/webp
content-length: 31236
x-frame-options: SAMEORIGIN
last-modified: Tue, 09 Jan 2024 20:35:39 GMT
etag: "7a04-60e8941e64b80"
cache-control: max-age=31536000
expires: Thu, 01 May 2025 20:21:07 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 13021734
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ySv0qqbMSL2pzjZqfjB0%2FXUb%2B%2FlooPtDr8gKyt0IosJwc3QAVe1uiKH8BGPRCDfEMSrKMYmFlBqhIL3c8G4mtiI3nxsw9JWCBs5g9%2FGq5Ie9ZXa4dCvQulFxkH1wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cac535c2e5a750e-HAM
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| shrinkme.io/dyyehuis8.png | 172.67.193.134 | 200 OK | 13 kB |
URL GET HTTP/2shrinkme.io/dyyehuis8.png IP 172.67.193.134:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectshrinkme.io Fingerprint9B:55:5C:5A:D5:C9:DB:CE:D3:75:33:89:63:67:DA:2F:3E:8D:86:CA ValiditySun, 22 Sep 2024 09:54:06 GMT - Sat, 21 Dec 2024 09:54:05 GMT
File typePNG image data, 238 x 154, 8-bit colormap, non-interlaced Hashf293daf49bd343c38ae34614fa67a414 b53a204e0c385f2fa62fb57de5ba26dfc6920d3a c2baa90aafc484c676f4d9365c6f37b41ed50a5f21bc07eab9ad57ddb546f48d
GET /dyyehuis8.png HTTP/1.1
Host: shrinkme.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:03 GMT
content-type: image/png
content-length: 13368
x-frame-options: SAMEORIGIN
last-modified: Thu, 29 Feb 2024 03:46:03 GMT
etag: "3438-6127d19311920"
cache-control: max-age=31536000
expires: Thu, 01 May 2025 19:06:18 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 13026223
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sofHn3Vtv98%2BV2vZADPcMkPTemTT7Xi8xlczY1cTFMt9hJUxnMpqp1UT8hIFjOy8sIRzCur8KlhYiPzUG2YGJuKLI56zycyptn6brzdvAubnSyCZ5z5h%2BTLYkKPwBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cac535c3e61750e-HAM
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 142.250.74.99 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP 142.250.74.99:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintEA:6A:C6:A3:F6:90:16:40:23:03:8F:A5:6F:71:11:F6:FA:B7:5F:C3 ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0 Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shrinkme.ink
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Sep 2024 11:03:57 GMT
expires: Fri, 26 Sep 2025 11:03:57 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
age: 267966
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| sanoithmefeyau.com/SjVZc3crVzoeSCsIO1UCOFlkVkUMEGs1E3kBPhkRJwJsCR86AmFdFCZaLBcROFo3B1kkUC1WRQxdAEItAmc1IjYFZjIUFjJWfEExAwYtGSAnZ2gVRQRzExkiIHg1RxsGTwhKMx4FKDpEJX4WMA8tZTEyQgFhAwM2GwFpIx1yWx8iHDlvaSYeGmYTAyJ5dCs5DSVwOEEyIHo+MQUuWBhCNTBnbxAZA20TGhA+VAsqBAFxYUQxIHw2OA0icxAKLX16CAQEBlw2RzYke2gyMAx7Ax49em8cAAIuWz0LIghnMBcwG2UJChwweRwpHC5PbAAhG1khEBkMZB80WgAFAzEyLWw3JiEdWBsDEyQEHik/KV0UIjZzfh49GgBiC0ATeGcNKUQuBjolMSd8CksaCF8YHCckcws2P39CPB85PXg3BxtsXyocGToIOysEMl4dMDkgBg | 143.204.55.33 | 200 OK | 1.2 kB |
URL GET HTTP/2sanoithmefeyau.com/SjVZc3crVzoeSCsIO1UCOFlkVkUMEGs1E3kBPhkRJwJsCR86AmFdFCZaLBcROFo3B1kkUC1WRQxdAEItAmc1IjYFZjIUFjJWfEExAwYtGSAnZ2gVRQRzExkiIHg1RxsGTwhKMx4FKDpEJX4WMA8tZTEyQgFhAwM2GwFpIx1yWx8iHDlvaSYeGmYTAyJ5dCs5DSVwOEEyIHo+MQUuWBhCNTBnbxAZA20TGhA+VAsqBAFxYUQxIHw2OA0icxAKLX16CAQEBlw2RzYke2gyMAx7Ax49em8cAAIuWz0LIghnMBcwG2UJChwweRwpHC5PbAAhG1khEBkMZB80WgAFAzEyLWw3JiEdWBsDEyQEHik/KV0UIjZzfh49GgBiC0ATeGcNKUQuBjolMSd8CksaCF8YHCckcws2P39CPB85PXg3BxtsXyocGToIOysEMl4dMDkgBg IP 143.204.55.33:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerAmazon Subjectsanoithmefeyau.com FingerprintFB:74:61:BD:E1:53:0A:C3:4E:45:C9:5E:19:F5:82:F6:03:5D:F9:5D ValidityMon, 19 Aug 2024 00:00:00 GMT - Wed, 17 Sep 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3037), with no line terminators Hash4669865d46b7a83e1d742c213d4743c7 3f82d57de3e6a54166202a9a8dd161a91edb3c17 6946c3c28f90dd775dd0c67771be8e9350e6aa7606898a2b74982ff82ffdf992
GET /SjVZc3crVzoeSCsIO1UCOFlkVkUMEGs1E3kBPhkRJwJsCR86AmFdFCZaLBcROFo3B1kkUC1WRQxdAEItAmc1IjYFZjIUFjJWfEExAwYtGSAnZ2gVRQRzExkiIHg1RxsGTwhKMx4FKDpEJX4WMA8tZTEyQgFhAwM2GwFpIx1yWx8iHDlvaSYeGmYTAyJ5dCs5DSVwOEEyIHo+MQUuWBhCNTBnbxAZA20TGhA+VAsqBAFxYUQxIHw2OA0icxAKLX16CAQEBlw2RzYke2gyMAx7Ax49em8cAAIuWz0LIghnMBcwG2UJChwweRwpHC5PbAAhG1khEBkMZB80WgAFAzEyLWw3JiEdWBsDEyQEHik/KV0UIjZzfh49GgBiC0ATeGcNKUQuBjolMSd8CksaCF8YHCckcws2P39CPB85PXg3BxtsXyocGToIOysEMl4dMDkgBg HTTP/1.1
Host: sanoithmefeyau.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1192
date: Sun, 29 Sep 2024 13:30:03 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ncHQpdlhNmpgUKtesak_qzWJ1a4yndrmrNSkocd5YTsuoSMN6mulig==
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-2.2.4.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL GET HTTP/2code.jquery.com/jquery-2.2.4.min.js IP 151.101.66.137:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /jquery-2.2.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-14e4a"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 29 Sep 2024 13:30:03 GMT
age: 1668661
x-served-by: cache-lga21935-LGA, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 37, 121214
x-timer: S1727616604.883670,VS0,VE0
vary: Accept-Encoding
content-length: 29811
X-Firefox-Spdy: h2
|
|
| ableandworldwid.com/V3JtUzV4TQ4gCDMlIx14OgosBX08NzsGUQIXLCdTBR4ZdgcRMFwCEyMbCW4CbkBfagJxAgQ3CGZUHidUIwcebgRxGwM1WmpUG24EeUFZfQZhXFl1QGpDSydFNhVQYhMnBhk/CGZFX2QDZkRbYwZhR1k | 104.21.12.231 | 204 No Content | 0 B |
URL GET HTTP/2ableandworldwid.com/V3JtUzV4TQ4gCDMlIx14OgosBX08NzsGUQIXLCdTBR4ZdgcRMFwCEyMbCW4CbkBfagJxAgQ3CGZUHidUIwcebgRxGwM1WmpUG24EeUFZfQZhXFl1QGpDSydFNhVQYhMnBhk/CGZFX2QDZkRbYwZhR1k IP 104.21.12.231:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectableandworldwid.com Fingerprint32:81:3D:41:F0:71:32:5C:85:E8:A4:37:FF:65:D3:20:26:9E:62:E6 ValidityFri, 06 Sep 2024 07:47:33 GMT - Thu, 05 Dec 2024 07:47:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /V3JtUzV4TQ4gCDMlIx14OgosBX08NzsGUQIXLCdTBR4ZdgcRMFwCEyMbCW4CbkBfagJxAgQ3CGZUHidUIwcebgRxGwM1WmpUG24EeUFZfQZhXFl1QGpDSydFNhVQYhMnBhk/CGZFX2QDZkRbYwZhR1k HTTP/1.1
Host: ableandworldwid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 29 Sep 2024 13:30:03 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I%2FCRo5F76DvertOWtGp0xvxnkjasvafiMsKGEVQJtNv129CbbMHHSmw4vH6lahWfUA345E7TSolL6xgVEqIIn0eNJdhXheZyw7GcASushc9zNAlgUfCgBPPJfiFkH1PQ5UAzz22J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cac535df9250df6-AMS
X-Firefox-Spdy: h2
|
|
| ableandworldwid.com/QjNPelBtDCwJbRBfBRYecXF+IBYLcBwiCi9rHjwaIQEJGRQpamkOOSYOeENicAp3XCArV3JLaGRAOxskN0ByS3YrXSkVbWRFckt+ch19VGVkRnJLdjZDLh1tcxU/DiQuDn5NYnUFfkxmcgB5TWM | 104.21.12.231 | 204 No Content | 0 B |
URL GET HTTP/2ableandworldwid.com/QjNPelBtDCwJbRBfBRYecXF+IBYLcBwiCi9rHjwaIQEJGRQpamkOOSYOeENicAp3XCArV3JLaGRAOxskN0ByS3YrXSkVbWRFckt+ch19VGVkRnJLdjZDLh1tcxU/DiQuDn5NYnUFfkxmcgB5TWM IP 104.21.12.231:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectableandworldwid.com Fingerprint32:81:3D:41:F0:71:32:5C:85:E8:A4:37:FF:65:D3:20:26:9E:62:E6 ValidityFri, 06 Sep 2024 07:47:33 GMT - Thu, 05 Dec 2024 07:47:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /QjNPelBtDCwJbRBfBRYecXF+IBYLcBwiCi9rHjwaIQEJGRQpamkOOSYOeENicAp3XCArV3JLaGRAOxskN0ByS3YrXSkVbWRFckt+ch19VGVkRnJLdjZDLh1tcxU/DiQuDn5NYnUFfkxmcgB5TWM HTTP/1.1
Host: ableandworldwid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 29 Sep 2024 13:30:03 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X5fVJfvdANknaXEZqykVO%2F%2FhylIJcYEcsaA6%2BzRrWHa2HMaz%2FrTUr7mJNAo%2BzkfZCOM3BGyjzZ%2F4xrQ0n8e6%2BE%2FC4qZtJTDQUOyOclt65o8%2FOL3DXGQO%2F%2BRKPYYB0B1FtmtHZDNH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cac535df9310df6-AMS
X-Firefox-Spdy: h2
|
|
| ableandworldwid.com/popunder.gif | 104.21.12.231 | | 58 B |
URL GET ableandworldwid.com/popunder.gif IP 104.21.12.231:0
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectableandworldwid.com Fingerprint32:81:3D:41:F0:71:32:5C:85:E8:A4:37:FF:65:D3:20:26:9E:62:E6 ValidityFri, 06 Sep 2024 07:47:33 GMT - Thu, 05 Dec 2024 07:47:32 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28d6814f309ea289f847c69cf91194c6 0f4e929dd5bb2564f7ab9c76338e04e292a42ace 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: ableandworldwid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:04 GMT
content-type: image/gif
content-length: 58
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
content-encoding: gzip
cf-cache-status: HIT
age: 76837
last-modified: Sat, 28 Sep 2024 16:09:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oDZ775HcfQhOOVX5vQEVwnkBDlCveJMdQ%2FUrKD1bPbg9sfVDhvCdRSSiKRE7FjxrLzKtRnM6qC31w0zoRN5YLzyip35gDcGAys%2FEetuDr2mPoycIv1PTHU84duW6B9GOKAtdxxNe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cac53614f0f0df6-AMS
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.162.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP 64.233.162.84:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16 ValidityMon, 26 Aug 2024 07:15:53 GMT - Mon, 18 Nov 2024 07:15:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:9pHxMV032xOPtL9w01D4gIuATl2mAw:oV1LFvSYQoaRI_zA; Expires=Tue, 29-Sep-2026 13:30:04 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 29 Sep 2024 13:30:04 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqc_idHiDfiwSWgpG2NdVuOjZhq6UNLKLgRsVHulRTQd9wsfnmXra02BTFZbzBk5rtpFIN4KFA
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-bZB8VbsXbfQ9mNeknQgAqw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| shrinkme.io/favicon-3.webp | 172.67.193.134 | 200 OK | 13 kB |
URL GET HTTP/3shrinkme.io/favicon-3.webp IP 172.67.193.134:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectshrinkme.io Fingerprint9B:55:5C:5A:D5:C9:DB:CE:D3:75:33:89:63:67:DA:2F:3E:8D:86:CA ValiditySun, 22 Sep 2024 09:54:06 GMT - Sat, 21 Dec 2024 09:54:05 GMT
File typeRIFF (little-endian) data, Web/P image Hash103971bd196afd0ca8f772c9680c9e4c 8340e472b9426202e0745d04956c468366256994 663cf4358e3e1fdbb64e946bbf381b04db3654d54fe7ba5d8cd47463b733425b
GET /favicon-3.webp HTTP/1.1
Host: shrinkme.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 29 Sep 2024 13:30:04 GMT
content-type: image/webp
content-length: 12694
x-frame-options: SAMEORIGIN
last-modified: Tue, 09 Jan 2024 20:35:39 GMT
etag: "3196-60e8941e5ce80"
cache-control: max-age=31536000
expires: Thu, 01 May 2025 20:21:10 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 13021732
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YTY2ps1xJKq2sL9sIHLa%2B23AUgRNQfaYkNEzkONDXZvQmwgSBtrsghhY2nm2KQ7%2BZZjDLvjszZUEyy78evJOw1RvpeZinFIPCXrJc954xm97p1h2fOIYfBDAjq8Hjg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cac536119556a64-HAM
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.162.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP 64.233.162.84:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16 ValidityMon, 26 Aug 2024 07:15:53 GMT - Mon, 18 Nov 2024 07:15:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:-j0ox2BS0xkTKb-SrVtNz9gnOox5Aw:ClB4iJv7wXqOuO3e; Expires=Tue, 29-Sep-2026 13:30:04 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 29 Sep 2024 13:30:04 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqecQmJ2oxp4zmkpU13kmG1NeBX8KO0N-FB0UNAc2nVvvIWzfA_4WDAhHR7v5ZbnPQGZqddc0Q
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-w9nebAxkhwqCytkGvnNPmw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqc_idHiDfiwSWgpG2NdVuOjZhq6UNLKLgRsVHulRTQd9wsfnmXra02BTFZbzBk5rtpFIN4KFA | 64.233.162.84 | 302 Found | 418 B |
URL GET HTTP/2accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqc_idHiDfiwSWgpG2NdVuOjZhq6UNLKLgRsVHulRTQd9wsfnmXra02BTFZbzBk5rtpFIN4KFA IP 64.233.162.84:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16 ValidityMon, 26 Aug 2024 07:15:53 GMT - Mon, 18 Nov 2024 07:15:52 GMT
File typeHTML document, ASCII text, with very long lines (390) Hash1dcb860d79d7554945835b85639e3b82 0b4eb38dc2a8fa009f8ce3ad5addb01ece32a919 135523cf086756fbc7947c8049c3dcf4ad6efec2af15b577c71f79724550b434
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqc_idHiDfiwSWgpG2NdVuOjZhq6UNLKLgRsVHulRTQd9wsfnmXra02BTFZbzBk5rtpFIN4KFA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinkme.ink/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:YCgQ_H0tlVfjMKN5CItzgg76kn_MwA:tHCipdVOKMVmwSQE;Path=/;Expires=Tue, 29-Sep-2026 13:30:04 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 29 Sep 2024 13:30:04 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqd3W1vd-g2qeJeFwuns0gXj1pnudq1nBcTIfPjnkhqHZc2jjNlkURpSBSM60CepAaC_iIF2bg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1845665436%3A1727616604446221&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-Fvw6V7HfS6AgHy6ls4XgWA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 418
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js | 142.250.74.132 | 200 OK | 998 B |
URL GET HTTP/2www.google.com/recaptcha/api.js IP 142.250.74.132:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectwww.google.com FingerprintA9:76:72:D7:78:A8:1B:25:A7:A2:91:29:BE:43:C3:76:64:C8:3C:67 ValidityMon, 26 Aug 2024 07:15:49 GMT - Mon, 18 Nov 2024 07:15:48 GMT
File typeJavaScript source, ASCII text, with very long lines (876) Hashb8143990ab285590a470761352676dc2 1093373fc174a48b969da5a5e78721cf658cd58f 76e0fc99fb8d9a7b7182d74cc917a64dc0555105f0520cc92ba938ab80948601
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sun, 29 Sep 2024 13:30:03 GMT
date: Sun, 29 Sep 2024 13:30:03 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| d34gjfm75zhp78.cloudfront.net/hY1ZHRlQAOSkgaxc/I3tjWmR1f2NFJjUjMl4lLzQ9DT0qI3oKOCxgPhA5KTZpAQ40Pj8nFQksZ0UiPSJpU3ArJzoEa2EjOgBrdmA1BzR6cnIXJigtaRYsKD87FjIoKzhFIyZ7OQwsLio4AnN1AGFNZmJ0ZEsudndxUBRidGQPPykzLEZkdz5sVQlxcnFQFG-J0ZBEgYnUVWmBpdn1GZHchMQA9KGNmJWR3d2RTZ3d3cVFmIS8mBjAoPnFREH5welNwMntl | 54.230.241.63 | | 563 B |
URL d34gjfm75zhp78.cloudfront.net/hY1ZHRlQAOSkgaxc/I3tjWmR1f2NFJjUjMl4lLzQ9DT0qI3oKOCxgPhA5KTZpAQ40Pj8nFQksZ0UiPSJpU3ArJzoEa2EjOgBrdmA1BzR6cnIXJigtaRYsKD87FjIoKzhFIyZ7OQwsLio4AnN1AGFNZmJ0ZEsudndxUBRidGQPPykzLEZkdz5sVQlxcnFQFG-J0ZBEgYnUVWmBpdn1GZHchMQA9KGNmJWR3d2RTZ3d3cVFmIS8mBjAoPnFREH5welNwMntl IP 54.230.241.63:0
CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (778), with no line terminators Hash2b80effe6ac59273f773402a34aa35c0 a77dea95909c534d6588ef639c91fa39889069c8 efb8d6ef3f939e261f645f1aeccee06a6cffa9190d5f92dd0151c56a4369c1b4
GET /hY1ZHRlQAOSkgaxc/I3tjWmR1f2NFJjUjMl4lLzQ9DT0qI3oKOCxgPhA5KTZpAQ40Pj8nFQksZ0UiPSJpU3ArJzoEa2EjOgBrdmA1BzR6cnIXJigtaRYsKD87FjIoKzhFIyZ7OQwsLio4AnN1AGFNZmJ0ZEsudndxUBRidGQPPykzLEZkdz5sVQlxcnFQFG-J0ZBEgYnUVWmBpdn1GZHchMQA9KGNmJWR3d2RTZ3d3cVFmIS8mBjAoPnFREH5welNwMntl HTTP/1.1
Host: d34gjfm75zhp78.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoithmefeyau.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 563
date: Sun, 29 Sep 2024 13:30:04 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rViKxyj1FGFub5Y7B6sISEXoQJ3r6wLYGzZ15YzRIDbu6S0NG0POsQ==
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.68.94 | 200 OK | 5.1 kB |
IP 104.21.68.94:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
File typeASCII text, with no line terminators Hash8da790217913a93f007e517377e7b4a8 67cb2f85192b3d4c348696eb5ebf70da285ab795 c763724afd39db9c505f4187e4f05a8a5d35d7e5478874858508b3a777c1537b
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinkme.ink/
Origin: https://shrinkme.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:04 GMT
content-type: text/plain
set-cookie: csu=1373249846642599@1@1727616604; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://shrinkme.ink
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S8D9Ff3rxpSJSNdx7NF5e4Z1UunolT67Jz9Moo59DKf6W7aLprp%2FgcHKbwTVhgm5f7oFmWEesMf7wzLYxndN6eBwx2MD5Vmi%2B%2FjeWGoEvg696EBiFcMvBHLqXUAZq1LRy5SRzao%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cac5361dd860b63-AMS
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-5Q2KMLS | 142.250.74.168 | 200 OK | 75 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-5Q2KMLS IP 142.250.74.168:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint8F:FB:38:1E:52:FC:DC:A9:59:49:87:DE:AC:8B:98:2B:57:09:5D:BA ValidityMon, 26 Aug 2024 06:33:47 GMT - Mon, 18 Nov 2024 06:33:46 GMT
File typeJavaScript source, ASCII text, with very long lines (2565) Hashbb78504cd7b0b4ffaccbc6c770f9fc75 d84fad0aeaa6abd6c2c0b8fe4bceb315d60aff05 c707a2cd3cb1a78ebaba0efd0aeb6e7958a29da870e29c8ac8ad71123e8dff4e
GET /gtm.js?id=GTM-5Q2KMLS HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 29 Sep 2024 13:30:05 GMT
expires: Sun, 29 Sep 2024 13:30:05 GMT
cache-control: private, max-age=900
last-modified: Sun, 29 Sep 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1080:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1080:0"}],}
server: Google Tag Manager
content-length: 75171
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js | 142.250.74.35 | 200 OK | 218 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js IP 142.250.74.35:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintEA:6A:C6:A3:F6:90:16:40:23:03:8F:A5:6F:71:11:F6:FA:B7:5F:C3 ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT
File typeJavaScript source, ASCII text, with very long lines (724) Size218 kB (218137 bytes) Hash33aff52b82a1df246136e75500d93220 4675754451af81f996eab925923c31ef5115a9f4 b5e8ec5d4dcc080657deb2d004f65d974bf4ec9e9aa5d621e10749182fff8731
GET /recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinkme.ink
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 218137
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Sep 2024 08:43:38 GMT
expires: Sat, 27 Sep 2025 08:43:38 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 23 Sep 2024 04:00:50 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 189987
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdeh1zOEa1u1qwBWLJjOYlKi2ahKnw7GAYrQ4LU-LuLYTKiORUJ_Rz0_iVQdeKYvxfEqrXRBA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-802341771%3A1727616604537855&ddm=0 | 64.233.162.84 | 403 Forbidden | 47 kB |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdeh1zOEa1u1qwBWLJjOYlKi2ahKnw7GAYrQ4LU-LuLYTKiORUJ_Rz0_iVQdeKYvxfEqrXRBA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-802341771%3A1727616604537855&ddm=0 IP 64.233.162.84:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint99:1A:E6:C6:9B:04:87:74:E3:DA:97:C8:29:09:15:16:CF:1F:6A:78 ValidityMon, 26 Aug 2024 06:33:47 GMT - Mon, 18 Nov 2024 06:33:46 GMT
File typegzip compressed data, max compression Hashf1d5a07c73b7d975112ded6fbeff1a84 56445a0e06c58d78651476991a65ae4675d79c99 ac00bb032b1ce10f0ff40ffb70870bf5dfa29e6cfb1d52a6ef2c258119615e07
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdeh1zOEa1u1qwBWLJjOYlKi2ahKnw7GAYrQ4LU-LuLYTKiORUJ_Rz0_iVQdeKYvxfEqrXRBA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-802341771%3A1727616604537855&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinkme.ink/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 29 Sep 2024 13:30:04 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-TOVEWOM8N0uyiqC0GHTQCg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en._s1fC-CLCMs.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqd3W1vd-g2qeJeFwuns0gXj1pnudq1nBcTIfPjnkhqHZc2jjNlkURpSBSM60CepAaC_iIF2bg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1845665436%3A1727616604446221&ddm=0 | 64.233.162.84 | 403 Forbidden | 9.9 kB |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqd3W1vd-g2qeJeFwuns0gXj1pnudq1nBcTIfPjnkhqHZc2jjNlkURpSBSM60CepAaC_iIF2bg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1845665436%3A1727616604446221&ddm=0 IP 64.233.162.84:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint99:1A:E6:C6:9B:04:87:74:E3:DA:97:C8:29:09:15:16:CF:1F:6A:78 ValidityMon, 26 Aug 2024 06:33:47 GMT - Mon, 18 Nov 2024 06:33:46 GMT
File typegzip compressed data, max compression Hashff4603c91d06ac917eb9a06b382d14ed e06dec7b9fa6900a36d51480f366dcfa6912dba1 660285cda824e550659ed162f923329889edc20c8813e424c4365d569889838c
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqd3W1vd-g2qeJeFwuns0gXj1pnudq1nBcTIfPjnkhqHZc2jjNlkURpSBSM60CepAaC_iIF2bg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1845665436%3A1727616604446221&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinkme.ink/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 29 Sep 2024 13:30:04 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: script-src 'nonce-hV-wgfacaKNIvP-TGkdoAQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en._s1fC-CLCMs.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| gloaphoo.net/401/5775069 | 139.45.197.239 | 200 OK | 94 kB |
IP 139.45.197.239:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerLet's Encrypt Subjectgloaphoo.net FingerprintE9:6A:0A:BA:8C:67:EE:F1:BD:1F:50:7E:41:4E:B8:16:B4:ED:F8:27 ValidityThu, 29 Aug 2024 05:25:57 GMT - Wed, 27 Nov 2024 05:25:56 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashd5c89851420bb936a6e4d9e9dc16b3e8 8be27535a05adf64d19958cba580f0b8b04f2d6b ee1cdeb130253b6c323213dadcd1cd755f8b46532c407d7b817fdfb316304f1a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /401/5775069 HTTP/1.1
Host: gloaphoo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 29 Sep 2024 13:30:05 GMT
content-type: application/javascript
x-trace-id: b8449ea20db6457a2a32839ca18a76c5
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
set-cookie: OAID=0300e6fa6a0b4354e313c06a9ad26676; expires=Mon, 29 Sep 2025 13:30:05 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit | 142.250.74.99 | 200 OK | 941 B |
URL GET HTTP/2www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit IP 142.250.74.99:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectmisc.google.com FingerprintCB:70:1F:D7:73:D5:24:6B:9F:EA:EE:E9:B9:24:F4:22:0A:57:7B:98 ValidityMon, 26 Aug 2024 06:38:24 GMT - Mon, 18 Nov 2024 06:38:23 GMT
File typeJavaScript source, ASCII text, with very long lines (941), with no line terminators Hash1c47b9c94a367c61051d330fa0ec1c4a 529fdb8a6ad5de0d5fefa5e318cdc9ede209ea8b 2727bf9b9baf30e491a485a51cba9f99bd146d20d4d51990139c36708c19a7db
GET /recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sun, 29 Sep 2024 13:30:03 GMT
date: Sun, 29 Sep 2024 13:30:03 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| shrinkme.ink/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 104.21.68.12 | 200 OK | 1.2 kB |
URL GET HTTP/2shrinkme.ink/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 104.21.68.12:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectshrinkme.ink Fingerprint4A:F3:C4:FB:2E:74:A9:21:18:C8:8B:5C:E8:ED:3C:17:E8:57:D9:A2 ValidityWed, 28 Aug 2024 11:09:18 GMT - Tue, 26 Nov 2024 11:09:17 GMT
File typeHTML document, ASCII text, with very long lines (1271), with no line terminators Hash40d981045a7516cdadd00e8dccc9c58d 8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3 71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: shrinkme.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/f2SNgCqb
Cookie: lang=en_US; AppSession=c08f48629a3ad1e55824b20ace34cfcb; csrfToken=4cec5279ed837584030c2d58fadb5e7e67ef646f66b392763a74538124ccc0f942f1bfe7bc74c5d7f556367c570f612860506076c9abec61e1a1bfbc5df3f146; app_visitor=Q2FrZQ%3D%3D.ZWIyNzk0NDA0MDZkYmIxMDBlM2I4MzFiMDAxY2JlYzNkNzg1NDRjZGFjMDY1MGUxYjgxZjk0ODYyOGJlNzlhNBD%2FUyhPau1MB4aNA3BjwkR%2FOrtStL92zQJ2SWKVPb2K8LbarNcjKu0EUSfpoxkwTQ7NQilrXrRvTNTFY13HugO3EIiILCxqb%2BXaqBvJ3Ioe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Sep 2024 09:13:42 GMT
etag: W/"66f525c6-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dLU4xZq6iMaljekbCYN8%2BgLIrhrb7CsQuko7b%2BIG74VurON0hedkHEX4ALsG8Fb4c3fyvYK4HAEymVH0Lvp1mOFerK%2FslziKSFksEL5ingWl2qUOMxXHBtVy1tjpT7o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cac535a796e62c5-HAM
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 01 Oct 2024 13:30:03 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| shrinkme.ink/modern_theme/build/js/script.min.js?ver=6.4.0 | 104.21.68.12 | 200 OK | 207 kB |
URL GET HTTP/2shrinkme.ink/modern_theme/build/js/script.min.js?ver=6.4.0 IP 104.21.68.12:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectshrinkme.ink Fingerprint4A:F3:C4:FB:2E:74:A9:21:18:C8:8B:5C:E8:ED:3C:17:E8:57:D9:A2 ValidityWed, 28 Aug 2024 11:09:18 GMT - Tue, 26 Nov 2024 11:09:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size207 kB (207190 bytes) Hashfd8488818ef0dffe6bb33af14ebfab14 a7319b35c45fc5fca5fe09923ae2654c42d18c8f 852593ea1830ce3d6821822385a17af199442f4938b588ed7c84942c351d9f16
GET /modern_theme/build/js/script.min.js?ver=6.4.0 HTTP/1.1
Host: shrinkme.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/f2SNgCqb
Cookie: lang=en_US; AppSession=c08f48629a3ad1e55824b20ace34cfcb; csrfToken=4cec5279ed837584030c2d58fadb5e7e67ef646f66b392763a74538124ccc0f942f1bfe7bc74c5d7f556367c570f612860506076c9abec61e1a1bfbc5df3f146; app_visitor=Q2FrZQ%3D%3D.ZWIyNzk0NDA0MDZkYmIxMDBlM2I4MzFiMDAxY2JlYzNkNzg1NDRjZGFjMDY1MGUxYjgxZjk0ODYyOGJlNzlhNBD%2FUyhPau1MB4aNA3BjwkR%2FOrtStL92zQJ2SWKVPb2K8LbarNcjKu0EUSfpoxkwTQ7NQilrXrRvTNTFY13HugO3EIiILCxqb%2BXaqBvJ3Ioe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:03 GMT
content-type: text/javascript
x-frame-options: SAMEORIGIN
last-modified: Tue, 09 Jan 2024 20:35:39 GMT
etag: "32956-60e8941e5edc0-gzip"
cache-control: max-age=2592000
expires: Sun, 27 Oct 2024 12:55:28 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 174871
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=THHrWFSjYbUPwf5nq%2BhErto0XohOZMTngT03KmNzQB23FNcIJNrCNex2%2FBQF5cgHO%2FqLqSmJl9XqMdXGJNsB%2BJnOMXSbNHKRvykcwfMWtrLRs0qBmILzG6BUYRS9jf4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cac535d788762c5-HAM
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqecQmJ2oxp4zmkpU13kmG1NeBX8KO0N-FB0UNAc2nVvvIWzfA_4WDAhHR7v5ZbnPQGZqddc0Q | 64.233.162.84 | 302 Found | 0 B |
URL GET HTTP/3accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqecQmJ2oxp4zmkpU13kmG1NeBX8KO0N-FB0UNAc2nVvvIWzfA_4WDAhHR7v5ZbnPQGZqddc0Q IP 64.233.162.84:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint99:1A:E6:C6:9B:04:87:74:E3:DA:97:C8:29:09:15:16:CF:1F:6A:78 ValidityMon, 26 Aug 2024 06:33:47 GMT - Mon, 18 Nov 2024 06:33:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqecQmJ2oxp4zmkpU13kmG1NeBX8KO0N-FB0UNAc2nVvvIWzfA_4WDAhHR7v5ZbnPQGZqddc0Q HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinkme.ink/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:Cz_bGfWJepeCtRnO1dRyOiKpZOhAzQ:D8dLZZn0kD5Q2sQe;Path=/;Expires=Tue, 29-Sep-2026 13:30:04 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 29 Sep 2024 13:30:04 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdeh1zOEa1u1qwBWLJjOYlKi2ahKnw7GAYrQ4LU-LuLYTKiORUJ_Rz0_iVQdeKYvxfEqrXRBA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-802341771%3A1727616604537855&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-Xf0-gYtTb8Q0ucTE3kd6xw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 423
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css?family=Montserrat:400,700%7CMuli:300,300i,400 | 142.250.74.106 | 200 OK | 6.7 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Montserrat:400,700%7CMuli:300,300i,400 IP 142.250.74.106:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC6:E8:36:27:AB:3A:34:33:0B:85:2C:D8:6C:0A:74:34:71:6A:F5:62 ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT
File typeASCII text, with very long lines (6886), with no line terminators Hash6df3c8b6fb13e2dcab1f0242e8a6e46c 29d1e965f72ba1d1fd477f203157a3cd37cabe1c 501129b21035d91f246d1e402ccee45edde262634f43b0fcbfbdd08ee2114882
GET /css?family=Montserrat:400,700%7CMuli:300,300i,400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 29 Sep 2024 13:30:03 GMT
date: Sun, 29 Sep 2024 13:30:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| undefined/bER6UGYNJhk9WQ15GHYTHihHdVQqYUgWAl9wHToAAXNPKg4cc0J+BQArDzQAHisUJEgCIQ51VCo0LhQwNSYuOxA7LiMcJAYsGQAgLQseAQIdEjsWFz4XFRk+XwI9HSRVFTM8Ul0HODMKOz40HDMWfRseDlwBKhhWHhRLM1APEw1jLhYsKgAgLQ4bPA1ZBUtlHik+ShQxAgE/NgEUIDY3Dh8XSicSLwAvEzcVEiAeJxsnHD4oGBUNPBYudhIWNzR0PzYwWXMbAQIDBSwRDz0HOBklXzw0CSAYKR83IFUcFCQWLnYdNjJeLz0XMD0UIzcwFBc7JF45LldgKTktNwEHBTc2Nic+KyIBDlQGMmEALxcKMy0LLBwZVl19ImNfXQVJCgIkPhEZBz1iECMJAjRHIC4fFhQmIlge | 0.0.0.0 | | 0 B |
URL GET undefined/bER6UGYNJhk9WQ15GHYTHihHdVQqYUgWAl9wHToAAXNPKg4cc0J+BQArDzQAHisUJEgCIQ51VCo0LhQwNSYuOxA7LiMcJAYsGQAgLQseAQIdEjsWFz4XFRk+XwI9HSRVFTM8Ul0HODMKOz40HDMWfRseDlwBKhhWHhRLM1APEw1jLhYsKgAgLQ4bPA1ZBUtlHik+ShQxAgE/NgEUIDY3Dh8XSicSLwAvEzcVEiAeJxsnHD4oGBUNPBYudhIWNzR0PzYwWXMbAQIDBSwRDz0HOBklXzw0CSAYKR83IFUcFCQWLnYdNjJeLz0XMD0UIzcwFBc7JF45LldgKTktNwEHBTc2Nic+KyIBDlQGMmEALxcKMy0LLBwZVl19ImNfXQVJCgIkPhEZBz1iECMJAjRHIC4fFhQmIlge IP 0.0.0.0:0
Requested byhttps://shrinkme.ink/f2SNgCqb
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /bER6UGYNJhk9WQ15GHYTHihHdVQqYUgWAl9wHToAAXNPKg4cc0J+BQArDzQAHisUJEgCIQ51VCo0LhQwNSYuOxA7LiMcJAYsGQAgLQseAQIdEjsWFz4XFRk+XwI9HSRVFTM8Ul0HODMKOz40HDMWfRseDlwBKhhWHhRLM1APEw1jLhYsKgAgLQ4bPA1ZBUtlHik+ShQxAgE/NgEUIDY3Dh8XSicSLwAvEzcVEiAeJxsnHD4oGBUNPBYudhIWNzR0PzYwWXMbAQIDBSwRDz0HOBklXzw0CSAYKR83IFUcFCQWLnYdNjJeLz0XMD0UIzcwFBc7JF45LldgKTktNwEHBTc2Nic+KyIBDlQGMmEALxcKMy0LLBwZVl19ImNfXQVJCgIkPhEZBz1iECMJAjRHIC4fFhQmIlge HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| shrinkme.ink/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js | 104.21.68.12 | 200 OK | 12 kB |
URL GET HTTP/2shrinkme.ink/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP 104.21.68.12:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectshrinkme.ink Fingerprint4A:F3:C4:FB:2E:74:A9:21:18:C8:8B:5C:E8:ED:3C:17:E8:57:D9:A2 ValidityWed, 28 Aug 2024 11:09:18 GMT - Tue, 26 Nov 2024 11:09:17 GMT
File typeJavaScript source, ASCII text, with very long lines (12331) Hash88a769d2fe35899fd45a332a0a032cc0 514c6c1d8475d17e412849a4c90159517d0fa10a ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: shrinkme.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/f2SNgCqb
Cookie: lang=en_US; AppSession=c08f48629a3ad1e55824b20ace34cfcb; csrfToken=4cec5279ed837584030c2d58fadb5e7e67ef646f66b392763a74538124ccc0f942f1bfe7bc74c5d7f556367c570f612860506076c9abec61e1a1bfbc5df3f146; app_visitor=Q2FrZQ%3D%3D.ZWIyNzk0NDA0MDZkYmIxMDBlM2I4MzFiMDAxY2JlYzNkNzg1NDRjZGFjMDY1MGUxYjgxZjk0ODYyOGJlNzlhNBD%2FUyhPau1MB4aNA3BjwkR%2FOrtStL92zQJ2SWKVPb2K8LbarNcjKu0EUSfpoxkwTQ7NQilrXrRvTNTFY13HugO3EIiILCxqb%2BXaqBvJ3Ioe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Sep 2024 09:13:42 GMT
etag: W/"66f525c6-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PMLmUfC8fADxjVqsLcBh4XJ3u7Rn2EQ4OL9BRAJ3G2BrAlcwut2DlQ9I8Z2A51wwYK9qvGLZinFXwy3ALsMjBrFhN4tWgx5cYJIiV2lhtcrlbVsqmU0IDk7b0p7os20%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cac535a797562c5-HAM
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 01 Oct 2024 13:30:03 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| shrinkme.ink/modern_theme/build/css/styles.min.css?ver=6.4.0 | 104.21.68.12 | 200 OK | 192 kB |
URL GET HTTP/2shrinkme.ink/modern_theme/build/css/styles.min.css?ver=6.4.0 IP 104.21.68.12:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectshrinkme.ink Fingerprint4A:F3:C4:FB:2E:74:A9:21:18:C8:8B:5C:E8:ED:3C:17:E8:57:D9:A2 ValidityWed, 28 Aug 2024 11:09:18 GMT - Tue, 26 Nov 2024 11:09:17 GMT
File typeASCII text, with very long lines (65352) Size192 kB (191593 bytes) Hashe3e209558eec553cb4264bc773d71f8c 44602335076b35d283fd5ba250ebc2fb56af1414 b386764e2b714f6fe617daaedd1946a7161fc2ae5f9bd0bf606f76287121ee1d
GET /modern_theme/build/css/styles.min.css?ver=6.4.0 HTTP/1.1
Host: shrinkme.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shrinkme.ink/f2SNgCqb
Cookie: lang=en_US; AppSession=c08f48629a3ad1e55824b20ace34cfcb; csrfToken=4cec5279ed837584030c2d58fadb5e7e67ef646f66b392763a74538124ccc0f942f1bfe7bc74c5d7f556367c570f612860506076c9abec61e1a1bfbc5df3f146; app_visitor=Q2FrZQ%3D%3D.ZWIyNzk0NDA0MDZkYmIxMDBlM2I4MzFiMDAxY2JlYzNkNzg1NDRjZGFjMDY1MGUxYjgxZjk0ODYyOGJlNzlhNBD%2FUyhPau1MB4aNA3BjwkR%2FOrtStL92zQJ2SWKVPb2K8LbarNcjKu0EUSfpoxkwTQ7NQilrXrRvTNTFY13HugO3EIiILCxqb%2BXaqBvJ3Ioe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:03 GMT
content-type: text/css
content-length: 33859
x-frame-options: SAMEORIGIN
last-modified: Tue, 09 Jan 2024 20:35:39 GMT
etag: "2ec69-60e8941e5edc0-gzip"
cache-control: max-age=2592000
expires: Sun, 27 Oct 2024 12:55:27 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 174873
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=15SgYCaWxRm%2FQwSKRPguvzQmaMVimYg9hjDrGYz5Xer8HDSivNYdHkGcKpFAX9RByOTnoOuNaExF8D8%2FAn2t0Sb%2FZuLmS2TA%2F58MLB01X86njTbUbo22H9em9eVL6oY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cac535a696562c5-HAM
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.68.94 | 200 OK | 102 kB |
URL GET HTTP/2ukankingwithea.com/asd100.bin IP 104.21.68.94:443
Requested byhttps://shrinkme.ink/f2SNgCqb CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinkme.ink/
Origin: https://shrinkme.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 13:30:04 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://shrinkme.ink
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
last-modified: Sun, 29 Sep 2024 13:29:35 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LqccAc4zcHwCyfQElbMA1ffVSO6wB%2BaGwRYwo2kt%2BBIhkhBwzLIeJB24amLOIGNx0JUmstlW3o8IrOD29WUhmc1gl42fKobOMH6zOqb19vhSK2rGQc6B3dRG70UukvGjkegrerE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cac5361dd880b63-AMS
X-Firefox-Spdy: h2
|
|