{"report_id":"0932d30b-b9c2-4795-9eac-382631e95bcf","version":6,"status":"done","tags":[],"date":"2025-12-09T12:57:42Z","url":{"schema":"https","addr":"shrinkme.click/Xnxx_video01","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"172.67.215.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"shrinkme.click/Xnxx_video01","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"title":"ShrinkMe.io","dom":{"size":5528,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4434)","md5":"a457426b283a79faf73dc4a9340dcff6","sha1":"ed20b648170b6a8607fc80a446d5f6e86b688c55","sha256":"60157c1906693464859c9ca053f9473be85070b90d84abf9b8c55dee3ab0275e","sha512":"ee6365d400c0812ee7f3117027cbee5811c4b75e1cf86325a55654bf95d3cf90b6135b41de885c05bdc8648106b9fb25769c2b41651a6d45c167d0b4e7a27cb3","ssdeep":"96:zkaln3pFm+bJ3k3Jo1gk8s6G84ISTP9J1e+GRJe:zkal3TYo1FC679J8+wJe","tlshash":"3fb12b67f9d120400107819c65a7b7bdbfbe911087054d7a75ad33bcaf8edf309a1288","dom_hash":"domhash5128625ecf67ad91d375a42e49456f5b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"shrinkme.click/Xnxx_video01","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"172.67.215.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-13T12:57:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ohffs.com","ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2018-08-31","domain_rank":0,"first_seen":"2025-11-20T12:06:05.800824Z","last_seen":"2025-12-09T12:20:15.738598Z","alert_count":0,"request_count":4,"received_data":8016,"sent_data":3878,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.recaptcha.net","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2025-12-08T02:57:49.117054Z","alert_count":0,"request_count":4,"received_data":103159,"sent_data":2585,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shrinkme.io","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-18","domain_rank":218590,"first_seen":"2019-04-01T23:10:55Z","last_seen":"2025-12-05T21:02:58.538319Z","alert_count":0,"request_count":3,"received_data":59805,"sent_data":1299,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tzegilo.com","ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":18163,"first_seen":"2022-01-14T15:27:15Z","last_seen":"2025-12-09T12:20:15.923171Z","alert_count":0,"request_count":1,"received_data":18647,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-12-07T22:21:08.871485Z","alert_count":0,"request_count":1,"received_data":1717,"sent_data":418,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d34gjfm75zhp78.cloudfront.net","ip":{"addr":"54.230.241.89","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-10-27T18:06:47Z","last_seen":"2025-11-28T19:44:14.578261Z","alert_count":2,"request_count":1,"received_data":232797,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-12-08T00:09:13.571379Z","alert_count":0,"request_count":6,"received_data":13992,"sent_data":3772,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":17838,"first_seen":"2022-01-14T22:55:14Z","last_seen":"2025-12-03T15:18:32.101158Z","alert_count":0,"request_count":2,"received_data":906,"sent_data":1167,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bobapsoabauns.com","ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16239,"first_seen":"2025-03-26T18:52:40.148632Z","last_seen":"2025-12-09T12:20:16.125696Z","alert_count":0,"request_count":2,"received_data":18231,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-07T22:16:37.28363Z","alert_count":0,"request_count":2,"received_data":753820,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2025-12-08T18:51:39.936178Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":970,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-12-07T22:22:10.335339Z","alert_count":0,"request_count":8,"received_data":4397278,"sent_data":3851,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gloaphoo.net","ip":{"addr":"104.21.22.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-09-09","domain_rank":283321,"first_seen":"2022-09-10T12:44:27Z","last_seen":"2025-12-07T12:17:16.488077Z","alert_count":1,"request_count":1,"received_data":167873,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"togetherefwuko.org","ip":{"addr":"104.21.96.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2025-12-07T09:36:47.676338Z","last_seen":"2025-12-07T09:36:49.166454Z","alert_count":0,"request_count":2,"received_data":1034,"sent_data":1149,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-12-07T22:25:33.399392Z","alert_count":0,"request_count":1,"received_data":86170,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-07T22:13:56.807982Z","alert_count":0,"request_count":6,"received_data":233733,"sent_data":3272,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ukankingwithea.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-12-08T19:05:25.448361Z","alert_count":3,"request_count":1,"received_data":832,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shrinkme.click","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-05","domain_rank":0,"first_seen":"2025-10-06T10:23:13.692811Z","last_seen":"2025-11-30T18:17:13.334845Z","alert_count":0,"request_count":7,"received_data":552565,"sent_data":6897,"comment":"","tags":null,"fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"athyimemediat.org","ip":{"addr":"108.157.229.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2025-12-07T00:10:26.156157Z","last_seen":"2025-12-07T00:10:28.681498Z","alert_count":0,"request_count":1,"received_data":4112,"sent_data":1025,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-12-08T10:39:01.450991Z","alert_count":0,"request_count":1,"received_data":837,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-07T22:17:02.440237Z","alert_count":0,"request_count":2,"received_data":35386,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e5c80h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3200f1503eaed164c3680fa59b4f2a90","sha1":"9d6590dbdd1aa4fa85b2de31de37edd477f13c25","sha256":"8e56d09df2f1b0f97ee5dc1c4afa001b329668026ab9930d3b4e7e99477eb764","sha512":"d61d159a651ab7ad605a70e0e88daa5253c2a4c3b4869ef282a171d817c6fdf2533be60e7404bdea46ae588853b5c37830baf5bfc45b543e036910e9fe01ee8b","ssdeep":"6144:fsS0hssCUe2bWYRosCtrVB/DeXFdn0Z+rXRBcUgW1fCV0qZXC:jiPe9YRdChZ+rohW1ayqw","tlshash":"a79409ce73d674269396f078503f018ba57b29a2b45cc896f189cce42e7469a0277f7c","size":432610,"data":"","first_seen":"2025-12-09T12:57:52.835032Z","last_seen":"2025-12-09T12:57:52.835032Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23469e83aa8d546accb43e858fe08b8c","sha1":"e178b613b0992dc1a1781940214b46cecfeb933a","sha256":"ce27cbb2e1e99239ac5b2d37767ab1d1f4fb184f220229bb30b1851dfbeca57b","sha512":"1969430b84574fafdfb47f888161ed779cfc6400bc3d6bda8d844cd68cf5c87389021223ec6999586e145583078a8fac14ebc86ec13c0ad61ee5b83d808e602e","ssdeep":"6144:lm0QhuwklgqrSTwPndCKqo0Jcnh+ep0t1mLve5NSRq+KELL22rS/YMTqiNe0vTAL:U9r0gdcacZ7LW3SRq+fryBNPo","tlshash":"fa0539ec7913b6e10372b8f59477a288733e9566d80c182eb09585f13fb4848b476eb7","size":847558,"data":"","first_seen":"2025-12-03T15:20:55.803944Z","last_seen":"2026-05-30T10:38:46.282764Z","times_seen":17153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/js/ads.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7e54b2d6fc22c0022b88b7125cbe03","sha1":"236c6e87760ac733a938cb1897d3a7cb6fc5c86c","sha256":"519204a7ecc3dc77ded647aa00567d6bf8c587049f389b1936914f7fab44c6fa","sha512":"9a1eaeb2af891a8b3b0ea6f02350e356371541154841b650a641533e89b254a1f357912b832209e5ea44ab99affbbd12fcedc7cbdaff7d1a0ee7b92e2715f4a6","ssdeep":"","tlshash":"9ed02273187812b40a2e25cb50f99b943e332190f29318ac4cfcce29832cc804836ec3","size":218,"data":"","first_seen":"2023-09-09T21:18:47Z","last_seen":"2026-06-03T14:25:45.028458Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-03T17:45:43.622788Z","times_seen":111646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xnxx_video01","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51184ec34afc7805084a44c1c22a8563","sha1":"bedad06bd3d2357c4e8c94f7050326074d89bc8d","sha256":"b3e9ca41264450af2fcd077280d87b2ae968fc1c0fb315f043a65e92c3ed63dd","sha512":"4850fd93c43842c74cca8a643a159774a6b673c389c3f4736a72c0962c1992ef78d8475b846f547c46f8a4271cfdd128dcb5e9ca7a097f4eefc5780b9ad9c793","ssdeep":"","tlshash":"490149b839f7105107b22329c6df5140f130f35b6c5acd4eb89c97964fb1668b5ca64c","size":768,"data":"","first_seen":"2023-10-14T22:14:02Z","last_seen":"2026-05-24T16:19:53.53235Z","times_seen":689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23469e83aa8d546accb43e858fe08b8c","sha1":"e178b613b0992dc1a1781940214b46cecfeb933a","sha256":"ce27cbb2e1e99239ac5b2d37767ab1d1f4fb184f220229bb30b1851dfbeca57b","sha512":"1969430b84574fafdfb47f888161ed779cfc6400bc3d6bda8d844cd68cf5c87389021223ec6999586e145583078a8fac14ebc86ec13c0ad61ee5b83d808e602e","ssdeep":"6144:lm0QhuwklgqrSTwPndCKqo0Jcnh+ep0t1mLve5NSRq+KELL22rS/YMTqiNe0vTAL:U9r0gdcacZ7LW3SRq+fryBNPo","tlshash":"fa0539ec7913b6e10372b8f59477a288733e9566d80c182eb09585f13fb4848b476eb7","size":847558,"data":"","first_seen":"2025-12-03T15:20:55.803944Z","last_seen":"2026-05-30T10:38:46.282764Z","times_seen":17153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"174a65c03735dd20000365afb88ce742","sha1":"ac35c9313024db987b185af3b6ae434b1a2b77b8","sha256":"7da7d5a8b027dab88422c2c02d98caa30c56adac66800d816b17dd0ada909637","sha512":"98e9133125979522a69e0dc5a9ab2eb08be728f8eb639c8beb0659d2cbf2c4f091340a66f22bf5d6d85d949899ea1f1b70e4101a3973c3d78764890e623c2814","ssdeep":"","tlshash":"711120720a05f0390b720de1e2ffcbb1e081741cf15c45e8a5159ac45e79ccbce04985","size":1088,"data":"","first_seen":"2025-11-14T14:20:58.250505Z","last_seen":"2025-12-09T12:57:52.837647Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","size":831957,"data":"","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"32c451bbba6781032ed6911771e4a121","sha1":"3918362c03ae1a885952287f56dbc167c4d0aaff","sha256":"8eab1333aebd065bc671ae795283f63d7de58a57b77cce6937c519a8303a855c","sha512":"ea3612c409df186185f9a7e249212b196504e8181c3220e858aa02877c9d03291a23509dcf25dc4c3476b536e0a7e39f657cebd02e6c7d85ea9412c65bc90ddd","ssdeep":"","tlshash":"6fa0222c2c0020800080f0232023a03000eaa0800c0820008808c2a023f20e83203e32","size":64,"data":"","first_seen":"2025-11-19T08:55:32.312758Z","last_seen":"2025-12-10T07:59:48.066811Z","times_seen":9240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"adead350226d8df7a5fa8df4528e571f","sha1":"22cc481a6e6aba402f2df151f611fff53a7154b2","sha256":"0ab720eedcea9b12bb3f7e046f209845a0c579d7f8bd133ae369d0ed8b1de1fb","sha512":"d9e2ca17dcb71ecccbe4ba39a2960d21f781a2f5aa43a5618658ad72ac97b7ef4d453d88994471d450c9e50ee854c50cffcca6e54debf2783219cda2aa09a080","ssdeep":"","tlshash":"5d70002c2c08200a0022302002eb88280022008000202000020300c80e3002a2002a08","size":22,"data":"","first_seen":"2025-11-19T08:55:32.314239Z","last_seen":"2025-12-10T07:59:48.023422Z","times_seen":9244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"athyimemediat.org/N2xQM0JWDjNefVZRMhU3RQBtFnBxSWJ1JgRYN1kkWltlSSpHW2gdIVsDJVckRQM+R2xZCSQWcHFUNAMxTQ9hehd9KmBlIGYhOWVyAgAEXSl1Pz1lEHhcFWQMcgNkZDVyWxdgAFIqPkQXfV0/Yg1hKThiAEBUEgAYbi45VDZzLRFVC2MhFnE7RAcUXQwAOgNqDHsbZXcmdR8haxBlGgVgd1MpFwoFVToZaw9yHHUBBHE9M1oFdC0fdDgDLx91A3AmJ1B1YAAFXQRZNjV7AVAJGgJ6ZAhgZgx1AGFaF1kHFGQ7YgkaZSFUJgFhN3Y5HQsDBVgSYnB5JApib3k7CWcUQi0Ffi5/BQV1EAQIFXAQbS4JVHsOLmFpKnk7ZHETTi0SUSV2FQkDEBJeFnsXeVsFXSlzKhRQF34qKGQbcyplcnJ9BQIALXM9PlcEUl0FUgt1JSRrA0NfAmJydD0XaRhSFAV0IAc1dlkxWAIgDilCFgp0cVsfFH12bxopCwo","fqdn":"athyimemediat.org","domain":"athyimemediat.org","tld":"org"},"ip":{"addr":"108.157.229.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"086638f241f3139239fc963858cc628c","sha1":"c7cc4d228505217523777bc79183b6d182ad0634","sha256":"582beb4121b600a09d05041ca3c36dc065fafd212897daed21b959fb15db564d","sha512":"088008c10c75896a279491bc60b9c7ffbb243a1c37118771c587bc96ffd513fb8dcb6c59e5461c823f573814356464de544ca92fa9342d0fdf762a15a0e8eb69","ssdeep":"","tlshash":"1b51fd8d34f360c282b7a065513bb49afa285aa5838ccb14863d86bcbd755ed6317f4c","size":3007,"data":"","first_seen":"2025-12-09T12:57:52.841122Z","last_seen":"2025-12-09T12:57:52.841122Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xnxx_video01","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bbadfc00bdf62ee5121c3c23c97c3a8","sha1":"f73764078176beb7f3c63d5a61feffd158925009","sha256":"5d802cc6351c53edfde41bd38c6c11e3b744aa893f1e86a123995cc06a6aab11","sha512":"73229a849f7f509df0563f85fa94d8b7365c24acff22e2ff1ab53020e00ea09755067f262d38be9ef1a4da5b12a9c81cf4750ae45937eb0cc147526deea4da19","ssdeep":"","tlshash":"88513842f7cd649950df013e7bdbe588382e2033be02ae65fcd892050f2db7659e8659","size":3112,"data":"","first_seen":"2025-12-05T11:42:27.022788Z","last_seen":"2026-01-25T20:45:26.439567Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5Q2KMLS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e860838834495c04544cd62a730bddf","sha1":"f94921d3a60d204d60cee9ff152ca80a506aab09","sha256":"8d65b332e12cf9b6d9194509d8f998dd37c81a15e11bac40f19538a90d79ee23","sha512":"b419cfb3e6546c55460a5aea4ea1ca58157d6d9763a25da9aea98f2eba53070f2f8803690bc4d5f4ea19a840345d34f711f3a347bdd3bf0bb6522df6b2345c74","ssdeep":"6144:XS0NI9Ue2bWAsZkrVB/DeXFdnkZ+74W4z0hQ:CSe9VZeZ+UW4z3","tlshash":"be6418cdb3da742683a2a474503f118ba17b69d2f44cc895f186dcd42e70aaa4277f7c","size":319976,"data":"","first_seen":"2025-12-09T12:57:52.833555Z","last_seen":"2025-12-09T12:57:52.833555Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA6eJBdoP9Q70TY-pkBZKnlbyd1wUHMeZrjArrvNGXMyQaWTdG_swqwZSVsOJweGZM95HEcl9q27Pd3ZJKCaeOv0ASq3rw","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"497770a2ab62f2aa5e9a92139301634d","sha1":"49c10647ffe35e24f84f743006f162ff0fe16399","sha256":"0663d282ac18b3e9d3e81725926a5310e5cae5e6954873f09b7ee193136fb5e4","sha512":"94a5141ed28656c5873a486aebfdda52790c8517426987bf905bf3c44163a25932ab17ac498215ddbea8e0e9887a8dabe6ed80acc950c993bdc61ecf977724b9","ssdeep":"","tlshash":"06a001b2053584208e6299509553bac4e187605dfd81819470265a89f3e15e7d144940","size":72,"data":"","first_seen":"2023-03-07T01:11:36Z","last_seen":"2026-06-03T16:07:46.3273Z","times_seen":24924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-2.2.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-03T17:14:34.497068Z","times_seen":282929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/5775069","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"104.21.22.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39c8d27327b8948edafbc993aec230aa","sha1":"869e6e69336ff56475e262ec180616bb7c81fefc","sha256":"5068c0936837303a9ccf5fe07f95de13e93aef8f8dbb49c2b7cbf79727294ef2","sha512":"f558db864e4093abc7d756c78732dc6a9de9bd77d21b8bf2dbc66e1a90b077d39b04ab9b1b49f43acf0f4f19441346ff37beb83fa2e4fad4f53ff190fbdfd903","ssdeep":"3072:A7zKGhsQ72zBOnEk4r0rNN3RecbVRTlQAOTbwGxq6/2DRaTIJSKjuEOVEABn:/IBCcpybwZ6/2DRaMsKCZbBn","tlshash":"69f3fac9769174562963b430122fae5f792b8e30548e8d18e1a5f4e53f3844b93a3efc","size":166998,"data":"","first_seen":"2025-11-28T19:44:17.751748Z","last_seen":"2025-12-11T10:18:35.014564Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"497770a2ab62f2aa5e9a92139301634d","sha1":"49c10647ffe35e24f84f743006f162ff0fe16399","sha256":"0663d282ac18b3e9d3e81725926a5310e5cae5e6954873f09b7ee193136fb5e4","sha512":"94a5141ed28656c5873a486aebfdda52790c8517426987bf905bf3c44163a25932ab17ac498215ddbea8e0e9887a8dabe6ed80acc950c993bdc61ecf977724b9","ssdeep":"","tlshash":"06a001b2053584208e6299509553bac4e187605dfd81819470265a89f3e15e7d144940","size":72,"data":"","first_seen":"2023-03-07T01:11:36Z","last_seen":"2026-06-03T16:07:46.3273Z","times_seen":24924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xnxx_video01","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc29169c13e48228dad8dd361ce8f6b","sha1":"59018ba95e0a67c5babc535649d96573ec30ca3f","sha256":"2fa8aaf793bcef496c761719e35e35ea54b2029e1960efe2d8aa1702ec0d1c68","sha512":"b52961e6d8e02a7bac496c358a9d5f9070cd030dc89ca5a67071904c75bdd8b40f2cffd075dd2c7b4e9baf38014b914cb7f5419343d3363f4c437a3495f5477a","ssdeep":"","tlshash":"6421113da65de8f22f5080a87540b8d2daa01326f71d1a4bc5a85d2e0bcb5d9420bc59","size":1180,"data":"","first_seen":"2025-10-06T16:48:10.452124Z","last_seen":"2026-05-24T23:07:00.246107Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xnxx_video01","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c159e948d0dffa35c9fa1b2f57e2ad9","sha1":"d41386efc96b16ecfc3084773de1948a0ff82c82","sha256":"e8d10f795b22263c50a3befe98f0e0abfe14bcb696997504215c4736f4fe4813","sha512":"c9851977c0a35ac53673e07b6dbfe4ebc107286d5c0e1b9ac6083931be392fa7ddda8129118c4af4e603be6c589ec76ef16deac875d47e70bf853a97b259e7e5","ssdeep":"","tlshash":"dfe0ab299ce706384cf63a841038ca3930f83ca0aaa3d067925cc86ccd39fc50c10aed","size":424,"data":"","first_seen":"2024-01-29T00:33:00Z","last_seen":"2026-01-25T20:45:26.450454Z","times_seen":509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","size":17879,"data":"","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-06-03T16:57:34.234196Z","times_seen":6993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23469e83aa8d546accb43e858fe08b8c","sha1":"e178b613b0992dc1a1781940214b46cecfeb933a","sha256":"ce27cbb2e1e99239ac5b2d37767ab1d1f4fb184f220229bb30b1851dfbeca57b","sha512":"1969430b84574fafdfb47f888161ed779cfc6400bc3d6bda8d844cd68cf5c87389021223ec6999586e145583078a8fac14ebc86ec13c0ad61ee5b83d808e602e","ssdeep":"6144:lm0QhuwklgqrSTwPndCKqo0Jcnh+ep0t1mLve5NSRq+KELL22rS/YMTqiNe0vTAL:U9r0gdcacZ7LW3SRq+fryBNPo","tlshash":"fa0539ec7913b6e10372b8f59477a288733e9566d80c182eb09585f13fb4848b476eb7","size":847558,"data":"","first_seen":"2025-12-03T15:20:55.803944Z","last_seen":"2026-05-30T10:38:46.282764Z","times_seen":17153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2754e1341f3c7bc6193ae643d809d85a","sha1":"8af7f92b56f7ddbd8f06771a08c1b801de24efda","sha256":"ce389428b8e1cdc19de055025a79b62b6fcce84fa3937dfe1be8d8ff907fa0a3","sha512":"36887715e4d1c669fe9117a00d15bb1aed407589164dab27bc2dac738e3c8efa598c5053c57ca65518f377c68270edbfff8b6f045d891a0c079790b9795dcd9a","ssdeep":"384:UikLQUEFWJ7LF8FIwXBl2MIhAdwuRDELKGwKE+YWU9Pnae4bogXb6cINvLa:UikL71LJQBM8VRDELKyEsWae506cINvW","tlshash":"1c92a4dcb692b22d81f3b1b5543f5609a1fb69906d0c241ce206c0d56f70eda90abf7b","size":19726,"data":"","first_seen":"2025-11-19T08:55:32.308432Z","last_seen":"2025-12-10T07:59:48.038068Z","times_seen":9238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA6eJBdoP9Q70TY-pkBZKnlbyd1wUHMeZrjArrvNGXMyQaWTdG_swqwZSVsOJweGZM95HEcl9q27Pd3ZJKCaeOv0ASq3rw","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"380e20f6cc8c74f3ef1d2c1b306c9952","sha1":"9ea76a4fe0b1fb77f2a7b18d984b3606974a46a8","sha256":"7d6536095cc0ee2d01edf213055329091d85d1578d01163b5bc1ef1044b26a72","sha512":"a2394d811b01b55a80a90a88ec2a27b696578b4f468c4f7f5861d006794539b0867d0c94e830e8dd48c5a31341069a0be654943e77b656e1f3823e4cd96bbe59","ssdeep":"","tlshash":"cad022a3a6061cf75c26ac304876005a6c880823a02387fcbace7dc5afb0e017a00974","size":219,"data":"","first_seen":"2025-08-28T10:01:59.050539Z","last_seen":"2026-05-24T23:07:00.246677Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-03T17:54:48.578209Z","times_seen":359258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/js/script.min.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c977f00919d1eb2e57a7f0fd3bd884b","sha1":"b09601a36fa50e61ce9d6ac0a34c6a894a8f81c8","sha256":"5619e29a6688312b15a2cc2d693083dd00198691b1a3918b64dee75c9eeef7c9","sha512":"f22ddcb1b2fffb6b5ac4f3557dabe92ac7c18dc96ab331f610161d82a9791b10f922e62ee378e9e4d456c8575f489b07207007a7ca299ad1a7d3e75c269c9584","ssdeep":"3072:IeeIygP3fulzhsz8jlvaDioQ47GKSDYFtVbmwpcYUpQVJ:IPIy6PultluPQ47GKSAmwpZwQVJ","tlshash":"53241a89b2a1742147ab71f5417f120bf236142ee409842cb56cd9e96fb8d8d623bf7c","size":229719,"data":"","first_seen":"2025-09-16T23:31:20.872491Z","last_seen":"2026-05-24T23:07:00.207906Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"086fea489bfa5f4b232eb63790892278","sha1":"57763c20c2c1ea7a6d787697deb4d5c75ca6c836","sha256":"a878c60b1b8936f8e350944be9b6a9f2351faeef8071a4f11f26f34b25b04647","sha512":"26393ffb0b64c0bf39e9a66f3824568d82e8ce8141691e285eb9f963ad0c6abddb87c09146e78cf522b300dbc31871ff874b9db2c8cd33296f24ee299da3b8cd","ssdeep":"384:nQUEFWJ7LF8FIkXBl2MIhAdwuRDELKGwKE+YWU9Pnae4bogXb6cINvLm:n71LJEBM8VRDELKyEsWae506cINvi","tlshash":"89c2a49cf552b22ec1f3b1b5543b5609a1fa6990ed0c241ce206c0d56f70eda90abf7b","size":26923,"data":"","first_seen":"2025-12-09T12:57:52.846404Z","last_seen":"2025-12-09T12:57:52.846404Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"999fa030593c491e2433b47c8fbf247e","sha1":"96542cd99a3ff068a436d2cb18ecc4ff4cca5da2","sha256":"bf3bd53401e4869423f143d7bbcf7e85dc50d05f57f348328316bdd060e6ab66","sha512":"f7158b382debc53d477a05d0b8df8e9940eeda73b7b20a19fbdc1de252d659fffa6a40eff0ce0f2cd7a84c71c4fc0f24c0c8517f2e5692eb58a02b7900966b47","ssdeep":"1536:TtXzJr8khU6+eRVqAXz1/kxsh+4T0CyC4jP5/MEloPn:R/UcbqAX9Ya1sC4j0v","tlshash":"e363cf37e68734dbffbedb005fc2a7aa117d816a155304cd12eb02d10a78ee666661cc","size":72348,"data":"","first_seen":"2025-12-09T12:57:52.847238Z","last_seen":"2025-12-09T12:57:52.847238Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34gjfm75zhp78.cloudfront.net/?mfjgd=792297","fqdn":"d34gjfm75zhp78.cloudfront.net","domain":"d34gjfm75zhp78.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.89","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"27ec58144551f0532f02aa6e7bc862fc","sha1":"f99ea911de89e6f71d23426c83783f4678afa6ac","sha256":"56bb99262c4c12a72ae8b74bfde4e2683d0ffb257b05e4aaa8811f8a43f84a82","sha512":"10c6491954c25e9945203aab1049ad1f333998a8c0164b33e5a6b625e0da786a534084feafc23b92800a3b22a31bffdb6ccf13fb7d82be6f592b433cb7869b3a","ssdeep":"3072:XBUNP5+Ya/06R42Da7oV6+53UOng7L9vN9lw+Zc53+Zc0M8ET:XuNR+t/06G2D02MdZU3+iAU","tlshash":"ac344cc9ba923429836374f540bf524ab23f5a69b8084dd4f496d4d07db8d0a437bfac","size":232336,"data":"","first_seen":"2025-12-09T12:57:52.832363Z","last_seen":"2025-12-09T12:57:52.832363Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34gjfm75zhp78.cloudfront.net/8d0szc1IUJF0VbQMiV05lTnkBSmVRO0EWNEo4WwE7GSBeFnwUJ1oQOVEhQBw8B3ZYBigtDAAfITMFByskDnN7VSYNLw5DdBsqXRRvUS5dEG9GbVIXMEp/FQciGCAOGz4COFAGJwc7WlUnFnZeHCgeJ18Sd0UNBl1iUnkDWyUeJVccJQRuAUM8A24BQ2NHZQ-NWYTVuAUMlHiUFR3dECRZBYg99B1ZhNW4BQyABbgAyY0R/HUN7UnkDFDcUIFxWYDF5A0JiR3oDQndFe1UaIBItXAt3RQ0CQGZZexUGb0Y","fqdn":"d34gjfm75zhp78.cloudfront.net","domain":"d34gjfm75zhp78.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9daf3a7c8e36e2e498db47d941e139d5","sha1":"ebf585d1cf8cb40dc605a852fe6f627c62ce634c","sha256":"c7b1c6e4fc48ab9eed5ce951a629614cde6541841d589e3922872de02f83e4b2","sha512":"2287de5208b25e16351fdde5163ab3ed01689b60424080a57f72570f6477e06e1615ae2b1a33e1486a7386d92d3e11a63a89a8d73dd6a1d0e9eb9cd08b783e18","ssdeep":"","tlshash":"df0175507e148c82e8b7110761fefc9feac234ce00f20f2265138637df8aa5ec545519","size":788,"data":"","first_seen":"2025-12-09T12:57:52.848136Z","last_seen":"2025-12-09T12:57:52.848136Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xnxx_video01","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cf6f85d4fd22db7db674d7afc2b6aef","sha1":"714de681854c07465e640b1e31d74a76fa2636d0","sha256":"8605dc71537232a4f8fb99355bc1c64fe756bb91ae3ad910e3b031a85f2879d8","sha512":"626e1893955f263d54e8067c48e391b73e3da0dfd3ba1c1ec18de2a9cbf4bfa38eef682e13df733d4180b2fd6d5b655d11201ef24384af1ec88d3b79cf3092e1","ssdeep":"","tlshash":"6dc08038b5245424009d489e7277d75cfcf311987d925453c85fce5c5870ed50865cb4","size":176,"data":"","first_seen":"2023-03-26T09:44:15Z","last_seen":"2026-01-25T20:45:26.43665Z","times_seen":727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93d6f4dfe66e198b85be3bfd20f4c493","sha1":"461a5c2d7cc491097efe28a63c0e81a33934d6ca","sha256":"2e48f9cb07caa4b5342c9fa56662dc8412c8e4895e84a8b3892347f728961260","sha512":"a6294d8d254cf24173b72fd569fab333cf86678eb031bcc391feb4072ec203d04c74bbd41270d84513d3922a1263bebd21631ccc95c9463d8906e71c11648229","ssdeep":"","tlshash":"e3111f732a18e0350b3209e1a2fecbb0e491705cf16846e8a655dac81e6accbce05585","size":1017,"data":"","first_seen":"2025-12-04T20:09:59.729401Z","last_seen":"2025-12-15T23:31:00.736807Z","times_seen":3401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xnxx_video01","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73497a37c3561adbd8ce84e4f017b368","sha1":"9193ae73cb3dd2833be8c942714d5544bfb628c9","sha256":"9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351","sha512":"b265a65f30fa9ffac3fb7ffca07326823466dcd67a238a47091a497c7f2b2d13e09603cbb8e85dce136efeb8bbb9d246e4894d6f672dededc47c88a1a85d9a5b","ssdeep":"","tlshash":"c150000003000003030c0000c000000000000003000030c000c0000000000000000000","size":9,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-06-03T16:57:34.255828Z","times_seen":5606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b782800cf23e731117945e0d87795926","sha1":"9507abba6407ede4909bafa05aebd96d9cc5d712","sha256":"9d2b217576cf89105bbd2f28f28c63489e61408f1d7104588afd4757cbbe2b7b","sha512":"677b9ea7fffb14ea4e90719e9db4d705901af74f874636b52e682cb64eb5a798c51000bc5b18310bf94d83705be79b7604934ba0ebabd2256b041d7680185619","ssdeep":"","tlshash":"cf70002c3c08200200223020022b8828002a008000202c00020300c82e3000a2002a0a","size":22,"data":"","first_seen":"2025-11-19T08:55:32.326453Z","last_seen":"2025-12-10T07:59:48.060302Z","times_seen":9241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S940233521%3A1765285040913901\u0026hl=en\u0026ifkv=Ac2yZaWRBY6tKzgnE9qrAPflBgQC4Op8AotD-FNYUeGugZBGTRbW0-oqGOGrEJTDbbl5nl4iGU6Izg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"BD:40:9A:DB:26:FC:C1:FF:4D:85:05:A9:F0:E9:24:BD:05:29:25:7B","sha256":"C7:A3:E4:68:D6:D8:86:E7:C6:E2:D6:E3:1D:DA:60:9A:35:7E:71:9E:F1:91:26:57:47:43:91:7C:CE:BB:07:17"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S940233521%3A1765285040913901\u0026hl=en\u0026ifkv=Ac2yZaWRBY6tKzgnE9qrAPflBgQC4Op8AotD-FNYUeGugZBGTRbW0-oqGOGrEJTDbbl5nl4iGU6Izg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 09 Dec 2025 12:57:21 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy: script-src 'nonce-gSsZ-nSwxh4NtSCSlhzWQg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.CT9RQ3D3ykM.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:26.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:52:35 GMT\r\nexpires: Wed, 02 Dec 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 565491\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-03T17:54:42.556019Z","times_seen":865501,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","date":"2025-12-09T12:57:22.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42509\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 03 Dec 2025 00:09:32 GMT\r\nexpires: Thu, 03 Dec 2026 00:09:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 28 Nov 2025 03:01:16 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 564470\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3d72c112464ed729f4baadef277f507e","sha1":"da4ce9ab1637eeedd8db2c2d3ab6e4d09de5da82","sha256":"247a54d7f9ce7bbd9c8bf8a131db1edb8b2d92a217ad11f47465225f1024eba5","sha512":"1e40b0e56d9262151c6ce8c9bdc91fe711a5f8b6a88e8d9f6978a59b706cb28f9860c62cbb40361043b5f197f9b5016cd88713050e0469107b318d8b8bbc4d44","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIGCdthXwW5l1Dx7:1GRFauOxLA/+IcTOqLX1","tlshash":"64838e7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db1968253b07","first_seen":"2025-12-04T19:56:43.843491Z","last_seen":"2026-05-30T10:38:46.286877Z","times_seen":15155,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/500/5775069?excludes=\u0026oaid=08029a0b6eae4e0ff7b80546da7f8155\u0026tgp=\u0026of=true\u0026sw_version=v1.768.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=2\u0026pl=https%3A%2F%2Fshrinkme.click%2FXnxx_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:22.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"GET /500/5775069?excludes=\u0026oaid=08029a0b6eae4e0ff7b80546da7f8155\u0026tgp=\u0026of=true\u0026sw_version=v1.768.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=2\u0026pl=https%3A%2F%2Fshrinkme.click%2FXnxx_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nCookie: OAID=08029a0b6eae4e0ff7b80546da7f8155\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 09 Dec 2025 12:57:22 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 71f4ac766d42415a2e624166b7d31d6c\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nvary: Origin\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=08029a0b6eae4e0ff7b80546da7f8155; expires=Wed, 09 Dec 2026 12:57:22 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2596,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"368c60d0378877c749c56fbfec5c8d8d","sha1":"7f25874d103c08be6ef7ab39c1648481e187ba97","sha256":"a38a05a57e8cd87ab7ada4c7b9f054115e95100dd0c587de64f0ea74e649c360","sha512":"0d61d4232b0f017f1545e6380287cbb493aa31f629bfd84c04e9b147d3cf5a941a96ce47f40e7a7d822ce0bcdab4d95b519ffc3fb461144d34dd03b08440b15a","ssdeep":"","tlshash":"31516ac24a481efbafe573b534321e0ca963883e0936ee458bb7801020d8072a859881","first_seen":"2025-12-09T12:57:52.808935Z","last_seen":"2025-12-09T12:57:52.808935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA6eJBdoP9Q70TY-pkBZKnlbyd1wUHMeZrjArrvNGXMyQaWTdG_swqwZSVsOJweGZM95HEcl9q27Pd3ZJKCaeOv0ASq3rw","date":"2025-12-09T12:57:23.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 361045\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:30:50 GMT\r\nexpires: Wed, 02 Dec 2026 23:30:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 28 Nov 2025 03:01:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 566793\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":847558,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"23469e83aa8d546accb43e858fe08b8c","sha1":"e178b613b0992dc1a1781940214b46cecfeb933a","sha256":"ce27cbb2e1e99239ac5b2d37767ab1d1f4fb184f220229bb30b1851dfbeca57b","sha512":"1969430b84574fafdfb47f888161ed779cfc6400bc3d6bda8d844cd68cf5c87389021223ec6999586e145583078a8fac14ebc86ec13c0ad61ee5b83d808e602e","ssdeep":"6144:lm0QhuwklgqrSTwPndCKqo0Jcnh+ep0t1mLve5NSRq+KELL22rS/YMTqiNe0vTAL:U9r0gdcacZ7LW3SRq+fryBNPo","tlshash":"fa0539ec7913b6e10372b8f59477a288733e9566d80c182eb09585f13fb4848b476eb7","first_seen":"2025-12-03T15:20:55.803944Z","last_seen":"2026-05-30T10:38:46.282764Z","times_seen":17153,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:22.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"16:F0:F2:6E:23:A1:95:F7:75:EA:70:AB:6F:D4:43:F3:BE:AA:FE:CD","sha256":"F0:41:ED:B6:DC:74:0C:CE:3C:DF:0C:20:73:B9:C1:3C:73:D4:E2:7D:2B:DC:30:F1:80:AE:20:7B:97:78:33:80"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3 HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 09 Dec 2025 12:57:22 GMT\r\ncontent-security-policy: script-src 'nonce-ts7w0yq2gcVWuVN3UHKlEg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90676,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47230)","md5":"af097be9f8321a52c70ee9261b0c6f11","sha1":"6b19281ff44aaa804f1195c940492a25db62bb66","sha256":"693565f1b43dd344b0e070c225c8986edb8a26bde6d225d775fb716536effa0e","sha512":"d5d47051c8e660b53ed9ee84e8d0ce70f96fab1ef3c2a6dc440eb01e290954613e7535d494d9c3f6691255e1ffc6f3326b35ca92bc53166cc1befe6e238039c9","ssdeep":"1536:y+kKAQ0AotXzJr8khU6+eRVqAXz1/kxsh+4T0CyC4jP5/MEloPu:y+kKAQ0/UcbqAX9Ya1sC4j02","tlshash":"8093b02285032486ebfb8e9017c6bf75e52ec215314340e963fe43a35deada752663cc","first_seen":"2025-12-09T12:57:52.810464Z","last_seen":"2025-12-09T12:57:52.810464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA6eJBdoP9Q70TY-pkBZKnlbyd1wUHMeZrjArrvNGXMyQaWTdG_swqwZSVsOJweGZM95HEcl9q27Pd3ZJKCaeOv0ASq3rw","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:23.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"16:F0:F2:6E:23:A1:95:F7:75:EA:70:AB:6F:D4:43:F3:BE:AA:FE:CD","sha256":"F0:41:ED:B6:DC:74:0C:CE:3C:DF:0C:20:73:B9:C1:3C:73:D4:E2:7D:2B:DC:30:F1:80:AE:20:7B:97:78:33:80"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA6eJBdoP9Q70TY-pkBZKnlbyd1wUHMeZrjArrvNGXMyQaWTdG_swqwZSVsOJweGZM95HEcl9q27Pd3ZJKCaeOv0ASq3rw HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 09 Dec 2025 12:57:23 GMT\r\ncontent-security-policy: script-src 'nonce-jf9VSB8UWlLHP6ETcu2V5w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7626,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"38c103e50c4f921ab65e0b07bb2c282a","sha1":"96c9329eebefbc01833aa69627abc0b2d57249ad","sha256":"61a93d901143e610e99dcbb7c0456d5f11d8c79600564a9793f45b9820781dcd","sha512":"aa9afb56ad3c25ded2fd9c807d13a4c6d5efee5aea079c07c2c28e7480ea5eedff22723fcdc87a7fccceb1feb4557e0d690c9ee2bdbe6c65c14529085fe96c76","ssdeep":"192:NjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpK5nMCBd:M+tI/y6yekn+f8QZRtpGKuBjdu+5nMCf","tlshash":"65f1ab90081a9400ab930cd273cf3e36ed4f51127186c8b6affe69a8ede7d27925574d","first_seen":"2025-12-09T12:57:52.811666Z","last_seen":"2025-12-09T12:57:52.811666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/dyyehuis8.png","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 07:18:54 GMT","end":"Sun, 08 Feb 2026 08:16:40 GMT"},"fingerprint":{"sha1":"9A:08:FE:79:0C:A8:6A:14:E1:74:D1:86:A4:F6:52:0D:AB:44:14:06","sha256":"D1:95:64:22:D7:7C:35:C7:0D:1F:F0:F6:92:76:91:03:CB:62:1D:19:8C:4A:4A:56:63:A6:C5:A9:BA:1C:F9:65"}}},"request":{"raw":"GET /dyyehuis8.png HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 13368\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"3438-63ec202aa9a96\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 14:07:49 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 7253370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYO1NCFQXPEC2e%2FO27FU%2BJAKGgXk45wfrH9LPDi7E9sZ853DaOBAzU%2BruWdc0nyV245dHKGFHs2DwBmiZQjYwjYRGAYXB8R8CQ%3D%3D\"}]}\r\ncf-ray: 9ab4aaed6a5d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 154, 8-bit colormap, non-interlaced","md5":"f293daf49bd343c38ae34614fa67a414","sha1":"b53a204e0c385f2fa62fb57de5ba26dfc6920d3a","sha256":"c2baa90aafc484c676f4d9365c6f37b41ed50a5f21bc07eab9ad57ddb546f48d","sha512":"b713ac065171c0103eb9dd3791bc92a068b833a7ff7b3aef31c077a32b929592893eb29f079d34cf587c4ab2f5a8d6c2e16493cc1218d71863de8a1afecfc23d","ssdeep":"384:s6/H0Od7dqWkScyrJHwNa3XiIlO3bhs9Sdmjtc8V:s6/HXd7d4SzrJHwNa31mbhs1jtjV","tlshash":"b652c053f695783d21994a7a857d0ba903e0ee653e2cb4d30688de7c859a0143c0dfab","first_seen":"2023-10-14T22:14:02Z","last_seen":"2026-05-24T23:07:00.237721Z","times_seen":889,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":46,"dns":34,"connect":1,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:37 GMT","end":"Wed, 21 Jan 2026 15:26:07 GMT"},"fingerprint":{"sha1":"9D:07:9C:6F:57:10:86:CD:16:B0:52:82:27:D1:5A:15:62:C4:01:4D","sha256":"45:86:DC:CE:A9:11:84:B3:7C:78:71:DB:1D:F8:E8:6C:0F:4A:58:72:2C:CF:60:ED:8D:11:60:CB:9F:03:63:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: csu=1451015253268128@1@1765285040; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2B1E%2FhGmoMoDOqg4T4Yg6mb9kTE5vYjWpIzW5HQpXC4KnEK34JrOKp1QWt9E85UG2pHpFyuIDiVVdvNAbm2C%2F6rveIUKh85lKXvCoDluueA%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ab4aaf1481bb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e181895133eb0aae621e13577a72f9b9","sha1":"058ac3617c74c1a9b77e050c9876974c2682bb04","sha256":"554e136a255521e34d443f707f0237c896d465d3dc2eb52d2d25b95c60a9d6f7","sha512":"57750c2b0663fe748da9b2d25e4c55e1456be1fdd15705ca462fd11ba7beefcab44d7c99209fda4cb97337df4eb03d53e205871de70cae0e4bae938eed33ea4b","ssdeep":"","tlshash":"838000c23e88002b00020e8808b00c200800a2bc8a8a0a080f002ecc082a080c882882","first_seen":"2025-12-09T12:57:52.81313Z","last_seen":"2025-12-09T12:57:52.81313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":45,"dns":33,"connect":1,"send":0,"wait":130,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/5775069","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"104.21.22.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:21.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gloaphoo.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 08:40:15 GMT","end":"Wed, 21 Jan 2026 09:38:45 GMT"},"fingerprint":{"sha1":"21:81:17:21:53:51:94:35:D7:B1:12:C3:46:E0:9F:2D:EC:92:42:09","sha256":"E9:E4:A3:9A:BD:5A:1B:F1:17:6F:47:09:16:C7:B7:6E:94:42:04:69:83:2E:03:F7:3E:43:E3:5A:E5:15:67:5B"}}},"request":{"raw":"GET /401/5775069 HTTP/1.1\r\nHost: gloaphoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gRnz4trJxo2hkwETfc67skmSRe4Izvi1J8LLO2VtJWNQNEhGUQBBk4gOaon3YsyezYvfUKIWrfLffQFMw4iRBl831SHAQxUoPzZgYQ%3D%3D\"}]}\r\ncf-ray: 9ab4aaf40dc1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166998,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"39c8d27327b8948edafbc993aec230aa","sha1":"869e6e69336ff56475e262ec180616bb7c81fefc","sha256":"5068c0936837303a9ccf5fe07f95de13e93aef8f8dbb49c2b7cbf79727294ef2","sha512":"f558db864e4093abc7d756c78732dc6a9de9bd77d21b8bf2dbc66e1a90b077d39b04ab9b1b49f43acf0f4f19441346ff37beb83fa2e4fad4f53ff190fbdfd903","ssdeep":"3072:A7zKGhsQ72zBOnEk4r0rNN3RecbVRTlQAOTbwGxq6/2DRaTIJSKjuEOVEABn:/IBCcpybwZ6/2DRaMsKCZbBn","tlshash":"69f3fac9769174562963b430122fae5f792b8e30548e8d18e1a5f4e53f3844b93a3efc","first_seen":"2025-11-28T19:44:17.751748Z","last_seen":"2025-12-11T10:18:35.014564Z","times_seen":35,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":57,"dns":41,"connect":1,"send":0,"wait":69,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:22.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 06:43:47 GMT","end":"Mon, 09 Feb 2026 07:38:46 GMT"},"fingerprint":{"sha1":"D5:38:99:61:B8:EA:99:50:AE:A6:42:89:19:46:3D:27:F6:80:AE:53","sha256":"EB:AA:B8:24:FF:C4:D3:0A:D8:6E:81:A6:73:F2:98:E7:69:A1:0F:95:6F:52:21:C6:59:D5:A0:26:AD:55:F8:CC"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxttQvxUnwoFIgHHkecxngSoDelsMwAgUzcbdbpWgertDJJ8LkZ5H2sK6IaP0haFOaNad13XQFnJHc%2FHPP8Wz4GUOZGypQXQULYA\"}]}\r\nage: 5687\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2be-45d7\"\r\ncontent-encoding: br\r\ncf-ray: 9ab4aafb6a775a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17229)","md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-06-03T16:57:34.234196Z","times_seen":6993,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":52,"dns":35,"connect":1,"send":0,"wait":6,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=2fae6f72-346d-4680-9787-dda9f9cda22c","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:22.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=2fae6f72-346d-4680-9787-dda9f9cda22c HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1409\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1409,"data":"L\u001bRR\u001f\u001c\u0026\u001c\u0014\u0005g\u001f\u001cK\u0012\u0003\u0001\u0005P\u000eL_\u0003\u000e\u0011\u001aX\u0016\u0010JO@T\u0005\u000fT\u0011\u0003\u001e\u000eP\u0018L\u001fA\u001b\t\u00147\u0001\n\tWN\u001a\u001b\tICP_Y^\u0016\u001a\u0017X\u001b\t\u0006VF\u000e\u001fWX\t[A\tMH\u0019\u0003P\u000e_]\u0005\r\u001f\u0014\r\r\u000eJOS\nQI\u0015C\u001d\u0007\u0003P\u000e_]\u0005\r\u001f\u0014\r\u001c[REN\u001a\u001e\u0000\u001b[ZBI\u001bLLW\u0007\u0015\u0011A\u001c\u0007[RGN\u001a\u001a\u0018QCP_[@\u0000BODQ\u0011\fKTK\\Y@K\u001e[\u0003PXV[^\u0016\u001d\f@\u001b\t\u0007H\\IDW\u0016K6\u001d\\\u0015\u000f\r\u001f\u0017PLW\u0007\u0015\u0011\\\t\u0011\u0018JO@u\u0006\u0003P\r\u0006\u000fDG\u001a^M\u001fnZX\u001e\u000b\u000e\u001bU,lIH\tOZUK%]\u0000[\u0003\u0002\u0013NLPBH\u0007\u0014\u0002XJ\rOZGK5Q\r\u0006X\u0016\u0001\u0006KTIYES\u0018/\u0010K\u0004\f\u0001\u0013]\u0005]Y\u0019\t\u0011\u001aX\n\tJOS\u0014K\t]CPL\u0002\u001c@\u000b\u001fYX_\u001b\n\u0000\u001fE\u0003\u000b]\u001e\u001cK[\u0003\u001d;;\u000f\u0007\u0003C\\AX\u001b\bT\u0018\u0011\u0004\u0015\u001f\u0010\\\u0016\u000f\u001cQ\u001bG\u003e$\fP]B\u001f\u0016\u0017\t\u0019OH\r\u001f\u0014\u0017\u0003\u000b\u001c\u0017FT\u0004Diz\r\u0013\n\r\r\u0007\fY\u0005TI\u0005\fC\u001d\u001bQ\u0019\bE\u0003ZE*-B\u0001\u001b\u0016]\u001b\u0017X\rG\u001e\u000f\u0014\u0019\u0018\u0004RNVD@\r\n8\u003cY\u001aE[L\b\u000eLQ\u001cA\u0002\u0001\u001b\u001bWD\u001cFCJWN\u001a\u0019\u0015\u001b[H\u0006\u001f\u0006D\u001dW\u0018\u0016@^\b\r\u0017\u0003\u0018\u0007\u0016\n\u0015P\u0002\u0001A3\u001cL\u00162APWS\u0015THJY@V\u000e[\u0003QFL\u001f\b\u0016TObmp\u0014VF\u0017\nWX\tE[W\u0000\u001aLQPc\u0007\u0003\u0004\u000b\u0011\u001aX\u0014\rJOR\u0014K\u001cO\u0000\u0006LQA\u0003BO_Z\u0011\fN\\UJ\u0011\u000f\u001aST\bMH\u001c\u001f\u0006\u0016T@\u0006\u0015\u0011U\u0012;\u0016\n\u001f@\u0002YU\u001b\u000f\u001dLQC\u0018L\u001aS\u001b\tP\u001b\b\n\rY@W\u001a\u001aI\u0014HTI\u003e]\u0000\u0018O\u0019K\u000eL;O\\WN\u001a\u0001\u0010]\u0005\u000f\u0000IHR\u000f\u0001D\\\u001f\u0014\u0019\f\u0026\u0007\u0017\bg\u0000\u0017]\u0004\u0012LQ_\u0005BO@P]i\u0011\u0001\u0000\u001b*\u000e]\u0007\u001eM\tHTYJ\rBOTV_Y\b;\u001d\r\u0005\u0016PKC\u000bUFL\u001d\u0017Z\n\u0002E\u001b\t\u0014XH[\u000f\u0014\u000f]\u0019\u0018]\u0012HT[^\u0016\u0000\u0001\u0015\u0003\u0011S\u0014I,;WN\u001a\u0007\u0015JCPL\u000e\u001c\u0019;\u003e\u001b\\]\u0014VF\u001a\u0007\u0019\rJ6\u001eX\f\u001f\u001aIH\u0016\u001d\u001fP[\u0011\u001aX\u0014\u001f\u0004WX\u001aKU\u001b\u0002\u0006\u001aIHO\u0013A\u0015I_W\u000e\u0002\u0016\u001a\u0018=\\\f\r\\\u0002\u001e\u0001\u0019P\u000e\u0015O^JlW\u0014\u0000\u000b\u0007\u001c\u0006\u001aS\u001fX\r\u0019\u000bGP]\u001d2CKZR\u001f\n\rJO\u0004Y\u0005\n\\MH\u0007\u0018-W\u0006\u001fXTZC\u0017;A^*\rJ6\u0017\\\u0016\u000f\u001cIHR\u000f\u0001D\\\u001f\u0014\u0013\u0017\u0026\u000b\u001d\u0010W\u0004\u0010L\fHT\r\u0013X\u001d\b\u001b\u001bZE%\u0001\u001d\u000f\u0010@\u0002\u000f\u0018U\u0012\u000fBI\u001bG1\nRZXYX^\r\u001a\u0000\u0007\u0014K\u0010J\u003e\u001d\u000b\t-_\u0007\u0019\u0015\u0003UW\u0016\u0017\u001cDW\u000bK6\u000e\\\u00035\u0005\u0002\u0006kX]\u0001f\\D%\n\u001c\u001f\u0010\u0010\u001aS\u001fX\r\u0019\u000bGP]\u001d2S\\@]\u000e\u000b\t7\u0006\u0003^\b\u000bPCP\b\n\u001eG\u000bA\u0015P@i\u0019\f\u000b\u0007\u0018\u000bM\u0004\u0026V\u0011\u000f\u001c\nP\u000e\b\f[JVKVF\u0017\r\u0006@\u0002KH\fWXZ_J\u0005WU\u0015\u0015\u0011U\u0016\r\u001c\u0006\u0001=Q\r[\u0003C[\n\tK\u0005XTQ\u0014\n\u0006\u001cPT\\\u0017P\\D\u001b\fP]C\t\u0011\u0000Y\fV[\u0002\u000f\u0019U\u001fJY@Y\u000f\u001fP\r\u0003\u000f\u001f\u0017k\u0007\t\u0015\u0003\u0011\u0014VF\r\u001a\u0014\u0004^\u0000\u001af\u0012\u0005\u001b\u0019\u0011Q1\u0004S\u001b\t\u0014OSN]ET\u0001KU\u001b\u0000\u000e\u0018\u000e\u0000@\u0007\u001eRKl_\u001eFCJWN\u001a\n\u0018T\u0011\u000b\u0007\f\u001ck\u0007\t\u0015\u0003\u0011\u0014VF\u001a\u001d\u0006\u0016W\u0004\u0026P\u00055_IH\u0016\u001e\u0018DQX_\u0014FUJ\u0016\u0017K\u001d\u0016T\u003e\u0003\n4@\u0016TO\u0015\u0015\u0011U\u0016\r\u001a\u0003*\u000b\\KC\u001b\u000e\f\u0014\u0013G\u0019\bZ]J\u000b\u000f\u000e\u0001\u000e\u001e\u0000@\u0014K\u001aV\u0012\u001eLQP\u0016BOZ\\G^\u0015\u0000[RW\u0001Y\n\u0011\\L\u0000\u001dF\u0006U\tO\u001b\u001bAi\u000f\r\u001dJO@\n\u000f\u0018\\W\fYY_\u0007Z[S\u0014\u0007\u0000BTTQBZ\u000fD\u001d]\u0000S\bR\u0011P\u000f_\u0005Z\u0011\u001aX\u000b\u00187\u001c\u0006\u001aS[\tYZ\\R\u0013\u0004\f[RXV\u0002\u001fT\u001f\u000eB\u0000\u0000YL\rW\u000e\u000f\\\u0014\f_X\u0002\u001b\u001f\u0014\u001b\u0000\u001d\u0001\u0001\u000bW\u0007\u0018U\u003e\u0003\n\u0018P\u000e50J"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Tue, 09 Dec 2025 12:57:22 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://shrinkme.click\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-06-03T16:57:34.13959Z","times_seen":57326,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":92,"dns":14,"connect":26,"send":0,"wait":27,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","date":"2025-12-09T12:57:22.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 361045\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:30:50 GMT\r\nexpires: Wed, 02 Dec 2026 23:30:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 28 Nov 2025 03:01:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 566792\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":847558,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"23469e83aa8d546accb43e858fe08b8c","sha1":"e178b613b0992dc1a1781940214b46cecfeb933a","sha256":"ce27cbb2e1e99239ac5b2d37767ab1d1f4fb184f220229bb30b1851dfbeca57b","sha512":"1969430b84574fafdfb47f888161ed779cfc6400bc3d6bda8d844cd68cf5c87389021223ec6999586e145583078a8fac14ebc86ec13c0ad61ee5b83d808e602e","ssdeep":"6144:lm0QhuwklgqrSTwPndCKqo0Jcnh+ep0t1mLve5NSRq+KELL22rS/YMTqiNe0vTAL:U9r0gdcacZ7LW3SRq+fryBNPo","tlshash":"fa0539ec7913b6e10372b8f59477a288733e9566d80c182eb09585f13fb4848b476eb7","first_seen":"2025-12-03T15:20:55.803944Z","last_seen":"2026-05-30T10:38:46.282764Z","times_seen":17153,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 00:39:19 GMT\r\nexpires: Sat, 05 Dec 2026 00:39:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 389881\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-03T17:49:49.656757Z","times_seen":506012,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xnxx_video01","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-09T12:57:19.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /Xnxx_video01 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-robots-tag: noindex, nofollow\r\nset-cookie: lang=en_US; expires=Fri, 04 Dec 2026 12:57:49 GMT; Max-Age=31104000; path=/\nAppSession=bd330304d42c738054bcf45eb7b1c600; path=/; HttpOnly\nrefXnxx_video01=MDUwNDJmYmJiYzY5NjIyOTRiN2ZhNWFjODc0ZDA5ZmQzNTVlMzVkYTJhNzcxMGY3NjkwNWIxMzQ0YjY2MzE0ORt6PUIWLq8YNu7%2BZTB0HDezPNUAk5AIeGdCeMIcLRpH; expires=Tue, 09 Dec 2025 13:02:49 GMT; Max-Age=300; path=/; HttpOnly\ncsrfToken=e26cb5769757a6887eb7cab0f186b5c46280bd1c64f614ef56da67ca7f97e1cda8bce19258ebb1f24e798464dc9a43eca2e0d53bcb54c1929a563b60a8854392; path=/; HttpOnly\napp_visitor=Q2FrZQ%3D%3D.YmQzODg0OTg1OTcwODZkZTZmM2ViNTc3YmI1YjlhOTI2NWFkZDg1NDlhNWRlZDNhNDJiMjNhMjA4ZjFlNjk4ZP0HLqXFJqHg1giW%2BUNT49PLI4Cc9gBn%2Fwbudwf5%2BQUy9aoD0%2FhNYHvOoK%2B5DDJOUWJ%2B7jUqTr6PF0nUpIpWOs0PC%2FYsOCrQ%2F8usRop5TMrT; expires=Wed, 10 Dec 2025 12:57:49 GMT; Max-Age=86400; path=/; HttpOnly\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MSgaYNkQitXkqqh4EN5opNG%2B9xyvmPbWfDoXHuU47lQ395gr6yEszZXGUGwYUs2sZ988fEYvS0ihThFo4ltzFfZuW1isEyqWf%2B3c%2Bxp\"}]}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ab4aaeb4a1575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":25907,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1144), with CRLF, LF line terminators","md5":"b553f5720ab34dc099ac9fa93bacac0a","sha1":"d4808cf4b4398274f09201465523e475449780fb","sha256":"5adb98ec31174738d81421aa639ca9024d781b2934ec817cfed5369fdec521e2","sha512":"c81cb38bed71b668aae3f1b40eb628dbdeafee19e56069305c4cbdaecb53c3f9e673ecd0297cb2b80816f91877371fbd45a58369428c6338b6594cf3cd01c818","ssdeep":"768:MP8JHnzZlft7cTXzxzSeyU8gCT/LrMvZpQ4c:/J1lft7cTXlzxyU8gC/iZpQ4c","tlshash":"d1c2f82bbddd5027016201e87ab7fb4cfd566027e6098921b8ec42952fe2fe54c57e8c","first_seen":"2025-12-09T12:57:52.816294Z","last_seen":"2025-12-09T12:57:52.816294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":49,"dns":27,"connect":1,"send":0,"wait":152,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xnxx_video01\r\nCookie: lang=en_US; AppSession=bd330304d42c738054bcf45eb7b1c600; refXnxx_video01=MDUwNDJmYmJiYzY5NjIyOTRiN2ZhNWFjODc0ZDA5ZmQzNTVlMzVkYTJhNzcxMGY3NjkwNWIxMzQ0YjY2MzE0ORt6PUIWLq8YNu7%2BZTB0HDezPNUAk5AIeGdCeMIcLRpH; csrfToken=e26cb5769757a6887eb7cab0f186b5c46280bd1c64f614ef56da67ca7f97e1cda8bce19258ebb1f24e798464dc9a43eca2e0d53bcb54c1929a563b60a8854392; app_visitor=Q2FrZQ%3D%3D.YmQzODg0OTg1OTcwODZkZTZmM2ViNTc3YmI1YjlhOTI2NWFkZDg1NDlhNWRlZDNhNDJiMjNhMjA4ZjFlNjk4ZP0HLqXFJqHg1giW%2BUNT49PLI4Cc9gBn%2Fwbudwf5%2BQUy9aoD0%2FhNYHvOoK%2B5DDJOUWJ%2B7jUqTr6PF0nUpIpWOs0PC%2FYsOCrQ%2F8usRop5TMrT\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncontent-type: application/javascript\r\nexpires: Tue, 09 Dec 2025 13:45:20 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCQJOQ9FqFCn7JOY5e%2BMWIxOaYiG7uYnSW6OeaonIQniENCWkTbCnY7UMAsLov6a4tlC2UV9McSuBn1fuRGncLNo8%2Fb56UXjXSfv%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ab4aaed1da356bf-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-03T17:54:48.578209Z","times_seen":359258,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"togetherefwuko.org/QVdhSVpuaAI6ZxU7DT8/BidTKGslBzR6IjEPCnA7JGVQEA4tOEc9MyVqVnBoc25ZbyooM1x4YmckFSguNCRceHwoOQcmZ2chXHh0cXlTZ29nIlx4fDUnAC5ncHERPS4talB+bHRlWXxqdWdUeGw","fqdn":"togetherefwuko.org","domain":"togetherefwuko.org","tld":"org"},"ip":{"addr":"104.21.96.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"togetherefwuko.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 17:47:08 GMT","end":"Wed, 04 Mar 2026 18:45:33 GMT"},"fingerprint":{"sha1":"C4:36:FC:1C:51:5D:23:9B:5F:AF:46:47:D8:32:29:B5:28:13:ED:D7","sha256":"51:BA:40:C4:76:B8:B3:55:33:1A:F6:C8:DE:03:07:05:97:A4:D0:02:BF:71:0D:59:6C:74:AC:FC:A3:84:4C:9F"}}},"request":{"raw":"GET /QVdhSVpuaAI6ZxU7DT8/BidTKGslBzR6IjEPCnA7JGVQEA4tOEc9MyVqVnBoc25ZbyooM1x4YmckFSguNCRceHwoOQcmZ2chXHh0cXlTZ29nIlx4fDUnAC5ncHERPS4talB+bHRlWXxqdWdUeGw HTTP/1.1\r\nHost: togetherefwuko.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBk6CvUVdFthMRXYrsxx%2FQNvnz3MnXbyBwW3%2F%2BOv5nerwaNp0C9rmRZlMUjflMkpt76xNoVLll1G1EfEa5GXlpI4u4%2B1BvWgD0d5ojKhp4c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ab4aaefac6056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":15,"dns":3,"connect":1,"send":0,"wait":123,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ","date":"2025-12-09T12:57:22.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 361045\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:30:50 GMT\r\nexpires: Wed, 02 Dec 2026 23:30:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 28 Nov 2025 03:01:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 566792\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":847558,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"23469e83aa8d546accb43e858fe08b8c","sha1":"e178b613b0992dc1a1781940214b46cecfeb933a","sha256":"ce27cbb2e1e99239ac5b2d37767ab1d1f4fb184f220229bb30b1851dfbeca57b","sha512":"1969430b84574fafdfb47f888161ed779cfc6400bc3d6bda8d844cd68cf5c87389021223ec6999586e145583078a8fac14ebc86ec13c0ad61ee5b83d808e602e","ssdeep":"6144:lm0QhuwklgqrSTwPndCKqo0Jcnh+ep0t1mLve5NSRq+KELL22rS/YMTqiNe0vTAL:U9r0gdcacZ7LW3SRq+fryBNPo","tlshash":"fa0539ec7913b6e10372b8f59477a288733e9566d80c182eb09585f13fb4848b476eb7","first_seen":"2025-12-03T15:20:55.803944Z","last_seen":"2026-05-30T10:38:46.282764Z","times_seen":17153,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA6eJBdoP9Q70TY-pkBZKnlbyd1wUHMeZrjArrvNGXMyQaWTdG_swqwZSVsOJweGZM95HEcl9q27Pd3ZJKCaeOv0ASq3rw","date":"2025-12-09T12:57:23.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42509\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 03 Dec 2025 00:09:32 GMT\r\nexpires: Thu, 03 Dec 2026 00:09:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 28 Nov 2025 03:01:16 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 564471\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3d72c112464ed729f4baadef277f507e","sha1":"da4ce9ab1637eeedd8db2c2d3ab6e4d09de5da82","sha256":"247a54d7f9ce7bbd9c8bf8a131db1edb8b2d92a217ad11f47465225f1024eba5","sha512":"1e40b0e56d9262151c6ce8c9bdc91fe711a5f8b6a88e8d9f6978a59b706cb28f9860c62cbb40361043b5f197f9b5016cd88713050e0469107b318d8b8bbc4d44","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIGCdthXwW5l1Dx7:1GRFauOxLA/+IcTOqLX1","tlshash":"64838e7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db1968253b07","first_seen":"2025-12-04T19:56:43.843491Z","last_seen":"2026-05-30T10:38:46.286877Z","times_seen":15155,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"athyimemediat.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","fqdn":"athyimemediat.org","domain":"athyimemediat.org","tld":"org"},"ip":{"addr":"108.157.229.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"athyimemediat.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 23 Nov 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:95:05:A2:06:08:E7:1C:DC:70:DB:FF:81:D5:31:19:35:94:DC:A7","sha256":"10:87:EC:0B:8A:77:93:5E:22:83:8D:75:F0:C5:B4:AA:57:2A:BF:0C:EA:9E:0B:F8:40:34:FF:1D:4C:95:2E:BF"}}},"request":{"raw":"GET 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 HTTP/1.1\r\nHost: athyimemediat.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1222\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=sM7J4u8fzIwN867388SOfBsJyma0xesRitzWvkcjOzF3jkKWGuyzkBoKJzOM96jUV/9r/VOzb9Dm34hwLXcGrfEb9PNwdPiDOFpPlpCy/8p52F2Mhs9IzP0/yH7l; Expires=Tue, 16 Dec 2025 12:57:20 GMT; Path=/\nAWSALBCORS=sM7J4u8fzIwN867388SOfBsJyma0xesRitzWvkcjOzF3jkKWGuyzkBoKJzOM96jUV/9r/VOzb9Dm34hwLXcGrfEb9PNwdPiDOFpPlpCy/8p52F2Mhs9IzP0/yH7l; Expires=Tue, 16 Dec 2025 12:57:20 GMT; Path=/; SameSite=None\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4a97b39292c0cc77b857d41135aea32a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: nnyg7uZ9CdJR1S75pNHI0g11RX-iATfygjjLVu3VK5yxksynS0eqsA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3078), with no line terminators","md5":"efe3d1504f7e00ea000dd8d45e787ad8","sha1":"0b61eade8a5bb4151f820bacae3af3877fb94a55","sha256":"d1698ea831f4d13ed63b1510254f8ec47d9b72bf769d7744b21ae7af115f2186","sha512":"932ee7569c8d5e57b00e4dce89790c47cc7dbed05705cd6d7c7c697da45d9761723380bbf0dda8978208289d96dacd609a1d485cf97162e89a1832f43d687196","ssdeep":"","tlshash":"1751018d34f360c282f76065143bb59afa285aa1834ccb14867d86bcbd755ed6317f4c","first_seen":"2025-12-09T12:57:52.817802Z","last_seen":"2025-12-09T12:57:52.817802Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":58,"dns":38,"connect":8,"send":0,"wait":120,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","date":"2025-12-09T12:57:22.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"16:F0:F2:6E:23:A1:95:F7:75:EA:70:AB:6F:D4:43:F3:BE:AA:FE:CD","sha256":"F0:41:ED:B6:DC:74:0C:CE:3C:DF:0C:20:73:B9:C1:3C:73:D4:E2:7D:2B:DC:30:F1:80:AE:20:7B:97:78:33:80"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Tue, 09 Dec 2025 12:57:22 GMT\r\ndate: Tue, 09 Dec 2025 12:57:22 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"51ab43f0bd2447a37475a1fec4fcbea6","sha1":"d0dc8cc1b17b34a0055a358bc7d36819002a80c8","sha256":"d09e24b8ed75dd354626ee88454cc3ddbe2fe5d820ff43e040bc6c8d9e27f83f","sha512":"394795055127e1b1a0e48af28a73f82025f662c669d1087dd441a279711fe551903477686ef7a2f21ae3c0d8c97c64ae0d7184c8829ad76b789d2fec5e827610","ssdeep":"","tlshash":"18b012270710c4281e000752cb7b93b8e0214034d770b3fe81a46fd4052c1a38542510","first_seen":"2025-12-04T19:56:43.732297Z","last_seen":"2026-05-20T01:03:31.044134Z","times_seen":14653,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/favicon-3.webp","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 07:18:54 GMT","end":"Sun, 08 Feb 2026 08:16:40 GMT"},"fingerprint":{"sha1":"9A:08:FE:79:0C:A8:6A:14:E1:74:D1:86:A4:F6:52:0D:AB:44:14:06","sha256":"D1:95:64:22:D7:7C:35:C7:0D:1F:F0:F6:92:76:91:03:CB:62:1D:19:8C:4A:4A:56:63:A6:C5:A9:BA:1C:F9:65"}}},"request":{"raw":"GET /favicon-3.webp HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12694\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"3196-63ec202aa9a96\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Thu, 19 Nov 2026 02:17:36 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 1766395\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CGkcgUgQpna0Ftj2q9XGxIKFWgiqzqJHjuaJgr%2F7HNcg1hRRWBkDDpx3FZ7tas3fKUdPU%2BeblJxXUqrQTE05VV5blHqgBYJdlRI0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ab4aaf0fd720daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"103971bd196afd0ca8f772c9680c9e4c","sha1":"8340e472b9426202e0745d04956c468366256994","sha256":"663cf4358e3e1fdbb64e946bbf381b04db3654d54fe7ba5d8cd47463b733425b","sha512":"4052713576aee93c2f5ee7f6f1de47ad290ee90ec87278407e178fad46af9a64968d551d9bbb3a5c2841ec361c5bfbdb55264f308978ef84529b5513e38fbb78","ssdeep":"384:DNqHAE4/4a2bemzV6wsEwdJn6f4Te4wg0v5M6:evyoDHsEC6gwHvC","tlshash":"5142c02b5dbfc8fb91a62f6f643f0366ccfbbd6b52d82a15460048646095120fc93b5e","first_seen":"2023-05-08T21:09:43Z","last_seen":"2026-05-24T23:07:00.221817Z","times_seen":946,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S673768871%3A1765285040888181\u0026hl=en\u0026ifkv=Ac2yZaWeZ9sFQgtwNeOjluqzU9MrSdjCICKgXAnEp7T8Y9OTKWZJPLE6oGgUdbOq4qZ9BSem1kecyg\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:46 GMT","end":"Mon, 19 Jan 2026 08:35:45 GMT"},"fingerprint":{"sha1":"24:7C:52:9A:14:62:BE:F8:93:1F:AE:0D:94:C9:F5:D1:B7:6C:B1:16","sha256":"4E:59:5E:29:62:6C:9E:E6:D9:2F:72:AA:20:76:DD:CF:73:BC:E3:95:17:09:AD:C0:7B:3F:55:8E:44:6F:E9:58"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S673768871%3A1765285040888181\u0026hl=en\u0026ifkv=Ac2yZaWeZ9sFQgtwNeOjluqzU9MrSdjCICKgXAnEp7T8Y9OTKWZJPLE6oGgUdbOq4qZ9BSem1kecyg\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 09 Dec 2025 12:57:21 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-ljUEZOgJu-I-xUWUY90Vkw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.CT9RQ3D3ykM.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=2fae6f72-346d-4680-9787-dda9f9cda22c","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:22.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=2fae6f72-346d-4680-9787-dda9f9cda22c HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 451\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":451,"data":"L\u001b[_\u001e\u0000\u001c\u0006*\u000b^\u001b\u0018T\u0004HT[^\u0016\f\fC\u001b\tMX\r\n7\u0017\u0003LKC\tMH\r\u0003\u0013F\t\u0004Y^\u0011\fJH[\u000b\u001d\u0003J\u000e\u0010W\u00065\u001a\u0002\u001fQLW\u0007\u0015\u0011R\u0013\u0017\u001a\u0000\u0014\u0010_\u0000\u0017^\u003e\u001e\u0007\u0006\u0017\u0016T]\u001b\u001b_S\f\u0001\u0015JOREE[Z\r\u0003\u000b\u0005\u0006k\u0007\t\u0015\u0003\u0011\u0007\u001e\u0006@YC[^D@\t\u0007^C_\u0010\u0006\n@U\f\u0002\u0001W\u0006\u001a\\B\u0003Y\u000bH\u0000\u0002[\bI^\u0016\u000f\u000bQP__\u001b\u0010\u001c7\u001c\u0006\u001aS[\u001bMH\u001a\u0019\u0013R\b\u0004Tf@Y\u000f\u0016\u001a\r*\u000b\\KC\u001bT]Y^B\u0002WO\u001b\u001bRR\f\u0001\u000b\u001c\u001c\u0011]\u001b\u0026P\u0005HTIP\u0018L\u000eVTCW\u0013\u0003\u00177\u001c\u0006\u001aS[\u001bMH\r\u001e\u0001@\u0001\u0000hPWiKFCJ\u0005\u0017K\u0001\u0012P\u000fHBI\u0011A\u001d\u0019XTl_\u001e;KJO@\u001aE[Z\r\u0003\r\u0000-]\nO\r\u001b\\P\u0000\u001cLE\u0013UR\u001aA\u0000\u0015\u000f\u0019\u001d\u0007\u0016BOTV@BX^[JY@U\f\rQ\u000e\u000eLQPW\u000f\u000e_\\\u001e\\\tI\r\t\u0012@\u0014K\u000bf\u0014\u0003\nIH\u0016\\\u000bV\\\u0005PMVT[AT\\DM\u000fYZCRE\fY@S]R\u000f\u001c]\u001a\f\u0014P\n\n[\u0015C\u0005\u000f4\u001bPLW\u0015\t\u000b\u0006H]\u0018X\u0017T]\b\u001c\r\u0004Z\b\rEVV]\u0002\r\u0005R\u001bS\u001fPDW\rKU\u001b\u0000\u000e\n\u0002\u0006]\u0001\u0003VUl_\u001e\u0017[R.?E"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Tue, 09 Dec 2025 12:57:22 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://shrinkme.click\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":91,"dns":6,"connect":28,"send":0,"wait":29,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xnxx_video01\r\nCookie: lang=en_US; AppSession=bd330304d42c738054bcf45eb7b1c600; refXnxx_video01=MDUwNDJmYmJiYzY5NjIyOTRiN2ZhNWFjODc0ZDA5ZmQzNTVlMzVkYTJhNzcxMGY3NjkwNWIxMzQ0YjY2MzE0ORt6PUIWLq8YNu7%2BZTB0HDezPNUAk5AIeGdCeMIcLRpH; csrfToken=e26cb5769757a6887eb7cab0f186b5c46280bd1c64f614ef56da67ca7f97e1cda8bce19258ebb1f24e798464dc9a43eca2e0d53bcb54c1929a563b60a8854392; app_visitor=Q2FrZQ%3D%3D.YmQzODg0OTg1OTcwODZkZTZmM2ViNTc3YmI1YjlhOTI2NWFkZDg1NDlhNWRlZDNhNDJiMjNhMjA4ZjFlNjk4ZP0HLqXFJqHg1giW%2BUNT49PLI4Cc9gBn%2Fwbudwf5%2BQUy9aoD0%2FhNYHvOoK%2B5DDJOUWJ%2B7jUqTr6PF0nUpIpWOs0PC%2FYsOCrQ%2F8usRop5TMrT\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncontent-type: application/javascript\r\nexpires: Tue, 09 Dec 2025 13:45:20 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJs0v6LZPUo8k75lHKP68h3oIdGAlqWl7U59lWaB4vaGyUqNJ1KFnCnEDUd4NvfsgJ0j5CNiuXEHCTH4K%2BAAhQgVIZqvuMmMgdaAFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ab4aaed1da656bf-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-03T17:45:43.622788Z","times_seen":111646,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"togetherefwuko.org/T1JxS3pgbRI4Ryo/ATsZGQg/Eyw/FRMgCikFGh0WHD4ZLykIE1c/EytvRnJIfWtGbQomNkx6XDwmED8PPG9AbRMhNB52XDlvQGVJe3xCfVR4dAR2S2kmASodcmNXOw47Pkx6TXlnQ3NPf2ZBfkp9","fqdn":"togetherefwuko.org","domain":"togetherefwuko.org","tld":"org"},"ip":{"addr":"104.21.96.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"togetherefwuko.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 17:47:08 GMT","end":"Wed, 04 Mar 2026 18:45:33 GMT"},"fingerprint":{"sha1":"C4:36:FC:1C:51:5D:23:9B:5F:AF:46:47:D8:32:29:B5:28:13:ED:D7","sha256":"51:BA:40:C4:76:B8:B3:55:33:1A:F6:C8:DE:03:07:05:97:A4:D0:02:BF:71:0D:59:6C:74:AC:FC:A3:84:4C:9F"}}},"request":{"raw":"GET /T1JxS3pgbRI4Ryo/ATsZGQg/Eyw/FRMgCikFGh0WHD4ZLykIE1c/EytvRnJIfWtGbQomNkx6XDwmED8PPG9AbRMhNB52XDlvQGVJe3xCfVR4dAR2S2kmASodcmNXOw47Pkx6TXlnQ3NPf2ZBfkp9 HTTP/1.1\r\nHost: togetherefwuko.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nv6oxqFTWbdrnV0pyFrjTCgskvofpIyh97nmzJfu7LOq89NbpDEsH3NLhVXm47zDZjXUHwBDmMD8cj53PaPrYTj59drMSE3Q986HMOLIra8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ab4aaef9c5956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":61,"dns":35,"connect":1,"send":0,"wait":127,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:45 GMT","end":"Mon, 19 Jan 2026 08:35:44 GMT"},"fingerprint":{"sha1":"88:42:9A:E3:85:29:1D:A4:9A:60:E6:5F:C1:71:A6:01:27:91:C8:BC","sha256":"6D:0F:B5:30:E0:1A:7B:ED:55:DD:26:C8:34:D0:0A:34:65:0E:E8:E4:93:E9:8C:DF:D6:3C:63:71:A9:AE:DF:D2"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Tue, 09 Dec 2025 12:57:20 GMT\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"93d6f4dfe66e198b85be3bfd20f4c493","sha1":"461a5c2d7cc491097efe28a63c0e81a33934d6ca","sha256":"2e48f9cb07caa4b5342c9fa56662dc8412c8e4895e84a8b3892347f728961260","sha512":"a6294d8d254cf24173b72fd569fab333cf86678eb031bcc391feb4072ec203d04c74bbd41270d84513d3922a1263bebd21631ccc95c9463d8906e71c11648229","ssdeep":"","tlshash":"e3111f732a18e0350b3209e1a2fecbb0e491705cf16846e8a655dac81e6accbce05585","first_seen":"2025-12-04T20:09:59.729401Z","last_seen":"2025-12-15T23:31:00.736807Z","times_seen":3401,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":90,"dns":4,"connect":20,"send":0,"wait":31,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:21.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 361045\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:30:50 GMT\r\nexpires: Wed, 02 Dec 2026 23:30:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 28 Nov 2025 03:01:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 566791\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":847558,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"23469e83aa8d546accb43e858fe08b8c","sha1":"e178b613b0992dc1a1781940214b46cecfeb933a","sha256":"ce27cbb2e1e99239ac5b2d37767ab1d1f4fb184f220229bb30b1851dfbeca57b","sha512":"1969430b84574fafdfb47f888161ed779cfc6400bc3d6bda8d844cd68cf5c87389021223ec6999586e145583078a8fac14ebc86ec13c0ad61ee5b83d808e602e","ssdeep":"6144:lm0QhuwklgqrSTwPndCKqo0Jcnh+ep0t1mLve5NSRq+KELL22rS/YMTqiNe0vTAL:U9r0gdcacZ7LW3SRq+fryBNPo","tlshash":"fa0539ec7913b6e10372b8f59477a288733e9566d80c182eb09585f13fb4848b476eb7","first_seen":"2025-12-03T15:20:55.803944Z","last_seen":"2026-05-30T10:38:46.282764Z","times_seen":17153,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":65,"dns":2,"connect":7,"send":0,"wait":9,"receive":37,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:21.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:37:01 GMT","end":"Sat, 24 Jan 2026 16:36:49 GMT"},"fingerprint":{"sha1":"84:49:FF:DC:BD:D8:BA:3D:2F:25:0B:EF:CA:E4:6D:73:79:8C:F9:7D","sha256":"AF:21:94:4D:14:07:CF:FC:E5:3C:3C:F4:AC:47:9E:83:98:6A:62:87:FB:8C:27:43:25:FB:97:CC:47:15:99:4A"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08029a0b6eae4e0ff7b80546da7f8155; expires=Wed, 09 Dec 2026 12:57:21 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9ab4aaf5b9e22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4eb069123756f8419cdebb1f618df7de","sha1":"787128c02599cf4cca5e90b8f457edb740808baf","sha256":"6bd456b42bc041fa3b6f886f42c1c28b529ed8ea45e333514ce5559f05397f87","sha512":"e289406686439cbbf357a6675df1833708bfac562bfff8b2873130ed45fe2f8ad000a220e9fcd0e6a4c25862661c5c79733a9200d60c0a1ad3469539c116defd","ssdeep":"","tlshash":"b0a002d0185d09d984862d2a5a56efd185404099a4886765c5f88105269a6dca7c72a7","first_seen":"2025-12-09T12:57:52.820931Z","last_seen":"2025-12-09T12:57:52.820931Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":63,"dns":34,"connect":1,"send":0,"wait":31,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-2.2.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-2.2.4.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-14e4a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\nage: 2429977\r\nx-served-by: cache-lga21935-LGA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 37, 214634\r\nx-timer: S1765285041.684510,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 29811\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-03T17:14:34.497068Z","times_seen":282929,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":90,"dns":35,"connect":26,"send":0,"wait":28,"receive":8,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,700%7CMuli:300,300i,400","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Montserrat:400,700%7CMuli:300,300i,400 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 09 Dec 2025 12:57:20 GMT\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7099,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2bc70e2429cfe4bf248107fb862aa803","sha1":"6591a064c29035df798b717f644d313e8aec28a4","sha256":"3c940a7938e39750cc9bd218d44d73c3f19bfbdac74937e87516f025bceb6188","sha512":"27acffe1a2d499342cc08f1e079cba61ee93aa2cbe7af7c12107dac9a1b6fe3b112f5ec848cc471c23eaf7a7ab1a74e10c38884126a82b46676d6964a53af79f","ssdeep":"192:qRa7h5OsuQRD780ORurnlmlJ8lxqLBmL8XL4mWH:+SVnbnQ8Tw0","tlshash":"20e1d151042be500a7872cca63cf7e31de4e7165b494c535affe1ca8aca6c366321b6d","first_seen":"2025-09-09T04:58:13.382403Z","last_seen":"2026-05-31T02:56:49.315441Z","times_seen":285,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":112,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/logo-sm.webp","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 07:18:54 GMT","end":"Sun, 08 Feb 2026 08:16:40 GMT"},"fingerprint":{"sha1":"9A:08:FE:79:0C:A8:6A:14:E1:74:D1:86:A4:F6:52:0D:AB:44:14:06","sha256":"D1:95:64:22:D7:7C:35:C7:0D:1F:F0:F6:92:76:91:03:CB:62:1D:19:8C:4A:4A:56:63:A6:C5:A9:BA:1C:F9:65"}}},"request":{"raw":"GET /logo-sm.webp HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31236\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"7a04-63ec202aaaa36\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Thu, 24 Sep 2026 07:36:02 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 6585675\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRB5fovKxasfqzEU3fDQ13R3FQQOetmUYFrcvrXCdy4k4PYjhwGMBI7t5uVb%2BrQs1FN23Zt1zwkEUBElVQZWJRtafdeggSm2pA%3D%3D\"}]}\r\ncf-ray: 9ab4aaed6a5f56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53658e8a7ae22169e5b89744bfa9f9cc","sha1":"157a684bdf8e3be19cbfabc80cf3a53bfbeaa175","sha256":"9777428de88c524584f0133c3c0d9becf5a3840597eb16dc873bbc29b9a0bf58","sha512":"591c520934512496bfd28831a5c5039c29146034d03a97c7a4c04a153388f21480e1d59e4528c7161ee696a33025a3727ecda3bf05b7dd1b18fdf45f7b4b5b91","ssdeep":"768:Wh2yCYVpdbxAIf8/1AIdV1EeWkgoZ8NJ1/+qK:Wh2yCsbxxOPqeAouDE","tlshash":"c1e2f19b2b3f558af7137380622828d5c15dfcb5605a8b38083bfa278755b554ae30bf","first_seen":"2023-04-21T09:30:41Z","last_seen":"2026-05-24T23:07:00.2111Z","times_seen":912,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 09 Dec 2025 00:03:50 GMT\r\nexpires: Wed, 09 Dec 2026 00:03:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46410\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-06-03T17:19:20.357516Z","times_seen":8857,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/js/script.min.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /modern_theme/build/js/script.min.js?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xnxx_video01\r\nCookie: lang=en_US; AppSession=bd330304d42c738054bcf45eb7b1c600; refXnxx_video01=MDUwNDJmYmJiYzY5NjIyOTRiN2ZhNWFjODc0ZDA5ZmQzNTVlMzVkYTJhNzcxMGY3NjkwNWIxMzQ0YjY2MzE0ORt6PUIWLq8YNu7%2BZTB0HDezPNUAk5AIeGdCeMIcLRpH; csrfToken=e26cb5769757a6887eb7cab0f186b5c46280bd1c64f614ef56da67ca7f97e1cda8bce19258ebb1f24e798464dc9a43eca2e0d53bcb54c1929a563b60a8854392; app_visitor=Q2FrZQ%3D%3D.YmQzODg0OTg1OTcwODZkZTZmM2ViNTc3YmI1YjlhOTI2NWFkZDg1NDlhNWRlZDNhNDJiMjNhMjA4ZjFlNjk4ZP0HLqXFJqHg1giW%2BUNT49PLI4Cc9gBn%2Fwbudwf5%2BQUy9aoD0%2FhNYHvOoK%2B5DDJOUWJ%2B7jUqTr6PF0nUpIpWOs0PC%2FYsOCrQ%2F8usRop5TMrT\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"38157-63ec26415fea7-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 21 Dec 2025 02:16:48 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 1593644\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxQ8WeSvSM5XxbE2XXDxZBybVwcKeJe8Q1uWPmhcYlYEbCZYI8TWP4dlg%2Bjge9uTeCeIGmteeG9Pvsw6%2BoFJ9zXAsiQBVKwdj53AXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ab4aaef8fb356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229719,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"3c977f00919d1eb2e57a7f0fd3bd884b","sha1":"b09601a36fa50e61ce9d6ac0a34c6a894a8f81c8","sha256":"5619e29a6688312b15a2cc2d693083dd00198691b1a3918b64dee75c9eeef7c9","sha512":"f22ddcb1b2fffb6b5ac4f3557dabe92ac7c18dc96ab331f610161d82a9791b10f922e62ee378e9e4d456c8575f489b07207007a7ca299ad1a7d3e75c269c9584","ssdeep":"3072:IeeIygP3fulzhsz8jlvaDioQ47GKSDYFtVbmwpcYUpQVJ:IPIy6PultluPQ47GKSAmwpZwQVJ","tlshash":"53241a89b2a1742147ab71f5417f120bf236142ee409842cb56cd9e96fb8d8d623bf7c","first_seen":"2025-09-16T23:31:20.872491Z","last_seen":"2026-05-24T23:07:00.207906Z","times_seen":219,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S940233521:1765285040913901\u0026ifkv=Ac2yZaWn0IQap91Ln5VjF0SA-k9SSPYxiJm3RbKH1FZHHwf4qeNlyyHp4r5heJy3jAZKqZsZMdARMg","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:46 GMT","end":"Mon, 19 Jan 2026 08:35:45 GMT"},"fingerprint":{"sha1":"24:7C:52:9A:14:62:BE:F8:93:1F:AE:0D:94:C9:F5:D1:B7:6C:B1:16","sha256":"4E:59:5E:29:62:6C:9E:E6:D9:2F:72:AA:20:76:DD:CF:73:BC:E3:95:17:09:AD:C0:7B:3F:55:8E:44:6F:E9:58"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S940233521:1765285040913901\u0026ifkv=Ac2yZaWn0IQap91Ln5VjF0SA-k9SSPYxiJm3RbKH1FZHHwf4qeNlyyHp4r5heJy3jAZKqZsZMdARMg HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:TD1GSh-p1O9veDrx511Yu5OlVKepsg:U0rO6V3yPIfmGj6F;Path=/;Expires=Thu, 09-Dec-2027 12:57:20 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S940233521%3A1765285040913901\u0026hl=en\u0026ifkv=Ac2yZaWRBY6tKzgnE9qrAPflBgQC4Op8AotD-FNYUeGugZBGTRbW0-oqGOGrEJTDbbl5nl4iGU6Izg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-w6opBeGHkO6nxwEnVK8F2A' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 417\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","date":"2025-12-09T12:57:22.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Dec 2025 00:15:00 GMT\r\nexpires: Thu, 11 Dec 2025 00:15:00 GMT\r\ncache-control: public, max-age=604800\r\nage: 477742\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-03T17:56:20.768259Z","times_seen":643208,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/impression/Nj4wPYQF1fc5biquVN-b9Hpwxf5RL60SQMssMsd2yt7xq_M_YqtBd73PlKQqQTn4ADmtAY6ynhpKpJ_Yno8I7h6nE3OUTRJslk06uOq35eMAm023o2a8EAqIYlzZzL1IxWJXNAF7o68YoiZYTTEJJq0MPOGbu-H4vBTKTYltYO0cZtR7phxBolvE0O6nyTBk7DhzXCf_7bd9o8uIcwjgLEDFQQ95OTx565x_hiZjNvnzRXAyfRIEW2dO0ipvTVfFKy0isYmEiQvbZw3OcGOXiyzTfQj7j08fmm_F8gN9edo6sZQf6PWZbT6AkZACgTY-4qQW3aU_ecIg0EUW1RRAmSrskCmkXy7SsYWCfGZvduL1XgQwkS7Xz3PR5VOAMQU168XGa4PFKbaZxhMCtdZ3PUA0UUeZiPLUzoznfFvToGAei5DlgJpdCz0FLF7CRuXT3Sb-Vg5V9MzfiQcYCHC_ePRy8Bp1czkjpE0AXPJgXCUlYADo1zow6D3cedJShbDGxpcB3iIW7n5SYReHfGXimGQbaXNIfbX5857RESvKwYmbk5iXJwc6AZrMQzzTE1k9HoUmopHWvKQVwQ4_dW5qqQ3wXlGdDHc_azGtVduZIJ0EmQBmrEoGqJzB40e62LtZcuMx7Un8CsgHVIgLG1k5oChjxQG9GQWCfZspYxTrnMK6bSXoHdBUCHfkRdvUtZfbkYIlCkzs3WafYBtk8Hzfi_2IXlZ-qv3gPNfqWN3rsAYcWAQnHuzes2wQI9nYR7gpj5L0IWN_rnX2-KoF_CUV463KpRSfjgmG5ck3cyyvD_5FTqe0EpGrDntL_5knXa_OFJ-oszWAIsel4Zn7h_cGrpxpha5VP7muUtkEExH8PLD_LFdnXT-IHHk6EPw=?_z=5775069\u0026sw_version=v1.768.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FXnxx_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:26.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"GET /impression/Nj4wPYQF1fc5biquVN-b9Hpwxf5RL60SQMssMsd2yt7xq_M_YqtBd73PlKQqQTn4ADmtAY6ynhpKpJ_Yno8I7h6nE3OUTRJslk06uOq35eMAm023o2a8EAqIYlzZzL1IxWJXNAF7o68YoiZYTTEJJq0MPOGbu-H4vBTKTYltYO0cZtR7phxBolvE0O6nyTBk7DhzXCf_7bd9o8uIcwjgLEDFQQ95OTx565x_hiZjNvnzRXAyfRIEW2dO0ipvTVfFKy0isYmEiQvbZw3OcGOXiyzTfQj7j08fmm_F8gN9edo6sZQf6PWZbT6AkZACgTY-4qQW3aU_ecIg0EUW1RRAmSrskCmkXy7SsYWCfGZvduL1XgQwkS7Xz3PR5VOAMQU168XGa4PFKbaZxhMCtdZ3PUA0UUeZiPLUzoznfFvToGAei5DlgJpdCz0FLF7CRuXT3Sb-Vg5V9MzfiQcYCHC_ePRy8Bp1czkjpE0AXPJgXCUlYADo1zow6D3cedJShbDGxpcB3iIW7n5SYReHfGXimGQbaXNIfbX5857RESvKwYmbk5iXJwc6AZrMQzzTE1k9HoUmopHWvKQVwQ4_dW5qqQ3wXlGdDHc_azGtVduZIJ0EmQBmrEoGqJzB40e62LtZcuMx7Un8CsgHVIgLG1k5oChjxQG9GQWCfZspYxTrnMK6bSXoHdBUCHfkRdvUtZfbkYIlCkzs3WafYBtk8Hzfi_2IXlZ-qv3gPNfqWN3rsAYcWAQnHuzes2wQI9nYR7gpj5L0IWN_rnX2-KoF_CUV463KpRSfjgmG5ck3cyyvD_5FTqe0EpGrDntL_5knXa_OFJ-oszWAIsel4Zn7h_cGrpxpha5VP7muUtkEExH8PLD_LFdnXT-IHHk6EPw=?_z=5775069\u0026sw_version=v1.768.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FXnxx_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nCookie: OAID=08029a0b6eae4e0ff7b80546da7f8155\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 09 Dec 2025 12:57:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-trace-id: 1ce134f54bb600f7995a479ee273f24a\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-06-03T17:39:31.474073Z","times_seen":100846,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/js/ads.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /js/ads.js?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xnxx_video01\r\nCookie: lang=en_US; AppSession=bd330304d42c738054bcf45eb7b1c600; refXnxx_video01=MDUwNDJmYmJiYzY5NjIyOTRiN2ZhNWFjODc0ZDA5ZmQzNTVlMzVkYTJhNzcxMGY3NjkwNWIxMzQ0YjY2MzE0ORt6PUIWLq8YNu7%2BZTB0HDezPNUAk5AIeGdCeMIcLRpH; csrfToken=e26cb5769757a6887eb7cab0f186b5c46280bd1c64f614ef56da67ca7f97e1cda8bce19258ebb1f24e798464dc9a43eca2e0d53bcb54c1929a563b60a8854392; app_visitor=Q2FrZQ%3D%3D.YmQzODg0OTg1OTcwODZkZTZmM2ViNTc3YmI1YjlhOTI2NWFkZDg1NDlhNWRlZDNhNDJiMjNhMjA4ZjFlNjk4ZP0HLqXFJqHg1giW%2BUNT49PLI4Cc9gBn%2Fwbudwf5%2BQUy9aoD0%2FhNYHvOoK%2B5DDJOUWJ%2B7jUqTr6PF0nUpIpWOs0PC%2FYsOCrQ%2F8usRop5TMrT\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 170\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"da-63ec26415ef07-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sat, 03 Jan 2026 18:39:19 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 411505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IhM%2FN2LJBDNSFfPvh91j2BxQZ8MCVGUI1KpC%2F3RXW2l78nlailnSrUzBRDxE9zzzOm0ZGnIiOCdfWloB%2BfjU%2BFiTMtkesTUMye5Y2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ab4aaed1da556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"9e7e54b2d6fc22c0022b88b7125cbe03","sha1":"236c6e87760ac733a938cb1897d3a7cb6fc5c86c","sha256":"519204a7ecc3dc77ded647aa00567d6bf8c587049f389b1936914f7fab44c6fa","sha512":"9a1eaeb2af891a8b3b0ea6f02350e356371541154841b650a641533e89b254a1f357912b832209e5ea44ab99affbbd12fcedc7cbdaff7d1a0ee7b92e2715f4a6","ssdeep":"","tlshash":"9ed02273187812b40a2e25cb50f99b943e332190f29318ac4cfcce29832cc804836ec3","first_seen":"2023-09-09T21:18:47Z","last_seen":"2026-06-03T14:25:45.028458Z","times_seen":507,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/99a703977e943b8559ffc8e8c6c9b2da.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:26.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:06:49 GMT","end":"Fri, 13 Feb 2026 10:05:15 GMT"},"fingerprint":{"sha1":"1E:80:62:5B:0A:AE:45:C7:23:30:B5:BA:23:77:27:CF:C7:7E:2B:E5","sha256":"BD:DA:C2:A9:EA:C4:6B:B2:C8:71:38:93:D3:DF:34:10:57:C4:48:46:8C:A2:5E:BE:D1:C5:60:FD:35:71:AA:BE"}}},"request":{"raw":"GET /www/images/99a703977e943b8559ffc8e8c6c9b2da.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 12:57:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 8354\r\nlast-modified: Wed, 12 Nov 2025 18:38:16 GMT\r\npriority: u=4,i=?0\r\netag: \"6914d418-20a2\"\r\nexpires: Tue, 09 Dec 2025 14:11:19 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 81967\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvzjps5aLt7R87hD6VOb7SZ8zH8VruOS6gK%2FElFfE%2BLX17Ao9yPYDten3%2FmV6%2BwCfgq5xgmkcMC5%2F8dXzAJLVMIKTChUCPsOCvQgBA7pbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab4ab175eae56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"99a703977e943b8559ffc8e8c6c9b2da","sha1":"7723d7cd8d07a519d83f083eef9682a0f673d70f","sha256":"312825bac23fd9c0fb39a573dacdd000762843924d1c5456c0f2dd58792698ab","sha512":"3b39a9468f0a4343b58624a99111f1fa4bd37745af89931a7d2caa0534bd91e0c539df7a93ed711c406290fbcd028dce8bf894b38e82707cff76f6c04c18feba","ssdeep":"192:f1bQw9wshJUcCMT7NYVnj6bu+0HOeDRvzHRBtR8+GayPBD9E4qAFqB/z:fuitYVj6bu+QOelvzHRTRfcnE4qg8L","tlshash":"a302afcb7efc6e6d75662e5e0c66889b7d5d325de080845599bfcb328c2f25d81008c2","first_seen":"2025-12-01T19:36:23.427793Z","last_seen":"2025-12-21T23:29:32.616319Z","times_seen":89,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/fonts/fontawesome-webfont.woff2","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /modern_theme/build/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/modern_theme/build/css/styles.min.css?ver=6.6.4\r\nCookie: lang=en_US; AppSession=bd330304d42c738054bcf45eb7b1c600; refXnxx_video01=MDUwNDJmYmJiYzY5NjIyOTRiN2ZhNWFjODc0ZDA5ZmQzNTVlMzVkYTJhNzcxMGY3NjkwNWIxMzQ0YjY2MzE0ORt6PUIWLq8YNu7%2BZTB0HDezPNUAk5AIeGdCeMIcLRpH; csrfToken=e26cb5769757a6887eb7cab0f186b5c46280bd1c64f614ef56da67ca7f97e1cda8bce19258ebb1f24e798464dc9a43eca2e0d53bcb54c1929a563b60a8854392; app_visitor=Q2FrZQ%3D%3D.YmQzODg0OTg1OTcwODZkZTZmM2ViNTc3YmI1YjlhOTI2NWFkZDg1NDlhNWRlZDNhNDJiMjNhMjA4ZjFlNjk4ZP0HLqXFJqHg1giW%2BUNT49PLI4Cc9gBn%2Fwbudwf5%2BQUy9aoD0%2FhNYHvOoK%2B5DDJOUWJ%2B7jUqTr6PF0nUpIpWOs0PC%2FYsOCrQ%2F8usRop5TMrT\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"12d68-63ec26415ef07\"\r\naccept-ranges: bytes\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 3307\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTtZnDLS7knCqrr4ttp416q%2F0MGS%2F8Pls3DO4B7BWNslOJUlkO1tod8R3K6kIIUfbdkUg1F7WW621RdgWsPzEYoz5b34htzewG0T4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ab4aaee5eab56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-03T17:54:37.966152Z","times_seen":488128,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:21.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 03 Dec 2025 23:38:53 GMT\r\nexpires: Thu, 03 Dec 2026 23:38:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 479908\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/500/5775069?excludes=\u0026oaid=08029a0b6eae4e0ff7b80546da7f8155\u0026tgp=\u0026of=true\u0026sw_version=v1.768.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=2\u0026pl=https%3A%2F%2Fshrinkme.click%2FXnxx_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:22.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"OPTIONS /500/5775069?excludes=\u0026oaid=08029a0b6eae4e0ff7b80546da7f8155\u0026tgp=\u0026of=true\u0026sw_version=v1.768.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=2\u0026pl=https%3A%2F%2Fshrinkme.click%2FXnxx_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://shrinkme.click/\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 09 Dec 2025 12:57:22 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":84,"dns":1,"connect":26,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=jdMmXeCQEkPbnFDy9T04NbgJ\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=htj0jyfujwa3","date":"2025-12-09T12:57:22.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 08:14:23 GMT\r\nexpires: Sat, 05 Dec 2026 08:14:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 362579\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-03T17:54:42.556019Z","times_seen":865501,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/99a703977e943b8559ffc8e8c6c9b2da.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:22.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:06:49 GMT","end":"Fri, 13 Feb 2026 10:05:15 GMT"},"fingerprint":{"sha1":"1E:80:62:5B:0A:AE:45:C7:23:30:B5:BA:23:77:27:CF:C7:7E:2B:E5","sha256":"BD:DA:C2:A9:EA:C4:6B:B2:C8:71:38:93:D3:DF:34:10:57:C4:48:46:8C:A2:5E:BE:D1:C5:60:FD:35:71:AA:BE"}}},"request":{"raw":"GET /www/images/99a703977e943b8559ffc8e8c6c9b2da.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 8354\r\nserver: cloudflare\r\nlast-modified: Wed, 12 Nov 2025 18:38:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6914d418-20a2\"\r\nexpires: Tue, 09 Dec 2025 14:11:19 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 81963\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RANDSFqbvnV3Zpz2blHsc4M6jjNANkqv5xZtT8CkYLZNk%2Bv5dPZcT4%2BxeyKJ%2FDrf4PYq7QGODHLZh5UmGY5ItNwYxTj%2BXZHnNB5O%2Ftq%2FSg%3D%3D\"}]}\r\ncf-ray: 9ab4aafde80656a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"99a703977e943b8559ffc8e8c6c9b2da","sha1":"7723d7cd8d07a519d83f083eef9682a0f673d70f","sha256":"312825bac23fd9c0fb39a573dacdd000762843924d1c5456c0f2dd58792698ab","sha512":"3b39a9468f0a4343b58624a99111f1fa4bd37745af89931a7d2caa0534bd91e0c539df7a93ed711c406290fbcd028dce8bf894b38e82707cff76f6c04c18feba","ssdeep":"192:f1bQw9wshJUcCMT7NYVnj6bu+0HOeDRvzHRBtR8+GayPBD9E4qAFqB/z:fuitYVj6bu+QOelvzHRTRfcnE4qg8L","tlshash":"a302afcb7efc6e6d75662e5e0c66889b7d5d325de080845599bfcb328c2f25d81008c2","first_seen":"2025-12-01T19:36:23.427793Z","last_seen":"2025-12-21T23:29:32.616319Z","times_seen":89,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":59,"dns":34,"connect":1,"send":0,"wait":6,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34gjfm75zhp78.cloudfront.net/?mfjgd=792297","fqdn":"d34gjfm75zhp78.cloudfront.net","domain":"d34gjfm75zhp78.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.89","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?mfjgd=792297 HTTP/1.1\r\nHost: d34gjfm75zhp78.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 79142\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: UF2i-Gl9t4deRJfAFvo5gwCTdv1CmQaGSGFZ8npHVrhdOi7tWgcuyA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":232336,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"27ec58144551f0532f02aa6e7bc862fc","sha1":"f99ea911de89e6f71d23426c83783f4678afa6ac","sha256":"56bb99262c4c12a72ae8b74bfde4e2683d0ffb257b05e4aaa8811f8a43f84a82","sha512":"10c6491954c25e9945203aab1049ad1f333998a8c0164b33e5a6b625e0da786a534084feafc23b92800a3b22a31bffdb6ccf13fb7d82be6f592b433cb7869b3a","ssdeep":"3072:XBUNP5+Ya/06R42Da7oV6+53UOng7L9vN9lw+Zc53+Zc0M8ET:XuNR+t/06G2D02MdZU3+iAU","tlshash":"ac344cc9ba923429836374f540bf524ab23f5a69b8084dd4f496d4d07db8d0a437bfac","first_seen":"2025-12-09T12:57:52.832363Z","last_seen":"2025-12-09T12:57:52.832363Z","times_seen":1,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":74,"dns":71,"connect":1,"send":0,"wait":175,"receive":3,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 00:39:19 GMT\r\nexpires: Sat, 05 Dec 2026 00:39:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 389881\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-03T17:49:49.656757Z","times_seen":506012,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":123,"dns":2,"connect":15,"send":0,"wait":16,"receive":18,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:46 GMT","end":"Mon, 19 Jan 2026 08:35:45 GMT"},"fingerprint":{"sha1":"24:7C:52:9A:14:62:BE:F8:93:1F:AE:0D:94:C9:F5:D1:B7:6C:B1:16","sha256":"4E:59:5E:29:62:6C:9E:E6:D9:2F:72:AA:20:76:DD:CF:73:BC:E3:95:17:09:AD:C0:7B:3F:55:8E:44:6F:E9:58"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:OgUjuwK7cSPxhE4V-VhV-KcwkaLN:0tR-BgKGfc5lcXS5; Expires=Thu, 09-Dec-2027 12:57:20 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S940233521:1765285040913901\u0026ifkv=Ac2yZaWn0IQap91Ln5VjF0SA-k9SSPYxiJm3RbKH1FZHHwf4qeNlyyHp4r5heJy3jAZKqZsZMdARMg\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-tJcuA455G3n7WchSNvSfog' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":100,"dns":0,"connect":35,"send":0,"wait":36,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5Q2KMLS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:21.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtm.js?id=GTM-5Q2KMLS HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 09 Dec 2025 12:57:21 GMT\r\nexpires: Tue, 09 Dec 2025 12:57:21 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 09 Dec 2025 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 108529\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319976,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5340)","md5":"9e860838834495c04544cd62a730bddf","sha1":"f94921d3a60d204d60cee9ff152ca80a506aab09","sha256":"8d65b332e12cf9b6d9194509d8f998dd37c81a15e11bac40f19538a90d79ee23","sha512":"b419cfb3e6546c55460a5aea4ea1ca58157d6d9763a25da9aea98f2eba53070f2f8803690bc4d5f4ea19a840345d34f711f3a347bdd3bf0bb6522df6b2345c74","ssdeep":"6144:XS0NI9Ue2bWAsZkrVB/DeXFdnkZ+74W4z0hQ:CSe9VZeZ+UW4z3","tlshash":"be6418cdb3da742683a2a474503f118ba17b69d2f44cc895f186dcd42e70aaa4277f7c","first_seen":"2025-12-09T12:57:52.833555Z","last_seen":"2025-12-09T12:57:52.833555Z","times_seen":1,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":88,"dns":11,"connect":21,"send":0,"wait":40,"receive":50,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e5c80h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:21.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e5c80h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 09 Dec 2025 12:57:21 GMT\r\nexpires: Tue, 09 Dec 2025 12:57:21 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143130\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432610,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"3200f1503eaed164c3680fa59b4f2a90","sha1":"9d6590dbdd1aa4fa85b2de31de37edd477f13c25","sha256":"8e56d09df2f1b0f97ee5dc1c4afa001b329668026ab9930d3b4e7e99477eb764","sha512":"d61d159a651ab7ad605a70e0e88daa5253c2a4c3b4869ef282a171d817c6fdf2533be60e7404bdea46ae588853b5c37830baf5bfc45b543e036910e9fe01ee8b","ssdeep":"6144:fsS0hssCUe2bWYRosCtrVB/DeXFdn0Z+rXRBcUgW1fCV0qZXC:jiPe9YRdChZ+rohW1ayqw","tlshash":"a79409ce73d674269396f078503f018ba57b29a2b45cc896f189cce42e7469a0277f7c","first_seen":"2025-12-09T12:57:52.835032Z","last_seen":"2025-12-09T12:57:52.835032Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/401/5775069?oo=1\u0026sw_version=v1.768.0-s\u0026oaid=08029a0b6eae4e0ff7b80546da7f8155\u0026st=true","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:22.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"POST /401/5775069?oo=1\u0026sw_version=v1.768.0-s\u0026oaid=08029a0b6eae4e0ff7b80546da7f8155\u0026st=true HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3287\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3287,"data":"{\"sync\":\"TBtSUh8cJhwUBWcfHEsSAwEFUA5MXwMBbAIlKz9KWUBcHAtKQ1AVSQZbGgxbGwkEVkYLASoQTktDDlhGTBkCRExXBA0fFA4eFkpPUhRLDk4+HQY0BV0ZMkBQW2kNHCYfDD1RESZOBwkxGBNcMR5fZkBBJRcYHyoBTzYaUUNQXEdQQB0yU1xHUxkQHAxXWAhFW1MSHw9JSARCT1lJbEYeRkNaWUBQABUbW1tcWF4WGwRTGwkGVkYdGhNAAllVGxEGTFFCGEwDUBsJB1ZGDRJXWAlfVRsPCExRQhhMA1ZJEQxLSFsYAUACWFUbBBwPB1AOXkEVUVAUQFVVShEPGlNJFUMYGh9QDl5BFVpbaRUGE0pPUhRLF04+HQpJSARCT1hKUEYPRkNYWUBQAB1dBARMUUAYTA5fZlxUEDsQBhEHQEtDCU1IGQIcawUITkpsWh8KHhwdQAJYVRsCBQIEAGsKCEdNWxRAVFVKAwdWDRZLQ1BeR1BTDwBSSVJSCUZDWFlAVgUmVw0ZTFFDGEwOWFVcRCUDGAUAFhpTSBVDGggHUA5eQRVaQF9YXklEVwFUHVsDUEZMAQFETFcHFRFGFBBbUkROGhkXSwJIVFteFh4BVk1VWQgJJgwQFl0KDVYTSFRcXhYACEQbCQVLGVVKBwsaU1tVDRwDGxtEC08bG0FAWF5bJRARWUtVGxMaHklIB0JPQ0NcFEBUVUoCFRpTSAtZWkJJBVxMVwYJAQJWRg4BAkACWEsBUUZMHBtcTFcGCQECVkYOEFdYCEVbThhIVFteFgcVFQMDGlgTHwtXWAlFW0oAAkxRQwRcWRsbQF5YXkhYR1YUSwpOQ1BfWUoEQk9EWEQUQFVLUEVOGh0KZgUPGg4RQAsJFQMDGlgOCh0UQAJLNFYbAwIHExtbQwcZG2ETCh0HAhEYJy0ZUFpAW0kUOQRZDwcNWhxPXE5CSh9DCFJeQFtbFCkIVFJcGUhUSFhFUwhYWX8IGAsNHUxBXAQNHQZYSFsGBUACWFUbEQ5MUVBdABlSS11XFkkJDBNPTgAcTgQYVAIBZCdWXldHUwgKGARYElwPVE8IDxkOAA4HHmdwCF8UEBwaGwNURAldB0cYAhdDCx8NUEBmM18QBgEHSgcYVUwaCg1fQgcIQFxBDBMXKSFOC1YdHEsPCwJGAlAIQEFQVkEfFkMBBjJxUlsVQwIHB1AOX0EVTFpSWF4XHRkOFEsdSwdIVElQGEwdWxsJFBIQDRgGWBdGClETAwAAH1FADltQUF1VPBcQDT1OAB1cDlpfSV4WAAoVAwMaWBADSk9AbT06G01IAAlQDl9BFVdSRlheWz8cDAtbWxVDGhpJSARCT1JPUlpYXkpfWUBQClsDVVJCSRZZTFcaCB8UCBANSk9PCUVbWgk1AQkYFlRdGxtdQVheSERXFVxLQ18ABh0OXhYBHlRJRhRARjUBGxdASQEBVzVYX1AYTAVeXVdTFEZDDhQOSwxVGwICMQQQXjEEWV1WTlheVFlZQE8AF2YKDxcYLVgLA1BNWxRAVkFZWUBbBhVWEzUKDgJABk8NCwcaWBIcBhENSktDG0NGTAwTWQsdVl1AFEBUVUobDhpTW1wPRzs4UBhMA1tKEQxYARdFIDEUDBcbTUgNBB5bHDJQWF5DDkZDSgYQXwtbFUMaCAdQDkxPGxtQWg5GQxMIThoDCklDUF9HUEQAGRUDAxpYFBcaFkACWVUbEQYPHxRbHABoXVZCHwcNBwdAAhJbUBI1DwUWRgEEUxsJUBsICg1ZQFEaJk0TAwoOHEBMV1FYX0UfSFsBBj1bAQtWDAMbBi0MWDJYS2xYHxMcGldYXggVSgRGTAIBaw0FRVZeXw8JW1ITA1QaHBVDAx00F1AJCBUDVVcWFxxEVwtLNh5cAgEBSUhAHBhSFRFfCTsODRc9UwANG1sMDwcBUUJPXkpsQR8GJgMcFmdfSQ8+BRw0HFEZCEUbCVAbCAoNWUBRGiZdBBkFHx1EMR5WX1JEE0ZDDhQOSwxVGwgZMQgaRgEAXkxeaRUUHBoUQAIPGFUSDxNHUFoLHhUDEQdPUktcQVoJUEEbTUgNBxtRABloUFcUQEYMBh4MVx4XG01IDw0UXQIEVk1WaRMAW1JXQBRLDUsADAgCEWsdAkJLUFMlDR1KT0AaRVtYBRwLGQZdHQhFZlpSWF5bSllAWwgUSQADCQUtXQpPDRsRGlgHDBsBDVU2EF0+W0xRUBZCT1RMQEIVCSYBET0KS0MbQ0ZMCB5dDQZoUFcUQEZbRFcBVxoNG1tITEdQWQsZX1ZXFEBGExsBA19LVRsTNRsCFhZUTxUVEVkbOxAMV1gaS1UbAA4KAgZdAQNWVWxfHhdbUi4/RQ==\",\"async\":\"TBtXQwgXW1IOQFoIDRtbWEJJGl0AGUQbCQdWRhEBEQZdByZQBxgPBhcWVF8FFRFCFRAYBFdYClwEFUMCBw8WUQAyXl9BVxcBW1JFThoLGE1DUBVJG0cxD1ZNEQxKSFsLHQNKDhBXBkhUW14WDQVWS1RfFAMmHBwPXUtDCU1ICgIBVwYMRV5aWB07DQEYBxpTSRVDBgsdF1hMVwdEHxQSDRccBkACEgQVQwkCAhdaGjJeXREMWBEXAxsNTwdbFUMLCA0bWAcMQ1xsXx5GQ0pXThodC1gHDAcILUcBGEVaVmkTAFtSV0AUSxhdFw8cHxtHCx9oUFcUQEZbRFcBWQQJWAgNADQbUExXFRsfFBkRChwaD2cAHWZQSFRJUBhMDkJKR1kXOxAMKlAaU1sbTUgNBxtXBTJeXREMWEZVShYNSx1bA0NIQkkfURoFWF0RDFgOChwUBRpFW0s+HwcPUA5MTxsbXFclDR1KT0AaRVtYBQ4HHxtbAAxbZlpSCUZDMygf\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://shrinkme.click/Xnxx_video01\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":1,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 09 Dec 2025 12:57:22 GMT\r\ncontent-type: application/json\r\nx-trace-id: 739385cbdb0a87edcbcf052fb256c5bc\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=08029a0b6eae4e0ff7b80546da7f8155; expires=Wed, 09 Dec 2026 12:57:22 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2157,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0edeba1c0c056f3a861791d09f37dd87","sha1":"5352f5cf322d9b690d28a17f236edb480018bcd4","sha256":"75efa1561d0499f62c01af594cd57024b09d54c584cf670729c8fb2f16b584c7","sha512":"0f18cfc6d9d8b3cc601b3e636210c1cb4a67c423b211d2e214b323497009a1e4df3f06f3085a9f17302d11dfedf277cec56bb9ed0d08be8ed75167719902b8d6","ssdeep":"","tlshash":"454113085d28017a82de5ab9ec0b6d474abd162f7a4c752ee7490d1770fbce403eb20b","first_seen":"2025-12-09T12:57:52.836618Z","last_seen":"2025-12-09T12:57:52.836618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":84,"dns":27,"connect":26,"send":0,"wait":30,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S673768871:1765285040888181\u0026ifkv=Ac2yZaUkpEEFsAheRwv628Vcp8114XzoPcAOXFStty4zHbyxDRZeohhTkF2OAsMZ_rBjWsFMHtxOxQ","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:46 GMT","end":"Mon, 19 Jan 2026 08:35:45 GMT"},"fingerprint":{"sha1":"24:7C:52:9A:14:62:BE:F8:93:1F:AE:0D:94:C9:F5:D1:B7:6C:B1:16","sha256":"4E:59:5E:29:62:6C:9E:E6:D9:2F:72:AA:20:76:DD:CF:73:BC:E3:95:17:09:AD:C0:7B:3F:55:8E:44:6F:E9:58"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S673768871:1765285040888181\u0026ifkv=Ac2yZaUkpEEFsAheRwv628Vcp8114XzoPcAOXFStty4zHbyxDRZeohhTkF2OAsMZ_rBjWsFMHtxOxQ HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:xEN7aD2SSVl_COfjLNWkmTHhiAO_dw:zcXZKfuNZ247XrWM;Path=/;Expires=Thu, 09-Dec-2027 12:57:20 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S673768871%3A1765285040888181\u0026hl=en\u0026ifkv=Ac2yZaWeZ9sFQgtwNeOjluqzU9MrSdjCICKgXAnEp7T8Y9OTKWZJPLE6oGgUdbOq4qZ9BSem1kecyg\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: script-src 'nonce-0Gv8YXBFdfxd4Ck5B6NUWA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 416\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:46 GMT","end":"Mon, 19 Jan 2026 08:35:45 GMT"},"fingerprint":{"sha1":"24:7C:52:9A:14:62:BE:F8:93:1F:AE:0D:94:C9:F5:D1:B7:6C:B1:16","sha256":"4E:59:5E:29:62:6C:9E:E6:D9:2F:72:AA:20:76:DD:CF:73:BC:E3:95:17:09:AD:C0:7B:3F:55:8E:44:6F:E9:58"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\ncontent-security-policy-report-only: frame-ancestors 'self';report-uri https://csp.withgoogle.com/csp/frame-ancestors/a00d54fdef4a77536baac3725d1409f8\r\nset-cookie: __Host-GAPS=1:fuwibhzvlEkHMCatt5iaViJDsebGyQ:-gVVC2qW0BWZe0In; Expires=Thu, 09-Dec-2027 12:57:20 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S673768871:1765285040888181\u0026ifkv=Ac2yZaUkpEEFsAheRwv628Vcp8114XzoPcAOXFStty4zHbyxDRZeohhTkF2OAsMZ_rBjWsFMHtxOxQ\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: script-src 'nonce-Dj2lCkP2_p48r17lUkE3zQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-opener-policy: unsafe-none\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":75,"dns":0,"connect":22,"send":0,"wait":36,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:21.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"16:F0:F2:6E:23:A1:95:F7:75:EA:70:AB:6F:D4:43:F3:BE:AA:FE:CD","sha256":"F0:41:ED:B6:DC:74:0C:CE:3C:DF:0C:20:73:B9:C1:3C:73:D4:E2:7D:2B:DC:30:F1:80:AE:20:7B:97:78:33:80"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Tue, 09 Dec 2025 12:57:21 GMT\r\ndate: Tue, 09 Dec 2025 12:57:21 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1088,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1088), with no line terminators","md5":"174a65c03735dd20000365afb88ce742","sha1":"ac35c9313024db987b185af3b6ae434b1a2b77b8","sha256":"7da7d5a8b027dab88422c2c02d98caa30c56adac66800d816b17dd0ada909637","sha512":"98e9133125979522a69e0dc5a9ab2eb08be728f8eb639c8beb0659d2cbf2c4f091340a66f22bf5d6d85d949899ea1f1b70e4101a3973c3d78764890e623c2814","ssdeep":"","tlshash":"711120720a05f0390b720de1e2ffcbb1e081741cf15c45e8a5159ac45e79ccbce04985","first_seen":"2025-11-14T14:20:58.250505Z","last_seen":"2025-12-09T12:57:52.837647Z","times_seen":61,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":68,"dns":39,"connect":8,"send":0,"wait":19,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:26.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:52:35 GMT\r\nexpires: Wed, 02 Dec 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 565491\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-03T17:54:42.556019Z","times_seen":865501,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/css/styles.min.css?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /modern_theme/build/css/styles.min.css?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xnxx_video01\r\nCookie: lang=en_US; AppSession=bd330304d42c738054bcf45eb7b1c600; refXnxx_video01=MDUwNDJmYmJiYzY5NjIyOTRiN2ZhNWFjODc0ZDA5ZmQzNTVlMzVkYTJhNzcxMGY3NjkwNWIxMzQ0YjY2MzE0ORt6PUIWLq8YNu7%2BZTB0HDezPNUAk5AIeGdCeMIcLRpH; csrfToken=e26cb5769757a6887eb7cab0f186b5c46280bd1c64f614ef56da67ca7f97e1cda8bce19258ebb1f24e798464dc9a43eca2e0d53bcb54c1929a563b60a8854392; app_visitor=Q2FrZQ%3D%3D.YmQzODg0OTg1OTcwODZkZTZmM2ViNTc3YmI1YjlhOTI2NWFkZDg1NDlhNWRlZDNhNDJiMjNhMjA4ZjFlNjk4ZP0HLqXFJqHg1giW%2BUNT49PLI4Cc9gBn%2Fwbudwf5%2BQUy9aoD0%2FhNYHvOoK%2B5DDJOUWJ%2B7jUqTr6PF0nUpIpWOs0PC%2FYsOCrQ%2F8usRop5TMrT\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 09 Dec 2025 12:57:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 35024\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"30c03-63ec26415ef07-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sat, 03 Jan 2026 18:54:59 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 410565\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KtY%2Bu6ECLO914GuzZsq9j3LUy1D%2Buez2i2SkMLZm5Qwj499u0%2BkUHCXp2FvdGhJO82mbvqxdwNtOFtwObS17Kw1HkbcGBRJAaRSDwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ab4aaed1d9c56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199683,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65369)","md5":"0c921e67880117735ca85ba7fe87bafb","sha1":"12901b42a59bb331ea952af5c9700a3f6d520e40","sha256":"0b3646e0fa00be9c1cbb3a7dc1ad1d0348dbdbec5b6e023b012cf8e0d2927fe1","sha512":"34da3e923eee4d30b3e1e79e19d2d7b96abad7b9343b9dc9dbf0b75d57f32a8df2e9b53f547defea79c7b7eb4e04408045857f9ff04d9ac707c2547cc2d59274","ssdeep":"3072:6co/oFiS22l7p0rQUT63i6PSNhwEx28mLh2LK:Bo/BS22crQUT63i6PSNhwEx28mLh2LK","tlshash":"2014a6a0e51420da3323c15bbbd0fa99227cf263d5564dbaf21f659c4fc46c912a3f1a","first_seen":"2023-04-19T07:39:51Z","last_seen":"2026-05-31T02:56:49.320421Z","times_seen":295,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/S2ZFb2UqBCYCWipbJ0kQOQp4SlcNQ3cpAXhSIgUDJlFwFQ07UX1BBicJMAsDOQkrG0slAzFKVw0SERUBGTJ3GBYcIn0fMDESICE9AQQhCDMhAik9FRkfCB4mJSwAIDF7IAw5EnMtLiYWHBwiHCd5CiEmDAolFRgKLyciVlwZIio3PTIwMwsfODEOGBUjBxQuEBwyHxY2IhYfIgsBAiQ5PHoqEylSDjUUGjAYLBwkHBInDF4/ewAWH1MMMQMePSVeIyUMEiUOXgImNgADXAkcfVg2E1YNNi1yJSMXLyIiEANcCR8cAiQlDQELLTwTJAgzIyh0H1IOC2gmKxg+dScsMQoPCS0RASMpDSMkdgcUEwh8PisIEQ0mJwEMBjlQblQDLQgNQ3cpPRNeAgstegUOOVEhLSIAAh9VF1YuJVIANTINBSQ6LzgAIkkPOAkrH1gHKyZdFiA+dgU9","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:20.559Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /S2ZFb2UqBCYCWipbJ0kQOQp4SlcNQ3cpAXhSIgUDJlFwFQ07UX1BBicJMAsDOQkrG0slAzFKVw0SERUBGTJ3GBYcIn0fMDESICE9AQQhCDMhAik9FRkfCB4mJSwAIDF7IAw5EnMtLiYWHBwiHCd5CiEmDAolFRgKLyciVlwZIio3PTIwMwsfODEOGBUjBxQuEBwyHxY2IhYfIgsBAiQ5PHoqEylSDjUUGjAYLBwkHBInDF4/ewAWH1MMMQMePSVeIyUMEiUOXgImNgADXAkcfVg2E1YNNi1yJSMXLyIiEANcCR8cAiQlDQELLTwTJAgzIyh0H1IOC2gmKxg+dScsMQoPCS0RASMpDSMkdgcUEwh8PisIEQ0mJwEMBjlQblQDLQgNQ3cpPRNeAgstegUOOVEhLSIAAh9VF1YuJVIANTINBSQ6LzgAIkkPOAkrH1gHKyZdFiA+dgU9 HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/Xnxx_video01","date":"2025-12-09T12:57:26.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 09 Dec 2025 12:57:26 GMT\r\ndate: Tue, 09 Dec 2025 12:57:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"51e82f70d1b655f1447b6881fc12c970","sha1":"d07fb502aaf2635cd74dd1ad42d916b2bfe923c1","sha256":"9c313d568db4279e917f0ed107f57397c1e14d5e2f29667f207f31c409658440","sha512":"60b0345cf672afd26c41e56155e3fefc18e6f92e1d969f25dd33d6aa5e49c624e7017f9dc49d5f35ba2f85886546c1fcb93e7303d045618e3508bb3f0f6d1e5a","ssdeep":"768:DFSFjFGFUFB4FiLFZF1Fn8XguBSivFRa1KRzBfiiMgFK1GIBEiNnr7gr8yBOijh1:WCJiWp","tlshash":"8bc20fa1041b500057834ce223cebf34fe1f52507142d0b5abfdab6badcbc6652693ad","first_seen":"2025-11-19T00:27:59.992265Z","last_seen":"2026-02-19T18:18:33.653497Z","times_seen":1142,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
