{"report_id":"3e983628-039d-4a36-9a05-836411180eef","version":6,"status":"done","tags":[],"date":"2025-09-27T08:12:55Z","url":{"schema":"https","addr":"shrinkme.ink/Xhamster_video01","fqdn":"shrinkme.ink","domain":"shrinkme.ink","tld":"ink"},"ip":{"addr":"104.21.68.12","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"unlockcontent.org/JXNjsy291OskMZJxnYYsax?a=0\u0026u=152869\u0026t=\u0026tracker=3695535165520891269\u0026m=85\u0026f=85\u0026source=792297","fqdn":"unlockcontent.org","domain":"unlockcontent.org","tld":"org"},"title":"Link is locked"},"submit":{"url":{"schema":"https","addr":"shrinkme.ink/Xhamster_video01","fqdn":"shrinkme.ink","domain":"shrinkme.ink","tld":"ink"},"ip":{"addr":"104.21.68.12","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-01T08:12:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":14}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2025-09-22T00:01:11.57274Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":956,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shrinkme.top","ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-24","domain_rank":0,"first_seen":"2025-08-25T17:00:40.672984Z","last_seen":"2025-09-22T07:00:00.900059Z","alert_count":34,"request_count":7,"received_data":553570,"sent_data":6883,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]},{"fqdn":"gloaphoo.net","ip":{"addr":"172.67.205.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-09-09","domain_rank":283321,"first_seen":"2022-09-10T12:44:27Z","last_seen":"2025-09-22T07:00:01.126Z","alert_count":0,"request_count":1,"received_data":168901,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kedasensiblemother.org","ip":{"addr":"54.240.174.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-08-08","domain_rank":0,"first_seen":"2025-09-26T13:55:41.056646Z","last_seen":"2025-09-26T13:55:41.056646Z","alert_count":0,"request_count":1,"received_data":4102,"sent_data":1023,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":2,"received_data":35386,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":4,"received_data":127044,"sent_data":2150,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-09-21T22:11:30.527953Z","alert_count":0,"request_count":1,"received_data":1717,"sent_data":416,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bobapsoabauns.com","ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16239,"first_seen":"2025-03-26T18:52:40.148632Z","last_seen":"2025-09-22T00:37:39.428583Z","alert_count":0,"request_count":2,"received_data":163286,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-09-21T22:18:44.028378Z","alert_count":0,"request_count":6,"received_data":13816,"sent_data":3766,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"shrinkme.io","ip":{"addr":"172.67.193.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-18","domain_rank":218590,"first_seen":"2019-04-01T23:10:55Z","last_seen":"2025-09-25T17:48:31.508431Z","alert_count":0,"request_count":3,"received_data":59763,"sent_data":1293,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-09-21T22:11:36.895165Z","alert_count":0,"request_count":1,"received_data":86213,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"tzegilo.com","ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":18163,"first_seen":"2022-01-14T15:27:15Z","last_seen":"2025-09-22T00:37:39.284979Z","alert_count":0,"request_count":1,"received_data":18655,"sent_data":407,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.recaptcha.net","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2025-09-21T23:03:56.607929Z","alert_count":0,"request_count":4,"received_data":89335,"sent_data":2571,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-21T22:11:31.071214Z","alert_count":0,"request_count":2,"received_data":737112,"sent_data":882,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"parashparyro.com","ip":{"addr":"172.67.147.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-09-14T08:11:49.494515Z","last_seen":"2025-09-22T00:01:11.568395Z","alert_count":8,"request_count":4,"received_data":2032,"sent_data":2298,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-09-21T23:59:49.858604Z","alert_count":0,"request_count":1,"received_data":835,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gleecheeftoo.net","ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-02-10","domain_rank":531523,"first_seen":"2025-03-15T15:38:27.766488Z","last_seen":"2025-09-25T22:59:36.103012Z","alert_count":18,"request_count":6,"received_data":8876,"sent_data":4847,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-09-21T22:11:34.484141Z","alert_count":0,"request_count":8,"received_data":4257994,"sent_data":3843,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shrinkme.ink","ip":{"addr":"104.21.68.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-28","domain_rank":71507,"first_seen":"2024-08-28T12:10:11Z","last_seen":"2025-09-27T04:59:13.244596Z","alert_count":0,"request_count":1,"received_data":27714,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":17838,"first_seen":"2022-01-14T22:55:14Z","last_seen":"2025-09-22T00:37:38.562658Z","alert_count":0,"request_count":2,"received_data":902,"sent_data":1159,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ukankingwithea.com","ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-09-22T00:01:12.323239Z","alert_count":2,"request_count":1,"received_data":834,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d34gjfm75zhp78.cloudfront.net","ip":{"addr":"54.230.245.177","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-10-27T18:06:47Z","last_seen":"2025-09-22T07:00:00.968549Z","alert_count":2,"request_count":1,"received_data":232803,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-2.2.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-28T16:06:09.021614Z","times_seen":274098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/modern_theme/build/js/script.min.js?ver=6.6.4","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c977f00919d1eb2e57a7f0fd3bd884b","sha1":"b09601a36fa50e61ce9d6ac0a34c6a894a8f81c8","sha256":"5619e29a6688312b15a2cc2d693083dd00198691b1a3918b64dee75c9eeef7c9","sha512":"f22ddcb1b2fffb6b5ac4f3557dabe92ac7c18dc96ab331f610161d82a9791b10f922e62ee378e9e4d456c8575f489b07207007a7ca299ad1a7d3e75c269c9584","ssdeep":"3072:IeeIygP3fulzhsz8jlvaDioQ47GKSDYFtVbmwpcYUpQVJ:IPIy6PultluPQ47GKSAmwpZwQVJ","tlshash":"53241a89b2a1742147ab71f5417f120bf236142ee409842cb56cd9e96fb8d8d623bf7c","size":229719,"data":"","first_seen":"2025-09-16T23:31:20.872491Z","last_seen":"2026-04-27T14:02:58.523901Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/5775069","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"172.67.205.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"313ed9241e5235962e74fd8caec4f2c2","sha1":"7dda0fe5e1847960b063ccf1e38a20ef64d079aa","sha256":"bc3037e9126699808f781f35a65fd377f54a7363c3a8922928894ac08dd514eb","sha512":"27e7a57287bdf79baa77b989eb3fa5b50055672a3cedf5679134b32194c318104421ce2a41d71945d3ed1918115bb0252b4d0b26297b55c620dd460c854f7f8b","ssdeep":"3072:vw+08/+ugr0a9bQee57WSSybf0AEq7WYV9u5OVny6/PKSWxyScqe//kAoUBEMY:vwfjWCybdh7b9u5OVy6/PKSWx6m7tMY","tlshash":"c1f3fcc9768174562a63b030522fad5fb92b8e20585f8d04e166f0e93e3945ee353efc","size":168022,"data":"","first_seen":"2025-09-26T23:04:00.881219Z","last_seen":"2025-09-28T22:15:47.028712Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"497770a2ab62f2aa5e9a92139301634d","sha1":"49c10647ffe35e24f84f743006f162ff0fe16399","sha256":"0663d282ac18b3e9d3e81725926a5310e5cae5e6954873f09b7ee193136fb5e4","sha512":"94a5141ed28656c5873a486aebfdda52790c8517426987bf905bf3c44163a25932ab17ac498215ddbea8e0e9887a8dabe6ed80acc950c993bdc61ecf977724b9","ssdeep":"","tlshash":"06a001b2053584208e6299509553bac4e187605dfd81819470265a89f3e15e7d144940","size":72,"data":"","first_seen":"2023-03-07T01:11:36Z","last_seen":"2026-04-28T14:48:36.10216Z","times_seen":23039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d70bfe5b44fb201342f866bee8339d19","sha1":"043375509fb09ffcf643f4bd780162da0eb09edc","sha256":"e9097006d693ad86348070832af19fda6d2775014b8b4915d093e5cf2bb27f23","sha512":"4b36c8d45b94fa0c3e6f7534c7ad3bb975305ba5daf81ed9c1128adcd1260c52ff77ade8036e1953298120e79722f40da5d1bf221d2ce39dd2a6d0119d79c6cf","ssdeep":"","tlshash":"2870000c2c08a002822a3020002b000880220080a00008020288b8802e32c2e0802c08","size":22,"data":"","first_seen":"2025-09-18T12:15:08.201267Z","last_seen":"2025-09-29T05:46:15.209467Z","times_seen":3194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-28T16:23:29.027104Z","times_seen":316462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/Xhamster_video01","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cf6f85d4fd22db7db674d7afc2b6aef","sha1":"714de681854c07465e640b1e31d74a76fa2636d0","sha256":"8605dc71537232a4f8fb99355bc1c64fe756bb91ae3ad910e3b031a85f2879d8","sha512":"626e1893955f263d54e8067c48e391b73e3da0dfd3ba1c1ec18de2a9cbf4bfa38eef682e13df733d4180b2fd6d5b655d11201ef24384af1ec88d3b79cf3092e1","ssdeep":"","tlshash":"6dc08038b5245424009d489e7277d75cfcf311987d925453c85fce5c5870ed50865cb4","size":176,"data":"","first_seen":"2023-03-26T09:44:15Z","last_seen":"2026-01-25T20:45:26.43665Z","times_seen":727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4e3c35bc300d581527e578fc0906ccc","sha1":"dcffeee70e292177e1096e90942553f4db9599cf","sha256":"523aa3b5dbd55cb310103e5883932ba2325dd1a97e448a673e3205cca142f630","sha512":"e5873fdab5e2290c17f1750f5686ca7294748d1869de6e8989142f1cd4497cff5bd15d317285f0239cd5d927a23f65ca938eb6bd49e97c815f08946bfc24c45d","ssdeep":"","tlshash":"51110e771714e0390b7209e1e5fecbb5e492701cf12845e8e946ded81e6accbce05989","size":1017,"data":"","first_seen":"2025-09-10T14:19:46.057703Z","last_seen":"2026-03-13T02:18:04.057274Z","times_seen":3551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5kk2jWGjdrIfcx0-DHaenF0y1z1Z76CKXZN-Ly5gXxe4W7ZHo_GqX8pjJetepyMLtuL9QzYHeLLNISTuIcsmBXRdEWjw","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"497770a2ab62f2aa5e9a92139301634d","sha1":"49c10647ffe35e24f84f743006f162ff0fe16399","sha256":"0663d282ac18b3e9d3e81725926a5310e5cae5e6954873f09b7ee193136fb5e4","sha512":"94a5141ed28656c5873a486aebfdda52790c8517426987bf905bf3c44163a25932ab17ac498215ddbea8e0e9887a8dabe6ed80acc950c993bdc61ecf977724b9","ssdeep":"","tlshash":"06a001b2053584208e6299509553bac4e187605dfd81819470265a89f3e15e7d144940","size":72,"data":"","first_seen":"2023-03-07T01:11:36Z","last_seen":"2026-04-28T14:48:36.10216Z","times_seen":23039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bafef60734571bc4a8a5b3fc3c7d851b","sha1":"a61df6fd739d79f63d5d400ccdc4ea169b2ca66c","sha256":"8f5af2d3f05489033b5cfc35a9b1f015746129e9d006ac0bc2271f2b7ef23ba4","sha512":"c7d188ada62ec59b685f60f6415d9702fafeed8f0404da182782cfd328e7294be7da9781db6f97abcab0d598b428c66b2b622204573e8ede8bf5d7883e6f6e56","ssdeep":"","tlshash":"041112b21604e0394e3229e1e2ffcab0e492740df16c85eca55adac41e7acc7cf14485","size":1088,"data":"","first_seen":"2025-09-25T05:10:57.15045Z","last_seen":"2025-10-01T06:15:41.829268Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d9371af0139cbe79e18334efcb5e5153","sha1":"b3647b1f90aa7992f119156b73d9f762b62550be","sha256":"56b424b5f16b07d474e665e811f1c0404bc49cea9425d432409c3e2ab78cee9f","sha512":"09a4cbc25ed45b211b44f35ddfa1bb56de90ade14711510dcd12e0eba5aa0929e2ef29271a03c0c0e68335f60141e8d4f8f78424c5f4327b0c8012b368aa856f","ssdeep":"","tlshash":"cba0026e198a687d4662309b04c721081ea35d18fe247e22059b82a425fc04e56b7915","size":62,"data":"","first_seen":"2025-09-18T12:15:08.219099Z","last_seen":"2025-09-29T05:46:15.212317Z","times_seen":3197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-28T16:23:18.923869Z","times_seen":100900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/Xhamster_video01","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e82f1e9f9f11642f57928c133254d46","sha1":"8081b6d8caac03e0cb9baa3b47a533ef15bbe4a1","sha256":"bd445588497980e8d05916507c7c4df59d0233242a35887c2a6dc8deeff2606c","sha512":"ed43eebd246bf235bf0bd99482461f735392b7fff46bac17bbdbeaeaeb9ebfc486218d3135032a6ca8033bc55ddfced2eafa348087270c1740be319a577b5374","ssdeep":"","tlshash":"f1b012ca0080100631f131a16f03b308346310f70c0c610055408b303b6831fda3bac4","size":94,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-04-26T03:01:52.547586Z","times_seen":1506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e59p0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7463d2026de653a0ffcb11e5ba4e493","sha1":"cf27f1948e4e2f1b1a2dbe6ca947eef1af5778c0","sha256":"b0c83a7529d618334a4959b9f8bfca28364a9d39172f4af54532c1d3b6317440","sha512":"9c0df909ba72026e65c1d1114a4f08e961738a73c1f4ffde7b4ef7d64a2615ca5d1634e49cceaf731f1d52624f2f197a04c16812cfc7fc2fc78d1898113e1fb4","ssdeep":"6144:fBX+ab1CBM1A/LYGURVGctA+vrUpc39tO:pu418VsGUXnc","tlshash":"b09409ce73d674665396e478903f018ba5bb28a2f44cc899f189cce42d74a9a4137f7c","size":421522,"data":"","first_seen":"2025-09-27T08:13:02.83857Z","last_seen":"2025-09-27T08:13:02.83857Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd128ad96a567b8a7e60f5a619970583","sha1":"b27c85666c26ff0fd0fb1f484d0f4e8a7e0b028d","sha256":"2bbe0ef3ec01af823e6098cd82b3e6c178d597b1fc43d17bdd9b4ebdf0428c4c","sha512":"a50febeea294ca718cf274799605da240323d67c0c4aca1b96e40456a0bf5721284f819b0fe2e5dd561d81660c6af64e52d6188d6a10826396ea34f81f1c1176","ssdeep":"12288:3R2zVLB7OhPcbGIq0ni4HRzKTs2lvxIxQ:h2zVL0P0+01HRzSlpIS","tlshash":"b0054ada75127aa1d322f4f91073104da33e9565d86c582db1d9caf12eb0c0cb1baeb7","size":816459,"data":"","first_seen":"2025-09-09T11:33:28.978904Z","last_seen":"2026-04-24T23:53:25.712954Z","times_seen":15827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34gjfm75zhp78.cloudfront.net/?mfjgd=792297","fqdn":"d34gjfm75zhp78.cloudfront.net","domain":"d34gjfm75zhp78.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.177","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8970be7f2d5d68d494b7f9fe96c6120","sha1":"c618bed6d1812196b00edafd3e1cfe0862daf88f","sha256":"0aff0302a0be0ab4de3dbcf019d84732a49bbf1fc3af63944e464020b6a57dd0","sha512":"80b0d95ddd35f61728c5b5124631a55e88e8c3eedf0f7104701a0b3fc560515d037c586d6c29ea14add0922d40ec095265dc50e1a7afd613e85ce08d3ee94542","ssdeep":"3072:XBUNPgDYzi07L02raYDbe+Y5UKS+7L0x2ip+Zc53+Zc0M8EQ:XuN4DUi07w2rnXKZU3+iA9","tlshash":"ad344cc9ba923469836374b540bf124ab23f5a69b8084dd4f496d4d07db8d0a437bfac","size":232342,"data":"","first_seen":"2025-09-27T08:13:02.878686Z","last_seen":"2025-09-27T08:13:02.878686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5kk2jWGjdrIfcx0-DHaenF0y1z1Z76CKXZN-Ly5gXxe4W7ZHo_GqX8pjJetepyMLtuL9QzYHeLLNISTuIcsmBXRdEWjw","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"380e20f6cc8c74f3ef1d2c1b306c9952","sha1":"9ea76a4fe0b1fb77f2a7b18d984b3606974a46a8","sha256":"7d6536095cc0ee2d01edf213055329091d85d1578d01163b5bc1ef1044b26a72","sha512":"a2394d811b01b55a80a90a88ec2a27b696578b4f468c4f7f5861d006794539b0867d0c94e830e8dd48c5a31341069a0be654943e77b656e1f3823e4cd96bbe59","ssdeep":"","tlshash":"cad022a3a6061cf75c26ac304876005a6c880823a02387fcbace7dc5afb0e017a00974","size":219,"data":"","first_seen":"2025-08-28T10:01:59.050539Z","last_seen":"2026-04-19T21:23:43.266211Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","size":17879,"data":"","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-04-28T02:30:29.793312Z","times_seen":6596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/js/ads.js?ver=6.6.4","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7e54b2d6fc22c0022b88b7125cbe03","sha1":"236c6e87760ac733a938cb1897d3a7cb6fc5c86c","sha256":"519204a7ecc3dc77ded647aa00567d6bf8c587049f389b1936914f7fab44c6fa","sha512":"9a1eaeb2af891a8b3b0ea6f02350e356371541154841b650a641533e89b254a1f357912b832209e5ea44ab99affbbd12fcedc7cbdaff7d1a0ee7b92e2715f4a6","ssdeep":"","tlshash":"9ed02273187812b40a2e25cb50f99b943e332190f29318ac4cfcce29832cc804836ec3","size":218,"data":"","first_seen":"2023-09-09T21:18:47Z","last_seen":"2026-04-27T14:02:58.422012Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/Xhamster_video01","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3517c00c0302917f0d625697794950d0","sha1":"88d5a939881a65061f720631fa6b00ab3a340480","sha256":"f69958150f769ba3d9f5a03f9f3abc1db09556cd7ceae521c881441d968a5dc3","sha512":"ec1ff820fe5f3e2b22bae33fb412bfb64f3285c4b5b07129343574db400eed3f1b7ba9b703610fab555eb10284c910399538fd3a0c54e22098d2dffe649b1eb8","ssdeep":"","tlshash":"25515942f7cd649950df013e7bdba588382e20337e02ae65fcc852050f2db7649e8659","size":3115,"data":"","first_seen":"2025-09-07T08:24:46.983704Z","last_seen":"2025-09-27T08:13:02.886998Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/Xhamster_video01","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c159e948d0dffa35c9fa1b2f57e2ad9","sha1":"d41386efc96b16ecfc3084773de1948a0ff82c82","sha256":"e8d10f795b22263c50a3befe98f0e0abfe14bcb696997504215c4736f4fe4813","sha512":"c9851977c0a35ac53673e07b6dbfe4ebc107286d5c0e1b9ac6083931be392fa7ddda8129118c4af4e603be6c589ec76ef16deac875d47e70bf853a97b259e7e5","ssdeep":"","tlshash":"dfe0ab299ce706384cf63a841038ca3930f83ca0aaa3d067925cc86ccd39fc50c10aed","size":424,"data":"","first_seen":"2024-01-29T00:33:00Z","last_seen":"2026-01-25T20:45:26.450454Z","times_seen":509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4fae42a4d5d3bdfc3bfd8e098b2ff40d","sha1":"de5a8352a8f7cb22ab31218f5c1f6ea2276a7feb","sha256":"131ca492501261dfb3f5ca98e182fc5647c3e5be9cc9f32beba1ee8f8062bf2e","sha512":"0dfcbdf7543f19c7541dda87141a672380fa8054abfe9150e3625eb15e158e66cd59a5be2b3a18174bfa9f90d58b9c44e58820b27fc489f9b24eeff05186e93d","ssdeep":"384:MhS3TxIiDWPLQuC5uVsGVXGOIERLKQG55ajw9TnaeA3vc7T:M3dqOhWQIW0aeIk7T","tlshash":"fc82d8ddb6a3b16982a3b0a000bf1549e1bb7d92ed443c4cf149c6d43f7098a943bf5a","size":18953,"data":"","first_seen":"2025-09-18T12:15:08.212752Z","last_seen":"2025-09-29T05:46:15.170181Z","times_seen":3183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/Xhamster_video01","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73497a37c3561adbd8ce84e4f017b368","sha1":"9193ae73cb3dd2833be8c942714d5544bfb628c9","sha256":"9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351","sha512":"b265a65f30fa9ffac3fb7ffca07326823466dcd67a238a47091a497c7f2b2d13e09603cbb8e85dce136efeb8bbb9d246e4894d6f672dededc47c88a1a85d9a5b","ssdeep":"","tlshash":"c150000003000003030c0000c000000000000003000030c000c0000000000000000000","size":9,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-28T02:30:30.148387Z","times_seen":5433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/Xhamster_video01","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8778634f5adadc488517177bfdaf85e3","sha1":"873e175d3b00dbc9ce8c8ee4c4f82e1037e70d57","sha256":"aa2c2288323f9ab150e675aad9bf0e431c133a2f4e331a2d26804c6f1c330170","sha512":"b7599dd928eb073461a24404c9bf4c83ef4633b3520e13a2b5258a598449f84cab931321ebb4a2c69f15fc6e0abbbf33486e3f637f9a7b1a0f9435a6f6ca6cea","ssdeep":"","tlshash":"e6e0722a30e2003a02b354ba23f7a10a2522370fc48e8f127e9fc4a62f34ca5040660c","size":310,"data":"","first_seen":"2023-10-14T22:14:02Z","last_seen":"2026-04-25T00:47:54.828781Z","times_seen":741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/Xhamster_video01","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e184bfc16742a56e09ca9777514964f2","sha1":"461267d400815dfb218867081390c7ced7753021","sha256":"e886d99ca68d33f12c02707bf8efe9716392a4470d200ac052e7cde3a9df799b","sha512":"9c684298c4488377380de4b21c8299c9a130ad2a04664a64fd8748773fc0afe43b3a0f87c6efa49812a486443c1492bda9224a9f7a724e35372a9adba291ef13","ssdeep":"","tlshash":"1121113da65de8f22f5080a87540b8d2daa01376f71d1a4bc5a85d2e0bcb5d9410bc59","size":1178,"data":"","first_seen":"2025-09-16T23:31:20.888229Z","last_seen":"2025-10-05T12:17:55.53358Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5Q2KMLS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b811ce67c95c0c680d193291299f23aa","sha1":"e3c3bcad1612fbd58326bf4472fe5b2672c0541c","sha256":"7902c6ec1ad0fb79fa50920bf9285daebc6c9c8b98ed14a18c1d6c8a792bd247","sha512":"b8bbb69e5545e06c615ddb87c4e231fe7b5380750435493c1b200a5d9bc6ec53b781269e87ef12c72f58780643a643711d9bc6ee4894d6b646f9f733f7377a13","ssdeep":"3072:GIuRY/h5bfaSg302Q3mk/BM1LvToMGadYLAvp37VVGctA+vakxrtClFl:i+aTCBM1A/LWRVGctA+vr/C5","tlshash":"696408cdb3d6b46243a2a478503f118bb57b68d2f44cc899f185d8d42e74aaa4237f7c","size":314356,"data":"","first_seen":"2025-09-27T08:13:02.835888Z","last_seen":"2025-09-27T08:13:02.835888Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd128ad96a567b8a7e60f5a619970583","sha1":"b27c85666c26ff0fd0fb1f484d0f4e8a7e0b028d","sha256":"2bbe0ef3ec01af823e6098cd82b3e6c178d597b1fc43d17bdd9b4ebdf0428c4c","sha512":"a50febeea294ca718cf274799605da240323d67c0c4aca1b96e40456a0bf5721284f819b0fe2e5dd561d81660c6af64e52d6188d6a10826396ea34f81f1c1176","ssdeep":"12288:3R2zVLB7OhPcbGIq0ni4HRzKTs2lvxIxQ:h2zVL0P0+01HRzSlpIS","tlshash":"b0054ada75127aa1d322f4f91073104da33e9565d86c582db1d9caf12eb0c0cb1baeb7","size":816459,"data":"","first_seen":"2025-09-09T11:33:28.978904Z","last_seen":"2026-04-24T23:53:25.712954Z","times_seen":15827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kedasensiblemother.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","fqdn":"kedasensiblemother.org","domain":"kedasensiblemother.org","tld":"org"},"ip":{"addr":"54.240.174.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1ba75c29897386604aa8a9d666d5d34","sha1":"17a5b9e31ffde90ea494cd61921f51ae31d179b8","sha256":"f66b56cbe84259b0a8c76527a3dcd94264c608dc19780d3508d6368f73dd4bed","sha512":"1ba59a6b8c542136fae6187e3c377bb2a7ff649be4bd4408fc7ef18a053c8da6edbfc3b40806b8d4183d7ab08ba99a7c5a05219540cc995568450b237e138000","ssdeep":"","tlshash":"f351018d34f3608282f26025412fb5a6fa385aa5874cca14863d97bcbd715ee6327f4c","size":2997,"data":"","first_seen":"2025-09-27T08:13:02.891053Z","last_seen":"2025-09-27T08:13:02.891053Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/Xhamster_video01","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e47b957b5bfb6afe476c10feb2518c6e","sha1":"c5a2fff9c3717a41e0474a853d5cbbaf8ff0818a","sha256":"949ddb39192218706ef99abf441d6a5ddf7a6f69d093fe12a0d81b956516e11f","sha512":"0186ffc3786970eb68b10839fca21b64ee35314484e795f028cef433e759bc81208dfcdf3894618eff115decce138d20e579cedbc029a91823ae45f8dffa2449","ssdeep":"","tlshash":"9ee028de74511c7570ed05f633b1a1187183560cb8091c22cdfdcd1428285d74c134cc","size":341,"data":"","first_seen":"2024-02-01T23:09:53Z","last_seen":"2026-04-25T00:47:54.828118Z","times_seen":558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0df5eb1d8b2725905f856ce34af6ae82","sha1":"0ef2f0ceee06e9d3a0f7613b861fa3429aa4f7ec","sha256":"ed7934c7139f8277f4e0fc5389dc2a7d08d036be0fd23a533fcf5bdefabb15d4","sha512":"7933bad6857edbe9f09d1a93f6c40e252f67b606a63b9ff92392ec0cf202f332f4d16d92dc93347f8f4dfecc9eea159ab3bd27afa57c6c73e7a353dd14c66d47","ssdeep":"24576:h+R4L7RoA3m1EvwJof0aAAZiJPsjc1ycvoAtpKYBokLRiWqEM8doH/Hw5:ff0apwycvBtq2","tlshash":"630517ddb16275a1132370f68063904c576ea429d8ce0d6f75e999f03ff080a61baeb7","size":817575,"data":"","first_seen":"2025-09-24T07:29:46.20947Z","last_seen":"2026-04-13T01:03:10.296809Z","times_seen":6866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b20fc2d0b35c960b637091b79b879572","sha1":"44f4fdf499507b3899e0f4f2acfa70e9ec18ea41","sha256":"22c1fcd3e958dd487e01517e95ad4ad83432891cf7615751282a7c8a7564ccd2","sha512":"11fd078073cb8b3ca3f8a06a5c2dffe00797fbfbf7333135851a7b2900f2c6c218f2bab972ea1cc14ccca53c0fc8e824215e8456711bffc28e06919072ff6c57","ssdeep":"","tlshash":"fa70000c2c082002822a302000ab0008c8220080a00008020288f8802e3080e0802808","size":22,"data":"","first_seen":"2025-09-18T12:15:08.207573Z","last_seen":"2025-09-29T05:46:15.186014Z","times_seen":3195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"41ac834cb0177a3758bf2817b03569b4","sha1":"576bb3060381e72a7042c0cb9f95456254f38f9d","sha256":"233f6314ac2c7c61dd5e89855e94d3cc32cdd02985cdd8ec448d101312504e1f","sha512":"516355e1b7c83dab2c6888c0414f59d2c934af384fb9b0b326775998fb9ebc6eabb10fc3f92b384d7ccf989f887d5d58f3d5dd3b20f132fa5b61e8eabb74988e","ssdeep":"1536:LJDEAyfKa+1tmov+0vg2CZsOSv25kjV1gSAJCMBCX:FhnmMlQ2XIjCA4","tlshash":"f163be37f35334cbef3f9b5107e2a6a912bea298214705cd117f10e50a2aadb66741dc","size":67915,"data":"","first_seen":"2025-09-27T08:13:02.893256Z","last_seen":"2025-09-27T08:13:02.893256Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"174426b4881c071a11c5e8de98ea080b","sha1":"fd6b8be38459225e343854e54bdd3ce9091126a6","sha256":"78434fd0f4ad43f097cf15abf0b3e0cea8cb19ae2e0e779a7542428746342baa","sha512":"6517429e7e96406e74b05dcc5d3679a6c569714e754965719669afaefb4a4a3f60f6ed8a84c81b580697e6adccee7354755dfd9a32dcde6d45c0f6e6d1938d26","ssdeep":"384:HhS3TxIiDWPLQuC5uVsGVXGOIERLKSG55ajw9TnaeA3vc7X:H3dqOhWSIW0aeIk7X","tlshash":"7aa2d7ddf6a2716982a3b0b000bf0149e2bb7d96ed443c4ce149c2d43f7059a947bf5a","size":21834,"data":"","first_seen":"2025-09-27T08:13:02.895583Z","last_seen":"2025-09-27T08:13:02.895583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"undefined/ampHVEYLCCQ5eQtXJXIzGAZ6cXQsT3USIlleID4gB11yLi4aXX96JQYFMjAgGAUpIGgEDzNxdCwIJhAAAQt1MwoyDSgaEBISHhUAMAwSBQg9PysWCTs4HhsCBjwEEAQBKAU4KSAuLA0lMgIVGgcCHiIXLh48BTMHJyU9YCw9EyQ+EgISCxUAMDMTOHYsKBZtECwdAhIFWz8GBSEFJwQzPjs+FWQMLissEQMNLCMXBxokEDoiODgRPAgrWxUQDh0sIRUHOwwALBQ9PTANJSwsHTYRPA0hAgNfCAw8FD09P2wEMlsNMhI8Hj0FEAYzAhUiOz4rJzcsLGoOJC0CcwEQExodAzE8IRBkACQrdgULLjszNQVaXyYYISQ/EDguMysBBic+PCgWBw0jJhAQCSYCZHcLDnYCHzIvHhYXAl8RAxdMADQ7KBpXKWUuOjwMPgUi","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.999Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ampHVEYLCCQ5eQtXJXIzGAZ6cXQsT3USIlleID4gB11yLi4aXX96JQYFMjAgGAUpIGgEDzNxdCwIJhAAAQt1MwoyDSgaEBISHhUAMAwSBQg9PysWCTs4HhsCBjwEEAQBKAU4KSAuLA0lMgIVGgcCHiIXLh48BTMHJyU9YCw9EyQ+EgISCxUAMDMTOHYsKBZtECwdAhIFWz8GBSEFJwQzPjs+FWQMLissEQMNLCMXBxokEDoiODgRPAgrWxUQDh0sIRUHOwwALBQ9PTANJSwsHTYRPA0hAgNfCAw8FD09P2wEMlsNMhI8Hj0FEAYzAhUiOz4rJzcsLGoOJC0CcwEQExodAzE8IRBkACQrdgULLjszNQVaXyYYISQ/EDguMysBBic+PCgWBw0jJhAQCSYCZHcLDnYCHzIvHhYXAl8RAxdMADQ7KBpXKWUuOjwMPgUi HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gleecheeftoo.net/500/5775069?excludes=\u0026oaid=0802511971944fecfa40c232207f24e3\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.736.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=3\u0026pl=https%3A%2F%2Fshrinkme.top%2FXhamster_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"gleecheeftoo.net","domain":"gleecheeftoo.net","tld":"net"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gleecheeftoo.net","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:22:37 GMT","end":"Sat, 18 Oct 2025 05:22:36 GMT"},"fingerprint":{"sha1":"65:2E:92:B8:48:B4:CA:65:C3:E8:34:F0:21:65:4B:00:AE:CF:9C:59","sha256":"52:EC:DF:1B:83:18:E4:8F:68:1C:EC:0E:02:BC:4E:67:E6:B0:14:72:39:3B:D8:23:5F:0A:81:DD:2A:AE:2E:7F"}}},"request":{"raw":"GET /500/5775069?excludes=\u0026oaid=0802511971944fecfa40c232207f24e3\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.736.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=3\u0026pl=https%3A%2F%2Fshrinkme.top%2FXhamster_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: gleecheeftoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nCookie: OAID=0802511971944fecfa40c232207f24e3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:12:36 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: ad112d6100aa436bef3fe575464fad88\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://shrinkme.top\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=0802511971944fecfa40c232207f24e3; expires=Sun, 27 Sep 2026 08:12:36 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1966,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"b69934afa3f0d017696021012a9ab7f3","sha1":"e6c241b9c9f6636f7e11ec47ac2400e9e1491365","sha256":"7b2540ebc6f214382c9595d7f74beba4db48658b030a5767767580992ed1ea18","sha512":"bdc3512da95d3a0567c201937627f4822e35615492ba3033f00b258430d3ae62a9fc2f7907028d43db39737c56a169d14755970287f4c51093a4210eae278bfa","ssdeep":"","tlshash":"a5413b1fda007f0b83d020ce311a3eb4dab3973665e89df15d2b4074e2a75c1aa60063","first_seen":"2025-09-27T08:13:02.814948Z","last_seen":"2025-09-27T08:13:02.814948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/modern_theme/build/js/script.min.js?ver=6.6.4","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 16:03:02 GMT","end":"Sat, 22 Nov 2025 17:01:26 GMT"},"fingerprint":{"sha1":"27:D3:10:9E:D8:04:EE:98:42:19:07:DB:4A:5E:A3:3F:3F:E2:EB:19","sha256":"E6:E0:6D:B0:91:EC:0B:E9:96:4F:E8:43:B9:16:38:2C:52:00:88:9B:FB:97:58:D7:C3:9F:A2:F9:DD:B3:2A:9A"}}},"request":{"raw":"GET /modern_theme/build/js/script.min.js?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/Xhamster_video01\r\nCookie: lang=en_US; AppSession=e2c857d9196046fb7ecb266c369d2297; refXhamster_video01=ZmZhNmVjZmE2NDY0YjlmMzgyZDI0MTgyY2E4ZTdmZGY0Zjk4MDRjMTY0YzM5MWJmNDE2OGM5MzM3ZDkzNzNjNxqS8h%2FxKZCBapIvQUAKYIC3bdUTJ%2F9flhYNDKvqub9D; csrfToken=d82a9817dca8fe5a174f755b0c4e1365145ec0d00e736f71e922483ed24fae758054feba3c981f2314bd70fc1095675663e77f0a3cc5e1b9003c19de77c9f3bc; app_visitor=Q2FrZQ%3D%3D.YWU0NDljNzUxMGUyMTU2NDM5YTAzYjBiMTQ5ZDdhYzYzYWRhYzZmMGYxYWNjYThhZTdiMzdlNDM2OGU2OTFmOfWHKLNCwUz6u4Fs3Od4e9a0b2hIWqaPODA4HT%2FDMfoKJ8IjdJoR1sPsTeVuN%2F1vuFXqa9g9fJJF1AbTjdaEFYZ%2BA%2FprntxwNoSbwe632J7B\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4HIwQzV3PCdbeWZaxuYPPQ7OUytoOqVCW8784685HzGTHcMQ6XbUbcdbcGA0AL811N70cVDguY1S1Sj9NooKUCweWbWfyf6zFwA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"38157-63ec26415fea7-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 17 Oct 2025 06:32:14 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 870020\r\ncf-cache-status: HIT\r\ncf-ray: 9859896ecf38b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229719,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"3c977f00919d1eb2e57a7f0fd3bd884b","sha1":"b09601a36fa50e61ce9d6ac0a34c6a894a8f81c8","sha256":"5619e29a6688312b15a2cc2d693083dd00198691b1a3918b64dee75c9eeef7c9","sha512":"f22ddcb1b2fffb6b5ac4f3557dabe92ac7c18dc96ab331f610161d82a9791b10f922e62ee378e9e4d456c8575f489b07207007a7ca299ad1a7d3e75c269c9584","ssdeep":"3072:IeeIygP3fulzhsz8jlvaDioQ47GKSDYFtVbmwpcYUpQVJ:IPIy6PultluPQ47GKSAmwpZwQVJ","tlshash":"53241a89b2a1742147ab71f5417f120bf236142ee409842cb56cd9e96fb8d8d623bf7c","first_seen":"2025-09-16T23:31:20.872491Z","last_seen":"2026-04-27T14:02:58.523901Z","times_seen":203,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/5775069","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"172.67.205.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gloaphoo.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:57:16 GMT","end":"Sun, 23 Nov 2025 09:20:44 GMT"},"fingerprint":{"sha1":"D2:01:62:8C:1B:4E:6C:C5:9E:D4:FB:C6:01:2E:24:2F:F9:8D:5B:9D","sha256":"44:7C:2E:24:AF:09:60:CA:DF:B4:AE:48:AD:31:AD:E8:32:72:C1:C3:73:3C:83:88:CA:7F:A8:6C:65:CA:FE:4D"}}},"request":{"raw":"GET /401/5775069 HTTP/1.1\r\nHost: gloaphoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2BGA1AezTVTbnMwEDb9eLZUBZV%2BkhpxRj8lEN68wN71mq9qDfhY8xKiYOSG4oV16K16o%2FzL84Cp5VSt%2F3zHtWUWnGlLJHQuiUBQ%3D\"}]}\r\ncf-ray: 98598972c82256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168022,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"313ed9241e5235962e74fd8caec4f2c2","sha1":"7dda0fe5e1847960b063ccf1e38a20ef64d079aa","sha256":"bc3037e9126699808f781f35a65fd377f54a7363c3a8922928894ac08dd514eb","sha512":"27e7a57287bdf79baa77b989eb3fa5b50055672a3cedf5679134b32194c318104421ce2a41d71945d3ed1918115bb0252b4d0b26297b55c620dd460c854f7f8b","ssdeep":"3072:vw+08/+ugr0a9bQee57WSSybf0AEq7WYV9u5OVny6/PKSWxyScqe//kAoUBEMY:vwfjWCybdh7b9u5OVy6/PKSWx6m7tMY","tlshash":"c1f3fcc9768174562a63b030522fad5fb92b8e20585f8d04e166f0e93e3945ee353efc","first_seen":"2025-09-26T23:04:00.881219Z","last_seen":"2025-09-28T22:15:47.028712Z","times_seen":20,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":177,"dns":9,"connect":1,"send":0,"wait":77,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","date":"2025-09-27T08:12:36.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 348491\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Sep 2025 00:51:12 GMT\r\nexpires: Wed, 23 Sep 2026 00:51:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 372084\r\nlast-modified: Mon, 08 Sep 2025 21:04:05 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":816459,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (561)","md5":"bd128ad96a567b8a7e60f5a619970583","sha1":"b27c85666c26ff0fd0fb1f484d0f4e8a7e0b028d","sha256":"2bbe0ef3ec01af823e6098cd82b3e6c178d597b1fc43d17bdd9b4ebdf0428c4c","sha512":"a50febeea294ca718cf274799605da240323d67c0c4aca1b96e40456a0bf5721284f819b0fe2e5dd561d81660c6af64e52d6188d6a10826396ea34f81f1c1176","ssdeep":"12288:3R2zVLB7OhPcbGIq0ni4HRzKTs2lvxIxQ:h2zVL0P0+01HRzSlpIS","tlshash":"b0054ada75127aa1d322f4f91073104da33e9565d86c582db1d9caf12eb0c0cb1baeb7","first_seen":"2025-09-09T11:33:28.978904Z","last_seen":"2026-04-24T23:53:25.712954Z","times_seen":15827,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","date":"2025-09-27T08:12:36.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 12:58:05 GMT\r\nexpires: Tue, 22 Sep 2026 12:58:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 414871\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:21:03.520798Z","times_seen":538733,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","date":"2025-09-27T08:12:36.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:35:26 GMT","end":"Mon, 01 Dec 2025 08:35:25 GMT"},"fingerprint":{"sha1":"DC:6A:60:8C:C0:40:AE:3F:C2:80:91:27:95:8D:8F:A2:56:10:26:3A","sha256":"1D:7B:A4:51:FC:B3:F8:EB:12:3A:31:08:98:9A:E0:B6:7A:56:98:99:AD:74:86:FC:A6:8B:3A:1B:1A:42:F1:3F"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 27 Sep 2025 08:12:36 GMT\r\ndate: Sat, 27 Sep 2025 08:12:36 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"3aac324f43a9b264f3c52be33c5ed82a","sha1":"8c7d9b709eeaeb4f497bc105cc390f0b8f949dc7","sha256":"4146d7a47b9408873d4af038f29c953f4f2c40c819bcb6a36699c5d7b0458a89","sha512":"30ee639f49343292f43e3dd87c09ce18f23e949be093f99bd7ea73cb6d7e5b8ff9bbb5e371221894111ae77e21e295da5aec0351fbd40659f0f5fa25037aa78a","ssdeep":"","tlshash":"72b0126f0660c8380c004203c8b7e7b8f003e135d770c0f0c12d4fd845204635580d00","first_seen":"2025-09-10T14:19:30.460795Z","last_seen":"2026-02-27T05:03:35.04733Z","times_seen":12425,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5kk2jWGjdrIfcx0-DHaenF0y1z1Z76CKXZN-Ly5gXxe4W7ZHo_GqX8pjJetepyMLtuL9QzYHeLLNISTuIcsmBXRdEWjw","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:35:26 GMT","end":"Mon, 01 Dec 2025 08:35:25 GMT"},"fingerprint":{"sha1":"DC:6A:60:8C:C0:40:AE:3F:C2:80:91:27:95:8D:8F:A2:56:10:26:3A","sha256":"1D:7B:A4:51:FC:B3:F8:EB:12:3A:31:08:98:9A:E0:B6:7A:56:98:99:AD:74:86:FC:A6:8B:3A:1B:1A:42:F1:3F"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5kk2jWGjdrIfcx0-DHaenF0y1z1Z76CKXZN-Ly5gXxe4W7ZHo_GqX8pjJetepyMLtuL9QzYHeLLNISTuIcsmBXRdEWjw HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:12:36 GMT\r\ncontent-security-policy: script-src 'nonce-_rBETGEfiMWK09nycYrd0Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7626,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a19121db7bf82779a5c359a6dfd17728","sha1":"a37d728257071509168ee59afb5f54c408be5e1a","sha256":"6eefc3bb6e84520fc03023aebd056d2f3b6303bfe8c1b2c57db8d29d07816dff","sha512":"ede595ca2fb4288503046045d7b388887652836e2a91112ef48c4140b809c699f3dd334a54de9345ffc80197e40157df8da1d63f147cfb014af27a94b6a2ee6d","ssdeep":"192:NjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpKS4j:M+tI/y6yekn+f8QZRtpGKuBjdu+S4j","tlshash":"e4f1bc90081a9410ab930cd273cf3e36ed4f61127146c8b6abfe68acede7d27925574d","first_seen":"2025-09-27T08:13:02.829984Z","last_seen":"2025-09-27T08:13:02.829984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:54 GMT","end":"Mon, 01 Dec 2025 08:37:53 GMT"},"fingerprint":{"sha1":"28:1C:E7:95:EC:8D:32:9E:63:9A:72:B2:8D:47:E5:13:F7:CA:5E:18","sha256":"52:99:CC:AA:BC:C4:15:12:9C:2B:FA:D7:97:2A:C4:D3:7D:B0:5C:E0:02:26:3C:8D:B2:4B:BE:89:1A:70:D6:31"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 27 Sep 2025 08:12:35 GMT\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"a4e3c35bc300d581527e578fc0906ccc","sha1":"dcffeee70e292177e1096e90942553f4db9599cf","sha256":"523aa3b5dbd55cb310103e5883932ba2325dd1a97e448a673e3205cca142f630","sha512":"e5873fdab5e2290c17f1750f5686ca7294748d1869de6e8989142f1cd4497cff5bd15d317285f0239cd5d927a23f65ca938eb6bd49e97c815f08946bfc24c45d","ssdeep":"","tlshash":"51110e771714e0390b7209e1e5fecbb5e492701cf12845e8e946ded81e6accbce05989","first_seen":"2025-09-10T14:19:46.057703Z","last_seen":"2026-03-13T02:18:04.057274Z","times_seen":3551,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":77,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 26 Sep 2025 00:32:08 GMT\r\nexpires: Sat, 26 Sep 2026 00:32:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 114027\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-28T16:23:47.527173Z","times_seen":356747,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5Q2KMLS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtm.js?id=GTM-5Q2KMLS HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\nexpires: Sat, 27 Sep 2025 08:12:35 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 27 Sep 2025 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 106661\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314356,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5198)","md5":"b811ce67c95c0c680d193291299f23aa","sha1":"e3c3bcad1612fbd58326bf4472fe5b2672c0541c","sha256":"7902c6ec1ad0fb79fa50920bf9285daebc6c9c8b98ed14a18c1d6c8a792bd247","sha512":"b8bbb69e5545e06c615ddb87c4e231fe7b5380750435493c1b200a5d9bc6ec53b781269e87ef12c72f58780643a643711d9bc6ee4894d6b646f9f733f7377a13","ssdeep":"3072:GIuRY/h5bfaSg302Q3mk/BM1LvToMGadYLAvp37VVGctA+vakxrtClFl:i+aTCBM1A/LWRVGctA+vr/C5","tlshash":"696408cdb3d6b46243a2a478503f118bb57b68d2f44cc899f185d8d42e74aaa4237f7c","first_seen":"2025-09-27T08:13:02.835888Z","last_seen":"2025-09-27T08:13:02.835888Z","times_seen":1,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":83,"dns":1,"connect":15,"send":0,"wait":48,"receive":53,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e59p0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e59p0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\nexpires: Sat, 27 Sep 2025 08:12:35 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140353\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":421522,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"a7463d2026de653a0ffcb11e5ba4e493","sha1":"cf27f1948e4e2f1b1a2dbe6ca947eef1af5778c0","sha256":"b0c83a7529d618334a4959b9f8bfca28364a9d39172f4af54532c1d3b6317440","sha512":"9c0df909ba72026e65c1d1114a4f08e961738a73c1f4ffde7b4ef7d64a2615ca5d1634e49cceaf731f1d52624f2f197a04c16812cfc7fc2fc78d1898113e1fb4","ssdeep":"6144:fBX+ab1CBM1A/LYGURVGctA+vrUpc39tO:pu418VsGUXnc","tlshash":"b09409ce73d674665396e478903f018ba5bb28a2f44cc899f189cce42d74a9a4137f7c","first_seen":"2025-09-27T08:13:02.83857Z","last_seen":"2025-09-27T08:13:02.83857Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5kk2jWGjdrIfcx0-DHaenF0y1z1Z76CKXZN-Ly5gXxe4W7ZHo_GqX8pjJetepyMLtuL9QzYHeLLNISTuIcsmBXRdEWjw","date":"2025-09-27T08:12:36.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 348491\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Sep 2025 00:51:12 GMT\r\nexpires: Wed, 23 Sep 2026 00:51:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 372084\r\nlast-modified: Mon, 08 Sep 2025 21:04:05 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":816459,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (561)","md5":"bd128ad96a567b8a7e60f5a619970583","sha1":"b27c85666c26ff0fd0fb1f484d0f4e8a7e0b028d","sha256":"2bbe0ef3ec01af823e6098cd82b3e6c178d597b1fc43d17bdd9b4ebdf0428c4c","sha512":"a50febeea294ca718cf274799605da240323d67c0c4aca1b96e40456a0bf5721284f819b0fe2e5dd561d81660c6af64e52d6188d6a10826396ea34f81f1c1176","ssdeep":"12288:3R2zVLB7OhPcbGIq0ni4HRzKTs2lvxIxQ:h2zVL0P0+01HRzSlpIS","tlshash":"b0054ada75127aa1d322f4f91073104da33e9565d86c582db1d9caf12eb0c0cb1baeb7","first_seen":"2025-09-09T11:33:28.978904Z","last_seen":"2026-04-24T23:53:25.712954Z","times_seen":15827,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parashparyro.com/dGlpSldbVgo5ahdaOx0OGAEtGwA2PTAPETkzPxAkJlkvJAFGDk8+PhBUXnNlRlBebCcdDVR7cQcdCD4iB1RcbD4aDwZ3cQJUWGRkQEdafHlCTxx3Zk1ZX39lQltQf2VNXlp9cQAZCC1qRU8ZPiMYVFh9YkxQX3pgQV9Qfmc","fqdn":"parashparyro.com","domain":"parashparyro.com","tld":"com"},"ip":{"addr":"172.67.147.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parashparyro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 09:26:17 GMT","end":"Fri, 07 Nov 2025 10:24:46 GMT"},"fingerprint":{"sha1":"32:C6:41:72:32:7B:A7:C6:2C:35:1E:3A:D5:70:8F:39:E4:A3:1D:09","sha256":"D2:C7:33:5D:A8:F9:66:BE:B5:67:9E:B3:44:BC:B2:8B:43:94:6A:85:E6:1E:44:C6:1A:C9:13:30:F1:EA:CA:7E"}}},"request":{"raw":"POST /dGlpSldbVgo5ahdaOx0OGAEtGwA2PTAPETkzPxAkJlkvJAFGDk8+PhBUXnNlRlBebCcdDVR7cQcdCD4iB1RcbD4aDwZ3cQJUWGRkQEdafHlCTxx3Zk1ZX39lQltQf2VNXlp9cQAZCC1qRU8ZPiMYVFh9YkxQX3pgQV9Qfmc HTTP/1.1\r\nHost: parashparyro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUwTvtwrkUCy76zCm8Bsy7f20p7FmTjifNboObiBJlBh%2BBrXsbEPbxGinFA6EpIczw5ytsj%2FiqpkKFlwxxqPMeMvyWpvLGaQGq6KHEUsehg%3D\"}]}\r\ndate: Sat, 27 Sep 2025 08:12:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9859897aeba976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/90c3285604e00c4164892d7a1826e68e.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:24:25 GMT","end":"Tue, 16 Dec 2025 05:21:54 GMT"},"fingerprint":{"sha1":"4D:D9:7B:8E:2E:B1:DF:4E:5A:71:CF:29:D6:3A:1D:7E:AA:3D:5A:A2","sha256":"88:8A:05:87:6E:69:15:70:D5:BC:48:78:60:76:1A:E9:45:82:CE:D7:2D:0B:89:EB:6B:09:58:DC:93:D4:79:E6"}}},"request":{"raw":"GET /www/images/90c3285604e00c4164892d7a1826e68e.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 80908\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 18:50:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67c74b7c-13c0c\"\r\nexpires: Sun, 28 Sep 2025 03:44:00 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 16116\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SqOE40%2BmPLkaY%2Bdab1Q8WGOWP9OQzNp3Cqr1oIUIInBsTbQdtu4eHAhUu1OWksHAKlhajdSRHprfzoGCUJXYRlyYC7dBrijGkb%2F78zXcGHvq\"}]}\r\ncf-ray: 985989781db8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"90c3285604e00c4164892d7a1826e68e","sha1":"b115037bae8351aa4a926cf201cfb2896fd3aa96","sha256":"2ff3d019e9979db4f9d1c06b008bb30b936fe253f7bb8e18f06effff4723e91d","sha512":"85bd67ba2ab7f7bfa3e026c32201978cb70a6884ef45a618e5e9e73dc9255736e0adf78354f3f2532b09f417a083ea9b51974f0f88b18345f844e27cc7457948","ssdeep":"1536:CPnriJu5PltTrmZCo8RM4ZhfKIfnZSMv6TkToMR8uniLjqvMJhCSyKNVIQiuuIy7:CmWvrmZMR9UIfzXoMR9iXbJhC0vXep","tlshash":"c98312687f4cf20194e9102af1ef9d2bc70cede768a78697b44501757a0fb48ed88068","first_seen":"2025-03-06T17:14:06.8849Z","last_seen":"2025-12-08T04:45:03.0663Z","times_seen":487,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":45,"dns":3,"connect":2,"send":0,"wait":5,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 16:03:02 GMT","end":"Sat, 22 Nov 2025 17:01:26 GMT"},"fingerprint":{"sha1":"27:D3:10:9E:D8:04:EE:98:42:19:07:DB:4A:5E:A3:3F:3F:E2:EB:19","sha256":"E6:E0:6D:B0:91:EC:0B:E9:96:4F:E8:43:B9:16:38:2C:52:00:88:9B:FB:97:58:D7:C3:9F:A2:F9:DD:B3:2A:9A"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: shrinkme.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/Xhamster_video01\r\nCookie: lang=en_US; AppSession=e2c857d9196046fb7ecb266c369d2297; refXhamster_video01=ZmZhNmVjZmE2NDY0YjlmMzgyZDI0MTgyY2E4ZTdmZGY0Zjk4MDRjMTY0YzM5MWJmNDE2OGM5MzM3ZDkzNzNjNxqS8h%2FxKZCBapIvQUAKYIC3bdUTJ%2F9flhYNDKvqub9D; csrfToken=d82a9817dca8fe5a174f755b0c4e1365145ec0d00e736f71e922483ed24fae758054feba3c981f2314bd70fc1095675663e77f0a3cc5e1b9003c19de77c9f3bc; app_visitor=Q2FrZQ%3D%3D.YWU0NDljNzUxMGUyMTU2NDM5YTAzYjBiMTQ5ZDdhYzYzYWRhYzZmMGYxYWNjYThhZTdiMzdlNDM2OGU2OTFmOfWHKLNCwUz6u4Fs3Od4e9a0b2hIWqaPODA4HT%2FDMfoKJ8IjdJoR1sPsTeVuN%2F1vuFXqa9g9fJJF1AbTjdaEFYZ%2BA%2FprntxwNoSbwe632J7B\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:34 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 27 Sep 2025 09:00:34 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pSNZU4IP1jRAtRS%2FjyAH54UeRyQyEvYtYF1dsG1ubjs3CMrkcmLMHlr9MNLF66%2FNog9HDY39b2maHncMWrt6oj0ZKK7fjkNsOtyoVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9859896c1feddfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-28T16:23:29.027104Z","times_seen":316462,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/js/ads.js?ver=6.6.4","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 16:03:02 GMT","end":"Sat, 22 Nov 2025 17:01:26 GMT"},"fingerprint":{"sha1":"27:D3:10:9E:D8:04:EE:98:42:19:07:DB:4A:5E:A3:3F:3F:E2:EB:19","sha256":"E6:E0:6D:B0:91:EC:0B:E9:96:4F:E8:43:B9:16:38:2C:52:00:88:9B:FB:97:58:D7:C3:9F:A2:F9:DD:B3:2A:9A"}}},"request":{"raw":"GET /js/ads.js?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/Xhamster_video01\r\nCookie: lang=en_US; AppSession=e2c857d9196046fb7ecb266c369d2297; refXhamster_video01=ZmZhNmVjZmE2NDY0YjlmMzgyZDI0MTgyY2E4ZTdmZGY0Zjk4MDRjMTY0YzM5MWJmNDE2OGM5MzM3ZDkzNzNjNxqS8h%2FxKZCBapIvQUAKYIC3bdUTJ%2F9flhYNDKvqub9D; csrfToken=d82a9817dca8fe5a174f755b0c4e1365145ec0d00e736f71e922483ed24fae758054feba3c981f2314bd70fc1095675663e77f0a3cc5e1b9003c19de77c9f3bc; app_visitor=Q2FrZQ%3D%3D.YWU0NDljNzUxMGUyMTU2NDM5YTAzYjBiMTQ5ZDdhYzYzYWRhYzZmMGYxYWNjYThhZTdiMzdlNDM2OGU2OTFmOfWHKLNCwUz6u4Fs3Od4e9a0b2hIWqaPODA4HT%2FDMfoKJ8IjdJoR1sPsTeVuN%2F1vuFXqa9g9fJJF1AbTjdaEFYZ%2BA%2FprntxwNoSbwe632J7B\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:34 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 170\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"da-63ec26415ef07-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Mon, 27 Oct 2025 05:53:19 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 8351\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2BgXHhuDT%2BqniLYj2xloIUjYaWQiOd95TvMVI0TmhZfeg5w4oCOD%2B8MAeK49fx0NIwVSWNPuMg2lFTLsmdT0zffBDYs7wY0FpX0JrA%3D%3D\"}]}\r\ncf-ray: 9859896c1feedfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"9e7e54b2d6fc22c0022b88b7125cbe03","sha1":"236c6e87760ac733a938cb1897d3a7cb6fc5c86c","sha256":"519204a7ecc3dc77ded647aa00567d6bf8c587049f389b1936914f7fab44c6fa","sha512":"9a1eaeb2af891a8b3b0ea6f02350e356371541154841b650a641533e89b254a1f357912b832209e5ea44ab99affbbd12fcedc7cbdaff7d1a0ee7b92e2715f4a6","ssdeep":"","tlshash":"9ed02273187812b40a2e25cb50f99b943e332190f29318ac4cfcce29832cc804836ec3","first_seen":"2023-09-09T21:18:47Z","last_seen":"2026-04-27T14:02:58.422012Z","times_seen":471,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","date":"2025-09-27T08:12:36.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42466\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 16:20:59 GMT\r\nexpires: Tue, 22 Sep 2026 16:20:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 402697\r\nlast-modified: Mon, 08 Sep 2025 21:04:05 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82706,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"784ba6f9fdbccecb61d7663a8d102179","sha1":"7900330fc9aacd2213ee121d1f1b31d3d2ccfb24","sha256":"645e3c4782296838f3ac89abc14ed0eff434b6180c6fdc06c0f01fcf6ab199d4","sha512":"ed8331b400816017ca931d9b9525687a44160d4420f3ccd1d26921ba567a57efd215df0ca65a663bc7c22ed20cddb73b5247f7705fe91a71be6e0a4a8341bdfc","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIjCtthXwW5LGx7:1GRFauOxLA/+IcTOjLXQ","tlshash":"1f838f7338513b39fc2b9b616186b9edf21cc423e5514bfab6457a20c3db19a8253b07","first_seen":"2025-09-10T14:19:30.495152Z","last_seen":"2026-04-24T23:53:25.757891Z","times_seen":13021,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O","date":"2025-09-27T08:12:36.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 348491\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Sep 2025 00:51:12 GMT\r\nexpires: Wed, 23 Sep 2026 00:51:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 372084\r\nlast-modified: Mon, 08 Sep 2025 21:04:05 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":816459,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (561)","md5":"bd128ad96a567b8a7e60f5a619970583","sha1":"b27c85666c26ff0fd0fb1f484d0f4e8a7e0b028d","sha256":"2bbe0ef3ec01af823e6098cd82b3e6c178d597b1fc43d17bdd9b4ebdf0428c4c","sha512":"a50febeea294ca718cf274799605da240323d67c0c4aca1b96e40456a0bf5721284f819b0fe2e5dd561d81660c6af64e52d6188d6a10826396ea34f81f1c1176","ssdeep":"12288:3R2zVLB7OhPcbGIq0ni4HRzKTs2lvxIxQ:h2zVL0P0+01HRzSlpIS","tlshash":"b0054ada75127aa1d322f4f91073104da33e9565d86c582db1d9caf12eb0c0cb1baeb7","first_seen":"2025-09-09T11:33:28.978904Z","last_seen":"2026-04-24T23:53:25.712954Z","times_seen":15827,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kedasensiblemother.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","fqdn":"kedasensiblemother.org","domain":"kedasensiblemother.org","tld":"org"},"ip":{"addr":"54.240.174.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kedasensiblemother.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4A:EF:C0:D8:E0:21:7B:52:27:DE:18:C8:62:98:3E:44:55:C3:FC:CF","sha256":"A2:49:5E:3B:46:B0:42:3D:9A:BB:CE:07:4D:D6:57:F2:4C:37:65:EA:8C:21:45:A7:72:C2:3F:EE:33:F4:60:8A"}}},"request":{"raw":"GET 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 HTTP/1.1\r\nHost: kedasensiblemother.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1216\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=M6BIqc3tOtSfztBiYqxAJ96xQ6RfOeCuRJvMktn3MopNjoccBXJ/c8PsrLvHh5XFS9ZKm2MwudiBiFZssqsMvRjoL1lslSyKZMuRlFN4ifDudROO4LgKzfqYnBI0; Expires=Sat, 04 Oct 2025 08:12:35 GMT; Path=/\nAWSALBCORS=M6BIqc3tOtSfztBiYqxAJ96xQ6RfOeCuRJvMktn3MopNjoccBXJ/c8PsrLvHh5XFS9ZKm2MwudiBiFZssqsMvRjoL1lslSyKZMuRlFN4ifDudROO4LgKzfqYnBI0; Expires=Sat, 04 Oct 2025 08:12:35 GMT; Path=/; SameSite=None\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: N5sgk3UZ1iTdNH5oEUYDyCpjG7cEv-TxaemmxSf-FqsxPnutoKT-MA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":3068,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3068), with no line terminators","md5":"623420911a7efb4992c91fd42c60d143","sha1":"33b4a03ab5d8efb3f75e37563cf946877c029d05","sha256":"2a579df029ae9b741a95c4fe39b1d61df72c3dd8eababba08c2690b3616f2d3b","sha512":"45747c6e8e1907d0bea848348ef536af472268171f1888fc787d8ef57b3546e35fe7f2478768c321558ce324c7d489ee6de2f4660e0324ea514d81839ef89b25","ssdeep":"","tlshash":"7651f18d34f3608282f26025052bb59afa385aa5874ccb14863d96bcbd715ee6317f4c","first_seen":"2025-09-27T08:13:02.844893Z","last_seen":"2025-09-27T08:13:02.844893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":88,"dns":4,"connect":8,"send":0,"wait":112,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:55 GMT","end":"Mon, 01 Dec 2025 08:37:54 GMT"},"fingerprint":{"sha1":"D6:CA:D9:3E:AA:21:3F:46:BD:DD:2C:06:2D:20:A1:D8:5F:AB:21:B2","sha256":"6C:68:26:80:36:50:C5:E4:B6:7C:60:D3:B6:13:10:1E:1B:6B:08:94:61:55:0A:E6:3D:BC:7E:1F:F0:DD:59:5A"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\ncontent-security-policy-report-only: frame-ancestors 'self';report-uri https://csp.withgoogle.com/csp/frame-ancestors/a00d54fdef4a77536baac3725d1409f8\r\nset-cookie: __Host-GAPS=1:oSSjN_Tr0_P8-DNv7t8WohBOxOrLiQ:b_PrL_mWbOIkkm6p; Expires=Mon, 27-Sep-2027 08:12:35 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-100467965:1758960755271395\u0026ifkv=AfYwgwVMbM-43HAMfK8atURqA2uFQY3zuV2Er-B-0Jx9IgO8KmpJNHCQmX7AqHEsMWQMnDmVBL_8kQ\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: script-src 'nonce-w47KCIwr1gdjMF6Owx73Fw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":77,"dns":0,"connect":21,"send":0,"wait":34,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:55 GMT","end":"Mon, 01 Dec 2025 08:37:54 GMT"},"fingerprint":{"sha1":"D6:CA:D9:3E:AA:21:3F:46:BD:DD:2C:06:2D:20:A1:D8:5F:AB:21:B2","sha256":"6C:68:26:80:36:50:C5:E4:B6:7C:60:D3:B6:13:10:1E:1B:6B:08:94:61:55:0A:E6:3D:BC:7E:1F:F0:DD:59:5A"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:VQl6tRDJpgVdbxZZFuUl5lqk94F29w:ItIhaefjeuR8TG6T; Expires=Mon, 27-Sep-2027 08:12:35 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-1792437092:1758960755270387\u0026ifkv=AfYwgwXL9MveA-ZfZ5qH0p6p96dL0N9-bJzR5MFFV2Tk60KSoVhric41tS8zEaaw0Ob_qsXkNl0Bnw\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-uSCivnZzA6m2VwGZGtQtTw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":76,"dns":0,"connect":20,"send":0,"wait":34,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/favicon-3.webp","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"172.67.193.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 04:57:15 GMT","end":"Thu, 11 Dec 2025 05:55:55 GMT"},"fingerprint":{"sha1":"3D:E0:1B:85:88:16:EB:B4:29:27:8D:E7:7C:10:EA:07:33:FE:08:34","sha256":"1C:7A:2F:AC:AB:91:01:3B:74:01:1E:76:81:F2:B7:3D:10:13:CE:51:3F:F8:5D:31:0B:CD:8F:B9:82:D9:14:2D"}}},"request":{"raw":"GET /favicon-3.webp HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12694\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"3196-63ec202aa9a96\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 13:19:29 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 931984\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mSS9GK7ysA8jIFM6rJFxo5K2gccu6%2F1%2FWxfKmXKd3ljQX4kbhl6mFWlJPI9uHXFyB8jaZSyEKRX3wHX7xyRO6cS13zZkKGFM0A%3D%3D\"}]}\r\ncf-ray: 9859896fdba1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"103971bd196afd0ca8f772c9680c9e4c","sha1":"8340e472b9426202e0745d04956c468366256994","sha256":"663cf4358e3e1fdbb64e946bbf381b04db3654d54fe7ba5d8cd47463b733425b","sha512":"4052713576aee93c2f5ee7f6f1de47ad290ee90ec87278407e178fad46af9a64968d551d9bbb3a5c2841ec361c5bfbdb55264f308978ef84529b5513e38fbb78","ssdeep":"384:DNqHAE4/4a2bemzV6wsEwdJn6f4Te4wg0v5M6:evyoDHsEC6gwHvC","tlshash":"5142c02b5dbfc8fb91a62f6f643f0366ccfbbd6b52d82a15460048646095120fc93b5e","first_seen":"2023-05-08T21:09:43Z","last_seen":"2026-04-27T14:02:58.455708Z","times_seen":931,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-100467965%3A1758960755271395\u0026hl=en\u0026ifkv=AfYwgwUXiimVSTavMPfvmkUX2bbOdcRd_BmWjKyFYwh92AlK4TpKaqTR9y7QuMnEjTWKSGRBOtaofw\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-100467965%3A1758960755271395\u0026hl=en\u0026ifkv=AfYwgwUXiimVSTavMPfvmkUX2bbOdcRd_BmWjKyFYwh92AlK4TpKaqTR9y7QuMnEjTWKSGRBOtaofw\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-uxd4sh1neNi9Xpv1pbo28A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.z7CL5ywoSX0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gleecheeftoo.net/mtg/","fqdn":"gleecheeftoo.net","domain":"gleecheeftoo.net","tld":"net"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gleecheeftoo.net","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:22:37 GMT","end":"Sat, 18 Oct 2025 05:22:36 GMT"},"fingerprint":{"sha1":"65:2E:92:B8:48:B4:CA:65:C3:E8:34:F0:21:65:4B:00:AE:CF:9C:59","sha256":"52:EC:DF:1B:83:18:E4:8F:68:1C:EC:0E:02:BC:4E:67:E6:B0:14:72:39:3B:D8:23:5F:0A:81:DD:2A:AE:2E:7F"}}},"request":{"raw":"OPTIONS /mtg/ HTTP/1.1\r\nHost: gleecheeftoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://shrinkme.top/\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:12:36 GMT\r\ncontent-length: 0\r\nallow: OPTIONS, POST\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://shrinkme.top\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.ink/Xhamster_video01","fqdn":"shrinkme.ink","domain":"shrinkme.ink","tld":"ink"},"ip":{"addr":"104.21.68.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-27T08:12:33.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 11:05:16 GMT","end":"Sun, 16 Nov 2025 12:03:52 GMT"},"fingerprint":{"sha1":"80:F1:B9:62:D1:F8:87:6A:4A:A5:90:90:CA:FD:9B:44:49:10:C7:CA","sha256":"53:1E:5C:48:66:C2:EA:E0:DB:68:48:8E:70:62:92:93:3D:0A:C7:EA:51:06:8F:5B:53:B4:03:97:F1:AF:D2:A9"}}},"request":{"raw":"GET /Xhamster_video01 HTTP/1.1\r\nHost: shrinkme.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 27 Sep 2025 08:12:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://shrinkme.top/Xhamster_video01\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5nJi6GA8MrHBzle3uzN2BwPR5OFAuSb6za2RjCVhnDW2YZwNdQgxrenBkHZzFZwjbtkIuwtLAk7jjAdwNUKiYQC0rA8GSpEZ%2BZc%3D\"}]}\r\ncf-ray: 98598968bac856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27030,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":186,"dns":1,"connect":1,"send":0,"wait":106,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 26 Sep 2025 00:32:08 GMT\r\nexpires: Sat, 26 Sep 2026 00:32:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 114026\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-28T16:23:47.527173Z","times_seen":356747,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":99,"dns":0,"connect":16,"send":0,"wait":29,"receive":11,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-1792437092%3A1758960755270387\u0026hl=en\u0026ifkv=AfYwgwWAeoqnWsBVfIvXIAkxoFCNrNldYZlzEG7gVoD0opk7kRhWTe875mji84jWXZJr5n2YVjaFoA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-1792437092%3A1758960755270387\u0026hl=en\u0026ifkv=AfYwgwWAeoqnWsBVfIvXIAkxoFCNrNldYZlzEG7gVoD0opk7kRhWTe875mji84jWXZJr5n2YVjaFoA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-k_gT3dUD3QG6b6YFveJ_iw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.z7CL5ywoSX0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=c632e1b1-1b1f-4675-b753-b15a4f7655d9","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=c632e1b1-1b1f-4675-b753-b15a4f7655d9 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1411\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 27 Sep 2025 08:12:36 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://shrinkme.top\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-04-28T15:39:27.896905Z","times_seen":56467,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":82,"dns":3,"connect":27,"send":0,"wait":27,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","date":"2025-09-27T08:12:36.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Sep 2025 17:58:48 GMT\r\nexpires: Thu, 02 Oct 2025 17:58:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 137628\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-28T16:23:43.033857Z","times_seen":575941,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:42.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Sep 2025 08:12:42 GMT\r\ndate: Sat, 27 Sep 2025 08:12:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0674bb1b4725131d0ccedb9f2119d9fa","sha1":"354de89c766f790720b9b55a28ce76bc2f2878e8","sha256":"37e93534f20120328ca625c0011682d90e4e4f4e702b0f90baf22d0c1f7fc8b4","sha512":"db19ac78c34f52d076a4b91cc180acb24697a1c8385c2d848ea0363ca684177c9f01de0a7115c165c8a01d4ea1441e86c98c8ae32292c15d0bd373500c52db23","ssdeep":"768:DFAFRFYFKFf4FQLFDFXFRKNyEfSQv3rgXU/9ffQiqGr8vkSfEQNVR1GJuofOQjLh:EcvMo1","tlshash":"32c2fba108174000978358e223cebf34fe4f92507141d0b5abfdab6bedcbc6652693ad","first_seen":"2025-09-09T04:12:34.447807Z","last_seen":"2025-11-18T23:33:55.824058Z","times_seen":1117,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/dyyehuis8.png","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"172.67.193.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 04:57:15 GMT","end":"Thu, 11 Dec 2025 05:55:55 GMT"},"fingerprint":{"sha1":"3D:E0:1B:85:88:16:EB:B4:29:27:8D:E7:7C:10:EA:07:33:FE:08:34","sha256":"1C:7A:2F:AC:AB:91:01:3B:74:01:1E:76:81:F2:B7:3D:10:13:CE:51:3F:F8:5D:31:0B:CD:8F:B9:82:D9:14:2D"}}},"request":{"raw":"GET /dyyehuis8.png HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 13368\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"3438-63ec202aa9a96\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 14:07:49 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 929085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e43PGaKqAo%2FwEzxnXybFF5IovHNDL4FsCKP9BPYmChI6ptOYJsfg1g8zBkL%2FzDOi4jRKl6to45jj99nKqOFyBh8l3Xq4JwNuSA%3D%3D\"}]}\r\ncf-ray: 9859896dba76569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 154, 8-bit colormap, non-interlaced","md5":"f293daf49bd343c38ae34614fa67a414","sha1":"b53a204e0c385f2fa62fb57de5ba26dfc6920d3a","sha256":"c2baa90aafc484c676f4d9365c6f37b41ed50a5f21bc07eab9ad57ddb546f48d","sha512":"b713ac065171c0103eb9dd3791bc92a068b833a7ff7b3aef31c077a32b929592893eb29f079d34cf587c4ab2f5a8d6c2e16493cc1218d71863de8a1afecfc23d","ssdeep":"384:s6/H0Od7dqWkScyrJHwNa3XiIlO3bhs9Sdmjtc8V:s6/HXd7d4SzrJHwNa31mbhs1jtjV","tlshash":"b652c053f695783d21994a7a857d0ba903e0ee653e2cb4d30688de7c859a0143c0dfab","first_seen":"2023-10-14T22:14:02Z","last_seen":"2026-04-27T14:02:58.432458Z","times_seen":874,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-2.2.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-2.2.4.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-14e4a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\nage: 4637238\r\nx-served-by: cache-lga21935-LGA, cache-osl6529-OSL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 92205, 63315\r\nx-timer: S1758960755.015277,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 29811\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-28T16:06:09.021614Z","times_seen":274098,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":12,"dns":4,"connect":1,"send":0,"wait":1,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-1792437092:1758960755270387\u0026ifkv=AfYwgwXL9MveA-ZfZ5qH0p6p96dL0N9-bJzR5MFFV2Tk60KSoVhric41tS8zEaaw0Ob_qsXkNl0Bnw","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:55 GMT","end":"Mon, 01 Dec 2025 08:37:54 GMT"},"fingerprint":{"sha1":"D6:CA:D9:3E:AA:21:3F:46:BD:DD:2C:06:2D:20:A1:D8:5F:AB:21:B2","sha256":"6C:68:26:80:36:50:C5:E4:B6:7C:60:D3:B6:13:10:1E:1B:6B:08:94:61:55:0A:E6:3D:BC:7E:1F:F0:DD:59:5A"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-1792437092:1758960755270387\u0026ifkv=AfYwgwXL9MveA-ZfZ5qH0p6p96dL0N9-bJzR5MFFV2Tk60KSoVhric41tS8zEaaw0Ob_qsXkNl0Bnw HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:W2o4guC2wlpjezQRgkmWx1Vh1R-mww:qbo-gOo-SXsZb75m;Path=/;Expires=Mon, 27-Sep-2027 08:12:35 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-1792437092%3A1758960755270387\u0026hl=en\u0026ifkv=AfYwgwWAeoqnWsBVfIvXIAkxoFCNrNldYZlzEG7gVoD0opk7kRhWTe875mji84jWXZJr5n2YVjaFoA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: script-src 'nonce-Bikq7qRwj2DYeITk8ldLdw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 419\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://shrinkme.top\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802511971944fecfa40c232207f24e3; expires=Sun, 27 Sep 2026 08:12:35 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9859897408c256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bbb5973f3593c9e4cf8fc3254cc9dade","sha1":"04f405001fb866268dca6d850cc20a7c1476bfd4","sha256":"8eb0d01ba519663e8902f56a7514091e0188b56c6fd8555b002676b718501b52","sha512":"8ea2000133498ce8e37793f61d96f9485be0196115d341783b38d425c0538e3bf1261d7499f81fca488770424c05abc36f2ef632a14c0634aedcecb9c6f536e3","ssdeep":"","tlshash":"54a022b0002c2cf8808030022e02ca02800002803c088e0ac0e0c0000c8b20c802220c","first_seen":"2025-09-27T08:13:02.866073Z","last_seen":"2025-09-27T08:13:02.866073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":44,"dns":4,"connect":2,"send":0,"wait":41,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:35:26 GMT","end":"Mon, 01 Dec 2025 08:35:25 GMT"},"fingerprint":{"sha1":"DC:6A:60:8C:C0:40:AE:3F:C2:80:91:27:95:8D:8F:A2:56:10:26:3A","sha256":"1D:7B:A4:51:FC:B3:F8:EB:12:3A:31:08:98:9A:E0:B6:7A:56:98:99:AD:74:86:FC:A6:8B:3A:1B:1A:42:F1:3F"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 27 Sep 2025 08:12:35 GMT\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1088,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1088), with no line terminators","md5":"bafef60734571bc4a8a5b3fc3c7d851b","sha1":"a61df6fd739d79f63d5d400ccdc4ea169b2ca66c","sha256":"8f5af2d3f05489033b5cfc35a9b1f015746129e9d006ac0bc2271f2b7ef23ba4","sha512":"c7d188ada62ec59b685f60f6415d9702fafeed8f0404da182782cfd328e7294be7da9781db6f97abcab0d598b428c66b2b622204573e8ede8bf5d7883e6f6e56","ssdeep":"","tlshash":"041112b21604e0394e3229e1e2ffcab0e492740df16c85eca55adac41e7acc7cf14485","first_seen":"2025-09-25T05:10:57.15045Z","last_seen":"2025-10-01T06:15:41.829268Z","times_seen":14,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":76,"dns":3,"connect":15,"send":0,"wait":35,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gleecheeftoo.net/401/5775069?oo=1\u0026sw_version=v1.736.0-s\u0026oaid=0802511971944fecfa40c232207f24e3\u0026st=true","fqdn":"gleecheeftoo.net","domain":"gleecheeftoo.net","tld":"net"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gleecheeftoo.net","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:22:37 GMT","end":"Sat, 18 Oct 2025 05:22:36 GMT"},"fingerprint":{"sha1":"65:2E:92:B8:48:B4:CA:65:C3:E8:34:F0:21:65:4B:00:AE:CF:9C:59","sha256":"52:EC:DF:1B:83:18:E4:8F:68:1C:EC:0E:02:BC:4E:67:E6:B0:14:72:39:3B:D8:23:5F:0A:81:DD:2A:AE:2E:7F"}}},"request":{"raw":"POST /401/5775069?oo=1\u0026sw_version=v1.736.0-s\u0026oaid=0802511971944fecfa40c232207f24e3\u0026st=true HTTP/1.1\r\nHost: gleecheeftoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2601\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:12:36 GMT\r\ncontent-type: application/json\r\nx-trace-id: 3e4f1cc9da3daebffcfc5248f30e29ff\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://shrinkme.top\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=0802511971944fecfa40c232207f24e3; expires=Sun, 27 Sep 2026 08:12:36 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2189,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"46e37c784bf9811e6612974050c35449","sha1":"d5ea8e674d9eae14e55c33b141a5adb8077a2a0c","sha256":"971ec88d998df2430e855221821c13386d26827d1c19b2eeb6d150456fe24042","sha512":"e11c475981a46f1026d7d3369888fa1ad39a9a01d0b809ee1454b54813385602d6b072abb105a5d35ae2c9d1f920e91edd8399e82e2c5af0024410c6949b3b3d","ssdeep":"","tlshash":"524112089d28157e82ee5ab6ec0b6d475ab9021f7a0c752ee7454d1b70ebce003eb10b","first_seen":"2025-09-27T08:13:02.868221Z","last_seen":"2025-09-27T08:13:02.868221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":88,"dns":5,"connect":27,"send":0,"wait":30,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /recaptcha/releases/XrIDux0s7SoNe6_IHkjGC92W/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 348612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 16:35:48 GMT\r\nexpires: Tue, 22 Sep 2026 16:35:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 02:03:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 401808\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":817575,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (765)","md5":"0df5eb1d8b2725905f856ce34af6ae82","sha1":"0ef2f0ceee06e9d3a0f7613b861fa3429aa4f7ec","sha256":"ed7934c7139f8277f4e0fc5389dc2a7d08d036be0fd23a533fcf5bdefabb15d4","sha512":"7933bad6857edbe9f09d1a93f6c40e252f67b606a63b9ff92392ec0cf202f332f4d16d92dc93347f8f4dfecc9eea159ab3bd27afa57c6c73e7a353dd14c66d47","ssdeep":"24576:h+R4L7RoA3m1EvwJof0aAAZiJPsjc1ycvoAtpKYBokLRiWqEM8doH/Hw5:ff0apwycvBtq2","tlshash":"630517ddb16275a1132370f68063904c576ea429d8ce0d6f75e999f03ff080a61baeb7","first_seen":"2025-09-24T07:29:46.20947Z","last_seen":"2026-04-13T01:03:10.296809Z","times_seen":6866,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=c632e1b1-1b1f-4675-b753-b15a4f7655d9","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=c632e1b1-1b1f-4675-b753-b15a4f7655d9 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 451\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 27 Sep 2025 08:12:36 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://shrinkme.top\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":90,"dns":0,"connect":27,"send":0,"wait":27,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parashparyro.com/NnZLbzQZSSgcCXgzf1thYS8JCUNCGh4uYgMyJiFldEUsLW1gP20bXVJLfFYGBE9zSURfEnZeDBAFPw5AQwV2XhJfGC0ACRAAdl4aBlh5QQEQA3ZeEkIGKggJB1A7G0BaS3pYAQ5PfV8DA0JyVgQ","fqdn":"parashparyro.com","domain":"parashparyro.com","tld":"com"},"ip":{"addr":"172.67.147.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parashparyro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 09:26:17 GMT","end":"Fri, 07 Nov 2025 10:24:46 GMT"},"fingerprint":{"sha1":"32:C6:41:72:32:7B:A7:C6:2C:35:1E:3A:D5:70:8F:39:E4:A3:1D:09","sha256":"D2:C7:33:5D:A8:F9:66:BE:B5:67:9E:B3:44:BC:B2:8B:43:94:6A:85:E6:1E:44:C6:1A:C9:13:30:F1:EA:CA:7E"}}},"request":{"raw":"GET /NnZLbzQZSSgcCXgzf1thYS8JCUNCGh4uYgMyJiFldEUsLW1gP20bXVJLfFYGBE9zSURfEnZeDBAFPw5AQwV2XhJfGC0ACRAAdl4aBlh5QQEQA3ZeEkIGKggJB1A7G0BaS3pYAQ5PfV8DA0JyVgQ HTTP/1.1\r\nHost: parashparyro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kEQpvU3qnuKJs5q0VKIeL7EcM%2FJiTeIXrgs57RWqkl%2Bp3WJmmBrIlqQkwTVB3xPJPOFsn5Pq0EYnZq%2BwjwUCA%2BJWB1WyYF8tJN17DSTH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9859896f0b72568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":46,"dns":0,"connect":2,"send":0,"wait":118,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-100467965:1758960755271395\u0026ifkv=AfYwgwVMbM-43HAMfK8atURqA2uFQY3zuV2Er-B-0Jx9IgO8KmpJNHCQmX7AqHEsMWQMnDmVBL_8kQ","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:55 GMT","end":"Mon, 01 Dec 2025 08:37:54 GMT"},"fingerprint":{"sha1":"D6:CA:D9:3E:AA:21:3F:46:BD:DD:2C:06:2D:20:A1:D8:5F:AB:21:B2","sha256":"6C:68:26:80:36:50:C5:E4:B6:7C:60:D3:B6:13:10:1E:1B:6B:08:94:61:55:0A:E6:3D:BC:7E:1F:F0:DD:59:5A"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-100467965:1758960755271395\u0026ifkv=AfYwgwVMbM-43HAMfK8atURqA2uFQY3zuV2Er-B-0Jx9IgO8KmpJNHCQmX7AqHEsMWQMnDmVBL_8kQ HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:J-gGU1Clqr1KMjDa5DL33H4X9N7txg:uNPUTj8fBFMtDt2M;Path=/;Expires=Mon, 27-Sep-2027 08:12:35 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-100467965%3A1758960755271395\u0026hl=en\u0026ifkv=AfYwgwUXiimVSTavMPfvmkUX2bbOdcRd_BmWjKyFYwh92AlK4TpKaqTR9y7QuMnEjTWKSGRBOtaofw\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce--G5hbQ4JhYk7O_crkcEXvg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 416\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/Xhamster_video01","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-27T08:12:34.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 16:03:02 GMT","end":"Sat, 22 Nov 2025 17:01:26 GMT"},"fingerprint":{"sha1":"27:D3:10:9E:D8:04:EE:98:42:19:07:DB:4A:5E:A3:3F:3F:E2:EB:19","sha256":"E6:E0:6D:B0:91:EC:0B:E9:96:4F:E8:43:B9:16:38:2C:52:00:88:9B:FB:97:58:D7:C3:9F:A2:F9:DD:B3:2A:9A"}}},"request":{"raw":"GET /Xhamster_video01 HTTP/1.1\r\nHost: shrinkme.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-robots-tag: noindex, nofollow\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LvwFyvuY1OG0k4YfXORmDTHaFH7HAQi5DaRKUZAOZWD1%2BAmTgtYSn3Eejn4oA6R90uGbcFrs%2FZar387u%2FuT4Cbn%2FPAoFBKnOzNsFlw%3D%3D\"}]}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: lang=en_US; Path=/; Max-Age=31104000; Expires=Tue, 22 Sep 2026 08:12:31 GMT\nAppSession=e2c857d9196046fb7ecb266c369d2297; HttpOnly; Path=/\nrefXhamster_video01=ZmZhNmVjZmE2NDY0YjlmMzgyZDI0MTgyY2E4ZTdmZGY0Zjk4MDRjMTY0YzM5MWJmNDE2OGM5MzM3ZDkzNzNjNxqS8h%2FxKZCBapIvQUAKYIC3bdUTJ%2F9flhYNDKvqub9D; HttpOnly; Path=/; Max-Age=300; Expires=Sat, 27 Sep 2025 08:17:31 GMT\ncsrfToken=d82a9817dca8fe5a174f755b0c4e1365145ec0d00e736f71e922483ed24fae758054feba3c981f2314bd70fc1095675663e77f0a3cc5e1b9003c19de77c9f3bc; HttpOnly; Path=/\napp_visitor=Q2FrZQ%3D%3D.YWU0NDljNzUxMGUyMTU2NDM5YTAzYjBiMTQ5ZDdhYzYzYWRhYzZmMGYxYWNjYThhZTdiMzdlNDM2OGU2OTFmOfWHKLNCwUz6u4Fs3Od4e9a0b2hIWqaPODA4HT%2FDMfoKJ8IjdJoR1sPsTeVuN%2F1vuFXqa9g9fJJF1AbTjdaEFYZ%2BA%2FprntxwNoSbwe632J7B; HttpOnly; Path=/; Max-Age=86400; Expires=Sun, 28 Sep 2025 08:12:31 GMT\r\ncf-ray: 9859896add5bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27030,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1142), with CRLF, LF line terminators","md5":"117222d33a58427805f9ca7309fdc0d9","sha1":"c9ae676b37131a6e3879b017f31560ccd214f056","sha256":"4351106485ebe75c09075d4184d5da53f751a3a9d51e711e59e42a8576cf79b2","sha512":"142bcb19c040a590cae125e17bf96c73ba3cd9874343f7c4460f440b905fdb1b4d2712eff6c3e8fd4b61f65f84fdec914e9a8f64c140e71d3380f22fb90c1195","ssdeep":"768:MPrXhEzZlfn7cjr5x7NG5TE9xGj/LqMnZpQ4G:AXqlfn7cjrH7UTES/BZpQ4G","tlshash":"59c2fa27bdc95417016340e4b6b3f70de82a5417e6068e61f9dc82592fb2e954c67f4c","first_seen":"2025-09-27T08:13:02.870366Z","last_seen":"2025-09-27T08:13:02.870366Z","times_seen":1,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":226,"dns":54,"connect":2,"send":0,"wait":119,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,700%7CMuli:300,300i,400","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css?family=Montserrat:400,700%7CMuli:300,300i,400 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Sep 2025 08:12:34 GMT\r\ndate: Sat, 27 Sep 2025 08:12:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7099,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2bc70e2429cfe4bf248107fb862aa803","sha1":"6591a064c29035df798b717f644d313e8aec28a4","sha256":"3c940a7938e39750cc9bd218d44d73c3f19bfbdac74937e87516f025bceb6188","sha512":"27acffe1a2d499342cc08f1e079cba61ee93aa2cbe7af7c12107dac9a1b6fe3b112f5ec848cc471c23eaf7a7ab1a74e10c38884126a82b46676d6964a53af79f","ssdeep":"192:qRa7h5OsuQRD780ORurnlmlJ8lxqLBmL8XL4mWH:+SVnbnQ8Tw0","tlshash":"20e1d151042be500a7872cca63cf7e31de4e7165b494c535affe1ca8aca6c366321b6d","first_seen":"2025-09-09T04:58:13.382403Z","last_seen":"2026-04-28T01:28:19.325432Z","times_seen":264,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":74,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/logo-sm.webp","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"172.67.193.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 04:57:15 GMT","end":"Thu, 11 Dec 2025 05:55:55 GMT"},"fingerprint":{"sha1":"3D:E0:1B:85:88:16:EB:B4:29:27:8D:E7:7C:10:EA:07:33:FE:08:34","sha256":"1C:7A:2F:AC:AB:91:01:3B:74:01:1E:76:81:F2:B7:3D:10:13:CE:51:3F:F8:5D:31:0B:CD:8F:B9:82:D9:14:2D"}}},"request":{"raw":"GET /logo-sm.webp HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31236\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"7a04-63ec202aaaa36\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Thu, 24 Sep 2026 07:36:02 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 261390\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ud20tNvxhX87iKhz1RbA24iD%2BWAKUTB%2FjmfM1fepLQLobtXCs0vXmaa1sYlLtZ%2FCWBcOf4POQ5IR7x4iEyJAYeCCoW4EyzLKxw%3D%3D\"}]}\r\ncf-ray: 9859896dba74569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53658e8a7ae22169e5b89744bfa9f9cc","sha1":"157a684bdf8e3be19cbfabc80cf3a53bfbeaa175","sha256":"9777428de88c524584f0133c3c0d9becf5a3840597eb16dc873bbc29b9a0bf58","sha512":"591c520934512496bfd28831a5c5039c29146034d03a97c7a4c04a153388f21480e1d59e4528c7161ee696a33025a3727ecda3bf05b7dd1b18fdf45f7b4b5b91","ssdeep":"768:Wh2yCYVpdbxAIf8/1AIdV1EeWkgoZ8NJ1/+qK:Wh2yCsbxxOPqeAouDE","tlshash":"c1e2f19b2b3f558af7137380622828d5c15dfcb5605a8b38083bfa278755b554ae30bf","first_seen":"2023-04-21T09:30:41Z","last_seen":"2026-04-27T14:02:58.471291Z","times_seen":897,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":254,"dns":63,"connect":2,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 16:03:02 GMT","end":"Sat, 22 Nov 2025 17:01:26 GMT"},"fingerprint":{"sha1":"27:D3:10:9E:D8:04:EE:98:42:19:07:DB:4A:5E:A3:3F:3F:E2:EB:19","sha256":"E6:E0:6D:B0:91:EC:0B:E9:96:4F:E8:43:B9:16:38:2C:52:00:88:9B:FB:97:58:D7:C3:9F:A2:F9:DD:B3:2A:9A"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: shrinkme.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/Xhamster_video01\r\nCookie: lang=en_US; AppSession=e2c857d9196046fb7ecb266c369d2297; refXhamster_video01=ZmZhNmVjZmE2NDY0YjlmMzgyZDI0MTgyY2E4ZTdmZGY0Zjk4MDRjMTY0YzM5MWJmNDE2OGM5MzM3ZDkzNzNjNxqS8h%2FxKZCBapIvQUAKYIC3bdUTJ%2F9flhYNDKvqub9D; csrfToken=d82a9817dca8fe5a174f755b0c4e1365145ec0d00e736f71e922483ed24fae758054feba3c981f2314bd70fc1095675663e77f0a3cc5e1b9003c19de77c9f3bc; app_visitor=Q2FrZQ%3D%3D.YWU0NDljNzUxMGUyMTU2NDM5YTAzYjBiMTQ5ZDdhYzYzYWRhYzZmMGYxYWNjYThhZTdiMzdlNDM2OGU2OTFmOfWHKLNCwUz6u4Fs3Od4e9a0b2hIWqaPODA4HT%2FDMfoKJ8IjdJoR1sPsTeVuN%2F1vuFXqa9g9fJJF1AbTjdaEFYZ%2BA%2FprntxwNoSbwe632J7B\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:34 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 27 Sep 2025 09:00:34 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1dQtm7Ns01B3y6xE5rCG4Cd%2FOb9ucaqyN5pnIHjkY3x7tQ64%2Fvdyi01uFl%2B3RhnQJyy10WnFtTFi6N1uUYBKrWkVSLSwD22E0Fefw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9859896c1ff1dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-28T16:23:18.923869Z","times_seen":100900,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 14:13:33 GMT","end":"Sun, 23 Nov 2025 15:11:16 GMT"},"fingerprint":{"sha1":"1A:11:63:8A:09:D9:A9:1F:C1:06:34:29:E0:E0:95:E7:BA:BC:63:A3","sha256":"20:A6:48:1D:DB:42:37:88:BF:13:AD:64:91:6B:C4:6D:02:EA:D4:98:E1:E5:88:85:C0:D3:03:48:B4:F1:11:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.top/\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://shrinkme.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TrjA4%2FHmNU2NnmDTdDnamSH5OYrrDsv2UuGD8P9ce5idycvUbSO16TCWhfP0ZXg%2FN%2FrbGWbSp7qse70DEYoppBBmhJGVBYBcPzwDfSFv8laTA%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: csu=190652629529737@1@1758960755; SameSite=None; Secure; Max-Age=31104000\r\ncf-ray: 985989702a611a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"66b5f9b738276411281acbb876422cc2","sha1":"4e6d4b068c23f16202ffcc29936e8cf9b8940e15","sha256":"0a40bf5c49a65d1c8e6822c0a512c1861831a2263381ac8a58f5e81b6392f107","sha512":"e70a387ed3c772d1b2acfbb1990041255ca686c4cf013f83714c0b5a4eeb7b6e155a4caa5cce809767b26adc368343023d0716b7d87a3debdc77f0f7c5d34ebd","ssdeep":"","tlshash":"888000a0e030820b220a0883aef0080202800a33208a80008000030b000a3200008088","first_seen":"2025-09-27T08:13:02.875886Z","last_seen":"2025-09-27T08:13:02.875886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":45,"dns":3,"connect":1,"send":0,"wait":121,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 14:26:46 GMT","end":"Fri, 12 Dec 2025 07:20:07 GMT"},"fingerprint":{"sha1":"F3:16:05:8F:DD:38:43:0F:BB:E2:C4:D7:85:80:BC:FF:31:61:3D:76","sha256":"B5:31:C1:B7:C6:EF:62:4B:FF:EC:63:B7:C3:FC:AB:46:1C:7C:09:8C:E2:11:C2:6C:DC:B2:3A:57:84:15:F3:EC"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:36 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FOvExQIvEdkCP0IOizfYM1k08FOUMcMKpcaJb3DWBJxbi1SVNlm5NTAuK%2BQEWqbC%2FWWCJvxCbYkVCk9FGCw%2FZhmr2hm%2Fpwv37JQ\"}]}\r\nage: 6333\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2be-45d7\"\r\ncontent-encoding: br\r\ncf-ray: 98598975ea2435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17229)","md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-04-28T02:30:29.793312Z","times_seen":6596,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":46,"dns":5,"connect":1,"send":0,"wait":6,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gleecheeftoo.net/impression/_nzTUj9kEMjaveZVnW5WjZUZinM0jz_KPkhs8YW8YnVH0K2AMH-SlRi-BpSOYtfbmxScFD3b1yd4B1xAIo5UAY1bt7a-rXGM0lr2SNnvF8vi-UVbjQfKHurC1I0iSJXaK-P8tN3W6yYKTjDydVOaXd9Cilo3W9Cxzo2BbBU5b6BXPJZm2Q4KWXRQ4oNYZOmiUtKN0KVB_MsaZoj18oPAsQYLjrd6najESiuaghmF0DNCF2W4ZCAfdQXH83sxo_qBrIg3rejq_eQmGZHTXqSvCjDNltFcN1i53UaPZ71F85qBiP07iWdhz5W26uOXDSpf2SD-wNSfHKIyDHpQgJAfcPIss-fOY32vVLFEDdNogfkCxRlYcmEjKUBWvojg5wNbUub9O8uFzerRBYRiJHwiZDVXxqKg_BdPi20N5UcOXt-oceGI0H4Jelp8ZCQyYi1t0fi850nnJcEyJ8B6svB5EpexztPXfj8a4Q9OTIzdUwbWVm7V5IvOuNDgt41RMi-HfgtzZQ3gFMqffCtnRy7mQWOK70zxR4BNuI4rJUWeMtnta95c1WrUQPQbKHWJC9AjKwfF5eBAcyVbMb4YvzSlKc0UrHiUR4xZ4Kqe6ecekK_3xfg-33dbZH26JqO52qAXvKnvH6k57jzl_iLcLwRnuVuqYMmrmWrhJ5DajgRwRyt4UCBaYbkK5xo_0aPn296jrKiBt59yLq4-G0rS-zsfkLRPFvQdhMgcL9gGW-VG7sqPhBp7A1_gkRL5vjvKx-ztu0rxqGE9xzK7WSmRFHMFG6x_EA59azn-Tt_vC_AmGBYzwaX2lzBar_XZr01ta_nb4P1JsAdZIu7SdsEfpWiwRXDoaVuUXnw60EWqzI-krRE=?_z=5775069\u0026sw_version=v1.736.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.top%2FXhamster_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"gleecheeftoo.net","domain":"gleecheeftoo.net","tld":"net"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:41.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gleecheeftoo.net","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:22:37 GMT","end":"Sat, 18 Oct 2025 05:22:36 GMT"},"fingerprint":{"sha1":"65:2E:92:B8:48:B4:CA:65:C3:E8:34:F0:21:65:4B:00:AE:CF:9C:59","sha256":"52:EC:DF:1B:83:18:E4:8F:68:1C:EC:0E:02:BC:4E:67:E6:B0:14:72:39:3B:D8:23:5F:0A:81:DD:2A:AE:2E:7F"}}},"request":{"raw":"GET /impression/_nzTUj9kEMjaveZVnW5WjZUZinM0jz_KPkhs8YW8YnVH0K2AMH-SlRi-BpSOYtfbmxScFD3b1yd4B1xAIo5UAY1bt7a-rXGM0lr2SNnvF8vi-UVbjQfKHurC1I0iSJXaK-P8tN3W6yYKTjDydVOaXd9Cilo3W9Cxzo2BbBU5b6BXPJZm2Q4KWXRQ4oNYZOmiUtKN0KVB_MsaZoj18oPAsQYLjrd6najESiuaghmF0DNCF2W4ZCAfdQXH83sxo_qBrIg3rejq_eQmGZHTXqSvCjDNltFcN1i53UaPZ71F85qBiP07iWdhz5W26uOXDSpf2SD-wNSfHKIyDHpQgJAfcPIss-fOY32vVLFEDdNogfkCxRlYcmEjKUBWvojg5wNbUub9O8uFzerRBYRiJHwiZDVXxqKg_BdPi20N5UcOXt-oceGI0H4Jelp8ZCQyYi1t0fi850nnJcEyJ8B6svB5EpexztPXfj8a4Q9OTIzdUwbWVm7V5IvOuNDgt41RMi-HfgtzZQ3gFMqffCtnRy7mQWOK70zxR4BNuI4rJUWeMtnta95c1WrUQPQbKHWJC9AjKwfF5eBAcyVbMb4YvzSlKc0UrHiUR4xZ4Kqe6ecekK_3xfg-33dbZH26JqO52qAXvKnvH6k57jzl_iLcLwRnuVuqYMmrmWrhJ5DajgRwRyt4UCBaYbkK5xo_0aPn296jrKiBt59yLq4-G0rS-zsfkLRPFvQdhMgcL9gGW-VG7sqPhBp7A1_gkRL5vjvKx-ztu0rxqGE9xzK7WSmRFHMFG6x_EA59azn-Tt_vC_AmGBYzwaX2lzBar_XZr01ta_nb4P1JsAdZIu7SdsEfpWiwRXDoaVuUXnw60EWqzI-krRE=?_z=5775069\u0026sw_version=v1.736.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.top%2FXhamster_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: gleecheeftoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nCookie: OAID=0802511971944fecfa40c232207f24e3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:12:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-trace-id: b3e68747db3d8ee816bb2fe12404405d\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-28T16:17:37.995318Z","times_seen":98374,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:35.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 348491\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Sep 2025 00:51:12 GMT\r\nexpires: Wed, 23 Sep 2026 00:51:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 372083\r\nlast-modified: Mon, 08 Sep 2025 21:04:05 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":816459,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (561)","md5":"bd128ad96a567b8a7e60f5a619970583","sha1":"b27c85666c26ff0fd0fb1f484d0f4e8a7e0b028d","sha256":"2bbe0ef3ec01af823e6098cd82b3e6c178d597b1fc43d17bdd9b4ebdf0428c4c","sha512":"a50febeea294ca718cf274799605da240323d67c0c4aca1b96e40456a0bf5721284f819b0fe2e5dd561d81660c6af64e52d6188d6a10826396ea34f81f1c1176","ssdeep":"12288:3R2zVLB7OhPcbGIq0ni4HRzKTs2lvxIxQ:h2zVL0P0+01HRzSlpIS","tlshash":"b0054ada75127aa1d322f4f91073104da33e9565d86c582db1d9caf12eb0c0cb1baeb7","first_seen":"2025-09-09T11:33:28.978904Z","last_seen":"2026-04-24T23:53:25.712954Z","times_seen":15827,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":44,"dns":1,"connect":16,"send":0,"wait":15,"receive":61,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34gjfm75zhp78.cloudfront.net/?mfjgd=792297","fqdn":"d34gjfm75zhp78.cloudfront.net","domain":"d34gjfm75zhp78.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.177","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?mfjgd=792297 HTTP/1.1\r\nHost: d34gjfm75zhp78.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 79150\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Sat, 27 Sep 2025 08:12:34 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: _6d1kvgUQFNBK_ELTQac8yNzXhaTRJ1SNeHjb35c-F0m2MvvoxkuxA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":232342,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"d8970be7f2d5d68d494b7f9fe96c6120","sha1":"c618bed6d1812196b00edafd3e1cfe0862daf88f","sha256":"0aff0302a0be0ab4de3dbcf019d84732a49bbf1fc3af63944e464020b6a57dd0","sha512":"80b0d95ddd35f61728c5b5124631a55e88e8c3eedf0f7104701a0b3fc560515d037c586d6c29ea14add0922d40ec095265dc50e1a7afd613e85ce08d3ee94542","ssdeep":"3072:XBUNPgDYzi07L02raYDbe+Y5UKS+7L0x2ip+Zc53+Zc0M8EQ:XuN4DUi07w2rnXKZU3+iA9","tlshash":"ad344cc9ba923469836374b540bf124ab23f5a69b8084dd4f496d4d07db8d0a437bfac","first_seen":"2025-09-27T08:13:02.878686Z","last_seen":"2025-09-27T08:13:02.878686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":194,"dns":179,"connect":8,"send":0,"wait":187,"receive":9,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gleecheeftoo.net/mtg/","fqdn":"gleecheeftoo.net","domain":"gleecheeftoo.net","tld":"net"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gleecheeftoo.net","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:22:37 GMT","end":"Sat, 18 Oct 2025 05:22:36 GMT"},"fingerprint":{"sha1":"65:2E:92:B8:48:B4:CA:65:C3:E8:34:F0:21:65:4B:00:AE:CF:9C:59","sha256":"52:EC:DF:1B:83:18:E4:8F:68:1C:EC:0E:02:BC:4E:67:E6:B0:14:72:39:3B:D8:23:5F:0A:81:DD:2A:AE:2E:7F"}}},"request":{"raw":"POST /mtg/ HTTP/1.1\r\nHost: gleecheeftoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/json\r\nContent-Length: 134\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nCookie: OAID=0802511971944fecfa40c232207f24e3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:12:36 GMT\r\ncontent-length: 0\r\nx-trace-id: 1a472cf2c5f168daefaf83ca46230452\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://shrinkme.top\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5kk2jWGjdrIfcx0-DHaenF0y1z1Z76CKXZN-Ly5gXxe4W7ZHo_GqX8pjJetepyMLtuL9QzYHeLLNISTuIcsmBXRdEWjw","date":"2025-09-27T08:12:36.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /recaptcha/releases/44LqIOwVrGhp2lJ3fODa493O/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42466\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 16:20:59 GMT\r\nexpires: Tue, 22 Sep 2026 16:20:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 402697\r\nlast-modified: Mon, 08 Sep 2025 21:04:05 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82706,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"784ba6f9fdbccecb61d7663a8d102179","sha1":"7900330fc9aacd2213ee121d1f1b31d3d2ccfb24","sha256":"645e3c4782296838f3ac89abc14ed0eff434b6180c6fdc06c0f01fcf6ab199d4","sha512":"ed8331b400816017ca931d9b9525687a44160d4420f3ccd1d26921ba567a57efd215df0ca65a663bc7c22ed20cddb73b5247f7705fe91a71be6e0a4a8341bdfc","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIjCtthXwW5LGx7:1GRFauOxLA/+IcTOjLXQ","tlshash":"1f838f7338513b39fc2b9b616186b9edf21cc423e5514bfab6457a20c3db19a8253b07","first_seen":"2025-09-10T14:19:30.495152Z","last_seen":"2026-04-24T23:53:25.757891Z","times_seen":13021,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/modern_theme/build/css/styles.min.css?ver=6.6.4","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 16:03:02 GMT","end":"Sat, 22 Nov 2025 17:01:26 GMT"},"fingerprint":{"sha1":"27:D3:10:9E:D8:04:EE:98:42:19:07:DB:4A:5E:A3:3F:3F:E2:EB:19","sha256":"E6:E0:6D:B0:91:EC:0B:E9:96:4F:E8:43:B9:16:38:2C:52:00:88:9B:FB:97:58:D7:C3:9F:A2:F9:DD:B3:2A:9A"}}},"request":{"raw":"GET /modern_theme/build/css/styles.min.css?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/Xhamster_video01\r\nCookie: lang=en_US; AppSession=e2c857d9196046fb7ecb266c369d2297; refXhamster_video01=ZmZhNmVjZmE2NDY0YjlmMzgyZDI0MTgyY2E4ZTdmZGY0Zjk4MDRjMTY0YzM5MWJmNDE2OGM5MzM3ZDkzNzNjNxqS8h%2FxKZCBapIvQUAKYIC3bdUTJ%2F9flhYNDKvqub9D; csrfToken=d82a9817dca8fe5a174f755b0c4e1365145ec0d00e736f71e922483ed24fae758054feba3c981f2314bd70fc1095675663e77f0a3cc5e1b9003c19de77c9f3bc; app_visitor=Q2FrZQ%3D%3D.YWU0NDljNzUxMGUyMTU2NDM5YTAzYjBiMTQ5ZDdhYzYzYWRhYzZmMGYxYWNjYThhZTdiMzdlNDM2OGU2OTFmOfWHKLNCwUz6u4Fs3Od4e9a0b2hIWqaPODA4HT%2FDMfoKJ8IjdJoR1sPsTeVuN%2F1vuFXqa9g9fJJF1AbTjdaEFYZ%2BA%2FprntxwNoSbwe632J7B\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:12:34 GMT\r\ncontent-type: text/css\r\ncontent-length: 35024\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"30c03-63ec26415ef07-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 17 Oct 2025 06:32:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 870020\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikGLngHEK3eJZupTzKu0jz0jQaWBqcDWuImbv6Xo4bq%2FiEkicgKkQh6a7rcDD18iuht5jHQQTN1hWF8%2FLyP8XodSd3VAZ67PF%2BbPSQ%3D%3D\"}]}\r\ncf-ray: 9859896c1fe5dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199683,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65369)","md5":"0c921e67880117735ca85ba7fe87bafb","sha1":"12901b42a59bb331ea952af5c9700a3f6d520e40","sha256":"0b3646e0fa00be9c1cbb3a7dc1ad1d0348dbdbec5b6e023b012cf8e0d2927fe1","sha512":"34da3e923eee4d30b3e1e79e19d2d7b96abad7b9343b9dc9dbf0b75d57f32a8df2e9b53f547defea79c7b7eb4e04408045857f9ff04d9ac707c2547cc2d59274","ssdeep":"3072:6co/oFiS22l7p0rQUT63i6PSNhwEx28mLh2LK:Bo/BS22crQUT63i6PSNhwEx28mLh2LK","tlshash":"2014a6a0e51420da3323c15bbbd0fa99227cf263d5564dbaf21f659c4fc46c912a3f1a","first_seen":"2023-04-19T07:39:51Z","last_seen":"2026-04-28T01:28:19.232387Z","times_seen":276,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.top/modern_theme/build/fonts/fontawesome-webfont.woff2","fqdn":"shrinkme.top","domain":"shrinkme.top","tld":"top"},"ip":{"addr":"172.67.135.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 16:03:02 GMT","end":"Sat, 22 Nov 2025 17:01:26 GMT"},"fingerprint":{"sha1":"27:D3:10:9E:D8:04:EE:98:42:19:07:DB:4A:5E:A3:3F:3F:E2:EB:19","sha256":"E6:E0:6D:B0:91:EC:0B:E9:96:4F:E8:43:B9:16:38:2C:52:00:88:9B:FB:97:58:D7:C3:9F:A2:F9:DD:B3:2A:9A"}}},"request":{"raw":"GET /modern_theme/build/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: shrinkme.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/modern_theme/build/css/styles.min.css?ver=6.6.4\r\nCookie: lang=en_US; AppSession=e2c857d9196046fb7ecb266c369d2297; refXhamster_video01=ZmZhNmVjZmE2NDY0YjlmMzgyZDI0MTgyY2E4ZTdmZGY0Zjk4MDRjMTY0YzM5MWJmNDE2OGM5MzM3ZDkzNzNjNxqS8h%2FxKZCBapIvQUAKYIC3bdUTJ%2F9flhYNDKvqub9D; csrfToken=d82a9817dca8fe5a174f755b0c4e1365145ec0d00e736f71e922483ed24fae758054feba3c981f2314bd70fc1095675663e77f0a3cc5e1b9003c19de77c9f3bc; app_visitor=Q2FrZQ%3D%3D.YWU0NDljNzUxMGUyMTU2NDM5YTAzYjBiMTQ5ZDdhYzYzYWRhYzZmMGYxYWNjYThhZTdiMzdlNDM2OGU2OTFmOfWHKLNCwUz6u4Fs3Od4e9a0b2hIWqaPODA4HT%2FDMfoKJ8IjdJoR1sPsTeVuN%2F1vuFXqa9g9fJJF1AbTjdaEFYZ%2BA%2FprntxwNoSbwe632J7B\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 08:12:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"12d68-63ec26415ef07\"\r\naccept-ranges: bytes\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mO%2FNM3270ls7p1kugeThRkBZm2kj0bZgcfLTLO30g0LWKluv3azv3mRPfK185Gk%2FaNKW2nNWc8zRIhF7U1ot2SnIKA9XGCbGB1U%3D\"}]}\r\ncf-ray: 9859896cef25b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-28T16:24:25.820892Z","times_seen":442525,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"shrinkme.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parashparyro.com/TVlERmFiZic1XBcREi0DCmgSFCcHOhIQMwMPdXM3GDJ1ETYhbWIyCClkc39Tf2BzYBEkPXl3Rz4tJTIUPmR1YAgjPyt7RztkdWhSeXd3cE97fzF7UGstNCcGcGhiNhU5NXl3VnhhfXBRemxwf1l4","fqdn":"parashparyro.com","domain":"parashparyro.com","tld":"com"},"ip":{"addr":"172.67.147.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parashparyro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 09:26:17 GMT","end":"Fri, 07 Nov 2025 10:24:46 GMT"},"fingerprint":{"sha1":"32:C6:41:72:32:7B:A7:C6:2C:35:1E:3A:D5:70:8F:39:E4:A3:1D:09","sha256":"D2:C7:33:5D:A8:F9:66:BE:B5:67:9E:B3:44:BC:B2:8B:43:94:6A:85:E6:1E:44:C6:1A:C9:13:30:F1:EA:CA:7E"}}},"request":{"raw":"GET /TVlERmFiZic1XBcREi0DCmgSFCcHOhIQMwMPdXM3GDJ1ETYhbWIyCClkc39Tf2BzYBEkPXl3Rz4tJTIUPmR1YAgjPyt7RztkdWhSeXd3cE97fzF7UGstNCcGcGhiNhU5NXl3VnhhfXBRemxwf1l4 HTTP/1.1\r\nHost: parashparyro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 27 Sep 2025 08:12:35 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VjJCHzeA%2B%2B4IL9Xqj%2Feob5I4%2FeXvqK4VfUrMd2jBEtIden3ibY%2FtpSZtAfBVGYM9JPNRLE4YMgxNs4SIKh8XUmLQ3JjpkvQBC4lOmsJC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9859896efb6e568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":50,"dns":4,"connect":1,"send":0,"wait":123,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:35:26 GMT","end":"Mon, 01 Dec 2025 08:35:25 GMT"},"fingerprint":{"sha1":"DC:6A:60:8C:C0:40:AE:3F:C2:80:91:27:95:8D:8F:A2:56:10:26:3A","sha256":"1D:7B:A4:51:FC:B3:F8:EB:12:3A:31:08:98:9A:E0:B6:7A:56:98:99:AD:74:86:FC:A6:8B:3A:1B:1A:42:F1:3F"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS50b3A6NDQz\u0026hl=en\u0026v=44LqIOwVrGhp2lJ3fODa493O\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=lz5g3g3vhels HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:12:36 GMT\r\ncontent-security-policy: script-src 'nonce-Kx6N-5e6LDIGQYVCo-XDgA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76852,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56621)","md5":"343c626face4c69925cc162f3dc668eb","sha1":"2b9fc000e2c87bfd9d61d799e2f79056894061f4","sha256":"4dd55cc04e28bb989a58f6f0154b1e9ee2f3e1caffee6559c370a44978522856","sha512":"2d38ca4eb42b4f7b0593b62cda0c74a4478e6566b23ac5de380b9b747d4e67a1f8b3e7378293b4797bfb5afb249ba177494a7836cf719cadd0eb558a4274d3c2","ssdeep":"1536:SArfJDEAyfKa+1tmov+0vg2CZsOSv25kjV1gSAJCMBC+:SANhnmMlQ2XIjCAH","tlshash":"2573be22a2136487ef7b4e8117d6ba78227ea258314708dd56ff10e84e66dd762783cc","first_seen":"2025-09-27T08:13:02.881767Z","last_seen":"2025-09-27T08:13:02.881767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":61,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gleecheeftoo.net/500/5775069?excludes=\u0026oaid=0802511971944fecfa40c232207f24e3\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.736.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=3\u0026pl=https%3A%2F%2Fshrinkme.top%2FXhamster_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"gleecheeftoo.net","domain":"gleecheeftoo.net","tld":"net"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gleecheeftoo.net","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:22:37 GMT","end":"Sat, 18 Oct 2025 05:22:36 GMT"},"fingerprint":{"sha1":"65:2E:92:B8:48:B4:CA:65:C3:E8:34:F0:21:65:4B:00:AE:CF:9C:59","sha256":"52:EC:DF:1B:83:18:E4:8F:68:1C:EC:0E:02:BC:4E:67:E6:B0:14:72:39:3B:D8:23:5F:0A:81:DD:2A:AE:2E:7F"}}},"request":{"raw":"OPTIONS /500/5775069?excludes=\u0026oaid=0802511971944fecfa40c232207f24e3\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.736.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=3\u0026pl=https%3A%2F%2Fshrinkme.top%2FXhamster_video01\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: gleecheeftoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://shrinkme.top/\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:12:36 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://shrinkme.top\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":84,"dns":0,"connect":27,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parashparyro.com/MUNaVGkefDknVGdxA2UwXAU0AR5/Fw0DP1QBNg4/aHIXET8ABnwgAFV+bW1bA3ptchlYJ2dlT0I3OyAcQn5pcgBfJTVpCl0qOT9PR35reloFbWliRwdlL2lYCHNsYVsHcWNhWwh0aWNPRTM7M1QAZSogHV1+a2NcCXpsZF4EdWNmWA","fqdn":"parashparyro.com","domain":"parashparyro.com","tld":"com"},"ip":{"addr":"172.67.147.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:36.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parashparyro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 09:26:17 GMT","end":"Fri, 07 Nov 2025 10:24:46 GMT"},"fingerprint":{"sha1":"32:C6:41:72:32:7B:A7:C6:2C:35:1E:3A:D5:70:8F:39:E4:A3:1D:09","sha256":"D2:C7:33:5D:A8:F9:66:BE:B5:67:9E:B3:44:BC:B2:8B:43:94:6A:85:E6:1E:44:C6:1A:C9:13:30:F1:EA:CA:7E"}}},"request":{"raw":"POST /MUNaVGkefDknVGdxA2UwXAU0AR5/Fw0DP1QBNg4/aHIXET8ABnwgAFV+bW1bA3ptchlYJ2dlT0I3OyAcQn5pcgBfJTVpCl0qOT9PR35reloFbWliRwdlL2lYCHNsYVsHcWNhWwh0aWNPRTM7M1QAZSogHV1+a2NcCXpsZF4EdWNmWA HTTP/1.1\r\nHost: parashparyro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1c9WfpA4sbszCpvZ5%2Fb1oz3bnRTgevDutZ043LzY1upJ%2BeLjMS3nQaI3FBwDAtFfEZSduqJ%2FbTXk7wBsu%2FXbdkVp1g0s7OWeIQLzikYf%2BUc%3D\"}]}\r\ndate: Sat, 27 Sep 2025 08:12:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9859897acba576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/90c3285604e00c4164892d7a1826e68e.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:42.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:24:25 GMT","end":"Tue, 16 Dec 2025 05:21:54 GMT"},"fingerprint":{"sha1":"4D:D9:7B:8E:2E:B1:DF:4E:5A:71:CF:29:D6:3A:1D:7E:AA:3D:5A:A2","sha256":"88:8A:05:87:6E:69:15:70:D5:BC:48:78:60:76:1A:E9:45:82:CE:D7:2D:0B:89:EB:6B:09:58:DC:93:D4:79:E6"}}},"request":{"raw":"GET /www/images/90c3285604e00c4164892d7a1826e68e.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 08:12:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 80908\r\nlast-modified: Tue, 04 Mar 2025 18:50:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67c74b7c-13c0c\"\r\nexpires: Sun, 28 Sep 2025 03:44:00 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 16121\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2dJLMv32jbg%2FkGAVEvSBAkjdfAXHk0UOfsxn4kfe8QjGTUAPLO7hnYuUcttur5WAiHom0XKyAx7wCza8dZPs7QgTOs%2FIe8G%2BgAaEChx%2BQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9859899c0fe30b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"90c3285604e00c4164892d7a1826e68e","sha1":"b115037bae8351aa4a926cf201cfb2896fd3aa96","sha256":"2ff3d019e9979db4f9d1c06b008bb30b936fe253f7bb8e18f06effff4723e91d","sha512":"85bd67ba2ab7f7bfa3e026c32201978cb70a6884ef45a618e5e9e73dc9255736e0adf78354f3f2532b09f417a083ea9b51974f0f88b18345f844e27cc7457948","ssdeep":"1536:CPnriJu5PltTrmZCo8RM4ZhfKIfnZSMv6TkToMR8uniLjqvMJhCSyKNVIQiuuIy7:CmWvrmZMR9UIfzXoMR9iXbJhC0vXep","tlshash":"c98312687f4cf20194e9102af1ef9d2bc70cede768a78697b44501757a0fb48ed88068","first_seen":"2025-03-06T17:14:06.8849Z","last_seen":"2025-12-08T04:45:03.0663Z","times_seen":487,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.top/Xhamster_video01","date":"2025-09-27T08:12:34.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 23:41:08 GMT\r\nexpires: Tue, 22 Sep 2026 23:41:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376286\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-04-28T16:12:31.372346Z","times_seen":7116,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":91,"dns":0,"connect":16,"send":0,"wait":16,"receive":17,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}