{"report_id":"6a810ff1-6cfe-4f64-a5ff-b60aa1aaed36","version":6,"status":"done","tags":[],"date":"2025-11-23T14:18:14Z","url":{"schema":"http","addr":"shrinkme.click/ZuPJLp1v","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"shrinkme.click/ZuPJLp1v","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"title":"ShrinkMe.io","dom":{"size":5548,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4455)","md5":"2fbf5569e4acfd8ba32fd7f081ebf894","sha1":"999fc3236e14fad826256032687414057a35f17d","sha256":"f586e82836250a22e8c16af43a29c2700b3794ed4943b930bdbd80cc2c7bdde4","sha512":"b0ec43bec4cc0a450dea232e344a26cacc7f648b07f24b4cdcd88adb37dcc2ac71f9fe1de8a499de24d5f42a17bdbdd27c12844f85d985c77e9377de29b58026","ssdeep":"96:zkalGCFm+bST3kyc/Jo1gUs6G84ISTP9J1e+GRJe:zkalTJo1WC679J8+wJe","tlshash":"80b10d67f9d120400117829c65a7b7bdbfbe911187014d7a75ad37bc6f8ddf708a1288","dom_hash":"domhash5128625ecf67ad91d375a42e49456f5b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"shrinkme.click/ZuPJLp1v","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-28T14:18:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-11-17T01:58:33.671842Z","alert_count":0,"request_count":1,"received_data":837,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d34gjfm75zhp78.cloudfront.net","ip":{"addr":"54.230.241.132","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-10-27T18:06:47Z","last_seen":"2025-11-20T13:10:45.764504Z","alert_count":2,"request_count":1,"received_data":232823,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-11-16T22:20:16.151448Z","alert_count":0,"request_count":8,"received_data":4334874,"sent_data":3851,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shrinkme.click","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-05","domain_rank":0,"first_seen":"2025-10-06T10:23:13.692811Z","last_seen":"2025-11-16T02:27:45.356167Z","alert_count":0,"request_count":7,"received_data":552095,"sent_data":6801,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]},{"fqdn":"mformanentsysh.com","ip":{"addr":"54.240.174.30","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-08-08","domain_rank":0,"first_seen":"2025-11-21T13:55:18.60095Z","last_seen":"2025-11-21T13:55:18.60095Z","alert_count":0,"request_count":1,"received_data":4096,"sent_data":1002,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-11-16T22:20:40.871771Z","alert_count":0,"request_count":1,"received_data":86169,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cesosfultrbriol.com","ip":{"addr":"104.21.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-11-23T09:35:45.960537Z","last_seen":"2025-11-23T09:35:45.960537Z","alert_count":0,"request_count":2,"received_data":1034,"sent_data":1157,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shrinkme.io","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-18","domain_rank":218590,"first_seen":"2019-04-01T23:10:55Z","last_seen":"2025-11-18T03:55:27.682806Z","alert_count":0,"request_count":3,"received_data":59812,"sent_data":1299,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gloaphoo.net","ip":{"addr":"104.21.22.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-09-09","domain_rank":283321,"first_seen":"2022-09-10T12:44:27Z","last_seen":"2025-11-20T13:10:45.75436Z","alert_count":1,"request_count":1,"received_data":171668,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ohffs.com","ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2018-08-31","domain_rank":0,"first_seen":"2025-11-20T12:06:05.800824Z","last_seen":"2025-11-20T12:06:05.800824Z","alert_count":0,"request_count":4,"received_data":8445,"sent_data":3666,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tzegilo.com","ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":18163,"first_seen":"2022-01-14T15:27:15Z","last_seen":"2025-11-17T21:59:47.443401Z","alert_count":0,"request_count":1,"received_data":18649,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2025-11-17T10:05:50.267141Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":972,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ukankingwithea.com","ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-11-17T13:55:55.865769Z","alert_count":3,"request_count":1,"received_data":842,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":17838,"first_seen":"2022-01-14T22:55:14Z","last_seen":"2025-11-18T04:42:02.463445Z","alert_count":0,"request_count":2,"received_data":906,"sent_data":1167,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-11-16T22:20:15.656981Z","alert_count":0,"request_count":1,"received_data":1717,"sent_data":418,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bobapsoabauns.com","ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16239,"first_seen":"2025-03-26T18:52:40.148632Z","last_seen":"2025-11-17T22:44:32.809754Z","alert_count":0,"request_count":2,"received_data":183721,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.recaptcha.net","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2025-11-17T00:38:02.356726Z","alert_count":0,"request_count":4,"received_data":92536,"sent_data":2585,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-11-16T22:39:01.613573Z","alert_count":0,"request_count":6,"received_data":13820,"sent_data":3770,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-16T22:13:25.550079Z","alert_count":0,"request_count":6,"received_data":208930,"sent_data":3254,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-16T22:13:25.532985Z","alert_count":0,"request_count":2,"received_data":35386,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-16T22:16:03.162694Z","alert_count":0,"request_count":2,"received_data":752425,"sent_data":884,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"shrinkme.click/ZuPJLp1v","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc29169c13e48228dad8dd361ce8f6b","sha1":"59018ba95e0a67c5babc535649d96573ec30ca3f","sha256":"2fa8aaf793bcef496c761719e35e35ea54b2029e1960efe2d8aa1702ec0d1c68","sha512":"b52961e6d8e02a7bac496c358a9d5f9070cd030dc89ca5a67071904c75bdd8b40f2cffd075dd2c7b4e9baf38014b914cb7f5419343d3363f4c437a3495f5477a","ssdeep":"","tlshash":"6421113da65de8f22f5080a87540b8d2daa01326f71d1a4bc5a85d2e0bcb5d9420bc59","size":1180,"data":"","first_seen":"2025-10-06T16:48:10.452124Z","last_seen":"2026-04-08T14:17:28.550939Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/5775069","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"104.21.22.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f2205fd27da800c636143889b8d18c9","sha1":"1cb7f786654dad06779a6b8b593f4247a625d395","sha256":"256fda525427ce996c953565c87f88d3d960e240affb9e908e76771a20e52997","sha512":"bec2b05211faa42b1f742329d08e02c8feaf7916a87f5c7a2e42639383c2f49aedcada52b90a2c88ffd7dbf70c6d661e19fb6226caaab26ae9135bd41392beb3","ssdeep":"3072:7MieAgYrLlzQi164OKRcdBFjv13CQEG25AdofzMWvRMraDy6/1vBvwz81soS9Yvw:It0LlzY1ju5iau6/1vB4oH8YeS+fiw","tlshash":"44f3e788b192b1552d72a534322fc14eb69fab605c4e4a80d19be1b27f3306ed377dd8","size":170787,"data":"","first_seen":"2025-11-22T05:23:50.909455Z","last_seen":"2025-11-23T14:18:20.344356Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=b8j94jld7t50","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"04c162057826c04a78cc8d3c67938418","sha1":"54671b1fa77dead14ea8e8f6da8739bcc0317d4d","sha256":"b8d71e7716a4006617b0294d61d801ff9ab31ca5311a23451d50f6daec2c24a4","sha512":"9b3ca7f8193b309623984b6f9c93c4bf5495d7fc4c76625238ac5bf8519ecaf29c4f1ba01c31328ee0dd99969154d4facfbfed7d8bafc11539fa187aa6875007","ssdeep":"","tlshash":"d37000882c08a028002a3220002b80088822380020000020022088808ef280a8203808","size":22,"data":"","first_seen":"2025-11-21T08:01:28.139011Z","last_seen":"2025-11-24T08:00:15.849632Z","times_seen":3767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-09T13:27:04.7356Z","times_seen":297451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/ZuPJLp1v","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e82f1e9f9f11642f57928c133254d46","sha1":"8081b6d8caac03e0cb9baa3b47a533ef15bbe4a1","sha256":"bd445588497980e8d05916507c7c4df59d0233242a35887c2a6dc8deeff2606c","sha512":"ed43eebd246bf235bf0bd99482461f735392b7fff46bac17bbdbeaeaeb9ebfc486218d3135032a6ca8033bc55ddfced2eafa348087270c1740be319a577b5374","ssdeep":"","tlshash":"f1b012ca0080100631f131a16f03b308346310f70c0c610055408b303b6831fda3bac4","size":94,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-04-08T14:17:28.544594Z","times_seen":1490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","size":831957,"data":"","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-04-04T05:18:28.342811Z","times_seen":46498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=b8j94jld7t50","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8201f3d6f1ae72fd725219e0e90556ed","sha1":"ffc596fdba735243a4c677bb8cf2e334490bf91d","sha256":"ab75fbf6f9c00eb0a30bf0e05fa9b81c67400391534d902269bc364f31251132","sha512":"b19bacde5d7abc3e4097abee9d2576bc81bf61025972804964308626db858fe7c9eedee06d78d1252fb4c35e5bc9049f86fa9884e937139931895a0ddd20bece","ssdeep":"384:/zK+o7ue0yif+cqbZh4Gp8QEq2y55Kwnaea6tTzbjr5GF:YCGjbP4GbvKqaeVtXj16","tlshash":"28c2b6aef662b02952b2b1b5463f140de1b73c11d844681db21191e5af31ace486ffbf","size":26281,"data":"","first_seen":"2025-11-23T14:18:20.428363Z","last_seen":"2025-11-23T14:18:20.428363Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/js/ads.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7e54b2d6fc22c0022b88b7125cbe03","sha1":"236c6e87760ac733a938cb1897d3a7cb6fc5c86c","sha256":"519204a7ecc3dc77ded647aa00567d6bf8c587049f389b1936914f7fab44c6fa","sha512":"9a1eaeb2af891a8b3b0ea6f02350e356371541154841b650a641533e89b254a1f357912b832209e5ea44ab99affbbd12fcedc7cbdaff7d1a0ee7b92e2715f4a6","ssdeep":"","tlshash":"9ed02273187812b40a2e25cb50f99b943e332190f29318ac4cfcce29832cc804836ec3","size":218,"data":"","first_seen":"2023-09-09T21:18:47Z","last_seen":"2026-04-08T19:33:10.759294Z","times_seen":441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"16:F0:F2:6E:23:A1:95:F7:75:EA:70:AB:6F:D4:43:F3:BE:AA:FE:CD","sha256":"F0:41:ED:B6:DC:74:0C:CE:3C:DF:0C:20:73:B9:C1:3C:73:D4:E2:7D:2B:DC:30:F1:80:AE:20:7B:97:78:33:80"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 23 Nov 2025 14:17:51 GMT\r\ndate: Sun, 23 Nov 2025 14:17:51 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1088,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1088), with no line terminators","md5":"174a65c03735dd20000365afb88ce742","sha1":"ac35c9313024db987b185af3b6ae434b1a2b77b8","sha256":"7da7d5a8b027dab88422c2c02d98caa30c56adac66800d816b17dd0ada909637","sha512":"98e9133125979522a69e0dc5a9ab2eb08be728f8eb639c8beb0659d2cbf2c4f091340a66f22bf5d6d85d949899ea1f1b70e4101a3973c3d78764890e623c2814","ssdeep":"","tlshash":"711120720a05f0390b720de1e2ffcbb1e081741cf15c45e8a5159ac45e79ccbce04985","first_seen":"2025-11-14T14:20:58.250505Z","last_seen":"2025-12-09T12:57:52.837647Z","times_seen":61,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":48,"dns":1,"connect":8,"send":0,"wait":21,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA7QI2ojrHWiDidq55Z5LQWtrUf6ax0DOedT0QASSnw1ZLkglrgF5DttmeHsfqyANBJoUqFKibFgbxgn4IsR6FMuvEuAzw","date":"2025-11-23T14:17:54.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 19 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 356380\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-04-04T05:18:28.342811Z","times_seen":46498,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=b8j94jld7t50","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:52.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"16:F0:F2:6E:23:A1:95:F7:75:EA:70:AB:6F:D4:43:F3:BE:AA:FE:CD","sha256":"F0:41:ED:B6:DC:74:0C:CE:3C:DF:0C:20:73:B9:C1:3C:73:D4:E2:7D:2B:DC:30:F1:80:AE:20:7B:97:78:33:80"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=b8j94jld7t50 HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 14:17:52 GMT\r\ncontent-security-policy: script-src 'nonce-iGXPbnx0u_-UOCnyzYXP9Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80053,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56621)","md5":"fae833f3143b91f53f6b2e080711471a","sha1":"85f77d987e8787e87a0deaa30070b3bc1d22bd81","sha256":"1b969a83d6b03849878eba4989af2287206bd623b4fdecf0365b6a1786b799bd","sha512":"fed8add4dcc43d2fb07c6456dc0b7b2e523cada0c81ec61ceb97ed189ea778ee861c852812d7aa08dcb135f40c7a07cf827623df2023ee52cb3b5e2f18139e45","ssdeep":"1536:UuVNy73qnYJ8nuCIEpkRtIaS8eczws87vxLVKqsR8uNtONI3vXm:ULqnShQPtKwsi3JHQYNIfW","tlshash":"9a73af15965370a9bffb4ec12be97b79a23e64462183449d6bff00d44ca9d5223783cc","first_seen":"2025-11-23T14:18:20.333937Z","last_seen":"2025-11-23T14:18:20.333937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/css/styles.min.css?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /modern_theme/build/css/styles.min.css?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/ZuPJLp1v\r\nCookie: lang=en_US; AppSession=5b089ed117fedd7535bfed75c7280b50; refZuPJLp1v=YzE0ZDlhNTYxZmU1NGE3NDgyYzdkZTg3YmE4MjY2MjNjYmExNjEyY2JmMDc5NWM2MDY3NGRiZmYwNTQwMmYxN%2F8mQCMVzvQbyX9namhx0ZYggjdO87Ot%2BfzW526ZkAf9; csrfToken=87ddfa04d1ffe46050d2cc9d30d9c360c780f67672a0ad0d5356f2237e64a00499534881c89e6f1ef19a4d01d46bd0874202ba831ca255f4c10895afff817375; app_visitor=Q2FrZQ%3D%3D.NGU2OGI1NTA4NGE2ZjVlZDMyMDdkYTBiMGY4ZmM0MmYxMzA0OTFmOTRlYjVkYzNjZDNjMDM0YmNjNzhjYTNmYyGPVPo1feKWcsohfi%2BqLrMEh3Hc8PBY3uvxCYNHsIL9pzhZE55GWIsv%2BlgZZDH96ePUvi6KMPBEe%2FT7CCtsmrhxishOMuKJsdc9GnyQXF1q\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 35024\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"30c03-63ec26415ef07-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 04 Dec 2025 18:45:45 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 1625508\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWokTRdQY8AvgC%2B0bn97FRFsT2rh4Lgo0C5OWIOmzX5yMjMo47aiX%2Fq4d2vR71u%2FhhiCkY12OQG1%2BjPL8Ynji7BJYXST%2BbGyO3JuFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a314ada5e915697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199683,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65369)","md5":"0c921e67880117735ca85ba7fe87bafb","sha1":"12901b42a59bb331ea952af5c9700a3f6d520e40","sha256":"0b3646e0fa00be9c1cbb3a7dc1ad1d0348dbdbec5b6e023b012cf8e0d2927fe1","sha512":"34da3e923eee4d30b3e1e79e19d2d7b96abad7b9343b9dc9dbf0b75d57f32a8df2e9b53f547defea79c7b7eb4e04408045857f9ff04d9ac707c2547cc2d59274","ssdeep":"3072:6co/oFiS22l7p0rQUT63i6PSNhwEx28mLh2LK:Bo/BS22crQUT63i6PSNhwEx28mLh2LK","tlshash":"2014a6a0e51420da3323c15bbbd0fa99227cf263d5564dbaf21f659c4fc46c912a3f1a","first_seen":"2023-04-19T07:39:51Z","last_seen":"2026-04-08T14:17:28.524045Z","times_seen":253,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/logo-sm.webp","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 07:18:54 GMT","end":"Sun, 08 Feb 2026 08:16:40 GMT"},"fingerprint":{"sha1":"9A:08:FE:79:0C:A8:6A:14:E1:74:D1:86:A4:F6:52:0D:AB:44:14:06","sha256":"D1:95:64:22:D7:7C:35:C7:0D:1F:F0:F6:92:76:91:03:CB:62:1D:19:8C:4A:4A:56:63:A6:C5:A9:BA:1C:F9:65"}}},"request":{"raw":"GET /logo-sm.webp HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31236\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"7a04-63ec202aaaa36\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Thu, 24 Sep 2026 07:36:02 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 5208106\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zk3DsGO9hWYXrnz%2FTRrj7cPlsNHElG%2FAlGCzuxzdyqHOuvMC6oWCWv11KEo3jPJ9k7r%2BQc6KjSTsu%2B32k3PR1y6Wi7ODSybpNQ%3D%3D\"}]}\r\ncf-ray: 9a314adacb385688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53658e8a7ae22169e5b89744bfa9f9cc","sha1":"157a684bdf8e3be19cbfabc80cf3a53bfbeaa175","sha256":"9777428de88c524584f0133c3c0d9becf5a3840597eb16dc873bbc29b9a0bf58","sha512":"591c520934512496bfd28831a5c5039c29146034d03a97c7a4c04a153388f21480e1d59e4528c7161ee696a33025a3727ecda3bf05b7dd1b18fdf45f7b4b5b91","ssdeep":"768:Wh2yCYVpdbxAIf8/1AIdV1EeWkgoZ8NJ1/+qK:Wh2yCsbxxOPqeAouDE","tlshash":"c1e2f19b2b3f558af7137380622828d5c15dfcb5605a8b38083bfa278755b554ae30bf","first_seen":"2023-04-21T09:30:41Z","last_seen":"2026-04-08T14:17:28.524941Z","times_seen":879,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":54,"dns":35,"connect":1,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/favicon-3.webp","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 07:18:54 GMT","end":"Sun, 08 Feb 2026 08:16:40 GMT"},"fingerprint":{"sha1":"9A:08:FE:79:0C:A8:6A:14:E1:74:D1:86:A4:F6:52:0D:AB:44:14:06","sha256":"D1:95:64:22:D7:7C:35:C7:0D:1F:F0:F6:92:76:91:03:CB:62:1D:19:8C:4A:4A:56:63:A6:C5:A9:BA:1C:F9:65"}}},"request":{"raw":"GET /favicon-3.webp HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12694\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"3196-63ec202aa9a96\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Thu, 19 Nov 2026 02:17:36 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 388825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKWH1Ii%2BPfVb1wBNT7uLPb2ir33mzWLCzj8CjtGv79jLFKFLksh8jl5YbJhB7BkmGxL64sfIuIa6VW9DOuHJ%2Fi%2Bt67W3JQSIGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a314ade1d1956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"103971bd196afd0ca8f772c9680c9e4c","sha1":"8340e472b9426202e0745d04956c468366256994","sha256":"663cf4358e3e1fdbb64e946bbf381b04db3654d54fe7ba5d8cd47463b733425b","sha512":"4052713576aee93c2f5ee7f6f1de47ad290ee90ec87278407e178fad46af9a64968d551d9bbb3a5c2841ec361c5bfbdb55264f308978ef84529b5513e38fbb78","ssdeep":"384:DNqHAE4/4a2bemzV6wsEwdJn6f4Te4wg0v5M6:evyoDHsEC6gwHvC","tlshash":"5142c02b5dbfc8fb91a62f6f643f0366ccfbbd6b52d82a15460048646095120fc93b5e","first_seen":"2023-05-08T21:09:43Z","last_seen":"2026-04-08T14:17:28.496606Z","times_seen":913,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S419580631%3A1763907471196415\u0026hl=en\u0026ifkv=ARESoU1S7KV3bOQnnXTYGPvS9EiCHNz9BMh_WvOR0XfjNgKm4RvuYlPoHBLeQj7hngQHlCAYtqlVGQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"BD:40:9A:DB:26:FC:C1:FF:4D:85:05:A9:F0:E9:24:BD:05:29:25:7B","sha256":"C7:A3:E4:68:D6:D8:86:E7:C6:E2:D6:E3:1D:DA:60:9A:35:7E:71:9E:F1:91:26:57:47:43:91:7C:CE:BB:07:17"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S419580631%3A1763907471196415\u0026hl=en\u0026ifkv=ARESoU1S7KV3bOQnnXTYGPvS9EiCHNz9BMh_WvOR0XfjNgKm4RvuYlPoHBLeQj7hngQHlCAYtqlVGQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 14:17:51 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-security-policy: script-src 'nonce-uQzHOKrJYFIPy5_Y4YdfUw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.KEYUHSehrM0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=b8j94jld7t50","date":"2025-11-23T14:17:53.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 17:55:22 GMT\r\nexpires: Thu, 19 Nov 2026 17:55:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 332551\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:00:53.626897Z","times_seen":536706,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/ZuPJLp1v","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T14:17:50.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /ZuPJLp1v HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-robots-tag: noindex, nofollow\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2mGbqiE87ULCXO2IacYdj2N%2BRL%2BFKp2W3dGQGf6YGBnU%2BteN0BhxNHqDb5GRCZnWDOZDdIN922A6a3NG7jSUtkyLIfRWBi%2BSDHslA%3D%3D\"}]}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: lang=en_US; Path=/; Max-Age=31104000; Expires=Wed, 18 Nov 2026 14:18:05 GMT\nAppSession=5b089ed117fedd7535bfed75c7280b50; HttpOnly; Path=/\nrefZuPJLp1v=YzE0ZDlhNTYxZmU1NGE3NDgyYzdkZTg3YmE4MjY2MjNjYmExNjEyY2JmMDc5NWM2MDY3NGRiZmYwNTQwMmYxN%2F8mQCMVzvQbyX9namhx0ZYggjdO87Ot%2BfzW526ZkAf9; HttpOnly; Path=/; Max-Age=300; Expires=Sun, 23 Nov 2025 14:23:05 GMT\ncsrfToken=87ddfa04d1ffe46050d2cc9d30d9c360c780f67672a0ad0d5356f2237e64a00499534881c89e6f1ef19a4d01d46bd0874202ba831ca255f4c10895afff817375; HttpOnly; Path=/\napp_visitor=Q2FrZQ%3D%3D.NGU2OGI1NTA4NGE2ZjVlZDMyMDdkYTBiMGY4ZmM0MmYxMzA0OTFmOTRlYjVkYzNjZDNjMDM0YmNjNzhjYTNmYyGPVPo1feKWcsohfi%2BqLrMEh3Hc8PBY3uvxCYNHsIL9pzhZE55GWIsv%2BlgZZDH96ePUvi6KMPBEe%2FT7CCtsmrhxishOMuKJsdc9GnyQXF1q; HttpOnly; Path=/; Max-Age=86400; Expires=Mon, 24 Nov 2025 14:18:05 GMT\r\ncf-ray: 9a314ad89a77b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25427,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1144), with CRLF, LF line terminators","md5":"68f4e7041bc8b5c3f3d7f27b68d3fabe","sha1":"5fec0e73caf69c5bae8c965119bfe1002f6046d6","sha256":"5ad60d737670b79be6c225eff6f19f260b494628d5e0e7ea8930f82ecf82e333","sha512":"3d455f7123e53b58a3b480d4c6de7b8506b9a675c4eb40c4f6ed76672ea2263fb02161d0ded345d97c40b5346e4ddbc87ebfa8257b64b8f7b1c47770e2d0a7b9","ssdeep":"768:MP8DhpzZlfD7c9rJxQy+uC0/LFMXZpQ4a:/DBlfD7c9r3Q5A/0ZpQ4a","tlshash":"d6b2e826bdce5427017340e8b6b3fb0ce959642bd6068a21f8dc43552fa2ee54d57e8c","first_seen":"2025-11-23T14:18:20.341912Z","last_seen":"2025-11-23T14:18:20.341912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":32,"dns":11,"connect":1,"send":0,"wait":119,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-1087711072:1763907471153737\u0026ifkv=ARESoU3igC21apT8dyMfh6PIKzCmJN6cFCuwS9uod1P6CDR9vs1dCZo9V8EiUlhk4aRVog4PTnNl","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:46 GMT","end":"Mon, 19 Jan 2026 08:35:45 GMT"},"fingerprint":{"sha1":"24:7C:52:9A:14:62:BE:F8:93:1F:AE:0D:94:C9:F5:D1:B7:6C:B1:16","sha256":"4E:59:5E:29:62:6C:9E:E6:D9:2F:72:AA:20:76:DD:CF:73:BC:E3:95:17:09:AD:C0:7B:3F:55:8E:44:6F:E9:58"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-1087711072:1763907471153737\u0026ifkv=ARESoU3igC21apT8dyMfh6PIKzCmJN6cFCuwS9uod1P6CDR9vs1dCZo9V8EiUlhk4aRVog4PTnNl HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:UcSgo7wPAJZ-IxGTA5y8txv1dJfiBA:QxkOIBk3GjkGKrM9;Path=/;Expires=Tue, 23-Nov-2027 14:17:51 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 14:17:51 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-1087711072%3A1763907471153737\u0026hl=en\u0026ifkv=ARESoU0My9w1gbDvB7wOVMImngHVl5EZesisw_9u4qWvPbAlMz5wtDewVRs5LunQfuz4nFEFWFGI\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-rgTX3Xr-V2-7L_HUEzqi7w' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 416\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/5775069","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"104.21.22.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gloaphoo.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 08:40:15 GMT","end":"Wed, 21 Jan 2026 09:38:45 GMT"},"fingerprint":{"sha1":"21:81:17:21:53:51:94:35:D7:B1:12:C3:46:E0:9F:2D:EC:92:42:09","sha256":"E9:E4:A3:9A:BD:5A:1B:F1:17:6F:47:09:16:C7:B7:6E:94:42:04:69:83:2E:03:F7:3E:43:E3:5A:E5:15:67:5B"}}},"request":{"raw":"GET /401/5775069 HTTP/1.1\r\nHost: gloaphoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2Bu8Cvs3Mt8O9lXdHSiB4C4Q0k6iMi7GI4TLly6wIf%2FShD7%2B8BXtleqccI6FC1pWVjH8xMEGNiGALDCA9PbX6PTeq2EblEEIdwbv2A%3D%3D\"}]}\r\ncf-ray: 9a314ae22c740daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170787,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6f2205fd27da800c636143889b8d18c9","sha1":"1cb7f786654dad06779a6b8b593f4247a625d395","sha256":"256fda525427ce996c953565c87f88d3d960e240affb9e908e76771a20e52997","sha512":"bec2b05211faa42b1f742329d08e02c8feaf7916a87f5c7a2e42639383c2f49aedcada52b90a2c88ffd7dbf70c6d661e19fb6226caaab26ae9135bd41392beb3","ssdeep":"3072:7MieAgYrLlzQi164OKRcdBFjv13CQEG25AdofzMWvRMraDy6/1vBvwz81soS9Yvw:It0LlzY1ju5iau6/1vB4oH8YeS+fiw","tlshash":"44f3e788b192b1552d72a534322fc14eb69fab605c4e4a80d19be1b27f3306ed377dd8","first_seen":"2025-11-22T05:23:50.909455Z","last_seen":"2025-11-23T14:18:20.344356Z","times_seen":11,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":45,"dns":22,"connect":1,"send":0,"wait":70,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:46 GMT","end":"Mon, 19 Jan 2026 08:35:45 GMT"},"fingerprint":{"sha1":"24:7C:52:9A:14:62:BE:F8:93:1F:AE:0D:94:C9:F5:D1:B7:6C:B1:16","sha256":"4E:59:5E:29:62:6C:9E:E6:D9:2F:72:AA:20:76:DD:CF:73:BC:E3:95:17:09:AD:C0:7B:3F:55:8E:44:6F:E9:58"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:al0Ska3PN88wC3QfS37KYkkMxI96fA:P50gMTrg7JHErVfB; Expires=Tue, 23-Nov-2027 14:17:51 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 14:17:51 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S419580631:1763907471196415\u0026ifkv=ARESoU3vcvW81K-OiaiIoB7JIWWWH6KLzDfWl5Dwn_yBt6tcN1AGV62i17ImtT18X_vmpSVsSDEt\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-FqEGykxqrOXeJpKbCtq81A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":122,"dns":0,"connect":36,"send":0,"wait":37,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/401/5775069?oo=1\u0026sw_version=v1.764.1-rc-s\u0026oaid=08028a687bee4ab1ed77621222778b3e\u0026st=true","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:52.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"POST /401/5775069?oo=1\u0026sw_version=v1.764.1-rc-s\u0026oaid=08028a687bee4ab1ed77621222778b3e\u0026st=true HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3275\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3275,"data":"{\"sync\":\"TBtSUh8cJhwUBWcfHEsSAwEFUA5MXwMBbAIlKz9KWUBcHAtKQ1AVSQZbGgxbGwkFVkYLASoQTktDAFdGTBkCRExXBAwfFA4eFkpPUhRLDk4+HQY0BV0ZMkBQW2kNHCYfDD1RESZOBwkxGBNcMR5fZkBBJRcYHyoBTzYaUUNQXkdQQB0yU1xHUxkQHAxXWAhFW1MSHw9JSARCT1lJbEYeRkNaWUBQABUbW11aR1BBBwkVAwIaWAALDldYCEVbSQ1IVFteFgAKFQMCGlgQA0pPUAtFW1cDSFRbXhYADEcbCQZWRgkcV1gIRVtcFwsCSUgEQk9fWhEMS0hbDBhAAlhVGxMeGklIBEJPVFFsWRgOW1JFThoHDmYWDkxRQxhMAkRaQ0NYXklEVwpRDR1cD0hUWl4WDQVoVlFcJQ0XDBAaGlNJFUMdBwUtXwsURGZfUxQDDQBXWAlFW1oOBgEZLVALHUNREQxKSFseEAxcBgsbW1tCSRVVAwhHWFdFWF5JRFcMVDYXVRJIVFleFg0CW1ZBaR0FFB0BQAJYVRsRDAJJSARCT1RKWhRAVVVKFg5MS0MJTUgEGAIWVF0bG0NYDkZDWVlASAcLWkNQX0dQRAIMQ19cRBc7HQ0BB1sdFktDUFZHUFoLHhUDAAUHSFsaHEACSxVVFwceAgJRTEEVS0UUQEY0DQYDGkVbSxEaTFFBGEwZTVYRDEpIWx8CQAJYSwFRRkwcGhZUXAcLBxpYExAfV1gJW0EJTUgZAhoWVFwHCwcaWBMBSk9SFEsOQENQXkdQXRZPDQkfFA0CGkpPUxRLClgJSFRaQgZaQRVKWxRAVUlaQU4aGg4bW1tcU0IYTB5WThEMS1ZBWFlATBomXQQeCwgGUQpPDQkfFBAXDAlXWBokFkMIBgIKXQFAXRcRZF8UABYfBkJ2PVkIUUReUFJjBwMBDQgWAlJNU1UQTlNIClVEXkJScwsOXFYcBEpVSVhEUglJP1ATDwgEChtfXgMXAxRWRhcYV1gJRVtJBUhUSRtaGghFV1JaVxQdDlgUUQwOXBNQBxgifVUEWU1WRBQFFUUFBl5ED1AEHQsZSF0dPX4CWlgOAQsGFA4VGR1fTBwHDgVRHFdeSmN/QQ0XHBAQVggVFBEOCEYEXQsaUksJXwk0MFMcDEwMC1cABkMbFlJDG15cRFMIXhAbJSsDS1UbCQMCSUgFQk9CUFcUQAoMBBlOGg0LX0NQTEleFh4BFQMRXg4QCRtPTRcaEUsIBAUGFxoNAV5aWBkgESkiORIJH1sVQwQJSUgEQk9DQxEMWDEtK1dOGgcbG1tbQkkcVR5PDRtkXxRXS0pZQEgdWwNRRkwOBFUCTw0KBBpYDBpKT1YARVtdDEhURkMYTB9DTREMV1VVShYKZwYbU0NQXkdQWhlPDQgfFA0AW1ITA1QaHBVDBR0IAkFMVxV1WlgPHFkQTVRnX00bTUgGAhZQCwMVA1VXFhccRFcBUDYWWws1BwUWURZPDRQCGlgTEAYqCV0QCmYNDwAMBlxMVwUBARpYBxYEGhBnDRxJFQJMUUAAQk9BXF1SFRZbUldAFEseWAwPHgoWR0xXBxURWBZGQ0oQDBU8KhtNSAAHARZUT1JXHmMpSBwGV04aChZVDhgxDBNZGxkVAxFFCAMbSllASA8VG1tITEdQVwIZFQNIS1ZGExsFQAJYVRsRBBpJSARCT0dXQVVYXklEVxJUCA1fDhgDNBZRGghUTVxEWF4CShwRZwgXXRMFBw9QDggMW0pWGlgNCjcBEFENHFcVSFQNE1gdCBsbWkUlBxEaGg9RHBRmWVwxBABrAAhAXEEUQAIYBAYHFEsQSj4JBhkdWQcYWhsJUBsICg1ZQFEaJlwFDQtJSFIPAURcHxQTFyYPEAFTBlsDFRgbDl4WBx5oTlZUJQ8QHFdYXggVSgRGTAIBaxkIVWZYXw47T1hDPVcbJlcEHQsZUA4IDFtKVhpYDQo3EQdLAg1WETUdChRVHAQVA1VXFhccRFcLSzYaURMFAwIHWTECR1xBV1heHwkZEV0UVRsPDx1JSBZfWAELBwJCVUBQV04aChVQBAQaNBtQTFcVTF1dFAsOBldOGggfXwgGBwoGUTEEUxsJFFhIWxwHA14PEFo+GQEeAFcLMl5dEQxYRlVKFAZODAtNCBkLGS1dCk8NGxEaWAcYBQUDUQ4XZggOTFFQFkJPVExAQhUJJgERPQlLQxtDRkwIB0caAlpmWlIlVltSV0AUSxpVCAkFNBtQTFcVGx8UGQsKHFdYGktVGwwPGgMdUExXFVNAQhsDW0RXEGccEF1DUExJXhYBDGhQVxRARltEVwNcDRBNCAUACh5rBwlEGwltJxk=\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://shrinkme.click/ZuPJLp1v\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":1,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 14:17:52 GMT\r\ncontent-type: application/json\r\nx-trace-id: 38a9d70a5996b6c66cca5cbb900d0c0d\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=08028a687bee4ab1ed77621222778b3e; expires=Mon, 23 Nov 2026 14:17:52 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2157,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d43024a2fc61f655da17eac4c15fb960","sha1":"3f200c293def4b656951914eef2c10b7f74e1972","sha256":"fd67a24b4d41eb679e01f14bef0113acd0592efa3b726045eb0472d9e005e39a","sha512":"e4869d42aa8146c5501e6b195360ef4530a3a00891cc3d9c319543daceca3a7414d13faa5146878e61f1e69e3a9c0c61f6ed77875df14ff0090a82dbf759aaca","ssdeep":"","tlshash":"584126088d28057a82ee5ab5ec076d474abd161f7a4c752ee7490d1770fbce403db20b","first_seen":"2025-11-23T14:18:20.347722Z","last_seen":"2025-11-23T14:18:20.347722Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":103,"dns":15,"connect":26,"send":0,"wait":33,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:52.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 06:43:47 GMT","end":"Mon, 09 Feb 2026 07:38:46 GMT"},"fingerprint":{"sha1":"D5:38:99:61:B8:EA:99:50:AE:A6:42:89:19:46:3D:27:F6:80:AE:53","sha256":"EB:AA:B8:24:FF:C4:D3:0A:D8:6E:81:A6:73:F2:98:E7:69:A1:0F:95:6F:52:21:C6:59:D5:A0:26:AD:55:F8:CC"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:52 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZIvEE41eX6GyvqLKSpU1bOoa9tj4OPv8SvTNcPoQLYL9ItI2TWHM14QaUonVMCvKq2JcPTs%2BQ58sAzstYnsNbdZIjnCY915iqGA\"}]}\r\nage: 3573\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2be-45d7\"\r\ncontent-encoding: br\r\ncf-ray: 9a314aea1fd02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17229)","md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-04-09T13:10:28.767432Z","times_seen":6399,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":31,"dns":5,"connect":1,"send":0,"wait":6,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=b8j94jld7t50","date":"2025-11-23T14:17:53.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"16:F0:F2:6E:23:A1:95:F7:75:EA:70:AB:6F:D4:43:F3:BE:AA:FE:CD","sha256":"F0:41:ED:B6:DC:74:0C:CE:3C:DF:0C:20:73:B9:C1:3C:73:D4:E2:7D:2B:DC:30:F1:80:AE:20:7B:97:78:33:80"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9 HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=b8j94jld7t50\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sun, 23 Nov 2025 14:17:53 GMT\r\ndate: Sun, 23 Nov 2025 14:17:53 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4e8c5e231c8c4b52a9f1110707827d3f","sha1":"58e2f59c8426047a2671a46fae39f739035a8032","sha256":"4b12d6a235970b2239057a7cae12f85606fc432c6ad4ae32d13fdc27ffee0891","sha512":"064d9f12c63084d2e179e0f0dfe9cfd184af33cf937b3a89e0969ec32f3cca35540c29c3d9b714004d8e95bd394ebc1f9ff1986792a9ee84397fc9930523067f","ssdeep":"","tlshash":"68b012330510d46c0d1082c2d63bd3acf0114234db6082f041b90fd883649e39800400","first_seen":"2025-11-13T21:19:52.258197Z","last_seen":"2026-02-22T14:16:54.065986Z","times_seen":38461,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA7QI2ojrHWiDidq55Z5LQWtrUf6ax0DOedT0QASSnw1ZLkglrgF5DttmeHsfqyANBJoUqFKibFgbxgn4IsR6FMuvEuAzw","date":"2025-11-23T14:17:54.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42505\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Nov 2025 00:45:32 GMT\r\nexpires: Wed, 18 Nov 2026 00:45:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 480742\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7b035012fa886d53fb1f1e7d14635b97","sha1":"03c77a04fecbca19d5555d6ae876291d3b7973c1","sha256":"4d271d0650a8fb32c6ea7055f6ab8e7edce63e3868aa0a7b4ba03b56f069099f","sha512":"765bec023e54b64c7c93cd75e55320bc5e524dc24b2fd474e5ca63dbcc2bf2106464ac13cb72ed3949816463281c3715ae4edd5e3a11befd0af2ee255c53e89e","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIUCdthXwW5l1Dx7:1GRFauOxLA/+IcTOULX1","tlshash":"d8838f7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db19a8253b07","first_seen":"2025-11-13T21:19:52.249776Z","last_seen":"2026-02-22T14:16:54.110663Z","times_seen":40042,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:57.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Nov 2025 14:17:57 GMT\r\ndate: Sun, 23 Nov 2025 14:17:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"51e82f70d1b655f1447b6881fc12c970","sha1":"d07fb502aaf2635cd74dd1ad42d916b2bfe923c1","sha256":"9c313d568db4279e917f0ed107f57397c1e14d5e2f29667f207f31c409658440","sha512":"60b0345cf672afd26c41e56155e3fefc18e6f92e1d969f25dd33d6aa5e49c624e7017f9dc49d5f35ba2f85886546c1fcb93e7303d045618e3508bb3f0f6d1e5a","ssdeep":"768:DFSFjFGFUFB4FiLFZF1Fn8XguBSivFRa1KRzBfiiMgFK1GIBEiNnr7gr8yBOijh1:WCJiWp","tlshash":"8bc20fa1041b500057834ce223cebf34fe1f52507142d0b5abfdab6badcbc6652693ad","first_seen":"2025-11-19T00:27:59.992265Z","last_seen":"2026-02-19T18:18:33.653497Z","times_seen":1142,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mformanentsysh.com/Nll1bVpXOxYAZVdkF0svRDVISGhwfEcrPgVtEgc8W25AFzJGbk1DOVo2AAk8RDYbGXRYPAFIaHAVLBcyejsjJBtgICAhOGQ9JyFrdDUiCioDDzI7HGUdHiQUcGw5JCIObjE7F1saPRobYBo8IhVjDyYiG39hMBoPfhAMHg9XLjgMF08+ED0iVWstCjJCGCEgFG5qLyEUQWgXCTZOaTQBLUYMMjccYh0GLhVgbC8iCFUhMChuDxgPHgx+M0EgOEFsLSALZ3xHLx4HNQA1ImQOMwMufwAzIAtmGCRVGAc6TSU0Ugs2Lg9sPUQoE1M1RFUPTmhBIWlSCzYpd0EcJSsPezsZWQtkPgVaHGELLSUCUS8RXB9/FicZaWMRGVsCWwM7Lh18ECwrFFAVEllvchtEWBEEGyEuAkI9LFwXfDsZVDN0DzBYGXIIODwdAz8zKxN6P0UjM2QMRF8Cd38fHjVYKUghFE8uJiUtVxI","fqdn":"mformanentsysh.com","domain":"mformanentsysh.com","tld":"com"},"ip":{"addr":"54.240.174.30","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mformanentsysh.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"97:8E:07:F8:DC:B3:1E:47:F7:0C:D2:9B:10:C0:F2:3E:D5:75:F6:98","sha256":"22:6F:2A:54:70:CE:BC:24:CE:D1:8F:05:64:69:68:B9:9C:C4:DF:08:A9:CB:2B:77:18:37:D1:62:F5:0F:56:65"}}},"request":{"raw":"GET /Nll1bVpXOxYAZVdkF0svRDVISGhwfEcrPgVtEgc8W25AFzJGbk1DOVo2AAk8RDYbGXRYPAFIaHAVLBcyejsjJBtgICAhOGQ9JyFrdDUiCioDDzI7HGUdHiQUcGw5JCIObjE7F1saPRobYBo8IhVjDyYiG39hMBoPfhAMHg9XLjgMF08+ED0iVWstCjJCGCEgFG5qLyEUQWgXCTZOaTQBLUYMMjccYh0GLhVgbC8iCFUhMChuDxgPHgx+M0EgOEFsLSALZ3xHLx4HNQA1ImQOMwMufwAzIAtmGCRVGAc6TSU0Ugs2Lg9sPUQoE1M1RFUPTmhBIWlSCzYpd0EcJSsPezsZWQtkPgVaHGELLSUCUS8RXB9/FicZaWMRGVsCWwM7Lh18ECwrFFAVEllvchtEWBEEGyEuAkI9LFwXfDsZVDN0DzBYGXIIODwdAz8zKxN6P0UjM2QMRF8Cd38fHjVYKUghFE8uJiUtVxI HTTP/1.1\r\nHost: mformanentsysh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1211\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=dovoTNPuZZrEYYgCEfO0YPyL2AGc/RPjlOJc8TgNnXhpcX+pmtZW0tNVJagqHA/lTs5YcFR8vFQc9Iwg0U3//ukwWyfKigTdKm4IrR25K2iMwlRjA4eH1kvQHL3t; Expires=Sun, 30 Nov 2025 14:17:50 GMT; Path=/\nAWSALBCORS=dovoTNPuZZrEYYgCEfO0YPyL2AGc/RPjlOJc8TgNnXhpcX+pmtZW0tNVJagqHA/lTs5YcFR8vFQc9Iwg0U3//ukwWyfKigTdKm4IrR25K2iMwlRjA4eH1kvQHL3t; Expires=Sun, 30 Nov 2025 14:17:50 GMT; Path=/; SameSite=None\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: sfCGhu981J732rjgfzAgr_Hq0W2M0ktIh7tccmyD3tuwwUpxtyDpug==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":3062,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3062), with no line terminators","md5":"2bef46c5a445005a76b36d08cf2e4b97","sha1":"9229f733cdd4107b5aaa869bc6a28681cc36d724","sha256":"494cbc2d4078cfff2e4b8c705e92cd4a5266c8c742f07d84459dda7b6584007b","sha512":"22cf513b0780ae6bdccaf2f7e59388e39faaad2f46d8e61b68fda945ee1490012fbc41d281b478a499e97624b42c2eaf274e934cd05d3c6609a304dbd0dc57eb","ssdeep":"","tlshash":"6f51008d34f3a08282f26055053bb99afa385a91c38ccb14963d96bcbd715ee6357f4c","first_seen":"2025-11-23T14:18:20.355666Z","last_seen":"2025-11-23T14:18:20.355666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":6,"dns":3,"connect":1,"send":0,"wait":105,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cesosfultrbriol.com/TGdDc0ZjWCAAex5UET8fIVZmQQAYPwkrEBQpDhV3OAYnJj41MQUYYDgOJ05xdVVxSn5qFyoXe31fZQAyLRM2AHt9QSodICNaZQV7fUlzXXRiUmUGe31BNwMnK1pyVTY4Ey9Od3tRcEp2e1N0Q35/Vg","fqdn":"cesosfultrbriol.com","domain":"cesosfultrbriol.com","tld":"com"},"ip":{"addr":"104.21.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cesosfultrbriol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 08:26:47 GMT","end":"Mon, 05 Jan 2026 09:25:24 GMT"},"fingerprint":{"sha1":"9B:01:A5:12:04:64:63:D9:8C:A6:C2:D6:9D:21:50:E0:3E:C9:7E:87","sha256":"2E:78:51:9A:BC:EF:9B:2F:8E:82:3E:C7:8E:BE:FF:CA:90:04:62:30:34:65:45:7E:28:FA:E1:77:66:2A:3A:8B"}}},"request":{"raw":"GET /TGdDc0ZjWCAAex5UET8fIVZmQQAYPwkrEBQpDhV3OAYnJj41MQUYYDgOJ05xdVVxSn5qFyoXe31fZQAyLRM2AHt9QSodICNaZQV7fUlzXXRiUmUGe31BNwMnK1pyVTY4Ey9Od3tRcEp2e1N0Q35/Vg HTTP/1.1\r\nHost: cesosfultrbriol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlwYx8oh1ipkrnAPDHI1Z1buPfCSiszwh%2BRhxctBXnZFWCZSoNbbQ2%2Fr6BpE5WfP90VTqKmJ%2Bp974qTqDJMhRN1%2FXTTlexqaRSVlTYkhKEJz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a314adcde45b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:57.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Nov 2025 19:22:36 GMT\r\nexpires: Wed, 18 Nov 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 413721\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-09T13:25:32.844996Z","times_seen":725136,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/js/ads.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /js/ads.js?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/ZuPJLp1v\r\nCookie: lang=en_US; AppSession=5b089ed117fedd7535bfed75c7280b50; refZuPJLp1v=YzE0ZDlhNTYxZmU1NGE3NDgyYzdkZTg3YmE4MjY2MjNjYmExNjEyY2JmMDc5NWM2MDY3NGRiZmYwNTQwMmYxN%2F8mQCMVzvQbyX9namhx0ZYggjdO87Ot%2BfzW526ZkAf9; csrfToken=87ddfa04d1ffe46050d2cc9d30d9c360c780f67672a0ad0d5356f2237e64a00499534881c89e6f1ef19a4d01d46bd0874202ba831ca255f4c10895afff817375; app_visitor=Q2FrZQ%3D%3D.NGU2OGI1NTA4NGE2ZjVlZDMyMDdkYTBiMGY4ZmM0MmYxMzA0OTFmOTRlYjVkYzNjZDNjMDM0YmNjNzhjYTNmYyGPVPo1feKWcsohfi%2BqLrMEh3Hc8PBY3uvxCYNHsIL9pzhZE55GWIsv%2BlgZZDH96ePUvi6KMPBEe%2FT7CCtsmrhxishOMuKJsdc9GnyQXF1q\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 170\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"da-63ec26415ef07-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 04 Dec 2025 18:38:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 1625964\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RjRkqFq75AVn4clT8iIDUO8ccZeVl5mnllHAAnOCYh8C8Iewk1Fc5QKQ33ouEGQPXyyJW6O5cTNra1kiWmc5rL4LK88f7YLCDfV5cQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a314ada6e9e5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"9e7e54b2d6fc22c0022b88b7125cbe03","sha1":"236c6e87760ac733a938cb1897d3a7cb6fc5c86c","sha256":"519204a7ecc3dc77ded647aa00567d6bf8c587049f389b1936914f7fab44c6fa","sha512":"9a1eaeb2af891a8b3b0ea6f02350e356371541154841b650a641533e89b254a1f357912b832209e5ea44ab99affbbd12fcedc7cbdaff7d1a0ee7b92e2715f4a6","ssdeep":"","tlshash":"9ed02273187812b40a2e25cb50f99b943e332190f29318ac4cfcce29832cc804836ec3","first_seen":"2023-09-09T21:18:47Z","last_seen":"2026-04-08T19:33:10.759294Z","times_seen":441,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-2.2.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-2.2.4.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-14e4a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\nage: 1052408\r\nx-served-by: cache-lga21935-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 37, 38702\r\nx-timer: S1763907471.924182,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 29811\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-09T13:28:17.298724Z","times_seen":269504,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":42,"dns":4,"connect":13,"send":0,"wait":15,"receive":3,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=d00e2a44-a8aa-4204-956e-b3e90c6acf9c","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:53.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=d00e2a44-a8aa-4204-956e-b3e90c6acf9c HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 449\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":449,"data":"L\u001b[_\u001e\u0000\u001c\u0006*\u000b^\u001b\u0018T\u0004HT[^\u0016\f\fC\u001b\tMX\r\n7\u0017\u0003LKC\tMH\r\u0003\u0013F\t\u0004Y^\u0011\fJH[\u000b\u001d\u0003J\u000e\u0010W\u00065\u001a\u0002\u001fQLW\u0007\u0015\u0011R\u0013\u0017\u001a\u0000\u0014\u0010_\u0000\u0017^\u003e\u001e\u0007\u0006\u0017\u0016T]\u001b\u001b_S\f\u0001\u0015JOREE[Z\r\u0003\u000b\u0005\u0006k\u0007\t\u0015\u0003\u0011\u0007\u001e\u0006@YC[^D@\t\u0007^C_\u0010\u0006\n@U\f\u0002\u0001W\u0006\u001a\\B\u0003Y\u000bH\u0000\u0002[\bI^\u0016\u000f\u000bQP__\u001b\u0010\u001c7\u001c\u0006\u001aS[\u001bMH\u001a\u0019\u0013R\b\u0004Tf@Y\u000f\u0016\u001a\r*\u000b\\KC\u001bT]Y^B\u0002WO\u001b\u001bRR\f\u0001\u000b\u001c\u001c\u0011]\u001b\u0026P\u0005HTIP\u0018L\u000eVTCW\u0013\u0003\u00177\u001c\u0006\u001aS[\u001bMH\r\u001e\u0001@\u0001\u0000hPWiKFCJ\u0005\u0017K\u0001\u0012P\u000fHBI\u0011A\u001d\u0019XTl_\u001e;KJO@\u001aE[Z\r\u0003\r\u0000-]\nO\r\u001b_\u000e\u0011\nT\u001e\u0003PM\u0010\u000eO\u0004\\\u0016I^\u0016\r\u0002DM\u0011\fXFUJ\u0018\u0007L\u0001\u0016]CPL\b\u0013W\u0006\b\u001aS@\u001b\u000e\u0005\u001eJY@J6\fP\u0005HTI\u0016\u0004^\b\u0005X\u0007\u0002W\u0005A\t\u0014O\f[I\rLS[]\u0017\u0019\f^R\u0000\u0003UL\u0005\u001a\u000eL\u0001\u001aE[V\u00005\u0007\u000fP\u000eL]\u000f\t\u0001\u000e\u001bRA_\u0017\u0007]]\u0018[P\u000f\n\\E\u0002\\\\\u0005\u000b\u0001\u0001M\\\u001b[\u0010@\u0014K\u0018]\u0005\u0003\u001a\u0002\u001dZ\u000f\u0001hPWEX^\"5\b"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sun, 23 Nov 2025 14:17:53 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://shrinkme.click\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":92,"dns":0,"connect":26,"send":0,"wait":26,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/500/5775069?excludes=\u0026oaid=08028a687bee4ab1ed77621222778b3e\u0026tgp=\u0026of=true\u0026sw_version=v1.764.1-rc-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=2\u0026pl=https%3A%2F%2Fshrinkme.click%2FZuPJLp1v\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:53.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"GET /500/5775069?excludes=\u0026oaid=08028a687bee4ab1ed77621222778b3e\u0026tgp=\u0026of=true\u0026sw_version=v1.764.1-rc-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=2\u0026pl=https%3A%2F%2Fshrinkme.click%2FZuPJLp1v\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nCookie: OAID=08028a687bee4ab1ed77621222778b3e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 14:17:53 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 24546b8e154d11297497b8efa378564d\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=08028a687bee4ab1ed77621222778b3e; expires=Mon, 23 Nov 2026 14:17:53 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3025,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"bac0c6607ad178661b39c21568083da4","sha1":"2a5a9932f2cb5b786fe47dc95c79c1e11a6ae229","sha256":"7d21dbe0cc4e07004fe6b89ff6b58c7b1c92783b5f20632c0463bfc998a65895","sha512":"c7578723423e8ccb2558b2124d0ba90d252e8cfd8fc84de3e656fc721e9010aa36a41fa2b0c38972e84f6f5eafb9357b4ee92d9c8706a5b11b83b8c727dd97e5","ssdeep":"","tlshash":"53512bcb0aec1e5e1701012f787e9c8ceb0a294900d53cdd4d3eaa2f316a5bd08a7f09","first_seen":"2025-11-23T14:18:20.363834Z","last_seen":"2025-11-23T14:18:20.363834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/fonts/fontawesome-webfont.woff2","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /modern_theme/build/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/modern_theme/build/css/styles.min.css?ver=6.6.4\r\nCookie: lang=en_US; AppSession=5b089ed117fedd7535bfed75c7280b50; refZuPJLp1v=YzE0ZDlhNTYxZmU1NGE3NDgyYzdkZTg3YmE4MjY2MjNjYmExNjEyY2JmMDc5NWM2MDY3NGRiZmYwNTQwMmYxN%2F8mQCMVzvQbyX9namhx0ZYggjdO87Ot%2BfzW526ZkAf9; csrfToken=87ddfa04d1ffe46050d2cc9d30d9c360c780f67672a0ad0d5356f2237e64a00499534881c89e6f1ef19a4d01d46bd0874202ba831ca255f4c10895afff817375; app_visitor=Q2FrZQ%3D%3D.NGU2OGI1NTA4NGE2ZjVlZDMyMDdkYTBiMGY4ZmM0MmYxMzA0OTFmOTRlYjVkYzNjZDNjMDM0YmNjNzhjYTNmYyGPVPo1feKWcsohfi%2BqLrMEh3Hc8PBY3uvxCYNHsIL9pzhZE55GWIsv%2BlgZZDH96ePUvi6KMPBEe%2FT7CCtsmrhxishOMuKJsdc9GnyQXF1q\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"12d68-63ec26415ef07\"\r\naccept-ranges: bytes\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 864\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNft97EpbVL%2B61qXdtuosk%2F4AqVnkqyWYvSQFOgx%2FfZgEPoScbIwg%2BdzZEFauVzmCXDz8xu6ygdMvjmgdyQNh6ETo%2FoOwJBxft%2B6Xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a314adbbf885697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-09T13:28:17.380554Z","times_seen":420474,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:46 GMT","end":"Mon, 19 Jan 2026 08:35:45 GMT"},"fingerprint":{"sha1":"24:7C:52:9A:14:62:BE:F8:93:1F:AE:0D:94:C9:F5:D1:B7:6C:B1:16","sha256":"4E:59:5E:29:62:6C:9E:E6:D9:2F:72:AA:20:76:DD:CF:73:BC:E3:95:17:09:AD:C0:7B:3F:55:8E:44:6F:E9:58"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:WeE6kS7CDzd8Fo3tMrpBHqwtO4u1-A:JbvynTYc2rTM4AGI; Expires=Tue, 23-Nov-2027 14:17:51 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 14:17:51 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-1087711072:1763907471153737\u0026ifkv=ARESoU3igC21apT8dyMfh6PIKzCmJN6cFCuwS9uod1P6CDR9vs1dCZo9V8EiUlhk4aRVog4PTnNl\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: script-src 'nonce-saJ0J44Gj56oFPXTjPv1KQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":77,"dns":0,"connect":30,"send":0,"wait":38,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=b8j94jld7t50","date":"2025-11-23T14:17:52.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 19 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 356378\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-04-04T05:18:28.342811Z","times_seen":46498,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/500/5775069?excludes=\u0026oaid=08028a687bee4ab1ed77621222778b3e\u0026tgp=\u0026of=true\u0026sw_version=v1.764.1-rc-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=2\u0026pl=https%3A%2F%2Fshrinkme.click%2FZuPJLp1v\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:53.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"OPTIONS /500/5775069?excludes=\u0026oaid=08028a687bee4ab1ed77621222778b3e\u0026tgp=\u0026of=true\u0026sw_version=v1.764.1-rc-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=2\u0026pl=https%3A%2F%2Fshrinkme.click%2FZuPJLp1v\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://shrinkme.click/\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 14:17:53 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":87,"dns":1,"connect":26,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:57.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Nov 2025 19:22:36 GMT\r\nexpires: Wed, 18 Nov 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 413721\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-09T13:25:32.844996Z","times_seen":725136,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/YVpxNGgAOBJZVwBnExIdEzZMEVonf0NyDFJuFl4ODG1ETgARbUkaCw01BFAOEzUfQEYPPwURWicMEFk+VD8ndSIiMhJSChluPHw9MzQkBQwtCzZcJScLAlcmDTkmcTkSbzN1XDQSOQAiIggwVSdRLSF3ADh/Q3YvDT0+ZAA4FCllAygACA0sJQs8BD5QDBdyPCQfMF86BxQgZS8zHxkGKxYfE2YvMxc0dgAkCiBhDiQYJAwrURg9ZFo3HydiEC0DNH07JBgSBCozEzpsLys7MkNZAgMdRD0yDBVTPFADRmwvKzs0XCk5AB0BKTIwBQU/Jw8zYFozCideRRU5KFgHOR5ATAIqayN/PDlvEGAuGRYodVggHRl9TVMcJQULRGg3Z1ojOCdhBCgDN0ApMmoaBikZORJ8ElkJIHEbRGg3bT4NCCcEBFMSQFwhRzACWwYRZwZzLgZiAUVfJA","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.860Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /YVpxNGgAOBJZVwBnExIdEzZMEVonf0NyDFJuFl4ODG1ETgARbUkaCw01BFAOEzUfQEYPPwURWicMEFk+VD8ndSIiMhJSChluPHw9MzQkBQwtCzZcJScLAlcmDTkmcTkSbzN1XDQSOQAiIggwVSdRLSF3ADh/Q3YvDT0+ZAA4FCllAygACA0sJQs8BD5QDBdyPCQfMF86BxQgZS8zHxkGKxYfE2YvMxc0dgAkCiBhDiQYJAwrURg9ZFo3HydiEC0DNH07JBgSBCozEzpsLys7MkNZAgMdRD0yDBVTPFADRmwvKzs0XCk5AB0BKTIwBQU/Jw8zYFozCideRRU5KFgHOR5ATAIqayN/PDlvEGAuGRYodVggHRl9TVMcJQULRGg3Z1ojOCdhBCgDN0ApMmoaBikZORJ8ElkJIHEbRGg3bT4NCCcEBFMSQFwhRzACWwYRZwZzLgZiAUVfJA HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:45 GMT","end":"Mon, 19 Jan 2026 08:35:44 GMT"},"fingerprint":{"sha1":"88:42:9A:E3:85:29:1D:A4:9A:60:E6:5F:C1:71:A6:01:27:91:C8:BC","sha256":"6D:0F:B5:30:E0:1A:7B:ED:55:DD:26:C8:34:D0:0A:34:65:0E:E8:E4:93:E9:8C:DF:D6:3C:63:71:A9:AE:DF:D2"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 23 Nov 2025 14:17:50 GMT\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"51279bae5fe1b9d9430e0ac479bf968a","sha1":"e7d1f4b130df655e513a1789c16daad42da2fad4","sha256":"a98e2986aedb9ff6ad08933582611e3402208fd385d9f96173225b4fcc098810","sha512":"de3b20dceec2c9e9b9c9b87538bf38e10c309bd9cf9070f04e76f345435835100ce5c2753d4ab1d4eb9a3c329908f2b81f95f80fe3ba95523e18060c45e5178a","ssdeep":"","tlshash":"211132731a08f0390b7209e1e2ffcbb1e081742cf15845e8a515dac81e69dcbce04985","first_seen":"2025-11-13T21:21:49.408382Z","last_seen":"2026-01-12T12:38:30.137193Z","times_seen":8864,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":92,"dns":0,"connect":9,"send":0,"wait":20,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:37 GMT","end":"Wed, 21 Jan 2026 15:26:07 GMT"},"fingerprint":{"sha1":"9D:07:9C:6F:57:10:86:CD:16:B0:52:82:27:D1:5A:15:62:C4:01:4D","sha256":"45:86:DC:CE:A9:11:84:B3:7C:78:71:DB:1D:F8:E8:6C:0F:4A:58:72:2C:CF:60:ED:8D:11:60:CB:9F:03:63:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:51 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OIRKAsEMBLacg2WxcnOrvGcQc9S3%2FDrlTqCOYSdvx1mulRatoVGSc%2FN5j3KyfoW196U5N%2Bkkcp%2FQHEyPque47OzR%2BTT%2B5zKi%2Fp%2FY2BRDXuY%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: csu=1917978995072004@1@1763907471; SameSite=None; Secure; Max-Age=31104000\r\ncf-ray: 9a314ade58f9b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"74d47c4ce2d9fdcfbf07a16fb61d8531","sha1":"151571accc855bba19fa69045d5bf9227bde61bd","sha256":"06e3ccbea6b8648e5c783c47c86bc63140ac0c4483bb356d122b702dfa242c6c","sha512":"31061f877f7658581366bd2ac9187264725569a56f9854b5e2fead28da603da7983d579cf69b44f67d4322f3bc56c743f4246a01087891f9be1125642fed7b6a","ssdeep":"","tlshash":"2f80002088220bb0222020000800b02280b02c0028000088880af8c23203203088cea8","first_seen":"2025-11-23T14:18:20.376695Z","last_seen":"2025-11-23T14:18:20.376695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":29,"dns":5,"connect":1,"send":0,"wait":122,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 19 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 356377\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-04-04T05:18:28.342811Z","times_seen":46498,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":54,"dns":18,"connect":21,"send":0,"wait":27,"receive":94,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=b8j94jld7t50","date":"2025-11-23T14:17:53.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Nov 2025 00:15:00 GMT\r\nexpires: Thu, 27 Nov 2025 00:15:00 GMT\r\ncache-control: public, max-age=604800\r\nage: 309773\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-09T13:24:33.572307Z","times_seen":548266,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9","date":"2025-11-23T14:17:53.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 19 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 356379\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-04-04T05:18:28.342811Z","times_seen":46498,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:52.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 19 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 356378\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-04-04T05:18:28.342811Z","times_seen":46498,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":22,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/ZuPJLp1v\r\nCookie: lang=en_US; AppSession=5b089ed117fedd7535bfed75c7280b50; refZuPJLp1v=YzE0ZDlhNTYxZmU1NGE3NDgyYzdkZTg3YmE4MjY2MjNjYmExNjEyY2JmMDc5NWM2MDY3NGRiZmYwNTQwMmYxN%2F8mQCMVzvQbyX9namhx0ZYggjdO87Ot%2BfzW526ZkAf9; csrfToken=87ddfa04d1ffe46050d2cc9d30d9c360c780f67672a0ad0d5356f2237e64a00499534881c89e6f1ef19a4d01d46bd0874202ba831ca255f4c10895afff817375; app_visitor=Q2FrZQ%3D%3D.NGU2OGI1NTA4NGE2ZjVlZDMyMDdkYTBiMGY4ZmM0MmYxMzA0OTFmOTRlYjVkYzNjZDNjMDM0YmNjNzhjYTNmYyGPVPo1feKWcsohfi%2BqLrMEh3Hc8PBY3uvxCYNHsIL9pzhZE55GWIsv%2BlgZZDH96ePUvi6KMPBEe%2FT7CCtsmrhxishOMuKJsdc9GnyQXF1q\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\ncontent-type: application/javascript\r\nexpires: Sun, 23 Nov 2025 15:05:50 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uR8ym3wQ89uwVYlG7Q7BDf%2Bt%2B2q8TKLi8iNo%2FcFVWxfBOlEmwDjBXHPXm2vNhPRi9iVBQauWpxvbac5bEuznYRYMa4ZX4QmBkmPDUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a314ada6e9d5697-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-09T13:27:04.7356Z","times_seen":297451,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/ZuPJLp1v\r\nCookie: lang=en_US; AppSession=5b089ed117fedd7535bfed75c7280b50; refZuPJLp1v=YzE0ZDlhNTYxZmU1NGE3NDgyYzdkZTg3YmE4MjY2MjNjYmExNjEyY2JmMDc5NWM2MDY3NGRiZmYwNTQwMmYxN%2F8mQCMVzvQbyX9namhx0ZYggjdO87Ot%2BfzW526ZkAf9; csrfToken=87ddfa04d1ffe46050d2cc9d30d9c360c780f67672a0ad0d5356f2237e64a00499534881c89e6f1ef19a4d01d46bd0874202ba831ca255f4c10895afff817375; app_visitor=Q2FrZQ%3D%3D.NGU2OGI1NTA4NGE2ZjVlZDMyMDdkYTBiMGY4ZmM0MmYxMzA0OTFmOTRlYjVkYzNjZDNjMDM0YmNjNzhjYTNmYyGPVPo1feKWcsohfi%2BqLrMEh3Hc8PBY3uvxCYNHsIL9pzhZE55GWIsv%2BlgZZDH96ePUvi6KMPBEe%2FT7CCtsmrhxishOMuKJsdc9GnyQXF1q\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\ncontent-type: application/javascript\r\nexpires: Sun, 23 Nov 2025 15:05:50 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNq6Ci8YzeDSA31Lu0U3wuDeoKjzVauS%2FPvi%2FKWAVYETeI7aqATaaYKwfOQcAvQV%2BMwb2WmmWouCdizNG4e66zFnlcH3kJfCcYbDnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a314ada6ea05697-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-09T13:27:04.760166Z","times_seen":95864,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Nov 2025 10:02:33 GMT\r\nexpires: Fri, 20 Nov 2026 10:02:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 274517\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-04-09T12:55:54.660202Z","times_seen":6301,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":149,"dns":3,"connect":23,"send":0,"wait":9,"receive":3,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/js/script.min.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /modern_theme/build/js/script.min.js?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/ZuPJLp1v\r\nCookie: lang=en_US; AppSession=5b089ed117fedd7535bfed75c7280b50; refZuPJLp1v=YzE0ZDlhNTYxZmU1NGE3NDgyYzdkZTg3YmE4MjY2MjNjYmExNjEyY2JmMDc5NWM2MDY3NGRiZmYwNTQwMmYxN%2F8mQCMVzvQbyX9namhx0ZYggjdO87Ot%2BfzW526ZkAf9; csrfToken=87ddfa04d1ffe46050d2cc9d30d9c360c780f67672a0ad0d5356f2237e64a00499534881c89e6f1ef19a4d01d46bd0874202ba831ca255f4c10895afff817375; app_visitor=Q2FrZQ%3D%3D.NGU2OGI1NTA4NGE2ZjVlZDMyMDdkYTBiMGY4ZmM0MmYxMzA0OTFmOTRlYjVkYzNjZDNjMDM0YmNjNzhjYTNmYyGPVPo1feKWcsohfi%2BqLrMEh3Hc8PBY3uvxCYNHsIL9pzhZE55GWIsv%2BlgZZDH96ePUvi6KMPBEe%2FT7CCtsmrhxishOMuKJsdc9GnyQXF1q\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"38157-63ec26415fea7-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 21 Dec 2025 02:16:48 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 216074\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8Vs5R9l4RjRvztcGTGmfXITXZ52mRvvI%2FWYDaf8Ugq4aWj4v%2BfzDpw9gwNZfVHybIgVnxLU4e9%2FGTB4EwgWroxQsNbF5mPDWq%2F87A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a314adce8c45697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229719,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"3c977f00919d1eb2e57a7f0fd3bd884b","sha1":"b09601a36fa50e61ce9d6ac0a34c6a894a8f81c8","sha256":"5619e29a6688312b15a2cc2d693083dd00198691b1a3918b64dee75c9eeef7c9","sha512":"f22ddcb1b2fffb6b5ac4f3557dabe92ac7c18dc96ab331f610161d82a9791b10f922e62ee378e9e4d456c8575f489b07207007a7ca299ad1a7d3e75c269c9584","ssdeep":"3072:IeeIygP3fulzhsz8jlvaDioQ47GKSDYFtVbmwpcYUpQVJ:IPIy6PultluPQ47GKSAmwpZwQVJ","tlshash":"53241a89b2a1742147ab71f5417f120bf236142ee409842cb56cd9e96fb8d8d623bf7c","first_seen":"2025-09-16T23:31:20.872491Z","last_seen":"2026-04-08T14:17:28.542811Z","times_seen":185,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S419580631:1763907471196415\u0026ifkv=ARESoU3vcvW81K-OiaiIoB7JIWWWH6KLzDfWl5Dwn_yBt6tcN1AGV62i17ImtT18X_vmpSVsSDEt","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:46 GMT","end":"Mon, 19 Jan 2026 08:35:45 GMT"},"fingerprint":{"sha1":"24:7C:52:9A:14:62:BE:F8:93:1F:AE:0D:94:C9:F5:D1:B7:6C:B1:16","sha256":"4E:59:5E:29:62:6C:9E:E6:D9:2F:72:AA:20:76:DD:CF:73:BC:E3:95:17:09:AD:C0:7B:3F:55:8E:44:6F:E9:58"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S419580631:1763907471196415\u0026ifkv=ARESoU3vcvW81K-OiaiIoB7JIWWWH6KLzDfWl5Dwn_yBt6tcN1AGV62i17ImtT18X_vmpSVsSDEt HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:kWYqFNjb1Pxqe2HyX5hPkKdUgPkqxw:3zPNWrepPVpL7sur;Path=/;Expires=Tue, 23-Nov-2027 14:17:51 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 14:17:51 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S419580631%3A1763907471196415\u0026hl=en\u0026ifkv=ARESoU1S7KV3bOQnnXTYGPvS9EiCHNz9BMh_WvOR0XfjNgKm4RvuYlPoHBLeQj7hngQHlCAYtqlVGQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-_NABidL_VVwPZFh_Jy4tLw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 416\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Nov 2025 21:43:02 GMT\r\nexpires: Wed, 18 Nov 2026 21:43:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 405288\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-09T13:28:40.309578Z","times_seen":318605,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/impression/VverckX4-_QEd71iBnRl6SpjbHqX9sR30246p10NIPiM4LZTlpcfLflAOL4Ca94moHVtAWEm1bWWjbcWliQsInlRmxl1W9wQ7BD4cjtlUhGQtcb6EGg4D1QtMG2z8Q9aeew6nrOVq8I3EwjMhTmoNMRD2QKPPd3EyFtsHYhVcLj0qftu1TebBQ9bQqTu1hD48hUZea8NFI40hVdLi1X77j2T4zlWnvjhM79pr5uriF6r7j1PaQhhuC8bF2SXNUUmNgVL70A_RxuTemodEnLixhgJ5_56CvMIuz2e7pEZuisnCdTCbRiwPaIm3l4-UZflSmKRlxG3N2SxpK1-iDY-2sdQ1wQRAKhfD4psLlyVXqo4AOuakfIZx4yVRcnI2PpwCTI5gCn_m6BICe8LnWO5Fzx7G6cqWF0UtRmyIn4twMpXyzdOEpE1DLujYFb3Xeb3eoJk7J4OiJ2jPAt2586zzcR6nXJ-_hXfRABORtby5fVsMUglEA3Dlnyrajnri0yVfTkToevyqDzxoZDK2rTr1EsIxFgOxRnayqxGBvfnKZ7LdOjl7ZoUwiPcY6Bxft_nGYZxnEuDyXkEfIAnaOcdogvkCyrhtsdjxhZ-0rU9RxHX8wLaUWHfuy0mF4ukur9XNZlM3dOAHcWINWwuHYtdpgGXGus1aZPY_7kdPg==?_z=5775069\u0026sw_version=v1.764.1-rc-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FZuPJLp1v\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:57.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"GET /impression/VverckX4-_QEd71iBnRl6SpjbHqX9sR30246p10NIPiM4LZTlpcfLflAOL4Ca94moHVtAWEm1bWWjbcWliQsInlRmxl1W9wQ7BD4cjtlUhGQtcb6EGg4D1QtMG2z8Q9aeew6nrOVq8I3EwjMhTmoNMRD2QKPPd3EyFtsHYhVcLj0qftu1TebBQ9bQqTu1hD48hUZea8NFI40hVdLi1X77j2T4zlWnvjhM79pr5uriF6r7j1PaQhhuC8bF2SXNUUmNgVL70A_RxuTemodEnLixhgJ5_56CvMIuz2e7pEZuisnCdTCbRiwPaIm3l4-UZflSmKRlxG3N2SxpK1-iDY-2sdQ1wQRAKhfD4psLlyVXqo4AOuakfIZx4yVRcnI2PpwCTI5gCn_m6BICe8LnWO5Fzx7G6cqWF0UtRmyIn4twMpXyzdOEpE1DLujYFb3Xeb3eoJk7J4OiJ2jPAt2586zzcR6nXJ-_hXfRABORtby5fVsMUglEA3Dlnyrajnri0yVfTkToevyqDzxoZDK2rTr1EsIxFgOxRnayqxGBvfnKZ7LdOjl7ZoUwiPcY6Bxft_nGYZxnEuDyXkEfIAnaOcdogvkCyrhtsdjxhZ-0rU9RxHX8wLaUWHfuy0mF4ukur9XNZlM3dOAHcWINWwuHYtdpgGXGus1aZPY_7kdPg==?_z=5775069\u0026sw_version=v1.764.1-rc-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FZuPJLp1v\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nCookie: OAID=08028a687bee4ab1ed77621222778b3e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 14:17:57 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-trace-id: b667f8ea612b1f416af9fffcdea20c32\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-09T13:28:30.791999Z","times_seen":96817,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cesosfultrbriol.com/Tm4xcFNhUVIDbh05YEQ2GDQUQhUbCUE8MSAGVTEGIgNSJgoePXY1dToHVU1kd1wDSWRoHlgUbn9IQgQyOhtCTWJoB18WPHNIR01iYF0FXmB4QAdWJnNfFwQjLwkMQXU+GkUcbn9ZB0NqflkFR2N2Xgg","fqdn":"cesosfultrbriol.com","domain":"cesosfultrbriol.com","tld":"com"},"ip":{"addr":"104.21.44.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cesosfultrbriol.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 08:26:47 GMT","end":"Mon, 05 Jan 2026 09:25:24 GMT"},"fingerprint":{"sha1":"9B:01:A5:12:04:64:63:D9:8C:A6:C2:D6:9D:21:50:E0:3E:C9:7E:87","sha256":"2E:78:51:9A:BC:EF:9B:2F:8E:82:3E:C7:8E:BE:FF:CA:90:04:62:30:34:65:45:7E:28:FA:E1:77:66:2A:3A:8B"}}},"request":{"raw":"GET /Tm4xcFNhUVIDbh05YEQ2GDQUQhUbCUE8MSAGVTEGIgNSJgoePXY1dToHVU1kd1wDSWRoHlgUbn9IQgQyOhtCTWJoB18WPHNIR01iYF0FXmB4QAdWJnNfFwQjLwkMQXU+GkUcbn9ZB0NqflkFR2N2Xgg HTTP/1.1\r\nHost: cesosfultrbriol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Su0KgV3yAuKPXD5EuQ1zPX7GF6vEXRNpEU2YZc%2BON1ajX18qx696B4SjppjuPyVX%2FgiIjebtOl4S7s3Vxp2vMs5jXfnw4IduE7dFVocirPf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a314adcce3bb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":18,"dns":4,"connect":1,"send":0,"wait":126,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Nov 2025 21:43:02 GMT\r\nexpires: Wed, 18 Nov 2026 21:43:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 405288\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-09T13:28:40.309578Z","times_seen":318605,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":87,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-1087711072%3A1763907471153737\u0026hl=en\u0026ifkv=ARESoU0My9w1gbDvB7wOVMImngHVl5EZesisw_9u4qWvPbAlMz5wtDewVRs5LunQfuz4nFEFWFGI\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"BD:40:9A:DB:26:FC:C1:FF:4D:85:05:A9:F0:E9:24:BD:05:29:25:7B","sha256":"C7:A3:E4:68:D6:D8:86:E7:C6:E2:D6:E3:1D:DA:60:9A:35:7E:71:9E:F1:91:26:57:47:43:91:7C:CE:BB:07:17"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-1087711072%3A1763907471153737\u0026hl=en\u0026ifkv=ARESoU0My9w1gbDvB7wOVMImngHVl5EZesisw_9u4qWvPbAlMz5wtDewVRs5LunQfuz4nFEFWFGI\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 14:17:51 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-2PLYNQ5rPVN205sOv5XA4A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.KEYUHSehrM0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/f6d9de138441b391761a2c5253fc845c.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:53.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:06:49 GMT","end":"Fri, 13 Feb 2026 10:05:15 GMT"},"fingerprint":{"sha1":"1E:80:62:5B:0A:AE:45:C7:23:30:B5:BA:23:77:27:CF:C7:7E:2B:E5","sha256":"BD:DA:C2:A9:EA:C4:6B:B2:C8:71:38:93:D3:DF:34:10:57:C4:48:46:8C:A2:5E:BE:D1:C5:60:FD:35:71:AA:BE"}}},"request":{"raw":"GET /www/images/f6d9de138441b391761a2c5253fc845c.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 91103\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Nov 2025 11:07:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"692047f9-163df\"\r\nexpires: Mon, 24 Nov 2025 11:11:03 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 11209\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X1DYMaFJMW%2BX27QZndcqM9GdJbOnTzxjkwdIPxLszoQ7VGYycvUhGdQuTnorgCvu0y%2FupZVibNOaXNYC%2Fqlol3zRdtq0LFbrvTwvcDJj4A%3D%3D\"}]}\r\ncf-ray: 9a314aecc91d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"f6d9de138441b391761a2c5253fc845c","sha1":"066171e0d82b7add2e2e2b2c04b0dce5acdc1953","sha256":"a309d171a34a171419dc6502221dc84c796305d7b0109586b8973cce7862585f","sha512":"f8bdb9ede0a7e23cbf1c3079ec6bbcb82377af95d8f8801d88b8ee4f6a61f33ca163b00af5d112135ce1f3677be96f45eac7d561912a56acd92c41bfcb50f129","ssdeep":"1536:e+R28PuEP9WthU2rAoFRMGCoGSGn1KqY9iC5O+YjMD+gTn:RPuEEU2r9FTEl1siCY+L5n","tlshash":"3b9312c780f26b32865cd69712a6b81461600b04ede3af72677d4c637f325c6e85eb06","first_seen":"2025-11-22T06:17:52.615837Z","last_seen":"2026-02-15T16:05:00.870801Z","times_seen":49,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":36,"dns":4,"connect":1,"send":0,"wait":7,"receive":6,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/f6d9de138441b391761a2c5253fc845c.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:57.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:06:49 GMT","end":"Fri, 13 Feb 2026 10:05:15 GMT"},"fingerprint":{"sha1":"1E:80:62:5B:0A:AE:45:C7:23:30:B5:BA:23:77:27:CF:C7:7E:2B:E5","sha256":"BD:DA:C2:A9:EA:C4:6B:B2:C8:71:38:93:D3:DF:34:10:57:C4:48:46:8C:A2:5E:BE:D1:C5:60:FD:35:71:AA:BE"}}},"request":{"raw":"GET /www/images/f6d9de138441b391761a2c5253fc845c.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 14:17:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 91103\r\nlast-modified: Fri, 21 Nov 2025 11:07:37 GMT\r\npriority: u=4,i=?0\r\netag: \"692047f9-163df\"\r\nexpires: Mon, 24 Nov 2025 11:11:03 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 11214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QoOTXMS8aN%2B8n0w4%2FcYnX1rzgSNuJtiqNJe6st%2Fuwrm%2FpwHCbFXIm5tLeXdrP0idE4984djP2rR3qiF5CZdoFv8ItQt8YLvioPiBtnWslD1L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a314b063ef88deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"f6d9de138441b391761a2c5253fc845c","sha1":"066171e0d82b7add2e2e2b2c04b0dce5acdc1953","sha256":"a309d171a34a171419dc6502221dc84c796305d7b0109586b8973cce7862585f","sha512":"f8bdb9ede0a7e23cbf1c3079ec6bbcb82377af95d8f8801d88b8ee4f6a61f33ca163b00af5d112135ce1f3677be96f45eac7d561912a56acd92c41bfcb50f129","ssdeep":"1536:e+R28PuEP9WthU2rAoFRMGCoGSGn1KqY9iC5O+YjMD+gTn:RPuEEU2r9FTEl1siCY+L5n","tlshash":"3b9312c780f26b32865cd69712a6b81461600b04ede3af72677d4c637f325c6e85eb06","first_seen":"2025-11-22T06:17:52.615837Z","last_seen":"2026-02-15T16:05:00.870801Z","times_seen":49,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,700%7CMuli:300,300i,400","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Montserrat:400,700%7CMuli:300,300i,400 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Nov 2025 14:17:50 GMT\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7099,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2bc70e2429cfe4bf248107fb862aa803","sha1":"6591a064c29035df798b717f644d313e8aec28a4","sha256":"3c940a7938e39750cc9bd218d44d73c3f19bfbdac74937e87516f025bceb6188","sha512":"27acffe1a2d499342cc08f1e079cba61ee93aa2cbe7af7c12107dac9a1b6fe3b112f5ec848cc471c23eaf7a7ab1a74e10c38884126a82b46676d6964a53af79f","ssdeep":"192:qRa7h5OsuQRD780ORurnlmlJ8lxqLBmL8XL4mWH:+SVnbnQ8Tw0","tlshash":"20e1d151042be500a7872cca63cf7e31de4e7165b494c535affe1ca8aca6c366321b6d","first_seen":"2025-09-09T04:58:13.382403Z","last_seen":"2026-04-08T14:17:28.518499Z","times_seen":238,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":118,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/dyyehuis8.png","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 07:18:54 GMT","end":"Sun, 08 Feb 2026 08:16:40 GMT"},"fingerprint":{"sha1":"9A:08:FE:79:0C:A8:6A:14:E1:74:D1:86:A4:F6:52:0D:AB:44:14:06","sha256":"D1:95:64:22:D7:7C:35:C7:0D:1F:F0:F6:92:76:91:03:CB:62:1D:19:8C:4A:4A:56:63:A6:C5:A9:BA:1C:F9:65"}}},"request":{"raw":"GET /dyyehuis8.png HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 13368\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"3438-63ec202aa9a96\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 14:07:49 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 5875801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEkiz3MRxSB4k20aGrxlmkdJ4s1NSr4n5SaeJTbkgggSlxLbjGQnZddTa5bfYDW7mglsWjZv4Xbi0hiXkaPa1H%2BfLyJoXZPSUw%3D%3D\"}]}\r\ncf-ray: 9a314adacb3a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 154, 8-bit colormap, non-interlaced","md5":"f293daf49bd343c38ae34614fa67a414","sha1":"b53a204e0c385f2fa62fb57de5ba26dfc6920d3a","sha256":"c2baa90aafc484c676f4d9365c6f37b41ed50a5f21bc07eab9ad57ddb546f48d","sha512":"b713ac065171c0103eb9dd3791bc92a068b833a7ff7b3aef31c077a32b929592893eb29f079d34cf587c4ab2f5a8d6c2e16493cc1218d71863de8a1afecfc23d","ssdeep":"384:s6/H0Od7dqWkScyrJHwNa3XiIlO3bhs9Sdmjtc8V:s6/HXd7d4SzrJHwNa31mbhs1jtjV","tlshash":"b652c053f695783d21994a7a857d0ba903e0ee653e2cb4d30688de7c859a0143c0dfab","first_seen":"2023-10-14T22:14:02Z","last_seen":"2026-04-08T14:17:28.533921Z","times_seen":856,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5Q2KMLS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:51.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtm.js?id=GTM-5Q2KMLS HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 23 Nov 2025 14:17:51 GMT\r\nexpires: Sun, 23 Nov 2025 14:17:51 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 23 Nov 2025 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 108415\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319812,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5372)","md5":"1af6b98e0e9242f791977a77f0efe4c1","sha1":"0a9413bd9b3dddaf61a0e54939242be326fc2e76","sha256":"9de39403e65d0c42bf5c157d724642e250a8c8531a4b091fffd0226cac9833ec","sha512":"a79e642e5ebba7f90e5a356c4d2e798147051f348205f62d17f78ca4ab7522d87b170fdb2b7750d4592fd13fb35797f9d88c72b06ce8f6be9177ade94fe471ee","ssdeep":"3072:G0avNCt05vkzUrnMo0ulFe1dRGeefSJQWfQXr2XdArNbE0fcVWo6O7nGQUO7UkGx:LtBULt+eUI2X6u0UVWo6O7GQUO7UkGx","tlshash":"a76417cdb3d6742243e2a478503f118ba17b68d2f84cc895f186d9d52e70aaa4277f7c","first_seen":"2025-11-23T14:18:20.40973Z","last_seen":"2025-11-23T14:18:20.40973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":83,"dns":5,"connect":21,"send":0,"wait":43,"receive":50,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:52.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:37:01 GMT","end":"Sat, 24 Jan 2026 16:36:49 GMT"},"fingerprint":{"sha1":"84:49:FF:DC:BD:D8:BA:3D:2F:25:0B:EF:CA:E4:6D:73:79:8C:F9:7D","sha256":"AF:21:94:4D:14:07:CF:FC:E5:3C:3C:F4:AC:47:9E:83:98:6A:62:87:FB:8C:27:43:25:FB:97:CC:47:15:99:4A"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 14:17:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08028a687bee4ab1ed77621222778b3e; expires=Mon, 23 Nov 2026 14:17:52 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9a314ae54dc9b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6bd7eca0506bde2ad02d01c93eab1989","sha1":"03e9a7331bbae0c86a8b02f4f6a115570939c0b1","sha256":"8421383cbf1ad3a2ff358cd0059ad0018b70843b4ff67e3021e23c7a4f909979","sha512":"7f0acf21041b48e90b2c960292b9144fccb09cd911bb6a0bc563db2654559fd7c7609e9c222403960bff88fcb268afd0773556c87cda7dd7b80ce535578ac3e9","ssdeep":"","tlshash":"4da00294c5ac29c481e8672ade568f8285545442a80c5fc983f9805e19ab59c9946760","first_seen":"2025-11-23T14:18:20.41441Z","last_seen":"2025-11-23T14:18:20.41441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":32,"dns":7,"connect":1,"send":0,"wait":42,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e5bi1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:52.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e5bi1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 23 Nov 2025 14:17:52 GMT\r\nexpires: Sun, 23 Nov 2025 14:17:52 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143309\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":431379,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"d1f1684551323f03ac1f542ad7e845de","sha1":"4720569cd2a371a5cb80facf81e7020b21cc4e07","sha256":"fc54fa5727bdb8c7a3551bbea51dae83dda1c288c8bbc2d98972fe1d14e4ffd7","sha512":"ca7aebb9657952709718f189b53c77b93cf235d93a36aca60ada4f1256e4b02a6a0e6092d6a5c9c78cf2e3d12ee1e4f68ff0d2e977e1707792c86150580dacba","ssdeep":"6144:fJPiBUKitJeUI2XVUULUVWo6O7GQEO7QZ2ElVFBoOr+Lu:xP2Di2UnVUUtO7QZ/","tlshash":"61941ace73d674225396f078502f018ba57b28a2b45cc896f1c9cde42e74a9a4277f7c","first_seen":"2025-11-23T14:18:20.417154Z","last_seen":"2025-11-23T14:18:20.417154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=b8j94jld7t50","date":"2025-11-23T14:17:52.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42505\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Nov 2025 00:45:32 GMT\r\nexpires: Wed, 18 Nov 2026 00:45:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 480740\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7b035012fa886d53fb1f1e7d14635b97","sha1":"03c77a04fecbca19d5555d6ae876291d3b7973c1","sha256":"4d271d0650a8fb32c6ea7055f6ab8e7edce63e3868aa0a7b4ba03b56f069099f","sha512":"765bec023e54b64c7c93cd75e55320bc5e524dc24b2fd474e5ca63dbcc2bf2106464ac13cb72ed3949816463281c3715ae4edd5e3a11befd0af2ee255c53e89e","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIUCdthXwW5l1Dx7:1GRFauOxLA/+IcTOULX1","tlshash":"d8838f7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db19a8253b07","first_seen":"2025-11-13T21:19:52.249776Z","last_seen":"2026-02-22T14:16:54.110663Z","times_seen":40042,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34gjfm75zhp78.cloudfront.net/?mfjgd=792297","fqdn":"d34gjfm75zhp78.cloudfront.net","domain":"d34gjfm75zhp78.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.132","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:50.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?mfjgd=792297 HTTP/1.1\r\nHost: d34gjfm75zhp78.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 79147\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Sun, 23 Nov 2025 14:17:49 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 9tOxw85Xo48VYB7J2nwBSQknwbSpFrUnAbuloEvzcPZE9ps5xl7YZg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":232362,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"771360981a3ab91bb01ad9d55246ad41","sha1":"bca70024acb700b6b290c79d4d0b6ff667175b61","sha256":"e874f90c5e970650ab05a0886056a60db7b0a16f3c5a4214e2f6815c9c9df041","sha512":"2283cfd771220a68f5cba2429f018d01951d99a6d4745957d39704b22956f7607e37032aa670cddd95486f9ffa37e002e46f6912cb93effd548533afe2d5f823","ssdeep":"3072:XBUNPgDYzi07L02raYDbe+Y5UKS+7L0x2ib+Zc53+Zc0M8El:XuN4DUi07w2rnXUZU3+iAI","tlshash":"cb345cc9ba923469836374b540bf124ab23f5a69bc084dd4f496d4d07db8d0a437bfac","first_seen":"2025-11-23T14:18:20.419115Z","last_seen":"2025-11-23T14:18:20.419115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":59,"dns":45,"connect":1,"send":0,"wait":177,"receive":4,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=d00e2a44-a8aa-4204-956e-b3e90c6acf9c","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:53.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=d00e2a44-a8aa-4204-956e-b3e90c6acf9c HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1402\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1402,"data":"L\u001bRR\u001f\u001c\u0026\u001c\u0014\u0005g\u001f\u001cK\u0012\u0003\u0001\u0005P\u000eL_\u0003\u000e\u0011\u001aX\u0016\u0010JO@T\u0005\u000fT\u0011\u0003\u001e\u000eP\u0018L\u001fA\u001b\t\u00147\u0001\n\tWN\u001a\u001b\tICPZGP@\u0014\u0002\u0015\u0003\u0003\u001aX\u0013\u000eJOS\nQI\u0015C\u001d\u0006IH\u0005^_\u0003\u0015\u0011A\u0013\u0013[RDP\u0000YU\u001b\u0016\u0003\u0006IH\u0005^_\u0003\u0015\u0011A\u0002FCXY@O\u0010[\u0003QFL\u0002\n\u0016T]\u001b\u001bDP\u0019FCZY@K\b\u0011\u001b[[^YF\u0018L\u001e_\u001b\t\u0007JVMDW\u0011OKC\bSR^GPG\u000f\u001a\u0015\u0003\u0002\u0004BTUJ\u0001\u0011g\r\u001cM\u0004\t\u001a\u000e\u0016\u0016T]\u001b\u001bYE\u000f\u0005[RW/W\u0013\u0010U\r\u000bA^\\\u0004NE`P]R\u0015\u0013\nH;6\u0018XI\u0017QQN\u003c\u001bZXY\f\u0019K\u0000N_Y\u001a\u0003X\tZM\u0017QCN,\u0017W\u0005\u0002\u0018\u000b\u0003\u0007JTHXDB~\u0000\u000b\\\u0007\u0005\u0016DC\u0007ZC\u0007\u001b\u001f\u0014\u0014\u0014[RDN\u001a\u0019\u001d\u001b[H\u0007\u0005\u0006Q\u001c\u0003VU\u001eF\u001e\u0002T\u001e\u001c\u0007O\f\u000b\u0003\b\u0019\u003e\"I]\u0000\u0019RK]W\u0016I\t\f\u0013ON\u0000\u001cN\u0004\u0018T\u0002\u0001d'V^WGS\b\n\u0018\u0004X\u0012\\\u000fTO\b\u000f\u0019\u000e\u0000\u000e\u0007\u001egp\b_\u0014\u0010\u001c\u001a\u001b\u0003TD\t]\u0007G\u0018\u0002\u0017C\u000b\u001f\rP@f3_\u0010\u0006\u0001\u0007J\u0007\u0018UL\u001a\n\r_B\u0007\b@\\A\f\u0013\u0017)!N@\u0014K\fP\u0005HT\u0005\u0007X\u0002A\u0015]APX^[JY@H\u0005[\u0003C\u0002\u001a\u001f\u0002GTB\u0018J[D\u0013\n\u0012\u0005\u0010L[\u0005\u0010Z\nE4\u001e\"~\"\u001d\u0006O\u0011\u001aX\n\u001eJOR\u0014K\rCCPL\u003e\u0026wLA\u0015WQ\u0014@UUJ\u001b\u0003HKC\u001b6\u0003\u0000X@\u0016BOGM\u0011\fJH[\r\u0003\u0003TKC\nVFL\u0003\u0011\u0016TY\u000f\u0015\u0011R\u0017FCEDN\u001a\u001b\rMCPCZ^\u0016\r\u0005hVQ\\X^IDW\fOKC\bMH\u0019\u000fP\u000e\b\f[JV\u001aX\u000b\n\u000b\u0005\u0017\u001aS[u\b\u0004\u001b\u0013RLV[h\u000f\u0007\u0014VF\u0011\u0001\u0011\u0006]\u0007[\u0003\u0007\u000b\u0002\u0018\u0017\u0018L\u000e_f\\T\u0010;\u0010\u0006\u0011\u0007@KC\u0014PFL\u001c\u001bZ1\u0006R@@i\u0016\u0001\u0017\u000f\u0001\n\u001aSK\u0001YFL\b\u001dX\u0001\u001fh]VF\u000e\f[RGV\u0014K\u000f\\\u000f\u000e\u0001\u0019P\u000eLO\u001b\u001bTW\u0017\u0001\t\t\u0011\u0011\u001aSI\u0015C\u0004\u0002IH\u0016\u000b\u0003\u001al`\u0014VF\u0017\u0004\u0006@\u0002K\u001cWL?=G\u0017ZLA\u0015Z\\Z\u0015\u0016\u0026\u000f\u0014\u000fM\u001d[\u0003C\u0019\u001c\f\u0010\u0016BOG__\u0014@F[DW\u0001T\u001d[\u0003\u001a\u0017BI\u0002X\u000f\u0019QVA[%\u0000\u001c\u001c\u0010\u0001L\u0006\u000b\u001b[\u0011L\u0002\u0001k\u000f\u0003SK\\_\u001eFC\u000e\u0014\u000eK\fU\u001b\b\u00191\u001f\u0000]\n\bYM\u0011\f\u001c\u0005\u0015\u001b\u0010N\u001a\u0000\nf\u0002\u0002\u001c\u0004\u001f]\u001b\u0000h\u0001\u0005i\u0015\u0016\u0026\u0006\u0010\u0015]\u001b[\u0003\u0007\u000b\u0002\u0018\u0017\u0018L\u0004DfP^\b\u000b\u0014\u0001\u0000\u000f\u001aS\u001fX\r\u0019\u000bGP]\u001d2R]TSX^\u001f\t\u0019\u0011]E[P\u00125\t\u000e\u0011_\u0001O\rMAC\u001fH[\u0001\u0006=O\f\u001bf\n\u0003\u001aIHR\u000f\u0001D\\\u001f\u0014\u0013\u0017\u0026\u001f\u0010\u0000g\u0002\u0010M\u003e\\^]-[\u001c2Y\\DS\bFC\u000e\u0014\u000eK\fU\u001b\b\u00191\u000f\u0017G\u0005\u0019XIlE\u001b\u0002\u0018\u001a\u001c@\u0002\u000f\u0018U\u0012\u000fBI\u001bG1\u000e_K\\[\u0013\u0011\u00147\u001a\u0012]\u001b\u0018\u001b[\f\u000f\u0007\u0001Q\u0013A\u0015WVEX^[Y@T\n]M\u0001PSVI^\u0016\r\u0001^\\]B%\r\u001dJO@\t\r\u001b\u0000P\\W\r_\r^\u000b\u0003\u0014\u0007TH\u0000T\n@S\u000fD\u001bZU]\u000f\n\u0010\u0005W\u000e\u0006_\u0011\u001aX\u0005\u001f\u000e\u001c\u000eQ\b\r\\\u003e\u0003\nIH\u0016LA\u0015MAW\u001c\u0002\u0010\u000b*\u0011W\u001c\u000bZ\u00045\u0007\u000fP\u000eLX\u0000\u000e\u0006\u0006L][DW\u0003\\\u001f\u001cK\u0015\u0003\u001d\u000e\u0000k\u0007\t\u0015\u0003\u0011\u0014VF\u001a\t\u0018\u0012Y\u0000\u001eW\u003e\u0003\nIH\u0016LA\u0015ZFE\u000e\u000b\u00147\u001c\u0006gX[\u0003C\u001a\u001b\u0018\u001a_\u0007\u0003\u0015\u0015\u0011U\u000f\u0017\r\u0007\u0018=Q\r\u0026\u000bCPLI^\u0016\r\u0001^ZXi\u0013\u0000[RW\u000e\u0000\u0002\u0017\u0014\u0017\u001c\\\u001e\u000bC\u0018\b\u0001A\u0011\u001aX\u0007\u0016\u001b\u0001@\u0002K[\u0015C\u0007\u000b\u001f\u001a[\nO\r\u001bPW\u0019\f\u001cE\u001f\u0011\u0015\u001d\u0018^CFL\u0019-A\u0007\t\u0015\u0003\u0011RJT\u001cZ\u0014V\fD\u0018\u0001\u0000\u000bC_@\u0004Z@\u000e\f\u0005SW\u0006J\rLR[_\u0018Z\u0007S\rI^\u0016\u0001\fhPW\u0014@FIPEP\u0000\bO\u0001V\b\u000b\u000eFU\f\\R]\u0004\u0001LVHZGP\u000f^A[R\u000fLGPU\n\t^MZY\u0014\u0005\u00157\u001c\u0006KKCb\u003c\u0017"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sun, 23 Nov 2025 14:17:53 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://shrinkme.click\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-04-09T13:10:28.813147Z","times_seen":56089,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":149,"dns":4,"connect":26,"send":0,"wait":27,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA7QI2ojrHWiDidq55Z5LQWtrUf6ax0DOedT0QASSnw1ZLkglrgF5DttmeHsfqyANBJoUqFKibFgbxgn4IsR6FMuvEuAzw","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/ZuPJLp1v","date":"2025-11-23T14:17:54.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"16:F0:F2:6E:23:A1:95:F7:75:EA:70:AB:6F:D4:43:F3:BE:AA:FE:CD","sha256":"F0:41:ED:B6:DC:74:0C:CE:3C:DF:0C:20:73:B9:C1:3C:73:D4:E2:7D:2B:DC:30:F1:80:AE:20:7B:97:78:33:80"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA7QI2ojrHWiDidq55Z5LQWtrUf6ax0DOedT0QASSnw1ZLkglrgF5DttmeHsfqyANBJoUqFKibFgbxgn4IsR6FMuvEuAzw HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 14:17:54 GMT\r\ncontent-security-policy: script-src 'nonce-Pw2A5EQzb0bchjUcRJ5TIw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7626,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"453b2c37468db2b2f0a1d8a988c76839","sha1":"ade6dc13c4f24b32b41827901550a6080d392614","sha256":"75f8bc239c31a049d5416976a04f6cd7b18f29dd5779daaa197764d03b8144e4","sha512":"9227ddc7417a60d6801c7fec073127c9928e27c255502da68d6490190066cac1d8f1c54f10bae9f78a09c895279551bd0d048ffa7cd46de4e273f1cc036765d5","ssdeep":"192:NjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpKfXV:M+tI/y6yekn+f8QZRtpGKuBjdu+fXV","tlshash":"fcf1ac90081a9400ab930cd273cf3e36ed4f51167146c8b6abfd59a8ede7d27925474d","first_seen":"2025-11-23T14:18:20.421985Z","last_seen":"2025-11-23T14:18:20.421985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}