shrinke.me/LyTiG
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /LyTiG HTTP/1.1
Host: shrinke.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 19 Nov 2022 19:54:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 19 Nov 2022 20:54:40 GMT
Location: https://shrinke.me/LyTiG
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JGIh%2FE5LLlSnpeJIx%2BMPaW%2Fq5SJus9A7Hkx6puVvTZMBpdMqOJeUIOlrr2YGGIpa8YXs6D8iTIMzSiwVTk4KCS5QwtIpH%2BHbzPD7xXkxgS%2Bt1I4uHv6F%2B3yHAfIm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76cb7fc598aab524-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eb76c0b3adf4098ad8a9d1e38250758f
99610ddb2b4ec6d04250ac244f966951695d4f00
01ed8c191c175471aee23cbc196d558e5bf5209f166806fc97db08eb06544bab
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01ED8C191C175471AEE23CBC196D558E5BF5209F166806FC97DB08EB06544BAB"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14194
Expires: Sat, 19 Nov 2022 23:51:15 GMT
Date: Sat, 19 Nov 2022 19:54:41 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f732c50f6a2482aeea20552e0370c2d0
6f33119d5c38e92a0a62f3a46766ff86014e4d68
a47e38c199c5fecd5594544a3889e1cfca5547d85f19056f06eaeeadf17f4fe9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5962
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Last-Modified: Sat, 19 Nov 2022 18:15:19 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1cee7787feebac18f9eca273e56e3741
3a7dac544172921e24c2a1701beef5079b21d01b
79ff4a450c749d64e116c00ca3b00d40e968906c5c3881d6eeb2dc6374a4c858
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "79FF4A450C749D64E116C00CA3B00D40E968906C5C3881D6EEB2DC6374A4C858"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11675
Expires: Sat, 19 Nov 2022 23:09:16 GMT
Date: Sat, 19 Nov 2022 19:54:41 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 19 Nov 2022 19:44:58 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 583
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1F2Vgbbspl43yXCpDe+SsnSUx82aSh9AluQASU62EkXK5/7t29Z1BqS/3fUBVuaX7x8wHzJyM9s=
x-amz-request-id: 80G4VB5S7EJTJKEA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 19 Nov 2022 19:41:25 GMT
age: 796
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 19:54:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 389 B IP
Hash bc5acc9fefbd93b579d09def1021fe57
34172fbddcb5d1045e42927cb1bcefdd9598215f
e9223bbce4ed72dc6ccdcc18eee65fd093af7681b235e3e5fcdb13a59b8b8d26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2080
Cache-Control: max-age=119813
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Etag: "63785d66-117"
Expires: Mon, 21 Nov 2022 05:11:34 GMT
Last-Modified: Sat, 19 Nov 2022 04:36:54 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07caf241d63e15426cd26434ef88e9dd
ec289ab860ffccd49ce9a62d2c47c59dc181fbd5
d1f4bc6604b8a399049b5943d23dbfb842d9a100bf6f5c71e91a27cd3588cecb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 68257de2fadc955237236bc9b3895112
05ab77e3300de791a0e47343124d062618c5bde4
ac04974ab46f377193192e6920076dcc8be70ead9dd37ccd71aadf1ef803e949
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=142929
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Etag: "6378bfd2-118"
Expires: Mon, 21 Nov 2022 11:36:50 GMT
Last-Modified: Sat, 19 Nov 2022 11:36:50 GMT
Server: nginx
Content-Length: 280
shrinkme.io/logo-sm.webp
200 OK 31 kB IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 53658e8a7ae22169e5b89744bfa9f9cc
157a684bdf8e3be19cbfabc80cf3a53bfbeaa175
9777428de88c524584f0133c3c0d9becf5a3840597eb16dc873bbc29b9a0bf58
GET /logo-sm.webp HTTP/1.1
Host: shrinkme.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:41 GMT
content-type: image/webp
content-length: 31236
x-frame-options: SAMEORIGIN
last-modified: Tue, 31 Mar 2020 12:16:00 GMT
etag: "7a04-5a22587d62000"
cache-control: max-age=31536000
expires: Sat, 26 Aug 2023 06:24:09 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 7392632
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JUQHFNRIjzTWny4P0xK1VvDoZn%2FpHq12iHlM7S5xJLXX68llkBLaw1NFHM5jH6M9Z5%2BElnPhZocgambi019gnlv%2F7Fv3zKHFvYogGKc8FvtJ97XCXd37%2FcOLdzPyLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76cb7fc93a920b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 94a8f4eb4e4b14271ef2c7aaee6cadd8
57a48620efbd20848eaead634f4795c6a6f39653
a73964461dc52e5111459ef45fb47e1ae8f7d0b6253cfe19c2204a7e56c5f197
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=117733
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Etag: "63785d66-117"
Expires: Mon, 21 Nov 2022 04:36:54 GMT
Last-Modified: Sat, 19 Nov 2022 04:36:54 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash 68257de2fadc955237236bc9b3895112
05ab77e3300de791a0e47343124d062618c5bde4
ac04974ab46f377193192e6920076dcc8be70ead9dd37ccd71aadf1ef803e949
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5564
Cache-Control: max-age=148493
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Etag: "6378bfd2-118"
Expires: Mon, 21 Nov 2022 13:09:34 GMT
Last-Modified: Sat, 19 Nov 2022 11:36:50 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07caf241d63e15426cd26434ef88e9dd
ec289ab860ffccd49ce9a62d2c47c59dc181fbd5
d1f4bc6604b8a399049b5943d23dbfb842d9a100bf6f5c71e91a27cd3588cecb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d301cxwfymy227.cloudfront.net/?fwxcd=792297
200 OK 98 kB URL HTTP/2 d301cxwfymy227.cloudfront.net/?fwxcd=792297
IP
File type Unicode text, UTF-8 text, with very long lines (15945)
Hash 47dbc931351c14636f02550ce685f827
beef18174543f9b23b2931fb65c3c07be917ad2c
80fbccccefd091c9894ccb4c668f2240bb261d269388671a7e26c078fe1066aa
GET /?fwxcd=792297 HTTP/1.1
Host: d301cxwfymy227.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 97912
date: Sat, 19 Nov 2022 19:54:41 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GRPU2VkvqLxnk06D3wKPb49eDVYHTKuW4xtWpReppbr8VSD-VoipUw==
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 19 Nov 2022 19:25:01 GMT
cache-control: public,max-age=3600
age: 1780
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
shrinke.me/LyTiG
200 OK 30 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (49388), with CRLF, LF line terminators
Hash 7a4dcb0f3da9a2274cad6d0cc81d5526
224bd6dc67104a2b00f46f7d22efadecd3e82e1f
825c3ba7c5f4f0218b0c97554dc9a1e98b3afc81368baaeb0b5470b20ac4d8f9
GET /LyTiG HTTP/1.1
Host: shrinke.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:41 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-robots-tag: noindex, nofollow
set-cookie: lang=en_US; expires=Tue, 14-Nov-2023 19:54:41 GMT; Max-Age=31104000; path=/
AppSession=64ac313dbe6033894988988e4c55a34c; path=/; HttpOnly
csrfToken=410c99ca6acbd60fb8449c79adc60f72cee26ebc04d86c86cad29a9899ef1c61ec4a0e4dc7a80f2da28c4f3011f2718ecb45e89885223bc3bc260b5d59209c19; path=/; HttpOnly
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JrtpkozH0HcG3RUNXzXKOFv0Z1rqwHKbdy17s8eN79LwecfE%2FG5Mzl9459uAiquvjA176EKFQV%2BOGIHeBUbdGgwaEvuWjzikhOzhK8AANLfMEZwXzpaFxg8aHg8l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76cb7fc748c81c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tags.orquideassp.com/tag/11628
200 OK 823 B URL HTTP/2 tags.orquideassp.com/tag/11628
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash 2e18ffb86f956634ec5dc4a6c2e13301
6f5a9fe45942e1a6ed1d4f33c915667ab87a6c53
ce36f676ef8ce52a9213048f1a08b0bb84d9c42597d327d4844feb68f368ab44
GET /tag/11628 HTTP/1.1
Host: tags.orquideassp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 823
server: nginx/1.16.1
access-control-allow-origin: *
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
date: Sat, 19 Nov 2022 19:50:39 GMT
etag: W/"337-b1qf5FlC4abtHU8zyRVmerh6bFM"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TJrTPb-r6vEA8UDkulNfwr7NRyTTKZmJusKAcpfzaTNjKDX_n-5lig==
age: 1475
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/XXnBTMRkp_8
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/XXnBTMRkp_8
IP
Hash af66a419451375aa5ed007982ec8452d
ac079008ae0f2e65a61d54722c85948e8c07d27c
83060c182bb931c9a3a50c43647aa658a848aa6ee349345fa56b0488dbd1fca1
POST /s/gts1p5/XXnBTMRkp_8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
code.jquery.com/jquery-2.2.4.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-2.2.4.min.js
IP
File type ASCII text, with very long lines (32065)
Hash 82885772205f23cd59e25a221521b059
96ed36f45544295f28df1ab251e7e38faceeff0e
8e85465daae15b31a1837a4112cf920c1eeec7a5c189595651b3a53cb9b97215
GET /jquery-2.2.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:41 GMT
content-encoding: gzip
content-length: 29811
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-14e4a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1668887681.dop001.sk1.t,1668887681.cds067.sk1.hn,1668887681.cds214.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/XXnBTMRkp_8
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/XXnBTMRkp_8
IP
Hash af66a419451375aa5ed007982ec8452d
ac079008ae0f2e65a61d54722c85948e8c07d27c
83060c182bb931c9a3a50c43647aa658a848aa6ee349345fa56b0488dbd1fca1
POST /s/gts1p5/XXnBTMRkp_8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 152b9df306bcb43ccc96a66a6d87c9c3
fabcf7acd72dfdb21ac72848f5e89aabb843b258
0640c4b42bbd466abac082e6329da84a80885682d1d464b9a0fff8b3ff7679c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/XXnBTMRkp_8
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/XXnBTMRkp_8
IP
Hash af66a419451375aa5ed007982ec8452d
ac079008ae0f2e65a61d54722c85948e8c07d27c
83060c182bb931c9a3a50c43647aa658a848aa6ee349345fa56b0488dbd1fca1
POST /s/gts1p5/XXnBTMRkp_8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c58de690a701dea26333a42815dc3003
91d9e60c285f6578b5d814901a90f52cafbb8790
179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f17b03be491bcd758ad58f33ac7c094c
c02829213f2c3afc21026a24b413585804ba17de
e4085af005b24bc39492d37826b238a7e32d85037c9dcfc658171e73325ec0d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/lPMK3rCZ68Y
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/lPMK3rCZ68Y
IP
Hash db7e0b2a59fdf43e9400d7999f1089f9
d5f472d34eefbd7301a6787e6116ba273ee08721
482e7e8e9615f052320223ef5e4d7eaf275ddde84296fe922cc284e33d0de644
POST /s/gts1p5/lPMK3rCZ68Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 16:40:18 GMT
expires: Fri, 17 Nov 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 184463
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c58de690a701dea26333a42815dc3003
91d9e60c285f6578b5d814901a90f52cafbb8790
179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/XXnBTMRkp_8
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/XXnBTMRkp_8
IP
Hash af66a419451375aa5ed007982ec8452d
ac079008ae0f2e65a61d54722c85948e8c07d27c
83060c182bb931c9a3a50c43647aa658a848aa6ee349345fa56b0488dbd1fca1
POST /s/gts1p5/XXnBTMRkp_8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.adtrue.com/rtb/async.js
200 OK 65 kB URL HTTP/2 cdn.adtrue.com/rtb/async.js
IP
File type HTML document, ASCII text, with very long lines (7327), with no line terminators
Hash 54ed3db3637ee2ee206fdf1997675e4e
cd535dd3ff35195110f93b945d43ba6ee6b4091c
97820e5e7881afb281d9c7241bd8e1e02e7f8fd58dbb3cd1ff632e43f141367a
GET /rtb/async.js HTTP/1.1
Host: cdn.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:41 GMT
content-type: application/javascript
last-modified: Mon, 16 Nov 2020 01:20:45 GMT
etag: W/"5fb1d3ed-1c9f"
expires: Sun, 24 Sep 2023 03:46:20 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
cf-cache-status: HIT
age: 4464501
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ap8TUXmX0pUGSdp6bYwbdSusEkQitAz3hNHrrHE9Tzv%2BY4C2n7vwDO5JPbb6hBMNnHLUTLmysao7EE6SQVSzJ33KZhidQ0EU%2FIREd6uZ8YfbJ9Eh1L3l3S81cSkalws7JQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fc8cc8ab4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
200 OK 583 B URL HTTP/2 www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
IP
File type ASCII text, with very long lines (921), with no line terminators
Hash 6c064532ae9b3b8278a9d00701c75021
65cd4fbe613e8805d867dffa12cb29569419254d
ee4a48e1244ff8836f0b808d40bab0dc14b4702a3195920c6c600dcae3302bfa
GET /recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 19 Nov 2022 19:54:41 GMT
date: Sat, 19 Nov 2022 19:54:41 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 583
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31196, version 1.0\012- data
Hash ea2343c7dccad57360fb611d67204445
b603d9e68bb1ed5e4b33d5e31121160cb4d23452
2a04078f9550381b5148170ceaf5b378a1b31ed8274c6d0094aeba6f599462cc
GET /s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31196
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 06:19:58 GMT
expires: Fri, 17 Nov 2023 06:19:58 GMT
cache-control: public, max-age=31536000
age: 221683
last-modified: Mon, 11 Jul 2022 20:43:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-137383949-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-137383949-1
IP
File type ASCII text, with very long lines (1921)
Hash efb56f9cd3500d38cefdce76fc9a3c88
93d4008758a4883897e4c59c2c1724e1ffa33e06
d9c12fb78fb634912ef75f49c50244478423652d51d8fe2a610acc34a33313da
GET /gtag/js?id=UA-137383949-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 19 Nov 2022 19:54:41 GMT
expires: Sat, 19 Nov 2022 19:54:41 GMT
cache-control: private, max-age=900
last-modified: Sat, 19 Nov 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43594
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c58de690a701dea26333a42815dc3003
91d9e60c285f6578b5d814901a90f52cafbb8790
179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
particinepartm.com/NG9BR0UbUCI0eFc4NXcfcT0CHy5yOyUCA1E+Fw12ZykxAxMHPmczLFBSdn53BlZ5YTVdC3x2fRIcNSYxQRx8dmNdAScoeBIZfHZrBEFzaXQSGnx2Y0AfICB4BUkxMzFYUnBxcwxXeXBzDF52d3U
204 No Content 0 B URL HTTP/2 particinepartm.com/NG9BR0UbUCI0eFc4NXcfcT0CHy5yOyUCA1E+Fw12ZykxAxMHPmczLFBSdn53BlZ5YTVdC3x2fRIcNSYxQRx8dmNdAScoeBIZfHZrBEFzaXQSGnx2Y0AfICB4BUkxMzFYUnBxcwxXeXBzDF52d3U
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NG9BR0UbUCI0eFc4NXcfcT0CHy5yOyUCA1E+Fw12ZykxAxMHPmczLFBSdn53BlZ5YTVdC3x2fRIcNSYxQRx8dmNdAScoeBIZfHZrBEFzaXQSGnx2Y0AfICB4BUkxMzFYUnBxcwxXeXBzDF52d3U HTTP/1.1
Host: particinepartm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 19 Nov 2022 19:54:42 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fk%2F%2Fh5p2do5Aad%2FUplUx7xQvDUfxFcQZzeQjB0fjXfdLDPIT445TEaI3y2yN6FBtvrbv3pQkQuUNE%2BxVRgPK5qGz%2FtlrRWJKq7CsU38RyMtnsLS0zJr5eeZ5GcMdZgz10e6hGCs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76cb7fcbfa2fb51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d24yj1kykxwq2x.cloudfront.net/ZUpoOEUEKAtVegR3Ch4wFyZVHXcjb1p+IVZ6WVs9EiwRVTxXeF8WJgklHVwjFyUGTGsLLxwddyMDJWATMR8EXBYiIFgIJCAfC3Z3XC0rfSENK1p5HS0zKQEKMAwhfi0kAgtSBB0NEHJ3KwkhHXcnKT1tFSt4UVYDHSERaAEkBz1CHF0EKUAAAR4lQhBVIgZcBisIL1ItEwMueRQrDikBFCcbEWgdIw8uf3FAeC53ABYpOEJxVwwtWxM/eQN6ECIMAV51PCk4bBxRGA9idzwNDF4EPRAPYjInDA5vDxwLAlx3PA0Mfw0hewNhPTcNLWAhCQs5CSk/JCF7C1ZnMl8fVQcsXCggHSl9EwgsL1scMA0uUQgjGz93AVQzKUILDRMFYQc3HSJRHw0YIGE/NG9aehQdC1loFl0fOkATDxAfaic8eTlRASAbTlI2CiQYBQAnGit9JywPL3k0CQ
200 OK 1.2 kB URL HTTP/2 d24yj1kykxwq2x.cloudfront.net/ZUpoOEUEKAtVegR3Ch4wFyZVHXcjb1p+IVZ6WVs9EiwRVTxXeF8WJgklHVwjFyUGTGsLLxwddyMDJWATMR8EXBYiIFgIJCAfC3Z3XC0rfSENK1p5HS0zKQEKMAwhfi0kAgtSBB0NEHJ3KwkhHXcnKT1tFSt4UVYDHSERaAEkBz1CHF0EKUAAAR4lQhBVIgZcBisIL1ItEwMueRQrDikBFCcbEWgdIw8uf3FAeC53ABYpOEJxVwwtWxM/eQN6ECIMAV51PCk4bBxRGA9idzwNDF4EPRAPYjInDA5vDxwLAlx3PA0Mfw0hewNhPTcNLWAhCQs5CSk/JCF7C1ZnMl8fVQcsXCggHSl9EwgsL1scMA0uUQgjGz93AVQzKUILDRMFYQc3HSJRHw0YIGE/NG9aehQdC1loFl0fOkATDxAfaic8eTlRASAbTlI2CiQYBQAnGit9JywPL3k0CQ
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3042), with no line terminators
Hash ce3aff6254d21e573765de03b65762c4
c74e8a16f878c6f84d1e9a1614eae757fc980733
3223df24f8bda279a5bef1322dcaf0654a194365d1d653b0b77bd07ae806a35c
GET /ZUpoOEUEKAtVegR3Ch4wFyZVHXcjb1p+IVZ6WVs9EiwRVTxXeF8WJgklHVwjFyUGTGsLLxwddyMDJWATMR8EXBYiIFgIJCAfC3Z3XC0rfSENK1p5HS0zKQEKMAwhfi0kAgtSBB0NEHJ3KwkhHXcnKT1tFSt4UVYDHSERaAEkBz1CHF0EKUAAAR4lQhBVIgZcBisIL1ItEwMueRQrDikBFCcbEWgdIw8uf3FAeC53ABYpOEJxVwwtWxM/eQN6ECIMAV51PCk4bBxRGA9idzwNDF4EPRAPYjInDA5vDxwLAlx3PA0Mfw0hewNhPTcNLWAhCQs5CSk/JCF7C1ZnMl8fVQcsXCggHSl9EwgsL1scMA0uUQgjGz93AVQzKUILDRMFYQc3HSJRHw0YIGE/NG9aehQdC1loFl0fOkATDxAfaic8eTlRASAbTlI2CiQYBQAnGit9JywPL3k0CQ HTTP/1.1
Host: d24yj1kykxwq2x.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1191
date: Sat, 19 Nov 2022 19:54:41 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XgJJWxSEZUwcIoS6ouju5sN8cLnd69SIPkwVa13_hTZsAMpLYsxldQ==
X-Firefox-Spdy: h2
particinepartm.com/azFUM1JEDjdAbz15PFkFPl0+Z2MPVjJeBCJkOUtqMnQSUQsjRnJHOw8MbAFrXgRgFSICVWkBa01CIFImHkJpAnQCXzJcb01HaQJ8Wx9iA3xaFyEOY01FJFI1VgByQyYfXWkCZF0JbAtlXQllBGJf
204 No Content 655 B URL HTTP/2 particinepartm.com/azFUM1JEDjdAbz15PFkFPl0+Z2MPVjJeBCJkOUtqMnQSUQsjRnJHOw8MbAFrXgRgFSICVWkBa01CIFImHkJpAnQCXzJcb01HaQJ8Wx9iA3xaFyEOY01FJFI1VgByQyYfXWkCZF0JbAtlXQllBGJf
IP
File type gzip compressed data, from Unix\012- data
Hash bc3ba461c8a309acf61b6d9c41cb6236
88482306ecc9258d5e9cbb9ba5314dab223a5db4
31331f1b1519882d2f2fb60367708fd56a7a1ec0bddd0554c635547179c7dc8f
GET /azFUM1JEDjdAbz15PFkFPl0+Z2MPVjJeBCJkOUtqMnQSUQsjRnJHOw8MbAFrXgRgFSICVWkBa01CIFImHkJpAnQCXzJcb01HaQJ8Wx9iA3xaFyEOY01FJFI1VgByQyYfXWkCZF0JbAtlXQllBGJf HTTP/1.1
Host: particinepartm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 19 Nov 2022 19:54:42 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E6buncPWothNM0RJxc784E4EimMj0e7FWxvWYKldmCqv5qu74AB5EXdmu9mJ0Owc2ztACqWQIJcgzplHqSx0uqiambO98Fwln4eTrYIasIK1zhDDD5gFJeE3VHkUv3HevPBHzes%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76cb7fcc1a51b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d24yj1kykxwq2x.cloudfront.net/SEh2c2kpKhUeVil1FFUcOiRLVlsObUQ1DXt4RxARPy4PHhB6ekFdCiQnAxcPOicYB0cmLQJWWw4sLEAkeSsdOiwADgUmDxoFFyY8cXkuGCwAG0UDKw8dLxclCiw5FwABEDhDLwUKHBAjCSYvOywwBiAiOC8lIRgkHAAfPiMOCR4mIz8jJzAsBiM0Gw0QHEUpKwokJCMlPy88Kyt8PTQfMAAGPhcjGTA0MgojcDMrKz8lNTI7Dx5FMTEAHTArCg4sNTE/MDEnGCt7HkUxMQoOARANDgYhMQMKJiAmJwYaPikqGQASKwoOKzQiWCwwPBggDhpECzEfIFsxKCsvNyQ/ICMCIgIOMic7Ix8ZASUtKyQsJCt4AR03Dg4ZMDBZLh4REFkreRI0LngCHTYCfA1QGRonJgZOKhgdJkEQPD0YAio9GQI
200 OK 1.2 kB URL HTTP/2 d24yj1kykxwq2x.cloudfront.net/SEh2c2kpKhUeVil1FFUcOiRLVlsObUQ1DXt4RxARPy4PHhB6ekFdCiQnAxcPOicYB0cmLQJWWw4sLEAkeSsdOiwADgUmDxoFFyY8cXkuGCwAG0UDKw8dLxclCiw5FwABEDhDLwUKHBAjCSYvOywwBiAiOC8lIRgkHAAfPiMOCR4mIz8jJzAsBiM0Gw0QHEUpKwokJCMlPy88Kyt8PTQfMAAGPhcjGTA0MgojcDMrKz8lNTI7Dx5FMTEAHTArCg4sNTE/MDEnGCt7HkUxMQoOARANDgYhMQMKJiAmJwYaPikqGQASKwoOKzQiWCwwPBggDhpECzEfIFsxKCsvNyQ/ICMCIgIOMic7Ix8ZASUtKyQsJCt4AR03Dg4ZMDBZLh4REFkreRI0LngCHTYCfA1QGRonJgZOKhgdJkEQPD0YAio9GQI
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3025), with no line terminators
Hash c8a99da33985ecfd037685374d7b46a2
bfe76a9fbc167877c079e813aa84aaf20d9e17b3
b2e5f407f37c4dd6f966f9ed938140bce0b8a67814b6b5275ba4b515cbfab393
GET /SEh2c2kpKhUeVil1FFUcOiRLVlsObUQ1DXt4RxARPy4PHhB6ekFdCiQnAxcPOicYB0cmLQJWWw4sLEAkeSsdOiwADgUmDxoFFyY8cXkuGCwAG0UDKw8dLxclCiw5FwABEDhDLwUKHBAjCSYvOywwBiAiOC8lIRgkHAAfPiMOCR4mIz8jJzAsBiM0Gw0QHEUpKwokJCMlPy88Kyt8PTQfMAAGPhcjGTA0MgojcDMrKz8lNTI7Dx5FMTEAHTArCg4sNTE/MDEnGCt7HkUxMQoOARANDgYhMQMKJiAmJwYaPikqGQASKwoOKzQiWCwwPBggDhpECzEfIFsxKCsvNyQ/ICMCIgIOMic7Ix8ZASUtKyQsJCt4AR03Dg4ZMDBZLh4REFkreRI0LngCHTYCfA1QGRonJgZOKhgdJkEQPD0YAio9GQI HTTP/1.1
Host: d24yj1kykxwq2x.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1176
date: Sat, 19 Nov 2022 19:54:42 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dukIoom7eHQ6HRGahxGgyXCbD701SEudUlCCSgDgiwh_vGtx5E9kJg==
X-Firefox-Spdy: h2
d24yj1kykxwq2x.cloudfront.net/ZW5ZdWYEDDoYWQRTO1MTFwJkUFQjS2szAlZeaBYeEgggGB9XXG5bBQkBLBEAFwE3AUgLCy1QVCNeD0YgFD8yLFYtCQgeAzYjADEIXEtrNzwwBj8RVS8WHg0NESUaESspFzIQKSEFFjAnNBkPDVJRJzQFJDEtbRspNzQBLyUoWxwZAh83HSwwJiZgDAU0Ozg5NVQfGxIVCycNIAQiFxQbKSMNPzxVFlgRHScXJTMGNzFdGDQ/CVc4L1U3AA4nVhclHTgDLTofHzwwKxw7CysCCCMSHA8eETMyPxsfPDArPT4fDQYLIF8dLBE/IjIEKQI/VDwDNCErAggnSwJeAEc3EjlqPxwAOx8xPFY8NzMBXQYVIQ4wORgnVj9eGxQFCwo3JCNcGT0fIzwpGhYBKi81JQUkLDQkMFwdPRsjIDhqOEAPHTYbFlgrMi0JLQoLNwE
200 OK 1.2 kB URL HTTP/2 d24yj1kykxwq2x.cloudfront.net/ZW5ZdWYEDDoYWQRTO1MTFwJkUFQjS2szAlZeaBYeEgggGB9XXG5bBQkBLBEAFwE3AUgLCy1QVCNeD0YgFD8yLFYtCQgeAzYjADEIXEtrNzwwBj8RVS8WHg0NESUaESspFzIQKSEFFjAnNBkPDVJRJzQFJDEtbRspNzQBLyUoWxwZAh83HSwwJiZgDAU0Ozg5NVQfGxIVCycNIAQiFxQbKSMNPzxVFlgRHScXJTMGNzFdGDQ/CVc4L1U3AA4nVhclHTgDLTofHzwwKxw7CysCCCMSHA8eETMyPxsfPDArPT4fDQYLIF8dLBE/IjIEKQI/VDwDNCErAggnSwJeAEc3EjlqPxwAOx8xPFY8NzMBXQYVIQ4wORgnVj9eGxQFCwo3JCNcGT0fIzwpGhYBKi81JQUkLDQkMFwdPRsjIDhqOEAPHTYbFlgrMi0JLQoLNwE
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3035), with no line terminators
Hash 294107718a475e1b5385c2cb9972988e
70ac2be0dccbb562279346379149e1bad7ba9986
32e0df1abeee62efce0ede7519e126235b4ab1b1ecec80618be74b6719674abd
GET /ZW5ZdWYEDDoYWQRTO1MTFwJkUFQjS2szAlZeaBYeEgggGB9XXG5bBQkBLBEAFwE3AUgLCy1QVCNeD0YgFD8yLFYtCQgeAzYjADEIXEtrNzwwBj8RVS8WHg0NESUaESspFzIQKSEFFjAnNBkPDVJRJzQFJDEtbRspNzQBLyUoWxwZAh83HSwwJiZgDAU0Ozg5NVQfGxIVCycNIAQiFxQbKSMNPzxVFlgRHScXJTMGNzFdGDQ/CVc4L1U3AA4nVhclHTgDLTofHzwwKxw7CysCCCMSHA8eETMyPxsfPDArPT4fDQYLIF8dLBE/IjIEKQI/VDwDNCErAggnSwJeAEc3EjlqPxwAOx8xPFY8NzMBXQYVIQ4wORgnVj9eGxQFCwo3JCNcGT0fIzwpGhYBKi81JQUkLDQkMFwdPRsjIDhqOEAPHTYbFlgrMi0JLQoLNwE HTTP/1.1
Host: d24yj1kykxwq2x.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1185
date: Sat, 19 Nov 2022 19:54:42 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CakVr2fRvK7hb-bjRMtJ6VUvmJdwpmcHOkKFPsGiCXr4PR3Mqw6BTA==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f17b03be491bcd758ad58f33ac7c094c
c02829213f2c3afc21026a24b413585804ba17de
e4085af005b24bc39492d37826b238a7e32d85037c9dcfc658171e73325ec0d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 152b9df306bcb43ccc96a66a6d87c9c3
fabcf7acd72dfdb21ac72848f5e89aabb843b258
0640c4b42bbd466abac082e6329da84a80885682d1d464b9a0fff8b3ff7679c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/XXnBTMRkp_8
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/XXnBTMRkp_8
IP
Hash af66a419451375aa5ed007982ec8452d
ac079008ae0f2e65a61d54722c85948e8c07d27c
83060c182bb931c9a3a50c43647aa658a848aa6ee349345fa56b0488dbd1fca1
POST /s/gts1p5/XXnBTMRkp_8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
particinepartm.com/VHA3UjV7T1QhCAY3QCV7HDpABGQ3M2U8dzIyUDZyN0FYFHQBIREmXDBNAGsHZkkAdEU9FApjEycEViZAJ00GdFw6FlhvEyJNBnwGYF4EYhtiVkJvBHIERzNSaUERIkEgHApjA2JID2oCYkgGZAxm
204 No Content 0 B URL HTTP/2 particinepartm.com/VHA3UjV7T1QhCAY3QCV7HDpABGQ3M2U8dzIyUDZyN0FYFHQBIREmXDBNAGsHZkkAdEU9FApjEycEViZAJ00GdFw6FlhvEyJNBnwGYF4EYhtiVkJvBHIERzNSaUERIkEgHApjA2JID2oCYkgGZAxm
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /VHA3UjV7T1QhCAY3QCV7HDpABGQ3M2U8dzIyUDZyN0FYFHQBIREmXDBNAGsHZkkAdEU9FApjEycEViZAJ00GdFw6FlhvEyJNBnwGYF4EYhtiVkJvBHIERzNSaUERIkEgHApjA2JID2oCYkgGZAxm HTTP/1.1
Host: particinepartm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 19 Nov 2022 19:54:42 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FR2HSugGDr0aL71ndtqrH5ZnbxldG3YqltwYsaJBdykFTk5gtIKe7ZNtaFRTyOSoj18f3Lj0H%2B51Zg2YcS4LoOgG5WRRaEu%2FfexxXp3KQWzpa3yYDwXoqReGpjU3fcXTnEgABKA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76cb7fcc6aadb51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/lPMK3rCZ68Y
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/lPMK3rCZ68Y
IP
Hash db7e0b2a59fdf43e9400d7999f1089f9
d5f472d34eefbd7301a6787e6116ba273ee08721
482e7e8e9615f052320223ef5e4d7eaf275ddde84296fe922cc284e33d0de644
POST /s/gts1p5/lPMK3rCZ68Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d301cxwfymy227.cloudfront.net/dZ3M1ckIEHFsUfRMaUU91XkEHS3pBGUYdLBdOdiIXN0FMBjcJAnYHExNVQQgmWkMTHiMJFAhUJwkQCENkBhdXT3ZBBlRPLwgJXB4uBlYHNHdJQxBAck8EXBwmCARGV3BXHUFXcFdCBVxyQkB3V3BXBFwcdFNWBjBnVUNNRHZCQHdXcFcBQ1dxJkIFR2xXWh-BAcgAWVhktQkFzQHJWQwVDclZWB0IkDgFQFC0fVgc0c1dGG0JkEk4E
200 OK 202 B URL HTTP/2 d301cxwfymy227.cloudfront.net/dZ3M1ckIEHFsUfRMaUU91XkEHS3pBGUYdLBdOdiIXN0FMBjcJAnYHExNVQQgmWkMTHiMJFAhUJwkQCENkBhdXT3ZBBlRPLwgJXB4uBlYHNHdJQxBAck8EXBwmCARGV3BXHUFXcFdCBVxyQkB3V3BXBFwcdFNWBjBnVUNNRHZCQHdXcFcBQ1dxJkIFR2xXWh-BAcgAWVhktQkFzQHJWQwVDclZWB0IkDgFQFC0fVgc0c1dGG0JkEk4E
IP
File type ASCII text, with no line terminators
Hash 7ad1a3a52597aafa39ceaf7611506027
efeb401033e03a6b414f2c2cc56e57783397e660
1202f2eb0ed640c9bae2584f175ad6089ca60e8a178e25486a7289d2e51bb59b
GET /dZ3M1ckIEHFsUfRMaUU91XkEHS3pBGUYdLBdOdiIXN0FMBjcJAnYHExNVQQgmWkMTHiMJFAhUJwkQCENkBhdXT3ZBBlRPLwgJXB4uBlYHNHdJQxBAck8EXBwmCARGV3BXHUFXcFdCBVxyQkB3V3BXBFwcdFNWBjBnVUNNRHZCQHdXcFcBQ1dxJkIFR2xXWh-BAcgAWVhktQkFzQHJWQwVDclZWB0IkDgFQFC0fVgc0c1dGG0JkEk4E HTTP/1.1
Host: d301cxwfymy227.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d24yj1kykxwq2x.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 202
date: Sat, 19 Nov 2022 19:54:42 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Duhrw3QqsGJcnsmN5Ws5HqGrWR7gQaYkY0UQD5oNa-F4wUK9E789HA==
X-Firefox-Spdy: h2
d301cxwfymy227.cloudfront.net/IMXVTUldSGj00aEUcN29gCEdha2AXHyA9OUFIFhAHcjAxGxJ2NCI+cUUPN29nFxkyPDAMUzY8NAxEdTMzU0hndCNBGjhvIFAQNDA9QBQyPXFEFG4/OEscPz42FEcVZ3kBUGFif0YcPTY4RgZ2YGdfAXZgZwBFfWJyAjd2YGdGHD1kYxRGEXdlAQ1lZnICN3-ZgZ0MDdmEWAEVmfGcYUGFiMFQWOD1yAzNhYmYBRWJiZhRHYzQ+QxA1PS8URxVjZwRbY3QiDEQ
200 OK 538 B URL HTTP/2 d301cxwfymy227.cloudfront.net/IMXVTUldSGj00aEUcN29gCEdha2AXHyA9OUFIFhAHcjAxGxJ2NCI+cUUPN29nFxkyPDAMUzY8NAxEdTMzU0hndCNBGjhvIFAQNDA9QBQyPXFEFG4/OEscPz42FEcVZ3kBUGFif0YcPTY4RgZ2YGdfAXZgZwBFfWJyAjd2YGdGHD1kYxRGEXdlAQ1lZnICN3-ZgZ0MDdmEWAEVmfGcYUGFiMFQWOD1yAzNhYmYBRWJiZhRHYzQ+QxA1PS8URxVjZwRbY3QiDEQ
IP
File type ASCII text, with very long lines (784), with no line terminators
Hash 594fb912017ac733f9cc2dc9024a1ca5
0e92d6d0f6ec9ba3bd4975fd1554e19a98db790e
1894eacdb4a65f2ba2491d2013da42c0dd0157f4e5ef533932d4a83fa5205b24
GET /IMXVTUldSGj00aEUcN29gCEdha2AXHyA9OUFIFhAHcjAxGxJ2NCI+cUUPN29nFxkyPDAMUzY8NAxEdTMzU0hndCNBGjhvIFAQNDA9QBQyPXFEFG4/OEscPz42FEcVZ3kBUGFif0YcPTY4RgZ2YGdfAXZgZwBFfWJyAjd2YGdGHD1kYxRGEXdlAQ1lZnICN3-ZgZ0MDdmEWAEVmfGcYUGFiMFQWOD1yAzNhYmYBRWJiZhRHYzQ+QxA1PS8URxVjZwRbY3QiDEQ HTTP/1.1
Host: d301cxwfymy227.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d24yj1kykxwq2x.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 538
date: Sat, 19 Nov 2022 19:54:42 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Wmcx529p3xp_mDsbpv44iv6B0yTNlcUV9PSqGRP12CUDLW681eqw1Q==
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JrybaPmO9FB1aoZpsiuBHQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: myvU7d67t16X/JQJwAHLcDCR2CY=
d301cxwfymy227.cloudfront.net/0V3FqQkY0HgQkeSMYDn9+ZUhfd3JxGxktKCdMLykeODkOEAQwVx44ImpBTC4nORZXZCM5EldzYDYVCH9ycQUaLS1qBgsnITUbGyMnOFcfI3s6HhArKjsQT3AAYl9aZ3RnWR0rKDMeHTFjZUEENmNlQVtyaGdUWQBjZUEdKyhhRU9xBHJDWjpwY1RZAGNlQR-g0Y2QwW3JzeUFDZ3RnFg8hLThUWAR0Z0BacndnQE9wdjEYGCcgOAlPcABmQV9sdnEEV3M
200 OK 465 B URL HTTP/2 d301cxwfymy227.cloudfront.net/0V3FqQkY0HgQkeSMYDn9+ZUhfd3JxGxktKCdMLykeODkOEAQwVx44ImpBTC4nORZXZCM5EldzYDYVCH9ycQUaLS1qBgsnITUbGyMnOFcfI3s6HhArKjsQT3AAYl9aZ3RnWR0rKDMeHTFjZUEENmNlQVtyaGdUWQBjZUEdKyhhRU9xBHJDWjpwY1RZAGNlQR-g0Y2QwW3JzeUFDZ3RnFg8hLThUWAR0Z0BacndnQE9wdjEYGCcgOAlPcABmQV9sdnEEV3M
IP
File type ASCII text, with very long lines (605), with no line terminators
Hash 2758576a81a968109896ddc87692d2f3
36811348c2e6e3dfa10aa318b5e739ed9b334446
a12d1ed10a4af18c5d72f518c9365835e936aba6c349799986b459b7358a317d
GET /0V3FqQkY0HgQkeSMYDn9+ZUhfd3JxGxktKCdMLykeODkOEAQwVx44ImpBTC4nORZXZCM5EldzYDYVCH9ycQUaLS1qBgsnITUbGyMnOFcfI3s6HhArKjsQT3AAYl9aZ3RnWR0rKDMeHTFjZUEENmNlQVtyaGdUWQBjZUEdKyhhRU9xBHJDWjpwY1RZAGNlQR-g0Y2QwW3JzeUFDZ3RnFg8hLThUWAR0Z0BacndnQE9wdjEYGCcgOAlPcABmQV9sdnEEV3M HTTP/1.1
Host: d301cxwfymy227.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d24yj1kykxwq2x.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 465
date: Sat, 19 Nov 2022 19:54:42 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 86WKHcs54IOjzmhP_VX43eNB7gdWfU76uEJbroioxx03p3hLT0pAvA==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f0cec93f061939fc6f31b7c5ba67496e
7c09782e8eae832e490fbab8c0175fdfe46eb46b
d75a331e5816a245faff7da6c1c28c66d00de3e8010963f18d9521dbc161c509
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D75A331E5816A245FAFF7DA6C1C28C66D00DE3E8010963F18D9521DBC161C509"
Last-Modified: Sat, 19 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12270
Expires: Sat, 19 Nov 2022 23:19:12 GMT
Date: Sat, 19 Nov 2022 19:54:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 1763bb9f6433bdb95b7de8ec3118bb1c
dcf4842d857e90546495e90a2ed83bfaa322954a
2b278d901b21cd2aa2e9563a40813721f4c31cf94710665928add580f834ace9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3194
Cache-Control: max-age=141060
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:42 GMT
Etag: "6378ac0c-1d7"
Expires: Mon, 21 Nov 2022 11:05:42 GMT
Last-Modified: Sat, 19 Nov 2022 10:12:28 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8c1ee5f4c1ab645286b162b818a868a4
db959000bdbdc15fbd978fd3d2fdad0d6e126112
d98fe4a593330c0d1337308afa26ab255f46bba987b749ff449b69c7df651b0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8c1ee5f4c1ab645286b162b818a868a4
db959000bdbdc15fbd978fd3d2fdad0d6e126112
d98fe4a593330c0d1337308afa26ab255f46bba987b749ff449b69c7df651b0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 7c38f6a4d12fac5fbd5b063f866930c1
242b2affd66686b140ac3145629a758d4895dccc
272871fb6f7a28ab6f3a9d9bb31811eacc0861fe7d78ae56552d0113408e93a3
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "272871FB6F7A28AB6F3A9D9BB31811EACC0861FE7D78AE56552D0113408E93A3"
Last-Modified: Thu, 17 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Sat, 19 Nov 2022 21:13:14 GMT
Date: Sat, 19 Nov 2022 19:54:42 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 7c38f6a4d12fac5fbd5b063f866930c1
242b2affd66686b140ac3145629a758d4895dccc
272871fb6f7a28ab6f3a9d9bb31811eacc0861fe7d78ae56552d0113408e93a3
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "272871FB6F7A28AB6F3A9D9BB31811EACC0861FE7D78AE56552D0113408E93A3"
Last-Modified: Thu, 17 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Sat, 19 Nov 2022 21:13:14 GMT
Date: Sat, 19 Nov 2022 19:54:42 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 7c38f6a4d12fac5fbd5b063f866930c1
242b2affd66686b140ac3145629a758d4895dccc
272871fb6f7a28ab6f3a9d9bb31811eacc0861fe7d78ae56552d0113408e93a3
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "272871FB6F7A28AB6F3A9D9BB31811EACC0861FE7D78AE56552D0113408E93A3"
Last-Modified: Thu, 17 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Sat, 19 Nov 2022 21:13:14 GMT
Date: Sat, 19 Nov 2022 19:54:42 GMT
Connection: keep-alive
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 397 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (385)
Hash fbe042d9e58ab1714a74855ec648d4e8
4927fecc3c971559e59b83d9beb4cdf8c8d21314
3e5057274cd2a6d6668fa66f714a7399938e5b0e2609d272702338ed0e83c793
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Nov 2022 19:54:42 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-1089571237%3A1668887682365780&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=ARgdvAvIIt5XG9CSTy1sZKZlod8dzRiFDKny_OKmjCdGNCD5R-tui4u12ehsp1gw8DEDFey0zRzMIw
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-ptK1p0kjSfYgbyP45a4DpQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 397
server: GSE
set-cookie: __Host-GAPS=1:8N3JZDrhyjUd0K8UQJlkrGkAcSA2iA:s0Y4wcHuaWiFg-xn;Path=/;Expires=Mon, 18-Nov-2024 19:54:42 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 7c38f6a4d12fac5fbd5b063f866930c1
242b2affd66686b140ac3145629a758d4895dccc
272871fb6f7a28ab6f3a9d9bb31811eacc0861fe7d78ae56552d0113408e93a3
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "272871FB6F7A28AB6F3A9D9BB31811EACC0861FE7D78AE56552D0113408E93A3"
Last-Modified: Thu, 17 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Sat, 19 Nov 2022 21:13:14 GMT
Date: Sat, 19 Nov 2022 19:54:42 GMT
Connection: keep-alive
d24yj1kykxwq2x.cloudfront.net/utx?cb=ghsWHd1m4ZNv&top=shrinke.me&tid=792297
204 No Content 0 B URL HTTP/2 d24yj1kykxwq2x.cloudfront.net/utx?cb=ghsWHd1m4ZNv&top=shrinke.me&tid=792297
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=ghsWHd1m4ZNv&top=shrinke.me&tid=792297 HTTP/1.1
Host: d24yj1kykxwq2x.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 19 Nov 2022 19:54:42 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://shrinke.me
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 19 Nov 2022 19:55:42 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l-RqEsLxf6fE0zU_AaCGGrP_oG7C5_RDaCAeTOfUyE_goCJwCPBPfw==
X-Firefox-Spdy: h2
d24yj1kykxwq2x.cloudfront.net/utx?cb=mCpiEOnWdGk1&top=shrinke.me&tid=829554
204 No Content 0 B URL HTTP/2 d24yj1kykxwq2x.cloudfront.net/utx?cb=mCpiEOnWdGk1&top=shrinke.me&tid=829554
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=mCpiEOnWdGk1&top=shrinke.me&tid=829554 HTTP/1.1
Host: d24yj1kykxwq2x.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 19 Nov 2022 19:54:42 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://shrinke.me
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 19 Nov 2022 19:55:42 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z8xhkRoZonNXUEdsPEBxIDRzRw0JD0Q1Psinc_USXZ9aFdkgjeft_g==
X-Firefox-Spdy: h2
d24yj1kykxwq2x.cloudfront.net/multi?cs=QnBnVUR1R1Nsc3NAVmBxdklfbHE&abt=0&red=1&sm=76&k=highest%20payout%20short%20shrinkme%20shortener%20link%20earn%20money&v=1.0.60.1&sts=0&prn=0&emb=0&tid=829554&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fshrinke.me%2FLyTiG&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_tjhL=1668887681957&crc=1
200 OK 1.7 kB URL HTTP/2 d24yj1kykxwq2x.cloudfront.net/multi?cs=QnBnVUR1R1Nsc3NAVmBxdklfbHE&abt=0&red=1&sm=76&k=highest%20payout%20short%20shrinkme%20shortener%20link%20earn%20money&v=1.0.60.1&sts=0&prn=0&emb=0&tid=829554&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fshrinke.me%2FLyTiG&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_tjhL=1668887681957&crc=1
IP
File type ASCII text, with very long lines (3347), with no line terminators
Hash 6130d75d3101aba1c5418f26768a43d8
e4d12836d792f0c6c0f38257f5daf41ce084f1d5
89c31748b288797241f2da96648a0bb404ee9cd2fbbdbc8ea018537a9bce9bc5
GET /multi?cs=QnBnVUR1R1Nsc3NAVmBxdklfbHE&abt=0&red=1&sm=76&k=highest%20payout%20short%20shrinkme%20shortener%20link%20earn%20money&v=1.0.60.1&sts=0&prn=0&emb=0&tid=829554&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fshrinke.me%2FLyTiG&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_tjhL=1668887681957&crc=1 HTTP/1.1
Host: d24yj1kykxwq2x.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 1669
date: Sat, 19 Nov 2022 19:54:42 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://shrinke.me
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=2e3bde88-8e48-4fd5-9332-6d646aa78118
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JXIGeME2RrlIeN3hAsiJYTs1ofYDBLlWAwcXr0I5l1KO8IYsoXOwbg==
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 388 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (379)
Hash 3c44080767a1930d5d9b615efb72d121
f92d84c75abf69aca335d71ba8fec94d1730532d
9eb7622d9848c96203da7ffe6ec4c722b5b34d7c8d43e8721cf9670d76153154
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Nov 2022 19:54:42 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S772591821%3A1668887682408021&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=ARgdvAtadlIZsqArahrjYto7Q0TQlpMGgbzK7q9EjlGp-YRvrEQQl1cEMk9nAcBlzAqhpdYoO6-mug
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-T8scb2s29N6_lKDemLcGAQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 388
server: GSE
set-cookie: __Host-GAPS=1:ZpKR65ryO2m8m2Yhs9RwLC_ontdK6A:HaLYa5E_kYpgMqJ4;Path=/;Expires=Mon, 18-Nov-2024 19:54:42 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a00fff9dd1711061b285e2136c973d13
66548ac11fc58024c6994539ab81804add41d2f2
4b87c5468c15817686a8497324c2a06d18fd5574141aa0476bf98aa3b8395a8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 1763bb9f6433bdb95b7de8ec3118bb1c
dcf4842d857e90546495e90a2ed83bfaa322954a
2b278d901b21cd2aa2e9563a40813721f4c31cf94710665928add580f834ace9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6468
Cache-Control: max-age=144334
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:42 GMT
Etag: "6378ac0c-1d7"
Expires: Mon, 21 Nov 2022 12:00:16 GMT
Last-Modified: Sat, 19 Nov 2022 10:12:28 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 7c38f6a4d12fac5fbd5b063f866930c1
242b2affd66686b140ac3145629a758d4895dccc
272871fb6f7a28ab6f3a9d9bb31811eacc0861fe7d78ae56552d0113408e93a3
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "272871FB6F7A28AB6F3A9D9BB31811EACC0861FE7D78AE56552D0113408E93A3"
Last-Modified: Thu, 17 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4712
Expires: Sat, 19 Nov 2022 21:13:14 GMT
Date: Sat, 19 Nov 2022 19:54:42 GMT
Connection: keep-alive
bungalowsimply.com/18/44/b8/1844b8e470c024a415cff51a0843d71c.js
200 OK 13 kB URL HTTP/1.1 bungalowsimply.com/18/44/b8/1844b8e470c024a415cff51a0843d71c.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37165), with no line terminators
Hash 4525f06f0e6009806ea5bb7cd867cc94
d5bc26f4743f0399cec54d4b71dcd7404529c88b
8423852e6a350b17549640bcb94ee394d3c227faeb34c38fb8d5ce32140a4fb2
Analyzer Verdict Alert quad9 Sinkholed
GET /18/44/b8/1844b8e470c024a415cff51a0843d71c.js HTTP/1.1
Host: bungalowsimply.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 19 Nov 2022 19:54:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fa8f585eee67e4d646c2c276489f31b5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 19 Nov 2022 18:41:09 GMT
expires: Sat, 19 Nov 2022 20:41:09 GMT
cache-control: public, max-age=7200
age: 4413
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 006c32a42ef0dc8cbcbe279d839805cb
aa6bb0c37b0fad737ac41ad1902e4460795e4989
c7b5ae84138dd7fe486d61ec7d57364fbee119ac46e09ab79431cc70fc34345f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "C7B5AE84138DD7FE486D61EC7D57364FBEE119AC46E09AB79431CC70FC34345F"
Last-Modified: Thu, 17 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17170
Expires: Sun, 20 Nov 2022 00:40:52 GMT
Date: Sat, 19 Nov 2022 19:54:42 GMT
Connection: keep-alive
pogothere.xyz/
200 OK 101 B IP
File type ASCII text, with no line terminators
Hash 90a4fbf2bd513c22554a6f5003b3a49b
d3f62e7c94a3790af5aff5968aef758b150ffe0b
d7059749c5426d071f62676e3aa3fdb73c8825e657ae0ed91b698f7c47f6c6ef
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinke.me/
Origin: https://shrinke.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:42 GMT
content-type: text/plain
set-cookie: csu=2141845840576698@1@1668887682; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=004bzkhXkw9AC4GDnFKNTGpdn4bmKGTItE7ACiR%2FL2iG9avBxa0wRkQOnJeQr0t%2FmiXmSsvkw5JE8aSNglMIlSZX1AxHM4xdqJMHUsk%2BIvDIs5%2FC3wBQcv1c6m5XztqC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76cb7fcfcf6876b7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0f162707471b694d9472aaa730586029
8e772c5ff60be51dbae5fb8e630f1f832f5138a6
8dbe631994a2b21d73969d226fc7cc6a17961a9fd4cc0c2656bd858761441ddc
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=155527
Date: Sat, 19 Nov 2022 19:54:42 GMT
Etag: "6378da9a-1d7"
Expires: Mon, 21 Nov 2022 15:06:49 GMT
Last-Modified: Sat, 19 Nov 2022 13:31:06 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 30kMhYFp788Q0tjKYnvgtYIvX87MnGxefv9NcbPWjvHzk-pxqw1KFw==
Age: 5743
ads.pubmatic.com/AdServer/js/pwt/155495/4202/pwt.js
200 OK 80 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/pwt/155495/4202/pwt.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6a4ce36b0d03543974d71b88fa37145d
a5c1750aab7489f287c98bae25f5afff0ed16ce8
30fb02ff951a4220268d02c95e2dbd16adfad28b179a89e9643d75ade8809aaf
GET /AdServer/js/pwt/155495/4202/pwt.js HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 27 Oct 2021 05:33:12 GMT
etag: "1241a12-3fca8-5cf4eee137dd8"
server: Apache
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: https://ci-va2qa-mgmt.pubmatic.com
x-xss-protection: 1; mode=block
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-type: application/javascript
content-length: 80538
cache-control: max-age=44756
expires: Sun, 20 Nov 2022 08:20:38 GMT
date: Sat, 19 Nov 2022 19:54:42 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash ef309649469c83c4c6dd26adf96248b5
213e9fc04e13217413712542376ae1cb54a7447f
8c9e4e2c0945b7b8017b1a2f9f08014d068d5f940c4b11b60a1b542d7b9fadd1
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:42 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
set-cookie: uid_id2=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e:1:1; expires=Tue, 16 Nov 2032 19:54:42 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 006c32a42ef0dc8cbcbe279d839805cb
aa6bb0c37b0fad737ac41ad1902e4460795e4989
c7b5ae84138dd7fe486d61ec7d57364fbee119ac46e09ab79431cc70fc34345f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "C7B5AE84138DD7FE486D61EC7D57364FBEE119AC46E09AB79431CC70FC34345F"
Last-Modified: Thu, 17 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17170
Expires: Sun, 20 Nov 2022 00:40:52 GMT
Date: Sat, 19 Nov 2022 19:54:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 313 B IP
Hash 511badbf81adc2c87961b101d3611b54
c263b51bd0a9eedbec02a04941178a371e19579e
a426e4610ad3636c6cb72f99072319cddd86e3c0e70482280519cd7c80eef6f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 569
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:43 GMT
Last-Modified: Sat, 19 Nov 2022 19:45:14 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 313
ib.adnxs.com/ut/v3/prebid
200 OK 42 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 821c8141b8f7c192072ca7730d09e6ec
85f9a621087ac2a6c7ecad3f3c245d89003b987c
dedd81f9590e4534677ed3e1801c27f37f3837af1843524d8923087ef6f20997
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 551
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 19:54:43 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 42
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://shrinke.me
AN-X-Request-Uuid: e18fb7be-24cb-40b0-97b3-7298d75f4e7a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/ut/v3/prebid
200 OK 42 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 821c8141b8f7c192072ca7730d09e6ec
85f9a621087ac2a6c7ecad3f3c245d89003b987c
dedd81f9590e4534677ed3e1801c27f37f3837af1843524d8923087ef6f20997
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 550
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 19 Nov 2022 19:54:43 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 42
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://shrinke.me
AN-X-Request-Uuid: 8e31766a-7235-4027-a0f6-9b09fa6725b6
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 471 B IP
Hash 36946efc19a668190cddf68253433e65
16eb0f15b1381035779411155edb1f47b90155c0
a40853a35067952707bcafe6d70e8f4537e5fa0276d0b0fa0f18a48d5299e3f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3629
Cache-Control: max-age=139344
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:43 GMT
Etag: "6378a3a6-1d7"
Expires: Mon, 21 Nov 2022 10:37:07 GMT
Last-Modified: Sat, 19 Nov 2022 09:36:38 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0-pre&cb=53517488925&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0-pre&cb=53517488925&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.12.0-pre&cb=53517488925&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 404
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 19 Nov 2022 19:54:42 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://shrinke.me
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 36946efc19a668190cddf68253433e65
16eb0f15b1381035779411155edb1f47b90155c0
a40853a35067952707bcafe6d70e8f4537e5fa0276d0b0fa0f18a48d5299e3f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3651
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:43 GMT
Last-Modified: Sat, 19 Nov 2022 18:53:52 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
friendshipmale.com/sfp.js
200 OK 27 kB URL HTTP/2 friendshipmale.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 249d5bb8f8d5fd948efc1354d88c6817
7c912d3b06643207404fedefff09fafa13366c0d
f3bfe89639b988ecb00f0cfee2f14749541d67e96bd6b6308d6e934031db1352
Analyzer Verdict Alert quad9 Sinkholed
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:42 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: a6e7927002e3f18fdf8fc3c9ebd8bae4
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sat, 19 Nov 2022 19:54:42 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WyQXArgwe8WemG9PN2QQ0lGUA4yEsP2yeRn5buOyKk74BhYPLn6cZLOtnB9FUjeLU5pC5vSoi9cWiAMuu9lu6o%2BSGz33MYFAfPVOths%2FNptT1ngqAi8x6dXSODIfjKtxlZhQcos%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fd16f9a75cb-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d112a2d84b415b5b25d43733747ea963
1e4aa27fa6907644d2e24a07f1a84b5e573cab4f
1455d2929dd4d7ae22fa0281ef5d279d3cecb0278d1ae5e9db5f20369be64c7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1455D2929DD4D7AE22FA0281EF5D279D3CECB0278D1AE5E9DB5F20369BE64C7F"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16590
Expires: Sun, 20 Nov 2022 00:31:13 GMT
Date: Sat, 19 Nov 2022 19:54:43 GMT
Connection: keep-alive
services.vlitag.com/vld/1668761011/vl.json?page_url=https%3A%2F%2Fshrinke.me%2FLyTiG
200 OK 34 kB URL HTTP/2 services.vlitag.com/vld/1668761011/vl.json?page_url=https%3A%2F%2Fshrinke.me%2FLyTiG
IP
Hash 7ca90ca2e8c7f0ab6a7196471ee24d87
5aaa2a39e7112db900a7fecc650e06e675163697
4d2c2720cfd14d8ecdafeb3588ed475fc47d72f2921a57441f4bf4fba1155cd3
GET /vld/1668761011/vl.json?page_url=https%3A%2F%2Fshrinke.me%2FLyTiG HTTP/1.1
Host: services.vlitag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:43 GMT
content-type: application/json; charset=utf-8
content-length: 13
cache-control: public, immutable, max-age=31536000
access-control-allow-origin: https://shrinke.me
x-robots-tag: noindex, nofollow, noarchive, nosnippet
last-modified: Sat, 19 Nov 2022 19:54:43 GMT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fd32f18fabc-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?dsh=S772591821%3A1668887682408021&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=ARgdvAtadlIZsqArahrjYto7Q0TQlpMGgbzK7q9EjlGp-YRvrEQQl1cEMk9nAcBlzAqhpdYoO6-mug
403 Forbidden 809 B URL HTTP/2 accounts.google.com/v3/signin/identifier?dsh=S772591821%3A1668887682408021&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=ARgdvAtadlIZsqArahrjYto7Q0TQlpMGgbzK7q9EjlGp-YRvrEQQl1cEMk9nAcBlzAqhpdYoO6-mug
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1644), with no line terminators
Hash cbd74c62bc15e1e60216aa09f5e5d86f
869b99cfe5aa4b291bb8430790650688e78039e1
de6d729bde826b5e830fc69ef868efb82ac01054e4041f66c05f307dda74d546
GET /v3/signin/identifier?dsh=S772591821%3A1668887682408021&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=ARgdvAtadlIZsqArahrjYto7Q0TQlpMGgbzK7q9EjlGp-YRvrEQQl1cEMk9nAcBlzAqhpdYoO6-mug HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinke.me/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Nov 2022 19:54:42 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-L4uvwcgk69tAMQzoApUPhQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
cross-origin-opener-policy-report-only: same-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 958
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://shrinke.me
cache-control: no-cache, no-store, must-revalidate
date: Sat, 19 Nov 2022 19:54:41 GMT
X-Firefox-Spdy: h2
prodigalpromotion.com/7f/be/21/7fbe21196a9f67678de4540ff58299fd.js
200 OK 29 kB URL HTTP/1.1 prodigalpromotion.com/7f/be/21/7fbe21196a9f67678de4540ff58299fd.js
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash a0f725e76a89bd1da04e731dc6a22236
298133bb9a232aba3e27021502ce6b3d8b0dc438
b61959e4b6fa6fca0a7a802a3263c0da91c5df192c3a253fb99c02c3d4c4494e
Analyzer Verdict Alert quad9 Sinkholed
GET /7f/be/21/7fbe21196a9f67678de4540ff58299fd.js HTTP/1.1
Host: prodigalpromotion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d3ecbbb0a37a5293b673d5ed9355f9cc
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1
200 OK 10 kB URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1
IP
Hash 713ee186487868fa3bb39e68f98a2664
d820e24d2fa4cb9841355c7a0c04caa19c6ac1d2
d0675b77b5e5b41f56ddd4f4f5fcdcf57060b5be33a95830e898f68990a6efef
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://shrinke.me/
Origin: https://shrinke.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:42 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://shrinke.me
server-processing-duration-in-ticks: 231014
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10058
Expires: Sat, 19 Nov 2022 22:42:21 GMT
Date: Sat, 19 Nov 2022 19:54:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10058
Expires: Sat, 19 Nov 2022 22:42:21 GMT
Date: Sat, 19 Nov 2022 19:54:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10058
Expires: Sat, 19 Nov 2022 22:42:21 GMT
Date: Sat, 19 Nov 2022 19:54:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10058
Expires: Sat, 19 Nov 2022 22:42:21 GMT
Date: Sat, 19 Nov 2022 19:54:43 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b2b393e36ee2c9649d90db136aa49542
e88c5832ff0c49bab181d948c3a510d88343bb6f
8b524701df43bff56ac52a021ff0fbd964e06f00e84b4861aa557ec6ae6b4ffd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7631
x-amzn-requestid: b47e545d-1fb6-4a62-ab45-28cdb9d3f0b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-vQE0XoAMFS3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab2e-56365eed3d4c082c53b172b3;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WpaBFpaCu0GBiHiiQzCCsyXrA7uzesHS92c_PsgxROxPkqjZ8RyI6Q==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 22:35:17 GMT
age: 76766
etag: "e88c5832ff0c49bab181d948c3a510d88343bb6f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg
200 OK 76 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg
IP
Hash 775faae698a904c5b49b034c21a69de2
c4f9f60d7d14d48378de192e70179f7bcbfebdc9
c433900db055f2203a9b43c46e6ac123eaf5e2a7b288896787b2fa4fc476577d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3035
x-amzn-requestid: 3e3f3a7f-9a1d-4b37-b932-22c6e3e638f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRcFOuoAMF_fQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6f-09dc20ea5620dd167e3f7265;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pLsLyVnqWVp3c5Z5IavS9Xumx3cYUsungYuOLojzKNtOoRQx7-rEOQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:36 GMT
etag: "72369ebeccf447fa91ef77711d6297063c99777e"
content-type: image/jpeg
age: 79567
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 93b326374b3808d0af42e295643cdc14
dd691328acf190c745465208f18a41a75878df18
224ac3995e2e78ee5fcc6c5c3d5fb1f4b0ceca1c42b7a1a493c756aa199bf75f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5198
x-amzn-requestid: ba4e00c8-a996-41f3-b15a-1e304907ca2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9UpH1ioAMF6ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8ea-2f9f794c4de03f8b212e072f;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:34 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KVRDYZKrzaOvLC1NCAb6clyHxqb40wjyE0itVFOi1cwdGTvS2zsjUg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:56:07 GMT
age: 79116
etag: "dd691328acf190c745465208f18a41a75878df18"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: s1153EpshSWYGLcN7Zzzs4PgXl9cddZ20gTwh5bK2HOBu4e_PSNCpQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 03:36:46 GMT
age: 58677
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 459df915ce91b32b2dcc4850516d68a0
d7a5473d367e7965a4af55acbf4675ed7088fab2
a03e26ebee79ad9b9dda1bf680e0d2467ae6d5e582589ada9fe6ddfa437c483c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4851
x-amzn-requestid: 8c868655-d0eb-428d-9fc0-a7449f770bd4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brtDFF9HoAMFV9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748ee0-4f7daf8f7451dc5e0840f620;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:18:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xirMw5z5GPbmx9Sii_I4iNeh1GS5k9lGmaaJvUGAPWoVyP0Tldhf1w==
via: 1.1 e9ba0a9a729ff2960a04323bf1833df8.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 03:31:06 GMT
age: 59017
etag: "d7a5473d367e7965a4af55acbf4675ed7088fab2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e5fb6d72b647aabea33ab4017f4a0847
ed93ac946111340a254b92f8ce27e8be93ae87e8
0782ed4ffaea8f9487461d5a9b0c241d30dfe057676753b24e180d0a94efad99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7045
x-amzn-requestid: e8dace8b-0cc8-4ea0-b47a-e42a66576f72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-K3EuCIAMFsmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa45-71c191e462be52006858817b;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: S0Sq8vuP-MbcuYVx_WFXTkmrY966mBTY1Qpowx_E_to1tDk1b8R-Bw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:49:21 GMT
age: 79522
etag: "ed93ac946111340a254b92f8ce27e8be93ae87e8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bungalowsimply.com/2b7825b40010ad17ac7b5777c664449c/invoke.js
200 OK 9.8 kB URL HTTP/1.1 bungalowsimply.com/2b7825b40010ad17ac7b5777c664449c/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (27004), with no line terminators
Hash ce13f3f1715dc538ad8a859f0138a39f
ff9e92d71c4c4a33f8c68b89cc680eb2f7d42b8a
551e7f9fb063c4e0144b0ce9a0c9e28942261a5655caef8a1b176c9f2db6d9e0
Analyzer Verdict Alert quad9 Sinkholed
GET /2b7825b40010ad17ac7b5777c664449c/invoke.js HTTP/1.1
Host: bungalowsimply.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 19 Nov 2022 19:54:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: edd5b902918781e6051e11d1206985ab
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
audit-tcfv2.quantcast.mgr.consensu.org/?log=%7B%22domain%22%3A%22shrinke.me%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22%22%2C%22clientTimestamp%22%3A1668887683665%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-7numbgot6ph8fxtvut0k%22%7D
200 OK 2 B URL HTTP/2 audit-tcfv2.quantcast.mgr.consensu.org/?log=%7B%22domain%22%3A%22shrinke.me%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22%22%2C%22clientTimestamp%22%3A1668887683665%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-7numbgot6ph8fxtvut0k%22%7D
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /?log=%7B%22domain%22%3A%22shrinke.me%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.23%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22%22%2C%22clientTimestamp%22%3A1668887683665%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-7numbgot6ph8fxtvut0k%22%7D HTTP/1.1
Host: audit-tcfv2.quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:43 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a45f37140c17e03896e8cec816460936
53ef5c49dbcbfc5f0b8bcfff9b67b28257c1f953
ff7fd574c1d932142b2e671df312184e5edc57b198fba894297aff7783d1c300
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF7FD574C1D932142B2E671DF312184E5EDC57B198FBA894297AFF7783D1C300"
Last-Modified: Fri, 18 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8865
Expires: Sat, 19 Nov 2022 22:22:28 GMT
Date: Sat, 19 Nov 2022 19:54:43 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 313 B IP
Hash 1fe7d90058e95b54760451f18aaa9e8e
096a878bad261df46a140852cf3edd5fe7ea3da0
c4bfa8d7fe3479f5fbdc54c06adbba13c0265679dd2f00ea437da2577f4396c9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2387
Cache-Control: max-age=95305
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:44 GMT
Etag: "6377fc7a-139"
Expires: Sun, 20 Nov 2022 22:23:09 GMT
Last-Modified: Fri, 18 Nov 2022 21:43:22 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7cb8cfb3e1a1f9901b4a7c27e043b98b
582a3b2a89180ca58347b95a524c0b082ec6a928
c7fe6652fbe420376c55eab5e47f2a1db91de6d81f741efb34d375569eecee4a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C7FE6652FBE420376C55EAB5E47F2A1DB91DE6D81F741EFB34D375569EECEE4A"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12579
Expires: Sat, 19 Nov 2022 23:24:23 GMT
Date: Sat, 19 Nov 2022 19:54:44 GMT
Connection: keep-alive
c.amazon-adsystem.com/aax2/apstag.js
301 Moved Permanently 167 B URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 167
location: https://d3div1mtym39ic.cloudfront.net/aax2/apstag.js
server: CloudFront
date: Fri, 18 Nov 2022 22:27:05 GMT
via: 1.1 11a78ce92a548aac13fb6ee545aff014.cloudfront.net (CloudFront), 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-C1
x-amz-cf-id: IUuHFAzZ3CLh6ArM5EloNiQw2kVbgTq8jjdnqJ7IUWi3Giy03Ug4eA==
age: 77259
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53d56fb68da96a50df543c9c9fb58f52
d802493bcf8c683b1ac73b035c51cd02b907a251
68b4e1c61fb6285a348937a2f6f81000f7979d90dd2882d5933fc4e64af68158
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53d56fb68da96a50df543c9c9fb58f52
d802493bcf8c683b1ac73b035c51cd02b907a251
68b4e1c61fb6285a348937a2f6f81000f7979d90dd2882d5933fc4e64af68158
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53d56fb68da96a50df543c9c9fb58f52
d802493bcf8c683b1ac73b035c51cd02b907a251
68b4e1c61fb6285a348937a2f6f81000f7979d90dd2882d5933fc4e64af68158
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 15:30:33 GMT
expires: Fri, 17 Nov 2023 15:30:33 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 188651
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
prodigalpromotion.com/sbar.json?key=1844b8e470c024a415cff51a0843d71c&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1
200 OK 4.2 kB URL HTTP/1.1 prodigalpromotion.com/sbar.json?key=1844b8e470c024a415cff51a0843d71c&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (5905), with no line terminators
Hash a0670194145b0a8a12102dbbf549b16b
bafaab3290fa9da657f56d3360f40c8cbfb1c296
8b189503eb2a04e1034821b66ee53df25675fbf777eea834e62c35e30f406598
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=1844b8e470c024a415cff51a0843d71c&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1 HTTP/1.1
Host: prodigalpromotion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://shrinke.me
Access-Control-Allow-Origin: https://shrinke.me
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=15296127; expires=Sun, 20 Nov 2022 19:54:43 GMT; secure; SameSite=None
uid_id2=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e:1:1; expires=Sat, 26 Nov 2022 19:54:43 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
uncs=1; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
uncs29=1; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
slec1844b8e470c024a415cff51a0843d71c=[3789941]; expires=Sat, 19 Nov 2022 19:54:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 95bcba8655ff989bf0d2e4beaf50f6b6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.profitabledisplaycontent.com/watch.731579823923.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 www.profitabledisplaycontent.com/watch.731579823923.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.731579823923.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://shrinke.me
Access-Control-Allow-Origin: https://shrinke.me
Access-Control-Allow-Credentials: true
Location: https://www.profitabledisplaycontent.com/watch.731579823923.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1&shu=559fd103fc1a34904bb4d647cdc02ed8b1832bccf1fb7fe1e4c4b006be7a5c5d9c404612219221b806c0951fe10fe4cabc0cafe921812b4e2a1ae2cf56b4d13f8d92a3418b12a178cdbf1f6feff236bffb15b8fe&pst=1668887744&rmtc=t
Set-Cookie: u_pl=15023978; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.GHPdqwvj9xNGoREHH_CFZM9YSv_LGOW4KQaapFrdV0I; expires=Sat, 19 Nov 2022 19:55:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 441020c5df7aa9565bab0ed32eba33d3
Strict-Transport-Security: max-age=0; includeSubdomains
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (40310)
Hash c33528918caf443c4e63cdd06a65a919
b43feffb0e131fed2f9203277dbcb25ac0402c81
ed9b82268014ffe2c0b2ce882b1aa261afebc6c312876327d0e0a802b61bbfd8
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27247
date: Sat, 19 Nov 2022 19:54:44 GMT
expires: Sat, 19 Nov 2022 19:54:44 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1397 / 722 of 1000 / last-modified: 1668812924"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
revoketypes.com/pixel/purst?dl=0&th=0&sc=0&rs=2697&rd=2697&fd=872&bv=22.10.v.10&tmpl=136
200 OK 0 B URL HTTP/1.1 revoketypes.com/pixel/purst?dl=0&th=0&sc=0&rs=2697&rd=2697&fd=872&bv=22.10.v.10&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2697&rd=2697&fd=872&bv=22.10.v.10&tmpl=136 HTTP/1.1
Host: revoketypes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
www.googletagservices.com/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (40310)
Hash c33528918caf443c4e63cdd06a65a919
b43feffb0e131fed2f9203277dbcb25ac0402c81
ed9b82268014ffe2c0b2ce882b1aa261afebc6c312876327d0e0a802b61bbfd8
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27247
date: Sat, 19 Nov 2022 19:54:44 GMT
expires: Sat, 19 Nov 2022 19:54:44 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1397 / 424 of 1000 / last-modified: 1668812924"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aaf95ec4541654fdcdd8d3f24c6630a5
2f21e05dcaa397bcf8fde0ac36b72e02f9a56141
222ccda2e9970842b863a0d442cdefa2bb2879b5a04ff3ca23728cb4085a785e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "222CCDA2E9970842B863A0D442CDEFA2BB2879B5A04FF3CA23728CB4085A785E"
Last-Modified: Fri, 18 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7564
Expires: Sat, 19 Nov 2022 22:00:48 GMT
Date: Sat, 19 Nov 2022 19:54:44 GMT
Connection: keep-alive
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-137383949-1&cid=2038442406.1668887683&jid=1889300194&gjid=69698308&_gid=1123835065.1668887683&_u=YEBAAUAAAAAAACAAI~&z=59041089
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-137383949-1&cid=2038442406.1668887683&jid=1889300194&gjid=69698308&_gid=1123835065.1668887683&_u=YEBAAUAAAAAAACAAI~&z=59041089
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-137383949-1&cid=2038442406.1668887683&jid=1889300194&gjid=69698308&_gid=1123835065.1668887683&_u=YEBAAUAAAAAAACAAI~&z=59041089 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://shrinke.me
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 19 Nov 2022 19:54:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=CAFC7FC544364E698655D3FEC2412D1B&RedC=c.clarity.ms&MXFR=19C4FE3E6D9B6344027FEC5F699B6D67
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=19C4FE3E6D9B6344027FEC5F699B6D67; domain=.clarity.ms; expires=Thu, 14-Dec-2023 19:54:44 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Sat, 19 Nov 2022 19:54:43 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53d56fb68da96a50df543c9c9fb58f52
d802493bcf8c683b1ac73b035c51cd02b907a251
68b4e1c61fb6285a348937a2f6f81000f7979d90dd2882d5933fc4e64af68158
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.profitabledisplaycontent.com/2d/a7/03/2da703368f9eb4f6c054328862dc9152.js
200 OK 29 kB URL HTTP/1.1 www.profitabledisplaycontent.com/2d/a7/03/2da703368f9eb4f6c054328862dc9152.js
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 7c9b74263660bbcd1ffd6bf803e28546
16707e1629b1b69d5035e405619c4a4a163bdc39
d69468c6fe136fc3b35e567e3d0e373ce19c18b8dc17956ff1cd2798da5caf32
GET /2d/a7/03/2da703368f9eb4f6c054328862dc9152.js HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bb17b7c57585fe569ff60d06e410b239
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
prodigalpromotion.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRStXteLC4LixYM6iAcFM6me6cnMuIfFdV0JxiTsrgZvVldVT8qp7mqquqcnuRhcWdbb7M2L0HmTbHBdxPUuKxMvEhAyChLEePakIOQsMxkY%2FND9%2F%2FuvDu%2B9qju7%2BSmhyNnJ%2BntmW2nNFhtVWnl1QyXCFK6yeqvi0yq9XNlQyVJwudKf%2FGzvDZ82qvS1yjuSd81ijfqU%2BtSvXFdWRqa%2FOGWh0odtv9qm1aBW9RsB%2Bvb%2F2OUeHPMgeqfkWSgxfnLzp0dQfIQk%2FvaadN3MpK%2B%2FHeeaZcaiJw7eT7qJKRLE8zGyHqLkYHYaxo0J%2BeICTHIwcwDT25s4QKjGxPvNR5gczGQi7O2fKw01ZIJQXELRG0HqERQbgZvbUOKYAFxgdQ1JfH%2FV2IJtnbNswo7JxbN%2FoYoxufjHc0jib65q1a%2FcNDrPlEkc%2BlEJ1R9BdUZI80Nk2x5UcQiefQolfiaLZytI4r01pw2UOHmFLoUiCphcEDTiC4EUzQXWbDcX6lFYl4z5zWBJTiNSagQVjaDlAMx5yCef8pBHHvLUQyxOKqzRjihtRmFUr7cCznm9znmjtSQaoh60IoqcTzwMkKUDcD0AtztI7Q666t6xfwqb%2FwC3WcIJDy4j6IkShSQoHEHBCApFUGQERa%2FcF9rVXHlfaJeH%2FqzXZr1eDk3W2WX7JuvIhOymp%2BSZaXZ%2FRZ%2BgK08qfisIwpYMmpTTWsACv8GjqOEz2grqoulzOFVCuQtTp9tqTC68dAmpGhNy9iFCdginD8HVy2D5C2DFsFmjYJvDoEWxnTxwm1YlXVmNJYQpkWYXkW15u%2FqUPD9V0f41h%2BRHZFbgtkRqS3ysfiTo6LvDG6YgezdM4cijtTRTsdpmk9u9mbFMeg%2FelVuFsWL5mht89SafEJPx4S3pshWWCJV0HPn6qhJC2uvGckm%2BX3YbMlzP3ebV3CZ5urL%2B1vXlOLXSOWWSEZg6%2FugxuBqTp%2BI703f74u%2BfQ9kRbF4izudKlTkET3fg0vnOGQKr5zhMPRR5ObS1cL7UikDLOWZhCSePrvz595ffLTz9AUJ59Pifc27X3UXHemDZbSRxiZ4t0dMlmB7A5U8Ms9QeXfmlPi2E2huG2np7obb63nm0Tp1UZCOikaQ1GUbtMGoyKtpR0A5Z25fNsMF8ZG7Mt4LP%2FgMAAP%2F%2FAQAA%2F%2F8GmnMvjwQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 prodigalpromotion.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRStXteLC4LixYM6iAcFM6me6cnMuIfFdV0JxiTsrgZvVldVT8qp7mqquqcnuRhcWdbb7M2L0HmTbHBdxPUuKxMvEhAyChLEePakIOQsMxkY%2FND9%2F%2FuvDu%2B9qju7%2BSmhyNnJ%2BntmW2nNFhtVWnl1QyXCFK6yeqvi0yq9XNlQyVJwudKf%2FGzvDZ82qvS1yjuSd81ijfqU%2BtSvXFdWRqa%2FOGWh0odtv9qm1aBW9RsB%2Bvb%2F2OUeHPMgeqfkWSgxfnLzp0dQfIQk%2FvaadN3MpK%2B%2FHeeaZcaiJw7eT7qJKRLE8zGyHqLkYHYaxo0J%2BeICTHIwcwDT25s4QKjGxPvNR5gczGQi7O2fKw01ZIJQXELRG0HqERQbgZvbUOKYAFxgdQ1JfH%2FV2IJtnbNswo7JxbN%2FoYoxufjHc0jib65q1a%2FcNDrPlEkc%2BlEJ1R9BdUZI80Nk2x5UcQiefQolfiaLZytI4r01pw2UOHmFLoUiCphcEDTiC4EUzQXWbDcX6lFYl4z5zWBJTiNSagQVjaDlAMx5yCef8pBHHvLUQyxOKqzRjihtRmFUr7cCznm9znmjtSQaoh60IoqcTzwMkKUDcD0AtztI7Q666t6xfwqb%2FwC3WcIJDy4j6IkShSQoHEHBCApFUGQERa%2FcF9rVXHlfaJeH%2FqzXZr1eDk3W2WX7JuvIhOymp%2BSZaXZ%2FRZ%2BgK08qfisIwpYMmpTTWsACv8GjqOEz2grqoulzOFVCuQtTp9tqTC68dAmpGhNy9iFCdginD8HVy2D5C2DFsFmjYJvDoEWxnTxwm1YlXVmNJYQpkWYXkW15u%2FqUPD9V0f41h%2BRHZFbgtkRqS3ysfiTo6LvDG6YgezdM4cijtTRTsdpmk9u9mbFMeg%2FelVuFsWL5mht89SafEJPx4S3pshWWCJV0HPn6qhJC2uvGckm%2BX3YbMlzP3ebV3CZ5urL%2B1vXlOLXSOWWSEZg6%2FugxuBqTp%2BI703f74u%2BfQ9kRbF4izudKlTkET3fg0vnOGQKr5zhMPRR5ObS1cL7UikDLOWZhCSePrvz595ffLTz9AUJ59Pifc27X3UXHemDZbSRxiZ4t0dMlmB7A5U8Ms9QeXfmlPi2E2huG2np7obb63nm0Tp1UZCOikaQ1GUbtMGoyKtpR0A5Z25fNsMF8ZG7Mt4LP%2FgMAAP%2F%2FAQAA%2F%2F8GmnMvjwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRStXteLC4LixYM6iAcFM6me6cnMuIfFdV0JxiTsrgZvVldVT8qp7mqquqcnuRhcWdbb7M2L0HmTbHBdxPUuKxMvEhAyChLEePakIOQsMxkY%2FND9%2F%2FuvDu%2B9qju7%2BSmhyNnJ%2BntmW2nNFhtVWnl1QyXCFK6yeqvi0yq9XNlQyVJwudKf%2FGzvDZ82qvS1yjuSd81ijfqU%2BtSvXFdWRqa%2FOGWh0odtv9qm1aBW9RsB%2Bvb%2F2OUeHPMgeqfkWSgxfnLzp0dQfIQk%2FvaadN3MpK%2B%2FHeeaZcaiJw7eT7qJKRLE8zGyHqLkYHYaxo0J%2BeICTHIwcwDT25s4QKjGxPvNR5gczGQi7O2fKw01ZIJQXELRG0HqERQbgZvbUOKYAFxgdQ1JfH%2FV2IJtnbNswo7JxbN%2FoYoxufjHc0jib65q1a%2FcNDrPlEkc%2BlEJ1R9BdUZI80Nk2x5UcQiefQolfiaLZytI4r01pw2UOHmFLoUiCphcEDTiC4EUzQXWbDcX6lFYl4z5zWBJTiNSagQVjaDlAMx5yCef8pBHHvLUQyxOKqzRjihtRmFUr7cCznm9znmjtSQaoh60IoqcTzwMkKUDcD0AtztI7Q666t6xfwqb%2FwC3WcIJDy4j6IkShSQoHEHBCApFUGQERa%2FcF9rVXHlfaJeH%2FqzXZr1eDk3W2WX7JuvIhOymp%2BSZaXZ%2FRZ%2BgK08qfisIwpYMmpTTWsACv8GjqOEz2grqoulzOFVCuQtTp9tqTC68dAmpGhNy9iFCdginD8HVy2D5C2DFsFmjYJvDoEWxnTxwm1YlXVmNJYQpkWYXkW15u%2FqUPD9V0f41h%2BRHZFbgtkRqS3ysfiTo6LvDG6YgezdM4cijtTRTsdpmk9u9mbFMeg%2FelVuFsWL5mht89SafEJPx4S3pshWWCJV0HPn6qhJC2uvGckm%2BX3YbMlzP3ebV3CZ5urL%2B1vXlOLXSOWWSEZg6%2FugxuBqTp%2BI703f74u%2BfQ9kRbF4izudKlTkET3fg0vnOGQKr5zhMPRR5ObS1cL7UikDLOWZhCSePrvz595ffLTz9AUJ59Pifc27X3UXHemDZbSRxiZ4t0dMlmB7A5U8Ms9QeXfmlPi2E2huG2np7obb63nm0Tp1UZCOikaQ1GUbtMGoyKtpR0A5Z25fNsMF8ZG7Mt4LP%2FgMAAP%2F%2FAQAA%2F%2F8GmnMvjwQAAA%3D%3D HTTP/1.1
Host: prodigalpromotion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Cookie: u_pl=15296127; uid_id2=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1844b8e470c024a415cff51a0843d71c=[3789941]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0333c859817aaa0569b3aac4026aa1c8
Strict-Transport-Security: max-age=0; includeSubdomains
www.profitabledisplaycontent.com/watch.731579823923.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1&shu=559fd103fc1a34904bb4d647cdc02ed8b1832bccf1fb7fe1e4c4b006be7a5c5d9c404612219221b806c0951fe10fe4cabc0cafe921812b4e2a1ae2cf56b4d13f8d92a3418b12a178cdbf1f6feff236bffb15b8fe&pst=1668887744&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 www.profitabledisplaycontent.com/watch.731579823923.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1&shu=559fd103fc1a34904bb4d647cdc02ed8b1832bccf1fb7fe1e4c4b006be7a5c5d9c404612219221b806c0951fe10fe4cabc0cafe921812b4e2a1ae2cf56b4d13f8d92a3418b12a178cdbf1f6feff236bffb15b8fe&pst=1668887744&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2527)
Hash 772f6e7a3bf5a026a622302378e491c1
eaefb913782c42552d19597265b6a87178a9b0ab
ffbb3b90eba78c5f189123f088719bd62fd8912e4abc4a2dee24dfc19b264d57
GET /watch.731579823923.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1&shu=559fd103fc1a34904bb4d647cdc02ed8b1832bccf1fb7fe1e4c4b006be7a5c5d9c404612219221b806c0951fe10fe4cabc0cafe921812b4e2a1ae2cf56b4d13f8d92a3418b12a178cdbf1f6feff236bffb15b8fe&pst=1668887744&rmtc=t HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Referer: https://shrinke.me/
Connection: keep-alive
Cookie: u_pl=15023978; ain=eyJhbGciOiJIUzI1NiJ9.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.GHPdqwvj9xNGoREHH_CFZM9YSv_LGOW4KQaapFrdV0I
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://shrinke.me
Access-Control-Allow-Origin: https://shrinke.me
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e:1:1; expires=Sat, 26 Nov 2022 19:54:44 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
uncs=1; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
uncs5=1; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6bb6ae5bf1dad41220120bdf14165028
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.profitabledisplaycontent.com/2d/a7/03/2da703368f9eb4f6c054328862dc9152.js
200 OK 29 kB URL HTTP/1.1 www.profitabledisplaycontent.com/2d/a7/03/2da703368f9eb4f6c054328862dc9152.js
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 2d7efe174fde9b242baad9fea1012e47
1b19e38703116acde0ed431db9358d94949e7fc7
a587db4c1b30ddc24fb99c671befbc0c6b554dba93fafedadd331be8218a57c7
GET /2d/a7/03/2da703368f9eb4f6c054328862dc9152.js HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9ae91045998f9404009e77ba244a8979
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fb0419a20006c7cfd9b8e9f7d6354deb
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.digicert.com/
200 OK 279 B IP
Hash ae260accd36609e7332feb37b220fcc9
4720a2e6eac9cb82a7c1712d8bab3aa38ed5821a
c9b4717f36671b5055ac488dea42754b928c23d9722b0baf9ddd05002ce52c67
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3672
Cache-Control: max-age=86816
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:44 GMT
Etag: "6377d64c-117"
Expires: Sun, 20 Nov 2022 20:01:40 GMT
Last-Modified: Fri, 18 Nov 2022 19:00:28 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20221119
200 OK 923 B URL HTTP/2 cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20221119
IP
File type JSON data\012- , ASCII text, with very long lines (1642), with no line terminators
Hash 31b70c958c481d7e24ac8cf94a15e899
8d92cf227d3bddbc952b0884d19cc4dbe2c8fb96
d1e7c4a39e9d17b0d98d864fe1b2cefc0e8c4a4f323b4bdc6761030f15b45202
GET /gh/prebid/currency-file@1/latest.json?date=20221119 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.1529
x-jsd-version-type: version
etag: W/"66a-p1mrfCUysVtQpk1RiSgIjPN+v2g"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 19 Nov 2022 19:54:44 GMT
age: 17625
x-served-by: cache-fra-eddf8230021-FRA, cache-bma1658-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 923
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash ae260accd36609e7332feb37b220fcc9
4720a2e6eac9cb82a7c1712d8bab3aa38ed5821a
c9b4717f36671b5055ac488dea42754b928c23d9722b0baf9ddd05002ce52c67
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5070
Cache-Control: max-age=88214
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:44 GMT
Etag: "6377d64c-117"
Expires: Sun, 20 Nov 2022 20:24:58 GMT
Last-Modified: Fri, 18 Nov 2022 19:00:28 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
www.profitabledisplaycontent.com/watch.703520839160.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1&shu=b0794a4128c38b362b6639b766e42442fec3d42306b7b98b2e07e0408c2185f2c038c2d867aec9e3509e06c740863fe4d143e60f788976f23965afe360757cbc813855531ab91c9fc6d3fda3ba87dc8388b04eda5c8c734f5e30f6ababfc1c&pst=1668887744&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 www.profitabledisplaycontent.com/watch.703520839160.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1&shu=b0794a4128c38b362b6639b766e42442fec3d42306b7b98b2e07e0408c2185f2c038c2d867aec9e3509e06c740863fe4d143e60f788976f23965afe360757cbc813855531ab91c9fc6d3fda3ba87dc8388b04eda5c8c734f5e30f6ababfc1c&pst=1668887744&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2592)
Hash be3474969c8bfcd1b15086faf74f401b
0aa5c1fe11c6fd4ad1e646e42d0c1f4da6cfdf31
41c7729982ff637b20a852e8b8da6c7db67e12c38a5e1cbcf10df61a4b28a11b
GET /watch.703520839160.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1&shu=b0794a4128c38b362b6639b766e42442fec3d42306b7b98b2e07e0408c2185f2c038c2d867aec9e3509e06c740863fe4d143e60f788976f23965afe360757cbc813855531ab91c9fc6d3fda3ba87dc8388b04eda5c8c734f5e30f6ababfc1c&pst=1668887744&rmtc=t HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Referer: https://shrinke.me/
Connection: keep-alive
Cookie: u_pl=15023978; ain=eyJhbGciOiJIUzI1NiJ9.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.GHPdqwvj9xNGoREHH_CFZM9YSv_LGOW4KQaapFrdV0I
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://shrinke.me
Access-Control-Allow-Origin: https://shrinke.me
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e:1:1; expires=Sat, 26 Nov 2022 19:54:44 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
uncs=1; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
uncs5=1; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d62671b838e183ddb48ed29923422d0a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash cff761ec59ab05bc792847dde9e15324
1c8c8e2b9aca576e497aa6e5bebb3191cb8ecaea
233c68242d0e4c9228101a4ba986eba059b9167dfd88f5ddef5cc2fc2f995541
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "EDCCAD74934F930F1DA72F8E9B74425435501F85"
Expires: Sun, 20 Nov 2022 07:00:00 GMT
Last-Modified: Sat, 19 Nov 2022 19:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1113
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76cb7fdcfd66b4eb-OSL
px.vliplatform.com/bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNPYAwKUwK-yPBK-PAMe-wqZr-awTqUAwYKZZrRdzNwqfftkRlmNBYAbTAARwlNqdqmgfRkjmNBYAbTAA,BYAbZA,BAAbTAA,BAAbKZRrdzNqdqmgfRwkjNARmNYaPPTRleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY
200 OK 0 B URL HTTP/2 px.vliplatform.com/bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNPYAwKUwK-yPBK-PAMe-wqZr-awTqUAwYKZZrRdzNwqfftkRlmNBYAbTAARwlNqdqmgfRkjmNBYAbTAA,BYAbZA,BAAbTAA,BAAbKZRrdzNqdqmgfRwkjNARmNYaPPTRleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNPYAwKUwK-yPBK-PAMe-wqZr-awTqUAwYKZZrRdzNwqfftkRlmNBYAbTAARwlNqdqmgfRkjmNBYAbTAA,BYAbZA,BAAbTAA,BAAbKZRrdzNqdqmgfRwkjNARmNYaPPTRleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY HTTP/1.1
Host: px.vliplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: image/jpeg
content-length: 0
cache-control: public, max-age=864000, immutable
x-robots-tag: noindex, nofollow, noarchive, nosnippet
cf-cache-status: MISS
last-modified: Sat, 19 Nov 2022 19:54:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ci3Woh9us%2FQZwC4XabFBuHBjyDEAzpmjrw4gOjcRGGXc1yXIZFepRS5Vb5LiX2%2BsTk8ADufyfMGea3AuukPP%2Bfv47jpcIJ0nhKeZ5EJF97KUpGOqW87iYvViwzzr4UlG5BUrnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fdc4878b4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 508d60840e38724c0badca180ccb2f0c
bf7365c5276f2fc522f4df4a2b43dc517ebf9276
7c284f2042490d1b9606e679c766eebe8d6a7d2657c2a8dfe058298ce02aa97f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7C284F2042490D1B9606E679C766EEBE8D6A7D2657C2A8DFE058298CE02AA97F"
Last-Modified: Fri, 18 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4874
Expires: Sat, 19 Nov 2022 21:15:58 GMT
Date: Sat, 19 Nov 2022 19:54:44 GMT
Connection: keep-alive
px.vliplatform.com/bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNPKPKBBtT-MMKa-PAwt-qyYa-YBartTTUYKewRdzNwqfftkRlmNBBUbPMARwlNqdqmgfRkjmNBBUbYMA,BAAbYZARrdzNqdqmgfRwkjNARmNaYUUURleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY
200 OK 0 B URL HTTP/2 px.vliplatform.com/bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNPKPKBBtT-MMKa-PAwt-qyYa-YBartTTUYKewRdzNwqfftkRlmNBBUbPMARwlNqdqmgfRkjmNBBUbYMA,BAAbYZARrdzNqdqmgfRwkjNARmNaYUUURleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNPKPKBBtT-MMKa-PAwt-qyYa-YBartTTUYKewRdzNwqfftkRlmNBBUbPMARwlNqdqmgfRkjmNBBUbYMA,BAAbYZARrdzNqdqmgfRwkjNARmNaYUUURleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY HTTP/1.1
Host: px.vliplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: image/jpeg
content-length: 0
cache-control: public, max-age=864000, immutable
x-robots-tag: noindex, nofollow, noarchive, nosnippet
cf-cache-status: MISS
last-modified: Sat, 19 Nov 2022 19:54:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WPy%2FYg%2FZOdSvBYz%2FMCHgbLjrZRJEIGpbWUXB0%2FaAHkCyaKTbOoejZGMoPEsmBMcqNAXnmXK9B7o9uZvpgiigErjabqZCFH7i8mvYbqkUBYaVE8n%2F1dP5SRKrG7l0ukAUEQy2WA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fdc588eb4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash ae260accd36609e7332feb37b220fcc9
4720a2e6eac9cb82a7c1712d8bab3aa38ed5821a
c9b4717f36671b5055ac488dea42754b928c23d9722b0baf9ddd05002ce52c67
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3672
Cache-Control: max-age=86816
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:44 GMT
Etag: "6377d64c-117"
Expires: Sun, 20 Nov 2022 20:01:40 GMT
Last-Modified: Fri, 18 Nov 2022 19:00:28 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
px.vliplatform.com/bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNyeeyYMey-aZrt-PaTU-wTYy-ZaywqUMZaaawRdzNwqfftkRlmNaKAbaARwlNqdqmgfRkjmNaKAbaARrdzNqdqmgfRwkjNARmNPPPTZRleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY
200 OK 0 B URL HTTP/2 px.vliplatform.com/bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNyeeyYMey-aZrt-PaTU-wTYy-ZaywqUMZaaawRdzNwqfftkRlmNaKAbaARwlNqdqmgfRkjmNaKAbaARrdzNqdqmgfRwkjNARmNPPPTZRleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNyeeyYMey-aZrt-PaTU-wTYy-ZaywqUMZaaawRdzNwqfftkRlmNaKAbaARwlNqdqmgfRkjmNaKAbaARrdzNqdqmgfRwkjNARmNPPPTZRleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY HTTP/1.1
Host: px.vliplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: image/jpeg
content-length: 0
cache-control: public, max-age=864000, immutable
x-robots-tag: noindex, nofollow, noarchive, nosnippet
cf-cache-status: MISS
last-modified: Sat, 19 Nov 2022 19:54:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QmIbj1bWYvTHZ941n4ocpcecBssje8hF1MhVjjbS%2B%2F5WzGpttMZLqo3Xpoo11dwrfVFM%2F0fBJ0fBKSmV9aGqu1Z3oCvgVHvY9mEwtvUjY5FN9p%2BKJCsah9%2FOhmy%2FUMENe2Yb7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fdca8ffb4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.profitabledisplaycontent.com/watch.703520839160.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 www.profitabledisplaycontent.com/watch.703520839160.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.703520839160.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://shrinke.me
Access-Control-Allow-Origin: https://shrinke.me
Access-Control-Allow-Credentials: true
Location: https://www.profitabledisplaycontent.com/watch.703520839160.js?key=2b7825b40010ad17ac7b5777c664449c&kw=%5B%22shrinkme%22%2C%22io%22%5D&refer=&tz=0&dev=e&res=12.1055&uuid=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e%3A1%3A1&shu=b0794a4128c38b362b6639b766e42442fec3d42306b7b98b2e07e0408c2185f2c038c2d867aec9e3509e06c740863fe4d143e60f788976f23965afe360757cbc813855531ab91c9fc6d3fda3ba87dc8388b04eda5c8c734f5e30f6ababfc1c&pst=1668887744&rmtc=t
Set-Cookie: u_pl=15023978; expires=Sun, 20 Nov 2022 19:54:44 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.GHPdqwvj9xNGoREHH_CFZM9YSv_LGOW4KQaapFrdV0I; expires=Sat, 19 Nov 2022 19:55:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 55f37b6433c1425697729b42cac77cca
Strict-Transport-Security: max-age=0; includeSubdomains
px.vliplatform.com/bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNwqTwtrMe-tAKZ-PyPy-qTeZ-rUytPeZUABryRdzNwqfftkRlmNaKAbYZARwlNqdqmgfRkjmNaKAbYZA,aKAbaA,KYMbaA,PUMbUARrdzNqdqmgfRwkjNARmNYaPPARleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY
200 OK 0 B URL HTTP/2 px.vliplatform.com/bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNwqTwtrMe-tAKZ-PyPy-qTeZ-rUytPeZUABryRdzNwqfftkRlmNaKAbYZARwlNqdqmgfRkjmNaKAbYZA,aKAbaA,KYMbaA,PUMbUARrdzNqdqmgfRwkjNARmNYaPPARleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNwqTwtrMe-tAKZ-PyPy-qTeZ-rUytPeZUABryRdzNwqfftkRlmNaKAbYZARwlNqdqmgfRkjmNaKAbYZA,aKAbaA,KYMbaA,PUMbUARrdzNqdqmgfRwkjNARmNYaPPARleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY HTTP/1.1
Host: px.vliplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: image/jpeg
content-length: 0
cache-control: public, max-age=864000, immutable
x-robots-tag: noindex, nofollow, noarchive, nosnippet
cf-cache-status: MISS
last-modified: Sat, 19 Nov 2022 19:54:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DUQPciVZgByfpVdOo4AVrOfP1qJaKtp%2Bg1kG23G4XfP7Q0rJzWRqUxfSZNEGnUCbz7oc273zCSLE9VZ1rhhhVCJxMORjgMPAmRCINHXQU%2B0P3WWX371TjPcjBB659xDqQsgVHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fdcd928b4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
px.vliplatform.com/bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNUqKrAUUq-KMBY-PUeT-wBaY-qUwTZTBaAMAPRdzNwqfftkRlmNKYMbaARwlNqdqmgfRkjmNKYMbaARrdzNqdqmgfRwkjNARmNPPPTZRleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY
200 OK 0 B URL HTTP/2 px.vliplatform.com/bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNUqKrAUUq-KMBY-PUeT-wBaY-qUwTZTBaAMAPRdzNwqfftkRlmNKYMbaARwlNqdqmgfRkjmNKYMbaARrdzNqdqmgfRwkjNARmNPPPTZRleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bi-v4/cc.jpeg?e=rNMZAaRrtNrtl0zghRzdNUqKrAUUq-KMBY-PUeT-wBaY-qUwTZTBaAMAPRdzNwqfftkRlmNKYMbaARwlNqdqmgfRkjmNKYMbaARrdzNqdqmgfRwkjNARmNPPPTZRleNplRedhNgfRedh_ygkdqzNtdhznRedh_lgxketNcsoRedh_znhtNurhkRxltk_qeethzNfgRzey_ctkNcY HTTP/1.1
Host: px.vliplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: image/jpeg
content-length: 0
cache-control: public, max-age=864000, immutable
x-robots-tag: noindex, nofollow, noarchive, nosnippet
cf-cache-status: MISS
last-modified: Sat, 19 Nov 2022 19:54:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1Kfhx1Jpu5JbThkjOaU47xwNThrdxqmb1%2FZCcxhJprrXRoC0%2F317Rz8hKuceRCEtnfnhGOy%2Bqrxyvjvm2Q%2BnZc6yBEGb5eMmG9EfNY3k2iGGYQN%2FMEzLv0xf94mrEFFvCFx%2BlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fdcd92db4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb479001433186809749be8ae6e9d1d3
b8465c9391462ceae5134abd2702a5aeed46b3e6
b0668be4ad31dac9ec97156191c740029e51828e889a3501769fd82420aeec71
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0668BE4AD31DAC9EC97156191C740029E51828E889A3501769FD82420AEEC71"
Last-Modified: Fri, 18 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12597
Expires: Sat, 19 Nov 2022 23:24:41 GMT
Date: Sat, 19 Nov 2022 19:54:44 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 07535f711a5a1e6e18963c54356cd49e
73948c3d2915b3bb95f4178f94f00cbdd6e0888e
a7de3821c72b4f30b0cebecbd33574c3f046e8719b01645d4ac15c49f4c20547
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "A7DE3821C72B4F30B0CEBECBD33574C3F046E8719B01645D4AC15C49F4C20547"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7153
Expires: Sat, 19 Nov 2022 21:53:57 GMT
Date: Sat, 19 Nov 2022 19:54:44 GMT
Connection: keep-alive
static.criteo.net/js/ld/publishertag.prebid.js
200 OK 30 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP
Hash 8c4d167c98f6f443b4702182058cc4f5
1ecdd4ee4209e82de08903ed28525b31cd26a3f3
3dc3781368b04c61843dda85d9711c287e95d027a8b64691c3159b2b47b96bf1
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-16294"
expires: Sun, 20 Nov 2022 19:54:44 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/a7/4e/10/a74e1007785d9b3b0ffaf800cb6dabea/1654693109.jpg
200 OK 26 kB URL HTTP/2 cdn.cloudimagesb.com/bi/a7/4e/10/a74e1007785d9b3b0ffaf800cb6dabea/1654693109.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x250, components 3\012- data
Hash fd0aa198e9cab8918b84ef2da31b3993
eab5a491c479afbd3a26d0660f6a1c9b36c626e5
fed5d10c18ae8c5dfe4df312eeb88f4636d5daf0d160b81e660f397723bc719b
GET /bi/a7/4e/10/a74e1007785d9b3b0ffaf800cb6dabea/1654693109.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: image/jpeg
content-length: 26040
server: nginx/1.17.6
last-modified: Wed, 08 Jun 2022 12:58:36 GMT
etag: "62a09cfc-65b8"
expires: Mon, 21 Nov 2022 19:54:44 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
prodigalpromotion.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Findex.html&l=1598&fd=492
200 OK 0 B URL HTTP/1.1 prodigalpromotion.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Findex.html&l=1598&fd=492
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Findex.html&l=1598&fd=492 HTTP/1.1
Host: prodigalpromotion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Cookie: u_pl=15296127; uid_id2=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1844b8e470c024a415cff51a0843d71c=[3789941]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.cloudimagesb.com/bi/8a/d4/3f/8ad43f82852696f97e4cd118a880ef0b/1644703665.jpg
200 OK 126 kB URL HTTP/2 cdn.cloudimagesb.com/bi/8a/d4/3f/8ad43f82852696f97e4cd118a880ef0b/1644703665.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:02:08 14:48:08], progressive, precision 8, 300x250, components 3\012- data
Size 126 kB (125779 bytes)
Hash b2f6ea31c7529d757d40f1739cc6fa66
a27fc46b12a5334471eef9dab2eeb1d12d72e149
bd63da32151006d48af781fb732c67967874ebbca879829c76d5831391f9f1ff
GET /bi/8a/d4/3f/8ad43f82852696f97e4cd118a880ef0b/1644703665.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: image/jpeg
content-length: 125779
server: nginx/1.17.6
last-modified: Sat, 12 Feb 2022 22:07:52 GMT
etag: "62082fb8-1eb53"
expires: Mon, 21 Nov 2022 19:54:44 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 12:31:58 GMT
expires: Sun, 19 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 26566
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 1.0 kB IP
ASN #20940 Akamai International B.V.
File type gzip compressed data, max compression\012- data
Hash c3b18dd400a5669fd43e178bb18dd8c0
7c6b72fc626b6a425e82da7b1a3ddacdda533556
bf8aa75e4ef5ba83b2ecee7e37d5dd7ca67b7d38ec9c226c1b793268791f9d61
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "A7DE3821C72B4F30B0CEBECBD33574C3F046E8719B01645D4AC15C49F4C20547"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7153
Expires: Sat, 19 Nov 2022 21:53:57 GMT
Date: Sat, 19 Nov 2022 19:54:44 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a00fff9dd1711061b285e2136c973d13
66548ac11fc58024c6994539ab81804add41d2f2
4b87c5468c15817686a8497324c2a06d18fd5574141aa0476bf98aa3b8395a8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
prodigalpromotion.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fimages%2Flanding%2Fcss%2Fstyles.css&l=3801&fd=137
200 OK 0 B URL HTTP/1.1 prodigalpromotion.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fimages%2Flanding%2Fcss%2Fstyles.css&l=3801&fd=137
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fimages%2Flanding%2Fcss%2Fstyles.css&l=3801&fd=137 HTTP/1.1
Host: prodigalpromotion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Cookie: u_pl=15296127; uid_id2=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1844b8e470c024a415cff51a0843d71c=[3789941]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
prodigalpromotion.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fcss%2Fstyle.css&l=8110&fd=133
200 OK 0 B URL HTTP/1.1 prodigalpromotion.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fcss%2Fstyle.css&l=8110&fd=133
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fcss%2Fstyle.css&l=8110&fd=133 HTTP/1.1
Host: prodigalpromotion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Cookie: u_pl=15296127; uid_id2=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1844b8e470c024a415cff51a0843d71c=[3789941]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/landing/booty-calls/13/bg-removebg-preview.png
200 OK 1.4 MB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/landing/booty-calls/13/bg-removebg-preview.png
IP
File type PNG image data, 1316 x 1848, 8-bit/color RGBA, non-interlaced\012- data
Size 1.4 MB (1445587 bytes)
Hash 950cbc4a86f9305f9cab1899d35cee25
75a126fbee600ceee47a696bfe7cd76de1b6d1cc
16b688a8183ee40269af3fde1f59635b6c16bbc538d9dd6261d4f6dec42f8c65
GET /sb/notifications/games/nutaku/multi/4/images/landing/booty-calls/13/bg-removebg-preview.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: image/png
content-length: 1445587
last-modified: Fri, 19 Aug 2022 09:15:12 GMT
etag: "62ff54a0-160ed3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 367283
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ECdnAchHbeKyn1CMXrUV18vGZhOrxDJ7IxQPzcx0OrH65JdnVq3JfM0tgSx2ocOtHRV%2Fe%2B8RnHc7ft7HMz6YRS%2FoUjcp0%2Bt19vmqEGZRM0WMpB5oxa%2Fi3SUikCcLxpdIp8Y8AdVDleh4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fdeeb59730e-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
redirector.googlevideo.com/videoplayback?expire=1668899381&ei=1Q15Y9CMDs_7kgbAnaj4Cw&ip=184.164.141.146&id=o-ALblDDYfeAQVyoJ1DBzoC_upJ1GG22_Xtsas5GoD4urH&itag=134&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=3a&mm=31%2C26&mn=sn-a5mekn6s%2Csn-q4flrnsd&ms=au%2Conr&mv=m&mvi=2&pl=19&initcwndbps=3522500&vprv=1&mime=video%2Fmp4&ns=znWH6iUK6l-54E0eMkSEOIkJ&gir=yes&clen=10427993&otfp=1&dur=207.340&lmt=1600678288117961&mt=1668877496&fvip=5&keepalive=yes&fexp=24001373%2C24007246&c=WEB&n=eLS2osZW0zDimcVpj&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAOCVB0GlaO_t8Z4VK99L2E6F5k5FGXlnO4iumUTlNZG9AiEAt7YEZy89zFnsKCRmkwoDfydpmy5cT93_Xw599t5EhT0%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAOWAsBDINT8cDztBEEhLOfPWnTOg4iR6BjMFnjPb0KpOAiAzYcpM0-8J2PS2kr846bGL4fJX5t2HPiKHR-GXSdikRw%3D%3D
302 Found 1.3 kB URL HTTP/2 redirector.googlevideo.com/videoplayback?expire=1668899381&ei=1Q15Y9CMDs_7kgbAnaj4Cw&ip=184.164.141.146&id=o-ALblDDYfeAQVyoJ1DBzoC_upJ1GG22_Xtsas5GoD4urH&itag=134&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=3a&mm=31%2C26&mn=sn-a5mekn6s%2Csn-q4flrnsd&ms=au%2Conr&mv=m&mvi=2&pl=19&initcwndbps=3522500&vprv=1&mime=video%2Fmp4&ns=znWH6iUK6l-54E0eMkSEOIkJ&gir=yes&clen=10427993&otfp=1&dur=207.340&lmt=1600678288117961&mt=1668877496&fvip=5&keepalive=yes&fexp=24001373%2C24007246&c=WEB&n=eLS2osZW0zDimcVpj&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAOCVB0GlaO_t8Z4VK99L2E6F5k5FGXlnO4iumUTlNZG9AiEAt7YEZy89zFnsKCRmkwoDfydpmy5cT93_Xw599t5EhT0%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAOWAsBDINT8cDztBEEhLOfPWnTOg4iR6BjMFnjPb0KpOAiAzYcpM0-8J2PS2kr846bGL4fJX5t2HPiKHR-GXSdikRw%3D%3D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1086), with CRLF, LF line terminators
Hash b7697b6477c3cf9e7c914caa2daae752
330e5b43d0d2627a30e9ca864771a59bc51747f7
47e4eb0dcfa8b7664fc6c35c35912fd796649abea380072974851591782c5c44
GET /videoplayback?expire=1668899381&ei=1Q15Y9CMDs_7kgbAnaj4Cw&ip=184.164.141.146&id=o-ALblDDYfeAQVyoJ1DBzoC_upJ1GG22_Xtsas5GoD4urH&itag=134&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=3a&mm=31%2C26&mn=sn-a5mekn6s%2Csn-q4flrnsd&ms=au%2Conr&mv=m&mvi=2&pl=19&initcwndbps=3522500&vprv=1&mime=video%2Fmp4&ns=znWH6iUK6l-54E0eMkSEOIkJ&gir=yes&clen=10427993&otfp=1&dur=207.340&lmt=1600678288117961&mt=1668877496&fvip=5&keepalive=yes&fexp=24001373%2C24007246&c=WEB&n=eLS2osZW0zDimcVpj&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAOCVB0GlaO_t8Z4VK99L2E6F5k5FGXlnO4iumUTlNZG9AiEAt7YEZy89zFnsKCRmkwoDfydpmy5cT93_Xw599t5EhT0%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAOWAsBDINT8cDztBEEhLOfPWnTOg4iR6BjMFnjPb0KpOAiAzYcpM0-8J2PS2kr846bGL4fJX5t2HPiKHR-GXSdikRw%3D%3D HTTP/1.1
Host: redirector.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://shrinke.me/
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 19 Nov 2022 19:54:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
location: https://r2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1668899381&ei=1Q15Y9CMDs_7kgbAnaj4Cw&ip=184.164.141.146&id=o-ALblDDYfeAQVyoJ1DBzoC_upJ1GG22_Xtsas5GoD4urH&itag=134&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&vprv=1&mime=video%2Fmp4&ns=znWH6iUK6l-54E0eMkSEOIkJ&gir=yes&clen=10427993&otfp=1&dur=207.340&lmt=1600678288117961&keepalive=yes&fexp=24001373%2C24007246&c=WEB&n=eLS2osZW0zDimcVpj&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAOCVB0GlaO_t8Z4VK99L2E6F5k5FGXlnO4iumUTlNZG9AiEAt7YEZy89zFnsKCRmkwoDfydpmy5cT93_Xw599t5EhT0%3D&cms_redirect=yes&mh=3a&mip=91.90.42.154&mm=31&mn=sn-capm-vnae&ms=au&mt=1668887345&mv=m&mvi=2&pl=21&lsparams=mh,mip,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgY9qCnXZdvrhzoQco0LPzuyKai4yizqoFz9LkxNT35zgCIQCezAc9ZSPFpQqBR_5aEiIgfQ4mru9HPcePOB3rj84XsQ%3D%3D
content-type: text/html; charset=UTF-8
server: ClientMapServer
content-length: 1263
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c905c3a960cff09d12d9e25ba3b7718
06b7f3e8d5598775f032a0ebb6d08de613e98efd
324c382d2573a026cbcb4aee43493e9f98f9fd9635406c3840a21d7d7ecbb1c7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "324C382D2573A026CBCB4AEE43493E9F98F9FD9635406C3840A21D7D7ECBB1C7"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11749
Expires: Sat, 19 Nov 2022 23:10:34 GMT
Date: Sat, 19 Nov 2022 19:54:45 GMT
Connection: keep-alive
www.clarity.ms/eus2/s/0.6.43/clarity.js
200 OK 503 B URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 83e62ab2740db4fda7218d9459e8fdc3
4ff079aeef7f56a673d192e58348bb24117ab298
8ddc948b9e553e66996857df972bf432decb423841f9ffb5f252f0dbd5548fb2
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 55116
content-type: application/javascript;charset=utf-8
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8f81aa942374c"
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0hDR5YwAAAAB1vzoJgT0LR6I7mNocRbHpT1NMMjMxMDUwMjAzMDMzADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Sat, 19 Nov 2022 19:54:43 GMT
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 2.9 kB IP
File type ASCII text, with no line terminators
Hash 016c4a17e9c70519f7e7e3ae392ea8e0
37bd7e354aa04a13604c5a3b87b79d1eb90f4c0a
fd0bb8313c2af563cdfe777ef0d1cfef8c18e23711d21aea9a775098c8f5eff4
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinke.me/
Origin: https://shrinke.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:42 GMT
content-type: text/plain
set-cookie: csu=650833133986459@1@1668887682; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XOfLhFZ8XkXUPQ%2FTxZ2sO%2BqJZgbBdxfpNZ7KDm1B8%2F8LpPCKgUZ5fDf8so8GC%2BsQqdcvm8ReDUuZT322%2BbVY9WBgQXANZhH7sqdGd5KHYTbBxFKupIK4o6UstRGWE6GB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76cb7fcf0e7176b7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:34:08 GMT
expires: Thu, 16 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 260437
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1fe9675413275b7415b9569bbed3ca07
008049185211f9cf1411a0d27e2eda59a99fa70a
065e8c4cc7199453e84840d864c3941daed714d9d2ca07860d4f6bfeb3071443
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f25ed20fbb03cb4be84ab2e47a78bd7e
a4084419a4fafeb3291ad5070197942cf8968e3f
654e5c06608c50a23e679d53da8bb58b5f8f0bcbb30f6be57b3a5f2cf8cb8da3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "654E5C06608C50A23E679D53DA8BB58B5F8F0BCBB30F6BE57B3A5F2CF8CB8DA3"
Last-Modified: Sat, 19 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8697
Expires: Sat, 19 Nov 2022 22:19:42 GMT
Date: Sat, 19 Nov 2022 19:54:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f25ed20fbb03cb4be84ab2e47a78bd7e
a4084419a4fafeb3291ad5070197942cf8968e3f
654e5c06608c50a23e679d53da8bb58b5f8f0bcbb30f6be57b3a5f2cf8cb8da3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "654E5C06608C50A23E679D53DA8BB58B5F8F0BCBB30F6BE57B3A5F2CF8CB8DA3"
Last-Modified: Sat, 19 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8697
Expires: Sat, 19 Nov 2022 22:19:42 GMT
Date: Sat, 19 Nov 2022 19:54:45 GMT
Connection: keep-alive
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash e7763d82e7b37f74a430fd2fdef00864
00f3b61a8a02de63e1267b906a06999c1d378ac7
d2bfdebeaf983be5099bd7a5f1ceca61b4131389f1c0e8d384f27f4d139701f4
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 19:54:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 23 Nov 2022 18:05:25 GMT
ETag: "00f3b61a8a02de63e1267b906a06999c1d378ac7"
Last-Modified: Sat, 19 Nov 2022 18:05:26 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3168
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76cb7fe13bbcb4eb-OSL
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash e7763d82e7b37f74a430fd2fdef00864
00f3b61a8a02de63e1267b906a06999c1d378ac7
d2bfdebeaf983be5099bd7a5f1ceca61b4131389f1c0e8d384f27f4d139701f4
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 19:54:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 23 Nov 2022 18:05:25 GMT
ETag: "00f3b61a8a02de63e1267b906a06999c1d378ac7"
Last-Modified: Sat, 19 Nov 2022 18:05:26 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3168
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76cb7fe14bd2b4eb-OSL
prodigalpromotion.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fjs%2Fscript.js&l=4076&fd=173
200 OK 0 B URL HTTP/1.1 prodigalpromotion.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fjs%2Fscript.js&l=4076&fd=173
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fjs%2Fscript.js&l=4076&fd=173 HTTP/1.1
Host: prodigalpromotion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Cookie: u_pl=15296127; uid_id2=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1844b8e470c024a415cff51a0843d71c=[3789941]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:45 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
id5-sync.com/g/v2/806.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/806.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7663cf2518f79ecc5041542090a92b01
99956bf09b18df984e2ba5aa2289326b03bc34f6
cc8a35436ea91ddfa41a466bfd5285cb10114e62f193a30fbe29acc2371e0f3c
POST /g/v2/806.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 193
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sat, 19 Nov 2022 19:54:45 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
id5-sync.com/g/v2/806.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/806.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 587e813ba63c620234d049e5f86c6551
672d37573d205662f594624a464dc88a4b5324c2
3d1db541a21e59024ffab953068125ab96717d8f261b921823db31b64b8f3451
POST /g/v2/806.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 193
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sat, 19 Nov 2022 19:54:45 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
prodigalpromotion.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRStjvHigqB48aAO4kHBTLqnezIz7mExrpFgTMLuavBmdVX1pJzqrqaqe3qSi8GVZb3N3rwInTfJBtdFXO%2ByMvEiASGjIEGMZ08KQs4yk4HBD93%2Fv%2F%2Fq8N6rurOfnxMXOT3bfE%2FvSqXoYr3qVl7dkgnXha2s36p4btW9WtmSyVJwtdIb%2F0z3Dc%2BtV93XKu8I1tGLNddzXc%2F1KivSiEj3FicsZPqw5VVbbjWoVb16gJ75P7a5A0sd8O45eRaSj57c%2FukRJBsiib%2B9Lmwn0%2Bnrb8e5opk26PKj95NOoosE8WyMjIMoOZqehrYjQr6Yg06Opg6guwdjBwjliDi%2FeQiTo6lMhN3DS6WhgkgQ8isoukMINYSkQzB9G5KfEoBxrG8gie%2Bva1PQnUuWjtkRmb%2F4F7IYkfk%2FnkMSf7OsZK9yU6s8kzqx6EUlZG8I2R4izY%2BR7TqQxTFY9ikk%2F5ksXqwhiQ82rNKQ%2FOwVdynkUUDFAncjthAI3ligjVZjwY9CX1DqNYIlMYlIyiFkNIQSfVDrIB9%2F0kEeOchTBzE%2Fq9B6K3LdRhRGvt8MGGO%2Bz1i9ucTr3A%2BakYucjT30kaV9MNUHM3tIzR468t6pdw6T%2FwC7XcJyBzYj6PIShSAoLEFBCQpJUGQERbc85MrWbHmfK5uH3rTXpt0vBzpr79NDnbVFQvbTc%2FLMJLu%2Fok%2FQEWcVrxkEYVMEDZe5tYAGXp1FUd2jbjPwecNjsLKEtHMTp7tyROZeuoJUjgi5%2BBAhPYZVx2DyZdD8BdBi0Ki5oNuDoOliN3lgt41MOqIaC3BdIs3mke04%2B%2BqcPD9R0fo1h2AnZFpgpkRqSnwsfyRoq7uDG7ogBzd0YcmjjTSTsdyl49u9mdFMOA%2FeFTuFNnz1uu1%2F9SYbE%2BPx4S1hszWacJm0Lfl6WXIuzIo2TJDvV%2B2WCDdzu72cmyRP1zbfWlmNUyOslToZgsrTjx6DyRF5Kr4zebcv%2Fv45pBnC5CXifKZU6mOwdA82ne2sJjBqhsPUQZGXA1MLZ0slCZSYYRqWsOLk2p9%2Ff%2FndwtMfIBQnj%2F%2B55PbtXbSNA5rdRhKX6JoSXVWCqj5s%2FsQgS83JtV%2F8SSFUziBUxjkIlVH3LqO18qxS9wLRDJsNxnkoGPcaNb%2Fpu26N86DREl4LmR2xneCz%2FwAAAP%2F%2FAQAA%2F%2F8Skv3JjwQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 prodigalpromotion.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRStjvHigqB48aAO4kHBTLqnezIz7mExrpFgTMLuavBmdVX1pJzqrqaqe3qSi8GVZb3N3rwInTfJBtdFXO%2ByMvEiASGjIEGMZ08KQs4yk4HBD93%2Fv%2F%2Fq8N6rurOfnxMXOT3bfE%2FvSqXoYr3qVl7dkgnXha2s36p4btW9WtmSyVJwtdIb%2F0z3Dc%2BtV93XKu8I1tGLNddzXc%2F1KivSiEj3FicsZPqw5VVbbjWoVb16gJ75P7a5A0sd8O45eRaSj57c%2FukRJBsiib%2B9Lmwn0%2Bnrb8e5opk26PKj95NOoosE8WyMjIMoOZqehrYjQr6Yg06Opg6guwdjBwjliDi%2FeQiTo6lMhN3DS6WhgkgQ8isoukMINYSkQzB9G5KfEoBxrG8gie%2Bva1PQnUuWjtkRmb%2F4F7IYkfk%2FnkMSf7OsZK9yU6s8kzqx6EUlZG8I2R4izY%2BR7TqQxTFY9ikk%2F5ksXqwhiQ82rNKQ%2FOwVdynkUUDFAncjthAI3ligjVZjwY9CX1DqNYIlMYlIyiFkNIQSfVDrIB9%2F0kEeOchTBzE%2Fq9B6K3LdRhRGvt8MGGO%2Bz1i9ucTr3A%2BakYucjT30kaV9MNUHM3tIzR468t6pdw6T%2FwC7XcJyBzYj6PIShSAoLEFBCQpJUGQERbc85MrWbHmfK5uH3rTXpt0vBzpr79NDnbVFQvbTc%2FLMJLu%2Fok%2FQEWcVrxkEYVMEDZe5tYAGXp1FUd2jbjPwecNjsLKEtHMTp7tyROZeuoJUjgi5%2BBAhPYZVx2DyZdD8BdBi0Ki5oNuDoOliN3lgt41MOqIaC3BdIs3mke04%2B%2BqcPD9R0fo1h2AnZFpgpkRqSnwsfyRoq7uDG7ogBzd0YcmjjTSTsdyl49u9mdFMOA%2FeFTuFNnz1uu1%2F9SYbE%2BPx4S1hszWacJm0Lfl6WXIuzIo2TJDvV%2B2WCDdzu72cmyRP1zbfWlmNUyOslToZgsrTjx6DyRF5Kr4zebcv%2Fv45pBnC5CXifKZU6mOwdA82ne2sJjBqhsPUQZGXA1MLZ0slCZSYYRqWsOLk2p9%2Ff%2FndwtMfIBQnj%2F%2B55PbtXbSNA5rdRhKX6JoSXVWCqj5s%2FsQgS83JtV%2F8SSFUziBUxjkIlVH3LqO18qxS9wLRDJsNxnkoGPcaNb%2Fpu26N86DREl4LmR2xneCz%2FwAAAP%2F%2FAQAA%2F%2F8Skv3JjwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRStjvHigqB48aAO4kHBTLqnezIz7mExrpFgTMLuavBmdVX1pJzqrqaqe3qSi8GVZb3N3rwInTfJBtdFXO%2ByMvEiASGjIEGMZ08KQs4yk4HBD93%2Fv%2F%2Fq8N6rurOfnxMXOT3bfE%2FvSqXoYr3qVl7dkgnXha2s36p4btW9WtmSyVJwtdIb%2F0z3Dc%2BtV93XKu8I1tGLNddzXc%2F1KivSiEj3FicsZPqw5VVbbjWoVb16gJ75P7a5A0sd8O45eRaSj57c%2FukRJBsiib%2B9Lmwn0%2Bnrb8e5opk26PKj95NOoosE8WyMjIMoOZqehrYjQr6Yg06Opg6guwdjBwjliDi%2FeQiTo6lMhN3DS6WhgkgQ8isoukMINYSkQzB9G5KfEoBxrG8gie%2Bva1PQnUuWjtkRmb%2F4F7IYkfk%2FnkMSf7OsZK9yU6s8kzqx6EUlZG8I2R4izY%2BR7TqQxTFY9ikk%2F5ksXqwhiQ82rNKQ%2FOwVdynkUUDFAncjthAI3ligjVZjwY9CX1DqNYIlMYlIyiFkNIQSfVDrIB9%2F0kEeOchTBzE%2Fq9B6K3LdRhRGvt8MGGO%2Bz1i9ucTr3A%2BakYucjT30kaV9MNUHM3tIzR468t6pdw6T%2FwC7XcJyBzYj6PIShSAoLEFBCQpJUGQERbc85MrWbHmfK5uH3rTXpt0vBzpr79NDnbVFQvbTc%2FLMJLu%2Fok%2FQEWcVrxkEYVMEDZe5tYAGXp1FUd2jbjPwecNjsLKEtHMTp7tyROZeuoJUjgi5%2BBAhPYZVx2DyZdD8BdBi0Ki5oNuDoOliN3lgt41MOqIaC3BdIs3mke04%2B%2BqcPD9R0fo1h2AnZFpgpkRqSnwsfyRoq7uDG7ogBzd0YcmjjTSTsdyl49u9mdFMOA%2FeFTuFNnz1uu1%2F9SYbE%2BPx4S1hszWacJm0Lfl6WXIuzIo2TJDvV%2B2WCDdzu72cmyRP1zbfWlmNUyOslToZgsrTjx6DyRF5Kr4zebcv%2Fv45pBnC5CXifKZU6mOwdA82ne2sJjBqhsPUQZGXA1MLZ0slCZSYYRqWsOLk2p9%2Ff%2FndwtMfIBQnj%2F%2B55PbtXbSNA5rdRhKX6JoSXVWCqj5s%2FsQgS83JtV%2F8SSFUziBUxjkIlVH3LqO18qxS9wLRDJsNxnkoGPcaNb%2Fpu26N86DREl4LmR2xneCz%2FwAAAP%2F%2FAQAA%2F%2F8Skv3JjwQAAA%3D%3D HTTP/1.1
Host: prodigalpromotion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Cookie: u_pl=15296127; uid_id2=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1844b8e470c024a415cff51a0843d71c=[3789941]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:45 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ba9c4c26509a81b8ee915b043a3abacc
Strict-Transport-Security: max-age=0; includeSubdomains
match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
200 OK 63 B URL HTTP/2 match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 147efa1da3875e4beb0154db0aafafae
13a743e2b698f5de6db433a15847416c096596d0
20f8be9f07d1855b44783a7071629606360f1b52082a5f67069c4549a88d0b2d
GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:45 GMT
content-type: application/json; charset=utf-8
content-length: 63
cache-control: private
expires: Mon, 19 Dec 2022 19:54:45 GMT
vary: Origin
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept
x-aspnet-version: 4.0.30319
X-Firefox-Spdy: h2
match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
200 OK 63 B URL HTTP/2 match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 147efa1da3875e4beb0154db0aafafae
13a743e2b698f5de6db433a15847416c096596d0
20f8be9f07d1855b44783a7071629606360f1b52082a5f67069c4549a88d0b2d
GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:45 GMT
content-type: application/json; charset=utf-8
content-length: 63
cache-control: private
expires: Mon, 19 Dec 2022 19:54:45 GMT
vary: Origin
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept
x-aspnet-version: 4.0.30319
X-Firefox-Spdy: h2
majorityevaluatewiped.com/pixel/purst?dl=0&th=0&sc=0&rs=1672&rd=1672&fd=692&bv=22.10.v.10&tmpl=136
200 OK 0 B URL HTTP/1.1 majorityevaluatewiped.com/pixel/purst?dl=0&th=0&sc=0&rs=1672&rd=1672&fd=692&bv=22.10.v.10&tmpl=136
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1672&rd=1672&fd=692&bv=22.10.v.10&tmpl=136 HTTP/1.1
Host: majorityevaluatewiped.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 19 Nov 2022 19:54:45 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 48ac1a84370b51a066df6e911009c623
34f685774c4bc1d589aa6f697a19367155946db6
4f7a9c20a0dbc530a9c7f742c800da47d3344fd191420b3bdb27e48df574bcad
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 19 Nov 2022 19:54:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 18 Nov 2022 21:26:26 GMT
Expires: Sat, 19 Nov 2022 21:26:26 GMT
ETag: "34f685774c4bc1d589aa6f697a19367155946db6"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 48ac1a84370b51a066df6e911009c623
34f685774c4bc1d589aa6f697a19367155946db6
4f7a9c20a0dbc530a9c7f742c800da47d3344fd191420b3bdb27e48df574bcad
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 19 Nov 2022 19:54:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 18 Nov 2022 21:26:26 GMT
Expires: Sat, 19 Nov 2022 21:26:26 GMT
ETag: "34f685774c4bc1d589aa6f697a19367155946db6"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
veilsuccessfully.com/pixel/purst?dl=0&th=0&sc=0&rs=1549&rd=1549&fd=587&bv=22.10.v.10&tmpl=136
200 OK 0 B URL HTTP/1.1 veilsuccessfully.com/pixel/purst?dl=0&th=0&sc=0&rs=1549&rd=1549&fd=587&bv=22.10.v.10&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1549&rd=1549&fd=587&bv=22.10.v.10&tmpl=136 HTTP/1.1
Host: veilsuccessfully.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:45 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4b85ce7a65c53ca698df2ce09f935ced
3f2a31d95da4de1d20fb90bb99662f0993880b6a
e379364f421cf1a312fee0f6addcfb80e8674f918dc48037655fdc1510cafeca
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 19:54:45 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 13:42:54 GMT
Expires: Wed, 23 Nov 2022 13:42:53 GMT
Etag: "3f2a31d95da4de1d20fb90bb99662f0993880b6a"
Cache-Control: max-age=322687,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76cb7fe0d9c21bfa-OSL
prodigalpromotion.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 prodigalpromotion.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: prodigalpromotion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Cookie: u_pl=15296127; uid_id2=06bdf4ae-d0fc-4ed7-a797-3fb3eaa1746e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1844b8e470c024a415cff51a0843d71c=[3789941]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 19 Nov 2022 19:54:45 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
id.crwdcntrl.net/id
200 OK 43 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90eeff5111bbbdce769d4130cc3cca3c
d62886c1a85d51814cb7f124761c5e6aca6d8933
a96e1e97d62ab9747678b947bdf0a0ea5f81790b1e3a1df2d4607a86bf802596
GET /id HTTP/1.1
Host: id.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:45 GMT
content-type: application/json;charset=utf-8
content-length: 43
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.20.99
access-control-allow-credentials: true
access-control-allow-origin: https://shrinke.me
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
id.crwdcntrl.net/id
200 OK 43 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90eeff5111bbbdce769d4130cc3cca3c
d62886c1a85d51814cb7f124761c5e6aca6d8933
a96e1e97d62ab9747678b947bdf0a0ea5f81790b1e3a1df2d4607a86bf802596
GET /id HTTP/1.1
Host: id.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:45 GMT
content-type: application/json;charset=utf-8
content-length: 43
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.18.69
access-control-allow-credentials: true
access-control-allow-origin: https://shrinke.me
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
api.rlcdn.com/api/identity/envelope?pid=1258
401 Unauthorized 19 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=1258
IP
Hash 63dfbd2b39fe4f536a04e7b32ada47b4
207298c4a215ad5d97d888522927910ae772ba48
26e51290d12b4fea0bb98da3ed118837b744555ba723061771ab3df30000b6b7
GET /api/identity/envelope?pid=1258 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Sat, 19 Nov 2022 19:54:45 GMT
content-length: 19
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fshrinke.me&pubid=9cf0c4f1-7630-476b-9141-f4472e005192
204 No Content 0 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fshrinke.me&pubid=9cf0c4f1-7630-476b-9141-f4472e005192
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fshrinke.me&pubid=9cf0c4f1-7630-476b-9141-f4472e005192 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Sat, 19 Nov 2022 15:31:38 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YbEwyUPgM77QvDi7uafSPPNrwF_w12N-mKwkO_qfHZNPtYfOKlXQfA==
age: 15787
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1fe9675413275b7415b9569bbed3ca07
008049185211f9cf1411a0d27e2eda59a99fa70a
065e8c4cc7199453e84840d864c3941daed714d9d2ca07860d4f6bfeb3071443
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4b85ce7a65c53ca698df2ce09f935ced
3f2a31d95da4de1d20fb90bb99662f0993880b6a
e379364f421cf1a312fee0f6addcfb80e8674f918dc48037655fdc1510cafeca
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 19:54:45 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 13:42:54 GMT
Expires: Wed, 23 Nov 2022 13:42:53 GMT
Etag: "3f2a31d95da4de1d20fb90bb99662f0993880b6a"
Cache-Control: max-age=322687,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76cb7fe29b891bfa-OSL
ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=155495
200 OK 5.7 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=155495
IP
Hash 199684c6f83466a65fcd065245f7d08f
38d0731c4e45a45ae2f3ef3ecbb29d750466cd62
4c1f3f42d646e77e258e5385f783402776e36f70eec667f1d7eec3877abf63b4
GET /AdServer/js/user_sync.html?kdntuid=1&p=155495 HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Feb 2022 06:38:00 GMT
etag: "1300708-3de4-5d6ef246ef4cf"
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5549
content-type: text/html; charset=UTF-8
cache-control: max-age=123768
expires: Mon, 21 Nov 2022 06:17:34 GMT
date: Sat, 19 Nov 2022 19:54:46 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5e884c53db72411f06e2209d005f7586
6e1049a7fc26d6a3259a97bfca9dc6ba7b0dd5af
2965603dd297987ffa36ffd33c133f2c6a67fa6df1551554160b65ce804b0198
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=155495
200 OK 5.5 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=155495
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15844), with no line terminators
Hash 7725e8e949141c8ded449d86975d4c04
8cd8c314a2002cc26f821d331ab9512f52a551a2
a0c49aacf6f552bce544eb8516404f696918253cd934a6404ebeafd71f8780ae
GET /AdServer/js/user_sync.html?kdntuid=1&p=155495 HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Feb 2022 06:38:00 GMT
etag: "1300708-3de4-5d6ef246ef4cf"
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5549
content-type: text/html; charset=UTF-8
cache-control: max-age=123768
expires: Mon, 21 Nov 2022 06:17:34 GMT
date: Sat, 19 Nov 2022 19:54:46 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3b1d0042dde3a7cc0f3c9a298949354
5643577b85e8c0d80cf8a5c94262727138b8d001
3efe18400af9e79682d4505e35b7b2debe378453facc569dbb575b6ba849d874
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=3&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22sd%22%3A%22vi_850944415_7%22%2C%22s%22%3A%5B%22970x90%22%5D%2C%22sn%22%3A44415%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%2C%7B%22sd%22%3A%22vi_850944415_8%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A44415%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
200 OK 23 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=3&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22sd%22%3A%22vi_850944415_7%22%2C%22s%22%3A%5B%22970x90%22%5D%2C%22sn%22%3A44415%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%2C%7B%22sd%22%3A%22vi_850944415_8%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A44415%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
IP
File type ASCII text, with no line terminators
Hash f846ebe7331bdf57ae5b65acb42c5f30
1ee6057e835c893700196579f26fdcd92b084b4f
1c4777fe3a673a05492e27d08032cc91c23ac5389897c9235b09b8b0f5a74db3
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=3&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22sd%22%3A%22vi_850944415_7%22%2C%22s%22%3A%5B%22970x90%22%5D%2C%22sn%22%3A44415%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%2C%7B%22sd%22%3A%22vi_850944415_8%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A44415%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 23
server: Server
date: Sat, 19 Nov 2022 19:54:46 GMT
x-amz-rid: JRN8046EVDKA7CBYRQ0K
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L0nxmDVPBFOf2yrD6fB7EgsX8NCPVIOgV9p1dYEHtcw8fPu8hvz1zg==
X-Firefox-Spdy: h2
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=2&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A1%2C%22id%22%3A%22Interdog_Media_RON_Instream%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22640x480%22%5D%7D%2C%7B%22sd%22%3A%22vi_850992666_banner%22%2C%22s%22%3A%5B%22336x280%22%2C%22300x250%22%5D%2C%22sn%22%3A92666%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
200 OK 23 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=2&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A1%2C%22id%22%3A%22Interdog_Media_RON_Instream%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22640x480%22%5D%7D%2C%7B%22sd%22%3A%22vi_850992666_banner%22%2C%22s%22%3A%5B%22336x280%22%2C%22300x250%22%5D%2C%22sn%22%3A92666%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
IP
File type ASCII text, with no line terminators
Hash a825e31d18f2ff5845d245fed741e9f1
6e196f0b42376389ae1cc16e8f2d0c886940fad7
5d7c7d25a0da74c0dd466120c3c09bd94cb982fc66ebc4a78675339f37323bf5
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=2&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A1%2C%22id%22%3A%22Interdog_Media_RON_Instream%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22640x480%22%5D%7D%2C%7B%22sd%22%3A%22vi_850992666_banner%22%2C%22s%22%3A%5B%22336x280%22%2C%22300x250%22%5D%2C%22sn%22%3A92666%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 23
server: Server
date: Sat, 19 Nov 2022 19:54:46 GMT
x-amz-rid: BMD0PP4KB9DAZR52MFHG
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TWCwaKRNdXjYlT6DQK6ufev7aLJoB-vz9lTapbU47f1gaMhXXYrm1A==
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-137383949-1&cid=2038442406.1668887683&jid=1889300194&_u=YEBAAUAAAAAAACAAI~&z=2098320763
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-137383949-1&cid=2038442406.1668887683&jid=1889300194&_u=YEBAAUAAAAAAACAAI~&z=2098320763
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-137383949-1&cid=2038442406.1668887683&jid=1889300194&_u=YEBAAUAAAAAAACAAI~&z=2098320763 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 19 Nov 2022 19:54:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-137383949-1&cid=2038442406.1668887683&jid=1889300194&_u=YEBAAUAAAAAAACAAI~&z=2098320763
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-137383949-1&cid=2038442406.1668887683&jid=1889300194&_u=YEBAAUAAAAAAACAAI~&z=2098320763
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-137383949-1&cid=2038442406.1668887683&jid=1889300194&_u=YEBAAUAAAAAAACAAI~&z=2098320763 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 19 Nov 2022 19:54:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=0&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22sd%22%3A%22vi_850929441_1%22%2C%22s%22%3A%5B%22320x100%22%2C%22320x50%22%2C%22300x100%22%2C%22300x75%22%5D%2C%22sn%22%3A29441%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
200 OK 23 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=0&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22sd%22%3A%22vi_850929441_1%22%2C%22s%22%3A%5B%22320x100%22%2C%22320x50%22%2C%22300x100%22%2C%22300x75%22%5D%2C%22sn%22%3A29441%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
IP
File type ASCII text, with no line terminators
Hash eae5ee6c7e3134a287aa23fcd63d64f0
3b17dc8eb29b01bd80c12c7d64159d0434edfdac
745a085b52b8371ec6705413fca70a28c6d8bff0db480e6b124bd08c54e95ef8
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=0&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22sd%22%3A%22vi_850929441_1%22%2C%22s%22%3A%5B%22320x100%22%2C%22320x50%22%2C%22300x100%22%2C%22300x75%22%5D%2C%22sn%22%3A29441%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 23
server: Server
date: Sat, 19 Nov 2022 19:54:46 GMT
x-amz-rid: 2P7WZ0JZEBYRR5Y1XT2D
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eEIDYbKK63V6EETXlHVGl_RQE9-_s6Pmen8ESkFdhWNRkhc2V0vSeA==
X-Firefox-Spdy: h2
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=1&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22sd%22%3A%22vi_850929440_1%22%2C%22s%22%3A%5B%22970x250%22%2C%22970x90%22%2C%22728x90%22%2C%22468x60%22%5D%2C%22sn%22%3A29440%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
200 OK 23 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=1&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22sd%22%3A%22vi_850929440_1%22%2C%22s%22%3A%5B%22970x250%22%2C%22970x90%22%2C%22728x90%22%2C%22468x60%22%5D%2C%22sn%22%3A29440%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
IP
File type ASCII text, with no line terminators
Hash 39fc3d21236e89707a548e7ff802c026
7409f920c8a197c7327b89334b5d1977f0636cef
89b4aa9e9bf8516c2ab7b5134f65d47b02071637259a14c9f60dccc207e05ce4
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fshrinke.me%2FLyTiG&pid=Iv29I4aVCA2hB&cb=1&ws=1280x939&v=22.1107.1609&t=1000&slots=%5B%7B%22sd%22%3A%22vi_850929440_1%22%2C%22s%22%3A%5B%22970x250%22%2C%22970x90%22%2C%22728x90%22%2C%22468x60%22%5D%2C%22sn%22%3A29440%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A1%7D%5D&schain=1.0%2C1!interdogmedia.com%2C1506%2C1%2C%2C%2C&pubid=9cf0c4f1-7630-476b-9141-f4472e005192&gdpre=1&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 23
server: Server
date: Sat, 19 Nov 2022 19:54:46 GMT
x-amz-rid: 4FT4M95G88H9K9V7WKEG
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3i_5DkwxgxQU3DEKfDgEoQmfMcQLHO1oNiznjcoo1XujD5caK0cRNg==
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=CAFC7FC544364E698655D3FEC2412D1B&RedC=c.clarity.ms&MXFR=19C4FE3E6D9B6344027FEC5F699B6D67
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=CAFC7FC544364E698655D3FEC2412D1B&RedC=c.clarity.ms&MXFR=19C4FE3E6D9B6344027FEC5F699B6D67
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=CAFC7FC544364E698655D3FEC2412D1B&RedC=c.clarity.ms&MXFR=19C4FE3E6D9B6344027FEC5F699B6D67 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinke.me/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=CAFC7FC544364E698655D3FEC2412D1B&MUID=38D1EC4D5DC364191C83FE2C5C946538
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=38D1EC4D5DC364191C83FE2C5C946538; domain=c.bing.com; expires=Thu, 14-Dec-2023 19:54:46 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C17C6511C97C45D8908B0A16AAB294BD Ref B: OSL30EDGE0414 Ref C: 2022-11-19T19:54:46Z
date: Sat, 19 Nov 2022 19:54:46 GMT
content-length: 0
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1
200 OK 873 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1
IP
Hash c044e9c3b599fd78703b7dcd0817228d
2cf93ce443a83af5839492fcedfa477a7b62abea
821ff5bf5405966a220719b8f45285fca04f3439488c8dffd157cf65eb6db674
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:45 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://shrinke.me
server-processing-duration-in-ticks: 831371
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 17053
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: W/"623de86a-cf34"
Expires: Fri, 04 Nov 2022 04:41:58 GMT
Cache-Control: max-age=86402
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 19:54:46 GMT
Age: 54737
X-Served-By: cache-lga13626-LGA, cache-bma1628-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 38, 133912
X-Timer: S1668887687.649321,VS0,VE0
Vary: Accept-Encoding
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 17053
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: W/"623de86a-cf34"
Expires: Fri, 04 Nov 2022 04:41:58 GMT
Cache-Control: max-age=86402
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 19:54:46 GMT
Age: 54736
X-Served-By: cache-lga13626-LGA, cache-bma1634-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 38, 133220
X-Timer: S1668887687.666049,VS0,VE0
Vary: Accept-Encoding
c.clarity.ms/c.gif?CtsSyncId=CAFC7FC544364E698655D3FEC2412D1B&MUID=38D1EC4D5DC364191C83FE2C5C946538
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=CAFC7FC544364E698655D3FEC2412D1B&MUID=38D1EC4D5DC364191C83FE2C5C946538
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=CAFC7FC544364E698655D3FEC2412D1B&MUID=38D1EC4D5DC364191C83FE2C5C946538 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinke.me/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Sat, 19-Nov-2022 20:04:46 GMT; path=/; SameSite=None; Secure;
date: Sat, 19 Nov 2022 19:54:46 GMT
content-length: 42
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 19f4544c828db59227c011c1dacb0222
5e33a464ded55da55da13ed03de8af5868ee4b97
1c53a0002bb1e7b1923ed81a023d7f76514ba97b15623c2a5ac647298fe1dcf2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 523
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:46 GMT
Last-Modified: Sat, 19 Nov 2022 19:46:03 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash 19f4544c828db59227c011c1dacb0222
5e33a464ded55da55da13ed03de8af5868ee4b97
1c53a0002bb1e7b1923ed81a023d7f76514ba97b15623c2a5ac647298fe1dcf2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 530
Cache-Control: max-age=165439
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 19:54:46 GMT
Etag: "637915b3-13a"
Expires: Mon, 21 Nov 2022 17:52:05 GMT
Last-Modified: Sat, 19 Nov 2022 17:43:15 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 314
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:45 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=dVpmEl80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3kxWUY0RlZCY3FtQXFTZ0VteVlmOEVNY3oyMXVzMlJYQXpjMXklMkJOJTJGbHky; expires=Thu, 14 Dec 2023 19:54:46 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://shrinke.me
server-processing-duration-in-ticks: 343701
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:46 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=LIqz9F80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFrek0lMkJaeHBtd3dHcmhXdnpUTzBjcEhRRFdnNHZTWXlENWxmblVnMlFvNA; expires=Thu, 14 Dec 2023 19:54:46 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://shrinke.me
server-processing-duration-in-ticks: 230588
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
200 OK 60 B URL HTTP/2 image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
IP
File type ASCII text, with no line terminators
Hash 43f6901b65ec3e8608d7bbbb9264c8e5
d50bcb1e39c45fb215b45d782c2aca5034ba3ffa
d6da890ab53eae42b44f2592129d9a2aa89baf2dedce210e6f7d00c165bad224
GET /AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB HTTP/1.1
Host: image6.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=UTF-8
expires: Fri, 17 Feb 2023 11:46:07 GMT
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
date: Sat, 19 Nov 2022 19:54:45 GMT
content-length: 60
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1537
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
date: Sat, 19 Nov 2022 19:54:46 GMT
X-Firefox-Spdy: h2
simage4.pubmatic.com/AdServer/SPug?o=1&p=155495&sc=1&u=F41BA67B-E3EF-4359-B62F-16B3197C3112&rs=3&gdpr=0&gdpr_consent=&us_privacy=
200 OK 1.3 kB URL HTTP/2 simage4.pubmatic.com/AdServer/SPug?o=1&p=155495&sc=1&u=F41BA67B-E3EF-4359-B62F-16B3197C3112&rs=3&gdpr=0&gdpr_consent=&us_privacy=
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (1720)
Hash 2432ef15dcd9949dfaf409ef5b6ecf48
d07f5191908823db96e448f9bd23e3a9339d69f4
4627689d71ecce2d9540383f5446f831f55cd09ccaf101a3fe8dc6f2aa9da162
GET /AdServer/SPug?o=1&p=155495&sc=1&u=F41BA67B-E3EF-4359-B62F-16B3197C3112&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: simage4.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 54565
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
date: Sat, 19 Nov 2022 19:54:46 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 37888
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
date: Sat, 19 Nov 2022 19:54:46 GMT
X-Firefox-Spdy: h2
www.clarity.ms/tag/6j3srg4zo7
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/6j3srg4zo7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/6j3srg4zo7 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=58ddd7ff815f4006843a99c6201c4808.20221119.20231119; expires=Sun, 19 Nov 2023 19:54:42 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
x-cache: CONFIG_NOCACHE
x-azure-ref: 0gjR5YwAAAABwbZoUw9PmQIbyqjoFEMziT1NMMjMxMDUwMjAzMDMzADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Sat, 19 Nov 2022 19:54:42 GMT
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:46 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://shrinke.me
server-processing-duration-in-ticks: 1349095
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
services.vlitag.com/cli/b696d0f5c06dbd9fd83feb568718537b.json?hn=https://shrinke.me
200 OK 0 B URL HTTP/2 services.vlitag.com/cli/b696d0f5c06dbd9fd83feb568718537b.json?hn=https://shrinke.me
IP
GET /cli/b696d0f5c06dbd9fd83feb568718537b.json?hn=https://shrinke.me HTTP/1.1
Host: services.vlitag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:43 GMT
content-type: application/json; charset=utf-8
content-length: 42
cache-control: private, no-cache, no-store, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
access-control-allow-origin: https://shrinke.me
x-robots-tag: noindex, nofollow, noarchive, nosnippet
cf-cache-status: BYPASS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fd20e28fabc-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:42 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://shrinke.me
server-processing-duration-in-ticks: 1318476
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/close.svg
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/close.svg
IP
GET /sb/notifications/games/nutaku/multi/4/images/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: image/svg+xml
last-modified: Fri, 19 Aug 2022 09:15:06 GMT
etag: W/"62ff549a-4ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 367283
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JV19wT%2BX0Rdj9WEuJwxdsZFMccJeLstbHlUQgxGKb7EfHpn8bsABfVUNyGuPVoli8YZUTx%2FYQHBV7IRo7rrHUK73Y0fG%2B1QdEyq2i2IUTgmKVBHOATTligxx6pSh19NK5Z0%2F41UNlPJI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fdeeb56730e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://shrinke.me/
Origin: https://shrinke.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:45 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://shrinke.me
server-processing-duration-in-ticks: 463187
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
particinepartm.com/popunder.gif
200 OK 0 B URL HTTP/2 particinepartm.com/popunder.gif
IP
GET /popunder.gif HTTP/1.1
Host: particinepartm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:41 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 24600
last-modified: Sat, 19 Nov 2022 13:04:41 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=np5j31CYmxr5CWCBgpxEEeXlA1aCoS%2FnUdTVazVCsH2tmD%2Fhh98WadJspBCQa3VzlUknS%2BFCD1S0XTQJNKOZV4gWa%2F08UnIQwYfKmEN7yXdmvyvvn3zHKajyo5bPqn%2B0cP%2BG760%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fcc0a3ab51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 0 B IP
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinke.me/
Origin: https://shrinke.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:42 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 6603
last-modified: Sat, 19 Nov 2022 18:04:39 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sGrbDtnm3haJ0gBYUn7sIelblD5B%2F0hpHE9CkQOvl8OlDBRLkhpQFMIjajMME1Ml5fXNy2Vmi3dv%2FLT7nd3XDUM2lgUyXpAs6pAcXr6kXrywQ8Cc9hG4S3MXw0h8%2B4wz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fcf0e7376b7-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/js/jquery.min.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/js/jquery.min.js
IP
GET /sb/notifications/games/nutaku/multi/4/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: application/javascript
last-modified: Fri, 19 Aug 2022 09:15:15 GMT
etag: W/"62ff54a3-149b8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 367283
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E7N3QRZR0dtQhrYPS%2BV29y37awIqkLjlOP07D1thl0PUmouh%2FLkesjNeGxvwcmPWOOkVDBqExQYZSwIK8j%2FW6Sug%2BnCCARNzp52iaHoAH8bjDKAlqEKJVY%2FPa8z4VIyyHK7thodCGeLD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fdeeb5a730e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/css/style.css
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/css/style.css
IP
GET /sb/notifications/games/nutaku/multi/4/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 08:08:06 GMT
etag: W/"632ac666-1fae"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 349964
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=igwbrEExBlXGeeC6yxC%2BikPdYOa54zqc9MkXwpGZhQ39ZGX4z07bS5Exp9cqTnIfUqApY%2BKBG9%2BIhhT%2BNpR4E7Vu96iZLEMtzdcHCrcQNoI2LkQbMkEJahdcU%2BoxBiIaY00T4rtQRFXS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fde6b9173ff-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://shrinke.me/
Origin: https://shrinke.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:43 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://shrinke.me
server-processing-duration-in-ticks: 219853
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json
200 OK 0 B URL HTTP/2 test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json
IP
GET /GVL-v2/cmp-list.json HTTP/1.1
Host: test.quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Sat, 19 Nov 2022 03:00:37 GMT
last-modified: Tue, 15 Nov 2022 19:52:30 GMT
etag: W/"67643b5faa0950a5532c47758ba39d2f"
x-amz-server-side-encryption: AES256
x-amz-version-id: xPMKnfS8YcqF2frTT5_I_M_eoLLd3kli
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MVEoKMwBqkvwcOoAG39HPgOuFzvjWIsgbppXpBktnkt-hNZCMBo0MA==
age: 60847
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/GVL-v2/vendor-list.json
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/GVL-v2/vendor-list.json
IP
GET /GVL-v2/vendor-list.json HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Sat, 19 Nov 2022 03:00:41 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Sat, 19 Nov 2022 03:00:33 GMT
etag: W/"ed4857325af666b07eda51e371925a80"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BFF50BuqTMDS4ogAzgivJA_7Ke8tW_-v6rDXWvrg4HLsan7RG5MXdw==
age: 60843
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/notifications/games/nutaku/multi/4/index.html
200 OK 0 B URL HTTP/2 cdn.barscreative1.com/sb/notifications/games/nutaku/multi/4/index.html
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert fortinet Phishing
GET /sb/notifications/games/nutaku/multi/4/index.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Fri, 19 Aug 2022 09:15:02 GMT
etag: W/"62ff5496-63e"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sat, 19 Nov 2022 20:54:44 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
200 OK 0 B URL HTTP/2 www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
IP
GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: yX35+bTEIGDT0hnFNnNp/fKVy7UCDbSYBkKDUdtLZCTL8meEtM2BAo8RwEZ6lIr8OpMp2bFKCzBn6z9pEkdtRg==
date: Sat, 19 Nov 2022 19:54:42 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 0 B IP
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinke.me/
Origin: https://shrinke.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:42 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://shrinke.me
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 6603
last-modified: Sat, 19 Nov 2022 18:04:39 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q1NcfYY8G%2BupmrGagTu6gd%2B3a9gtvKcX2YutXl5obwICG7onoS68Gb%2BgDx427GySFVN7JhD%2FeSQc%2FovM50%2FCWBxHkbN%2BCpQZKoe9oNChpheK9v6Y70VHqJ%2F7C63nkx3Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fcf0e6f76b7-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d3div1mtym39ic.cloudfront.net/aax2/apstag.js
200 OK 0 B URL HTTP/2 d3div1mtym39ic.cloudfront.net/aax2/apstag.js
IP
GET /aax2/apstag.js HTTP/1.1
Host: d3div1mtym39ic.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinke.me/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 19 Nov 2022 19:47:32 GMT
last-modified: Wed, 09 Nov 2022 20:51:50 GMT
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: br
etag: W/"fa24fe2b94a2fc864b1ec67f32e8db32"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FvRUSYmhut7JzMAAMi_5W52gz_PKtPzDPIkWDJQiEN427RkAii7-ug==
age: 433
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/css/animate.css
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/css/animate.css
IP
GET /sb/notifications/games/nutaku/multi/4/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: text/css
last-modified: Fri, 19 Aug 2022 09:15:04 GMT
etag: W/"62ff5498-ec8b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 367283
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i0VxIt9uBq9WMFf7sT6DQYMGBfKBGsd2bgM2miXgd7vmZ6ArmSzJ3E%2FKDo4v%2BkEkz%2B8Dr8qjeiey0u6DtucbXGgARfFGfwSLtJB4avD7p%2B4skrBanl3SyPCRtbQkifUmgOuBl7fTYBT3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fde5a88730e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
services.vlitag.com/adv1/?q=b696d0f5c06dbd9fd83feb568718537b
200 OK 0 B URL HTTP/2 services.vlitag.com/adv1/?q=b696d0f5c06dbd9fd83feb568718537b
IP
GET /adv1/?q=b696d0f5c06dbd9fd83feb568718537b HTTP/1.1
Host: services.vlitag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:42 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=900, stale-while-revalidate=3600
cf-bgj: minify
cf-polished: origSize=547682
etag: W/"b696d0f5c06dbd9fd83feb568718537b 2022-11-17T04:39:44 v1 default"
vary: Accept-Encoding
x-robots-tag: noindex, nofollow, noarchive, nosnippet
cf-cache-status: HIT
server: cloudflare
cf-ray: 76cb7fcc5943b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:400,700%7CMuli:300,300i,400
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,700%7CMuli:300,300i,400
IP
GET /css?family=Montserrat:400,700%7CMuli:300,300i,400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 19 Nov 2022 19:54:41 GMT
date: Sat, 19 Nov 2022 19:54:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 18 Nov 2022 03:05:15 GMT
x-amz-version-id: vkCJAv2LVCiDvkjoOZrS5s9fefeFFUOq
server: AmazonS3
content-encoding: gzip
date: Sat, 19 Nov 2022 03:05:45 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: i1F_cxKRNFsmM6U_-RCyINFDgmyzdzHChRwaGUydTKdbklZM49qT5Q==
age: 60542
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&pbt=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://shrinke.me/
Origin: https://shrinke.me
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:45 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://shrinke.me
server-processing-duration-in-ticks: 348478
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?dsh=S-1089571237%3A1668887682365780&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=ARgdvAvIIt5XG9CSTy1sZKZlod8dzRiFDKny_OKmjCdGNCD5R-tui4u12ehsp1gw8DEDFey0zRzMIw
403 Forbidden 0 B URL HTTP/2 accounts.google.com/v3/signin/identifier?dsh=S-1089571237%3A1668887682365780&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=ARgdvAvIIt5XG9CSTy1sZKZlod8dzRiFDKny_OKmjCdGNCD5R-tui4u12ehsp1gw8DEDFey0zRzMIw
IP
GET /v3/signin/identifier?dsh=S-1089571237%3A1668887682365780&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=ARgdvAvIIt5XG9CSTy1sZKZlod8dzRiFDKny_OKmjCdGNCD5R-tui4u12ehsp1gw8DEDFey0zRzMIw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shrinke.me/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Nov 2022 19:54:42 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-uNK6y_4x5FZlUcR7LjSmSw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
supertruco.com/icon.svg
200 OK 0 B IP
GET /icon.svg HTTP/1.1
Host: supertruco.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 19:54:42 GMT
content-type: image/svg+xml
strict-transport-security: max-age=31536000
last-modified: Tue, 30 Aug 2022 14:43:20 GMT
vary: Accept-Encoding
etag: W/"630e2208-102b"
expires: Sat, 22 Oct 2022 18:21:02 GMT
cache-control: max-age=604800
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: br
x-ac: 3.arn _atomic_ams HIT
X-Firefox-Spdy: h2
simage4.pubmatic.com/AdServer/SPug?o=1&p=155495&sc=1&u=F41BA67B-E3EF-4359-B62F-16B3197C3112&rs=3&gdpr=0&gdpr_consent=&us_privacy=
200 OK 0 B URL HTTP/2 simage4.pubmatic.com/AdServer/SPug?o=1&p=155495&sc=1&u=F41BA67B-E3EF-4359-B62F-16B3197C3112&rs=3&gdpr=0&gdpr_consent=&us_privacy=
IP
GET /AdServer/SPug?o=1&p=155495&sc=1&u=F41BA67B-E3EF-4359-B62F-16B3197C3112&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: simage4.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 19:54:46 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/js/script.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/js/script.js
IP
GET /sb/notifications/games/nutaku/multi/4/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:45 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:42:11 GMT
etag: W/"632ac053-1160"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 349964
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uE0zpwwbDLmJiKmak3BaPC%2FwKh0NavDWjpDwy%2B16MQrRaN3OM%2FPiBp1%2FfdLAmD27ePphkE2Wu96HvVkl0klnMVPVvXEpDDjpiq92voe4N5SwAjkLaMzgW4jCN%2B%2FlxVboTfNs3AS%2FIi8I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fe09de573ff-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1668899381&ei=1Q15Y9CMDs_7kgbAnaj4Cw&ip=184.164.141.146&id=o-ALblDDYfeAQVyoJ1DBzoC_upJ1GG22_Xtsas5GoD4urH&itag=134&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&vprv=1&mime=video%2Fmp4&ns=znWH6iUK6l-54E0eMkSEOIkJ&gir=yes&clen=10427993&otfp=1&dur=207.340&lmt=1600678288117961&keepalive=yes&fexp=24001373%2C24007246&c=WEB&n=eLS2osZW0zDimcVpj&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAOCVB0GlaO_t8Z4VK99L2E6F5k5FGXlnO4iumUTlNZG9AiEAt7YEZy89zFnsKCRmkwoDfydpmy5cT93_Xw599t5EhT0%3D&cms_redirect=yes&mh=3a&mip=91.90.42.154&mm=31&mn=sn-capm-vnae&ms=au&mt=1668887345&mv=m&mvi=2&pl=21&lsparams=mh,mip,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgY9qCnXZdvrhzoQco0LPzuyKai4yizqoFz9LkxNT35zgCIQCezAc9ZSPFpQqBR_5aEiIgfQ4mru9HPcePOB3rj84XsQ%3D%3D
206 Partial Content 0 B URL HTTP/1.1 r2---sn-capm-vnae.googlevideo.com/videoplayback?expire=1668899381&ei=1Q15Y9CMDs_7kgbAnaj4Cw&ip=184.164.141.146&id=o-ALblDDYfeAQVyoJ1DBzoC_upJ1GG22_Xtsas5GoD4urH&itag=134&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&vprv=1&mime=video%2Fmp4&ns=znWH6iUK6l-54E0eMkSEOIkJ&gir=yes&clen=10427993&otfp=1&dur=207.340&lmt=1600678288117961&keepalive=yes&fexp=24001373%2C24007246&c=WEB&n=eLS2osZW0zDimcVpj&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAOCVB0GlaO_t8Z4VK99L2E6F5k5FGXlnO4iumUTlNZG9AiEAt7YEZy89zFnsKCRmkwoDfydpmy5cT93_Xw599t5EhT0%3D&cms_redirect=yes&mh=3a&mip=91.90.42.154&mm=31&mn=sn-capm-vnae&ms=au&mt=1668887345&mv=m&mvi=2&pl=21&lsparams=mh,mip,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgY9qCnXZdvrhzoQco0LPzuyKai4yizqoFz9LkxNT35zgCIQCezAc9ZSPFpQqBR_5aEiIgfQ4mru9HPcePOB3rj84XsQ%3D%3D
IP
ASN #50304 Blix Solutions AS
GET /videoplayback?expire=1668899381&ei=1Q15Y9CMDs_7kgbAnaj4Cw&ip=184.164.141.146&id=o-ALblDDYfeAQVyoJ1DBzoC_upJ1GG22_Xtsas5GoD4urH&itag=134&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&vprv=1&mime=video%2Fmp4&ns=znWH6iUK6l-54E0eMkSEOIkJ&gir=yes&clen=10427993&otfp=1&dur=207.340&lmt=1600678288117961&keepalive=yes&fexp=24001373%2C24007246&c=WEB&n=eLS2osZW0zDimcVpj&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cotfp%2Cdur%2Clmt&sig=AOq0QJ8wRgIhAOCVB0GlaO_t8Z4VK99L2E6F5k5FGXlnO4iumUTlNZG9AiEAt7YEZy89zFnsKCRmkwoDfydpmy5cT93_Xw599t5EhT0%3D&cms_redirect=yes&mh=3a&mip=91.90.42.154&mm=31&mn=sn-capm-vnae&ms=au&mt=1668887345&mv=m&mvi=2&pl=21&lsparams=mh,mip,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgY9qCnXZdvrhzoQco0LPzuyKai4yizqoFz9LkxNT35zgCIQCezAc9ZSPFpQqBR_5aEiIgfQ4mru9HPcePOB3rj84XsQ%3D%3D HTTP/1.1
Host: r2---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://shrinke.me/
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Last-Modified: Mon, 21 Sep 2020 08:51:28 GMT
Content-Type: video/mp4
Date: Sat, 19 Nov 2022 19:54:45 GMT
Expires: Sat, 19 Nov 2022 19:54:45 GMT
Cache-Control: private, max-age=11396
Content-Range: bytes 0-10427992/10427993
Accept-Ranges: bytes
Content-Length: 10427993
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
static.criteo.net/js/ld/publishertag.prebid.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-16294"
expires: Sun, 20 Nov 2022 19:54:44 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/landing/css/styles.css
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/landing/css/styles.css
IP
GET /sb/notifications/games/nutaku/multi/4/images/landing/css/styles.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: text/css
last-modified: Fri, 19 Aug 2022 09:15:08 GMT
etag: W/"62ff549c-ed9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 349964
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ACkgVycjlSU293bKE62fYP%2FxVqaXWn8QrgK2p3qg%2F4XHYekk8Z%2F9wXisBb6La0Ad5EKpDUoSU8HDIRlck%2FbbyR6e6rvQgvS6%2FGn3%2FgaBluecP5YFrmXgrk9TiELmkxheupDc4OZLVTrq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76cb7fde6b8773ff-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fshrinke.me%2F&domain=shrinke.me&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://shrinke.me
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 19 Nov 2022 19:54:43 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://shrinke.me
server-processing-duration-in-ticks: 1002297
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.123.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.123.js
IP
GET /js/ld/publishertag.prebid.123.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shrinke.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 19:54:44 GMT
content-type: text/javascript
last-modified: Tue, 03 May 2022 11:21:03 GMT
etag: W/"6271101f-15b58"
expires: Sun, 20 Nov 2022 19:54:44 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
172.67.162.135
178.250.2.146
37.252.171.149
23.36.76.226
104.21.33.119
151.101.85.229
157.240.200.35
185.64.190.77
52.49.92.250