{"report_id":"cc8e2e96-28be-42ed-adcc-e511fee9cafd","version":6,"status":"done","tags":[],"date":"2025-10-18T18:20:05Z","url":{"schema":"http","addr":"shrinkme.ink/Xhamster","fqdn":"shrinkme.ink","domain":"shrinkme.ink","tld":"ink"},"ip":{"addr":"172.67.184.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"shrinkme.click/Xhamster","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"title":"ShrinkMe.io"},"submit":{"url":{"schema":"http","addr":"shrinkme.ink/Xhamster","fqdn":"shrinkme.ink","domain":"shrinkme.ink","tld":"ink"},"ip":{"addr":"172.67.184.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-22T18:20:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"shrinkme.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"aseinprofitefukhatex.com","ip":{"addr":"54.240.174.92","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-08-08","domain_rank":0,"first_seen":"2025-10-18T14:32:31.242632Z","last_seen":"2025-10-18T14:32:31.242632Z","alert_count":0,"request_count":1,"received_data":4112,"sent_data":1032,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"d34gjfm75zhp78.cloudfront.net","ip":{"addr":"54.230.245.106","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-10-27T18:06:47Z","last_seen":"2025-10-15T09:44:16.469722Z","alert_count":2,"request_count":1,"received_data":232824,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-10-12T22:12:52.256683Z","alert_count":0,"request_count":8,"received_data":4301389,"sent_data":3842,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shrinkme.click","ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-05","domain_rank":0,"first_seen":"2025-10-06T10:23:13.692811Z","last_seen":"2025-10-13T17:30:39.081945Z","alert_count":7,"request_count":7,"received_data":552519,"sent_data":6777,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]},{"fqdn":"bobapsoabauns.com","ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16239,"first_seen":"2025-03-26T18:52:40.148632Z","last_seen":"2025-10-13T17:30:39.108937Z","alert_count":0,"request_count":2,"received_data":35303,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-10-13T00:46:10.295271Z","alert_count":0,"request_count":1,"received_data":837,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shrinkme.ink","ip":{"addr":"172.67.184.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-28","domain_rank":71507,"first_seen":"2024-08-28T12:10:11Z","last_seen":"2025-10-15T09:44:16.348008Z","alert_count":0,"request_count":1,"received_data":26588,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tzegilo.com","ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":18163,"first_seen":"2022-01-14T15:27:15Z","last_seen":"2025-10-13T17:30:39.130019Z","alert_count":0,"request_count":1,"received_data":18651,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gleecheeftoo.net","ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-02-10","domain_rank":531523,"first_seen":"2025-03-15T15:38:27.766488Z","last_seen":"2025-10-11T10:40:41.293283Z","alert_count":20,"request_count":4,"received_data":7157,"sent_data":3608,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":2,"received_data":744667,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-10-12T22:12:29.347805Z","alert_count":0,"request_count":3,"received_data":82130,"sent_data":1806,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.recaptcha.net","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2025-10-12T23:57:15.608477Z","alert_count":0,"request_count":2,"received_data":10479,"sent_data":1188,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ukankingwithea.com","ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-10-13T02:21:43.47306Z","alert_count":3,"request_count":1,"received_data":832,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":6,"received_data":208950,"sent_data":3248,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":2,"received_data":35386,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-10-12T22:16:17.088796Z","alert_count":0,"request_count":1,"received_data":86170,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"shrinkme.io","ip":{"addr":"104.21.65.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-18","domain_rank":218590,"first_seen":"2019-04-01T23:10:55Z","last_seen":"2025-10-18T04:24:47.330817Z","alert_count":0,"request_count":3,"received_data":59809,"sent_data":1299,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gloaphoo.net","ip":{"addr":"172.67.205.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-09-09","domain_rank":283321,"first_seen":"2022-09-10T12:44:27Z","last_seen":"2025-10-14T00:48:26.718161Z","alert_count":1,"request_count":1,"received_data":171382,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-10-12T22:30:34.310669Z","alert_count":0,"request_count":6,"received_data":13868,"sent_data":3778,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"yweakelandord.com","ip":{"addr":"172.67.146.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-10-12T08:53:14.358096Z","last_seen":"2025-10-12T08:53:14.358096Z","alert_count":0,"request_count":3,"received_data":1582,"sent_data":1731,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":17838,"first_seen":"2022-01-14T22:55:14Z","last_seen":"2025-10-13T19:48:00.651353Z","alert_count":0,"request_count":2,"received_data":906,"sent_data":1167,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2025-10-13T02:23:01.168858Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":973,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ae693dff4028f269791567f99c8ee5e3","sha1":"4d47938a24268853a2fb3ea9a95ce054a1b6ed11","sha256":"c37e2850e665f0a06ff7d779d61c2c11eb71bcbca528c92a2187e3f46cb63366","sha512":"c7de786d0af1440042552a899aed32bc3bc23661cb39c4960066c1c4aee9406c9b8f609e5211a13707104ef675abb5f2ec199054ff49fecd5db698ae000ddb82","ssdeep":"384:10cJo42wfzuR/aTt1dGAtocjTFKSVB+eh1lppcAwCSpSrsnaeslWQ7pgyc5hgjd8:To4266R/Gnd5iQw8166Saenhyc5yO","tlshash":"1282f7dcb991f46941a3b0f1817f2508b3ba79916d0a1469f208cae47f70f5a406ff2e","size":18958,"data":"","first_seen":"2025-10-10T07:09:33.902577Z","last_seen":"2025-10-20T16:43:43.872567Z","times_seen":5829,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2211a3033bfd6698382f6fa608c103f","sha1":"69739440820e7c9f3850683d5a5be9a63323afc7","sha256":"e46f068b545ce714b90b003128138ca96fca940f8ca2160c0a2fc290bf0b6894","sha512":"3b6628c26e6b9e9bb0ea8b84d47fdcb4762d2dbfee1944609ee0a3f2be234d9c20c6d1b5001e1de4b444c2de84449627a8fb3d8eeb0af8500851bd70d79a5b31","ssdeep":"384:q0cJo42wfzuR/aTt1dGAtocjTFKSVB+eh1lppcAwCSHSrsnaeslWQ7pgyc5h0jdY:Ko4266R/Gnd5iQw816QSaenhyc5e+","tlshash":"0eb2f7d8f990f46941a3b0f5817f2108b3ba7991ed0a1469b208cae57f71f5a405ff2e","size":24751,"data":"","first_seen":"2025-10-16T14:25:30.166631Z","last_seen":"2025-10-18T18:20:16.21271Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","size":17879,"data":"","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-06-02T12:05:36.236715Z","times_seen":6989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/js/ads.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7e54b2d6fc22c0022b88b7125cbe03","sha1":"236c6e87760ac733a938cb1897d3a7cb6fc5c86c","sha256":"519204a7ecc3dc77ded647aa00567d6bf8c587049f389b1936914f7fab44c6fa","sha512":"9a1eaeb2af891a8b3b0ea6f02350e356371541154841b650a641533e89b254a1f357912b832209e5ea44ab99affbbd12fcedc7cbdaff7d1a0ee7b92e2715f4a6","ssdeep":"","tlshash":"9ed02273187812b40a2e25cb50f99b943e332190f29318ac4cfcce29832cc804836ec3","size":218,"data":"","first_seen":"2023-09-09T21:18:47Z","last_seen":"2026-06-01T23:14:27.253299Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e47b957b5bfb6afe476c10feb2518c6e","sha1":"c5a2fff9c3717a41e0474a853d5cbbaf8ff0818a","sha256":"949ddb39192218706ef99abf441d6a5ddf7a6f69d093fe12a0d81b956516e11f","sha512":"0186ffc3786970eb68b10839fca21b64ee35314484e795f028cef433e759bc81208dfcdf3894618eff115decce138d20e579cedbc029a91823ae45f8dffa2449","ssdeep":"","tlshash":"9ee028de74511c7570ed05f633b1a1187183560cb8091c22cdfdcd1428285d74c134cc","size":341,"data":"","first_seen":"2024-02-01T23:09:53Z","last_seen":"2026-05-24T23:07:00.241244Z","times_seen":567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73497a37c3561adbd8ce84e4f017b368","sha1":"9193ae73cb3dd2833be8c942714d5544bfb628c9","sha256":"9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351","sha512":"b265a65f30fa9ffac3fb7ffca07326823466dcd67a238a47091a497c7f2b2d13e09603cbb8e85dce136efeb8bbb9d246e4894d6f672dededc47c88a1a85d9a5b","ssdeep":"","tlshash":"c150000003000003030c0000c000000000000003000030c000c0000000000000000000","size":9,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-06-02T12:01:49.255853Z","times_seen":5603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e5af1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8236afab972a44f70976b0cf347898d","sha1":"26e738eaedbbc27c940f99e4f22da36c65492932","sha256":"e2dd94449281c9ddd4814c04e80085c70c52933739a0919be3fcde9d0380cef6","sha512":"fbdb57a9075e35deb9b384420465e207763c6ca1ddea7c467823bdd398d5ceef1a1bc7bd312d61f49686e0b6dc9b577f566c72a86f9a47c9da25c27488129bb7","ssdeep":"6144:fBFc6tQSyOe+hy4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:pa6rRRhy4nkEt7F0EqPeKRy1bv","tlshash":"b7940a8e73c674269396f078503f018ba57b29a2f45cc896f189cce42d74a9a4277f7c","size":426734,"data":"","first_seen":"2025-10-18T18:20:16.072886Z","last_seen":"2025-10-18T18:20:16.072886Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-02T18:08:06.312288Z","times_seen":111272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34gjfm75zhp78.cloudfront.net/zaUkwUTIKJl43DR0gVGwFUHsCaAVPOUI0VFQ6WCNbByJdNBwKJVkyWU8jQz5cGXRiGXwgMVsiCiciAwFUKj57d0YTLQ1hFAUoXjYPTyxeMg9Yb1E1UFR9FiVCBiINOEsMJ1MrWAQ9RHdHCHRdPkgAJVwwF1sPBX8CTHsAeUUAJ1Q+RRpsAmFcHWwCYQNZZw-B0AStsAmFFACcGZRdaCxVjAhF/BHQBK2wCYUAfbAMQA1p9HmEbTHsANlcKIl90AC97AGACWXgAYBdbeVY4QAwvXykXWw8BYgZHeRYkD1g","fqdn":"d34gjfm75zhp78.cloudfront.net","domain":"d34gjfm75zhp78.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d148f508d499943c4a48fbd19fdcbf85","sha1":"5ce04f86197032e00c41e76f0db8cddf899502ee","sha256":"be3c682e0004d2f8699b61c56b1b525c297e7c62984931fda49102445ad7b32a","sha512":"c3aafe8edf004fac8485b2f834e44e3ea965f9e937dfaa3ca029efeb2292f31faa0812cdf72fc1afc8da4425845a7f06dc26928954c6a092f2dee0170ee0a8e5","ssdeep":"","tlshash":"84014168b44047631dbb61b333e3b45153c8e0ec69b6166965036f778b09e5f8864715","size":796,"data":"","first_seen":"2025-10-18T18:20:16.226307Z","last_seen":"2025-10-18T18:20:16.226307Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aseinprofitefukhatex.com/TW1WNUwsDzVYcyxQNBM5PwFrEH4LSGRzKH5ZMV8qIFpjTyQ9Wm4bLyECI1EqPwI4QWIjCCIQfgsXN2AnOjgCfAcHAWIGCB9dMWMLOisDfT8ODBdjHAI4HwUaCzxgYg8DDxRMBikjFEIHBzs9TBsYVTxkNngOEW0eJCoOQisAOyVcDyQOP3Q7CzgdX3l6CWZsGAE8Z10KDDg5bSYUPQJMNCggMQwVL1wTBBkLP29zJRsuFFwFAyITRgEHXBtHGww8b2cEKSUVfR4pPT1SDQc7IUIKfB4GdxR1LgJ9PwwIA2ANB1wHEH4PPwRFPwwAEFYEGhoVbB0DNwxCYQ9dF2Y4Piw7cwoMLjVyFh8JN3Y0GwcXXQpoXxB3BBwvHQc7DjQDdCovLBtkDXwdb30hCA8CfT8MIzpWBwQBbwUNDlRhdAsMLgFtKww0FFEuKDsPAR0MGiBtNSY1AUJ0DzQxbwQoPw9eCHwKcF8/IgMmCB4FIx9NJz5VGF5/HQsVQgc","fqdn":"aseinprofitefukhatex.com","domain":"aseinprofitefukhatex.com","tld":"com"},"ip":{"addr":"54.240.174.92","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc559c8937952e8d8c51e4f57d7cf9af","sha1":"e6b5b4ca7f8364c5cdd8935d5fc5c4663447d80a","sha256":"2e80ea48b3014be367ff651b34d11a8facd2a93665acb01dfcd61ccd16d3c4ec","sha512":"5907c14829d837f0a497473ccb9b53adcef697dede10306b644d260b396826bd708c61abe5b766afd6203f843b0c62a3eaf3f0acb1034bb8de58a0c51ba3e38b","ssdeep":"","tlshash":"0a51ff8d34f3a0c282b26019407bb996fa385aa5834ccb14863d82bdbc715dd6357f4c","size":3007,"data":"","first_seen":"2025-10-18T18:20:16.233805Z","last_seen":"2025-10-18T18:20:16.233805Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-02T18:08:33.914606Z","times_seen":459140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbf084f2c375da6aa24d42ab271c8670","sha1":"6c72ac6800b5b02f04e4f89187ac5d89fab194c4","sha256":"73e625b8b6ed6212852ff1775b9075ed0be96a287758a917cf0bdb9963b2ee55","sha512":"5087c5203a9251c98be4b5b243b02e749b9f589aa9a8c029cbb3a89d41f2fb30b7a1575b653c61401ba3cd8db9850abbbcfb9c4c1aa6b3edb5833682480b7dec","ssdeep":"24576:STKgINW3zGqcGgfjYW79zV1/XIOy8sq7QM98bGQ:STKgINWDGqcGgLYW79zV1/XIp8sq7Tyz","tlshash":"3a053ae6718175a18336f7f6486b3019633e893bd8580d6db29584f02ef480974faeb7","size":825260,"data":"","first_seen":"2025-10-15T15:35:53.596736Z","last_seen":"2025-12-01T15:50:34.964506Z","times_seen":13770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34gjfm75zhp78.cloudfront.net/?mfjgd=792297","fqdn":"d34gjfm75zhp78.cloudfront.net","domain":"d34gjfm75zhp78.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.106","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1df53821082d3d6cb354e91ac4d5153","sha1":"bd97bf6db60b4e031594f5b1da69115acb747890","sha256":"15f8323377c1d2f5bbdad9cf56f3fa718b8e2f74ab3e7fcf54572df492d17110","sha512":"3eaa32dbb4cc2b187d72f7fed4583d2dd6fde91301a7484e596913641465e91a1cfef8fa197fedf63fc91ac4a81549f3b6927b25fa1c55b2297cef1540a90c2c","ssdeep":"3072:XBUNPgDYzi07L02raYDbe+Y5UKS+7L0x2iG+Zc53+Zc0M8E2:XuN4DUi07w2rnXJZU3+iAp","tlshash":"d7344cc9ba923469836374b540bf124ab23f5a69bc084dd4f496d4d07db8d0a437bfac","size":232363,"data":"","first_seen":"2025-10-18T18:20:16.205503Z","last_seen":"2025-10-18T18:20:16.205503Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-02T18:08:20.583548Z","times_seen":358143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8778634f5adadc488517177bfdaf85e3","sha1":"873e175d3b00dbc9ce8c8ee4c4f82e1037e70d57","sha256":"aa2c2288323f9ab150e675aad9bf0e431c133a2f4e331a2d26804c6f1c330170","sha512":"b7599dd928eb073461a24404c9bf4c83ef4633b3520e13a2b5258a598449f84cab931321ebb4a2c69f15fc6e0abbbf33486e3f637f9a7b1a0f9435a6f6ca6cea","ssdeep":"","tlshash":"e6e0722a30e2003a02b354ba23f7a10a2522370fc48e8f127e9fc4a62f34ca5040660c","size":310,"data":"","first_seen":"2023-10-14T22:14:02Z","last_seen":"2026-05-24T23:07:00.244273Z","times_seen":748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc29169c13e48228dad8dd361ce8f6b","sha1":"59018ba95e0a67c5babc535649d96573ec30ca3f","sha256":"2fa8aaf793bcef496c761719e35e35ea54b2029e1960efe2d8aa1702ec0d1c68","sha512":"b52961e6d8e02a7bac496c358a9d5f9070cd030dc89ca5a67071904c75bdd8b40f2cffd075dd2c7b4e9baf38014b914cb7f5419343d3363f4c437a3495f5477a","ssdeep":"","tlshash":"6421113da65de8f22f5080a87540b8d2daa01326f71d1a4bc5a85d2e0bcb5d9420bc59","size":1180,"data":"","first_seen":"2025-10-06T16:48:10.452124Z","last_seen":"2026-05-24T23:07:00.246107Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-2.2.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-02T18:04:31.684884Z","times_seen":282718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbf084f2c375da6aa24d42ab271c8670","sha1":"6c72ac6800b5b02f04e4f89187ac5d89fab194c4","sha256":"73e625b8b6ed6212852ff1775b9075ed0be96a287758a917cf0bdb9963b2ee55","sha512":"5087c5203a9251c98be4b5b243b02e749b9f589aa9a8c029cbb3a89d41f2fb30b7a1575b653c61401ba3cd8db9850abbbcfb9c4c1aa6b3edb5833682480b7dec","ssdeep":"24576:STKgINW3zGqcGgfjYW79zV1/XIOy8sq7QM98bGQ:STKgINWDGqcGgLYW79zV1/XIp8sq7Tyz","tlshash":"3a053ae6718175a18336f7f6486b3019633e893bd8580d6db29584f02ef480974faeb7","size":825260,"data":"","first_seen":"2025-10-15T15:35:53.596736Z","last_seen":"2025-12-01T15:50:34.964506Z","times_seen":13770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA4gztAvQSDd3kLPfzrgtHi5ez28CQG1eg7nXNzJ4l1v21RcvhZxHhkgBU1kzy96Q7_I48zzijE9D4ls7FiZ2cieZKFpkQ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"497770a2ab62f2aa5e9a92139301634d","sha1":"49c10647ffe35e24f84f743006f162ff0fe16399","sha256":"0663d282ac18b3e9d3e81725926a5310e5cae5e6954873f09b7ee193136fb5e4","sha512":"94a5141ed28656c5873a486aebfdda52790c8517426987bf905bf3c44163a25932ab17ac498215ddbea8e0e9887a8dabe6ed80acc950c993bdc61ecf977724b9","ssdeep":"","tlshash":"06a001b2053584208e6299509553bac4e187605dfd81819470265a89f3e15e7d144940","size":72,"data":"","first_seen":"2023-03-07T01:11:36Z","last_seen":"2026-06-02T17:44:42.384219Z","times_seen":24884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8306189b754848a4195228df20f5209","sha1":"6421d996d3c38e1969c4c7bfa5e3526c307e11cb","sha256":"02c9d8036206483060f2b7001f4aa4cd4bd8b1efdc2c28bdfbc1ca92a31347af","sha512":"d6bb5e9016c560e26485ea6b03e2ffee7af1dfec8b9e9228353329b47a662568bab9798444b9b58b79b429c2d9e246380d68cb083abd965439dc9a1ed5cd3e36","ssdeep":"","tlshash":"aa1102b31618e0354b7219e1e1fbc771e092745cf11885eca516ea881e7acc7ce09595","size":1017,"data":"","first_seen":"2025-10-15T18:15:27.111087Z","last_seen":"2025-10-22T21:34:09.270076Z","times_seen":2286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d9afd2b9290e5b3b0cdb690435af5b6","sha1":"ae2fcb10b96e0e8cbedd88a44e39d9bd038474dd","sha256":"6d63466443438a4ecf45d9c45b5e414e2e119daf8f96f400d8a839a2b4656e33","sha512":"3daf1a48b94cea0e96bccfa62687acf3714e4b10b2176dfc70a5679be6308820fca92748b4d07b394c13b58b161f968a2eae0c7a51b388a8ff5d7762de86df14","ssdeep":"","tlshash":"691123b20608e0394b3219e1e1fbc7b1e091745cf11c85eca502ea841e79cc7cf09455","size":1088,"data":"","first_seen":"2025-10-16T13:53:07.641311Z","last_seen":"2025-10-22T05:51:59.911342Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c159e948d0dffa35c9fa1b2f57e2ad9","sha1":"d41386efc96b16ecfc3084773de1948a0ff82c82","sha256":"e8d10f795b22263c50a3befe98f0e0abfe14bcb696997504215c4736f4fe4813","sha512":"c9851977c0a35ac53673e07b6dbfe4ebc107286d5c0e1b9ac6083931be392fa7ddda8129118c4af4e603be6c589ec76ef16deac875d47e70bf853a97b259e7e5","ssdeep":"","tlshash":"dfe0ab299ce706384cf63a841038ca3930f83ca0aaa3d067925cc86ccd39fc50c10aed","size":424,"data":"","first_seen":"2024-01-29T00:33:00Z","last_seen":"2026-01-25T20:45:26.450454Z","times_seen":509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/5775069","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"172.67.205.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f87ef1a18078e7b9163a6a02995b671f","sha1":"96edd3c2232c08efa1fe1802bee82c9b8fb3254d","sha256":"95f646237a716bb9cec166a14b5888f91eeff45adcb9f4a99af8b86eedddd398","sha512":"e58eedc2b1b34941bbbcc4e2f4afe9047dd8b34c07f1654dfd42517e71b90ce8fe1ce851718bfd28b0c3c7534efb1f9c372ac8ec3a0f273cd7bcaa676b8480b0","ssdeep":"3072:uKlUMtmDDjvO2BfPxkI8dZfJ1+zcGiPSHG720p0Gy6/2DUa8S443V0EFICtxnfv/:XulkI8Oz1iPSAO6/2DUaYIVjIExnHiw","tlshash":"f7f3d788b192b1551d72a134322f824eb6dfab605c4e4a80d19be1b27f3706ed377dd8","size":170501,"data":"","first_seen":"2025-10-18T18:20:16.182432Z","last_seen":"2025-10-20T16:12:15.449933Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5Q2KMLS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db14ffc5ef688cf10b028b94573a935d","sha1":"b9b6ffc980de505c5e4554e844d1e875a81d2d9c","sha256":"1f0bebb1fa2e65c9c99c3e3e3313a35eace0e5d1b11ae8bee9ac9f215c0459a1","sha512":"9c500743c0e10ec2b7cfb1cb1159e1684460b2032320259aee21b7d3dced55d642638066ec02d23bde03414a2c7f962ff2553299f6dd79d46693fc51d0b7c137","ssdeep":"6144:Uc6tQSy9+d4nkEt7FLKWjxSqpRKvkAX6HJLUy1CuryDB:V6rxd4nkEt7FREqqZy1Qt","tlshash":"1b6418cdb3d6742683a2a478503f118bb17b6992f84cc895f185ccd42e74aaa4277f7c","size":316699,"data":"","first_seen":"2025-10-18T18:20:16.081165Z","last_seen":"2025-10-18T18:20:16.081165Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"62a6fa5ad3bd0569279d61b3c1c036ed","sha1":"ffd94e0531ae66b3765b03812a1700a356b4acfb","sha256":"a11b824d4d9a1922ee8ec57ca5e0e8760b631e0b34cbe60d1cd4ad95bc24b699","sha512":"28eed73338aadfa9ea04adc7a6777d90f974467f31b71c0c2dba74f30f3459c07fda4ca3a0e8ae898733baa347548b08b3fd7930d0c850ce23edbc73a991630a","ssdeep":"1536:EN9Yr8j+vk43ct7t8YHyLROe6zhq+lnJEhqN+xG6v7SYi/Xn:t8y6aL6FqWEklLXn","tlshash":"8763bf23a78234efef7fef4127e52668223dd1c6359218cc16ba0086592ad67736d1dc","size":69496,"data":"","first_seen":"2025-10-18T18:20:16.256866Z","last_seen":"2025-10-18T18:20:16.256866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbf084f2c375da6aa24d42ab271c8670","sha1":"6c72ac6800b5b02f04e4f89187ac5d89fab194c4","sha256":"73e625b8b6ed6212852ff1775b9075ed0be96a287758a917cf0bdb9963b2ee55","sha512":"5087c5203a9251c98be4b5b243b02e749b9f589aa9a8c029cbb3a89d41f2fb30b7a1575b653c61401ba3cd8db9850abbbcfb9c4c1aa6b3edb5833682480b7dec","ssdeep":"24576:STKgINW3zGqcGgfjYW79zV1/XIOy8sq7QM98bGQ:STKgINWDGqcGgLYW79zV1/XIp8sq7Tyz","tlshash":"3a053ae6718175a18336f7f6486b3019633e893bd8580d6db29584f02ef480974faeb7","size":825260,"data":"","first_seen":"2025-10-15T15:35:53.596736Z","last_seen":"2025-12-01T15:50:34.964506Z","times_seen":13770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1a43bbe6ebd52c2670dc93c9f4c734e2","sha1":"d7f8aa63785a4beac742a449a627aad64f4d1cfa","sha256":"b56af5d86577570885945ef16cef4d48bf000c8b50afe05ebe8420ca4c6d83f4","sha512":"b88e39251214e6d3e658405c92b464d37fe08b2ff395a422b32b91b4dea2795e85fcb57ded1ffb0ca8827f9a336208027c039a716ccb394576d7a280ee456574","ssdeep":"","tlshash":"6a7000082c0c280080223020008b00080222000020308e02020800800cbc02e000b80e","size":22,"data":"","first_seen":"2025-10-10T07:09:33.942056Z","last_seen":"2025-10-20T16:43:43.857554Z","times_seen":5834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbf084f2c375da6aa24d42ab271c8670","sha1":"6c72ac6800b5b02f04e4f89187ac5d89fab194c4","sha256":"73e625b8b6ed6212852ff1775b9075ed0be96a287758a917cf0bdb9963b2ee55","sha512":"5087c5203a9251c98be4b5b243b02e749b9f589aa9a8c029cbb3a89d41f2fb30b7a1575b653c61401ba3cd8db9850abbbcfb9c4c1aa6b3edb5833682480b7dec","ssdeep":"24576:STKgINW3zGqcGgfjYW79zV1/XIOy8sq7QM98bGQ:STKgINWDGqcGgLYW79zV1/XIp8sq7Tyz","tlshash":"3a053ae6718175a18336f7f6486b3019633e893bd8580d6db29584f02ef480974faeb7","size":825260,"data":"","first_seen":"2025-10-15T15:35:53.596736Z","last_seen":"2025-12-01T15:50:34.964506Z","times_seen":13770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e82f1e9f9f11642f57928c133254d46","sha1":"8081b6d8caac03e0cb9baa3b47a533ef15bbe4a1","sha256":"bd445588497980e8d05916507c7c4df59d0233242a35887c2a6dc8deeff2606c","sha512":"ed43eebd246bf235bf0bd99482461f735392b7fff46bac17bbdbeaeaeb9ebfc486218d3135032a6ca8033bc55ddfced2eafa348087270c1740be319a577b5374","ssdeep":"","tlshash":"f1b012ca0080100631f131a16f03b308346310f70c0c610055408b303b6831fda3bac4","size":94,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-05-29T14:06:32.092035Z","times_seen":1534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cf6f85d4fd22db7db674d7afc2b6aef","sha1":"714de681854c07465e640b1e31d74a76fa2636d0","sha256":"8605dc71537232a4f8fb99355bc1c64fe756bb91ae3ad910e3b031a85f2879d8","sha512":"626e1893955f263d54e8067c48e391b73e3da0dfd3ba1c1ec18de2a9cbf4bfa38eef682e13df733d4180b2fd6d5b655d11201ef24384af1ec88d3b79cf3092e1","ssdeep":"","tlshash":"6dc08038b5245424009d489e7277d75cfcf311987d925453c85fce5c5870ed50865cb4","size":176,"data":"","first_seen":"2023-03-26T09:44:15Z","last_seen":"2026-01-25T20:45:26.43665Z","times_seen":727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"669e2c6b0424b1643de985f47c84cad2","sha1":"5b33d1f745de3ed1ac9535683c7b489f59c96b72","sha256":"f75252efb3e62915fa71bf2ffb1524dd1e12b9ad73a93a4924605a665bcc9727","sha512":"362be1c81bb07ee33858a7c5a9c789e65e21e60e010b426671195430b483c43d73c89ceade3319327d307e23a2d694cd603f6bc9d9e094e82c617bd5ea6f36ed","ssdeep":"","tlshash":"13a0021c2d6d94a81457a2e502164494305695573b491e1363c065d937f41a9105fe67","size":64,"data":"","first_seen":"2025-10-10T07:09:33.897728Z","last_seen":"2025-10-20T16:43:43.869447Z","times_seen":5833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8b1743821295bf56cfa4090367e2184f","sha1":"6c4fe16b929f39cc2b9aa8332a13b0eef9936a15","sha256":"e370e12d2e1770f2af2430c90724cf1dc6ffe348f968b197247bd6e8de042639","sha512":"9082073e01527ba9f86b8decaf5cc99319cec4a2e7c3e89c516fcceed2917d7b657f89d011e336c0646818bab0e4deb91e43ccb485713a33aa982b432ebca028","ssdeep":"","tlshash":"b47000082c0c28820032302000cb0008202200802000820a020000800c3c00e000b80c","size":22,"data":"","first_seen":"2025-10-10T07:09:33.959622Z","last_seen":"2025-10-20T16:43:43.862025Z","times_seen":5832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA4gztAvQSDd3kLPfzrgtHi5ez28CQG1eg7nXNzJ4l1v21RcvhZxHhkgBU1kzy96Q7_I48zzijE9D4ls7FiZ2cieZKFpkQ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"380e20f6cc8c74f3ef1d2c1b306c9952","sha1":"9ea76a4fe0b1fb77f2a7b18d984b3606974a46a8","sha256":"7d6536095cc0ee2d01edf213055329091d85d1578d01163b5bc1ef1044b26a72","sha512":"a2394d811b01b55a80a90a88ec2a27b696578b4f468c4f7f5861d006794539b0867d0c94e830e8dd48c5a31341069a0be654943e77b656e1f3823e4cd96bbe59","ssdeep":"","tlshash":"cad022a3a6061cf75c26ac304876005a6c880823a02387fcbace7dc5afb0e017a00974","size":219,"data":"","first_seen":"2025-08-28T10:01:59.050539Z","last_seen":"2026-05-24T23:07:00.246677Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA4gztAvQSDd3kLPfzrgtHi5ez28CQG1eg7nXNzJ4l1v21RcvhZxHhkgBU1kzy96Q7_I48zzijE9D4ls7FiZ2cieZKFpkQ","date":"2025-10-18T18:19:45.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42513\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 14:32:33 GMT\r\nexpires: Thu, 15 Oct 2026 14:32:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Oct 2025 04:00:25 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 272832\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1c703ffa04ec972def7996b210d1fb2a","sha1":"1dfa5ef5661f1bd73e7fa49410ee9b51e9894e17","sha256":"27a6e505db6cbe6efb651147488c88adf64141471fa900d76b07aa917bb270a1","sha512":"085c8f9e96cc0beb6bdb1cb79c48972486855e19755fce4a36c0b7c6cdd526dca8277e6320688dc74b91548563f2a26823cc091dfa0c140fa764ddc7abf7c3b7","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIZCdthXwW5l1Dx7:1GRFauOxLA/+IcTOpLX1","tlshash":"ca838f7338513b39fc2b9b616186b9edf22cc423e5514bfab6457a20c3db1968253b07","first_seen":"2025-10-15T14:13:57.112718Z","last_seen":"2025-12-01T15:50:34.924095Z","times_seen":12194,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:42 GMT","end":"Mon, 15 Dec 2025 08:42:41 GMT"},"fingerprint":{"sha1":"FA:CB:8B:4D:1E:E1:88:7C:A3:C4:6D:7C:67:E7:45:EA:91:C3:CA:93","sha256":"D0:B4:98:FF:9C:E4:26:18:7A:1C:9C:E5:59:51:C5:54:33:E0:7B:5A:DD:DE:BB:57:49:48:07:42:3F:E4:D3:64"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:lkAE9jU66FnL5J3RJ2T9oWJL9SBZ5w:L1Ecbb2Wf8enDmVB; Expires=Mon, 18-Oct-2027 18:19:42 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-1607034517:1760811582486378\u0026ifkv=AfYwgwUIzQn8J4ja5ihGrLgXto3kFr59U3rzbWuBK3bAFe3XW_HTPw7cK9y9bta-NtAgW69xb0152Q\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-cUrakyxb2FBBSeHosojIgw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":118,"dns":0,"connect":25,"send":0,"wait":38,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-1607034517%3A1760811582486378\u0026hl=en\u0026ifkv=AfYwgwUicsWgFV8zXZkHemHfu6NN6QKtOtOhfWfVjWDTiUd_vx8fordQS5IYN91smKEqLf6sI9O1KQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:42 GMT","end":"Mon, 15 Dec 2025 08:42:41 GMT"},"fingerprint":{"sha1":"FA:CB:8B:4D:1E:E1:88:7C:A3:C4:6D:7C:67:E7:45:EA:91:C3:CA:93","sha256":"D0:B4:98:FF:9C:E4:26:18:7A:1C:9C:E5:59:51:C5:54:33:E0:7B:5A:DD:DE:BB:57:49:48:07:42:3F:E4:D3:64"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-1607034517%3A1760811582486378\u0026hl=en\u0026ifkv=AfYwgwUicsWgFV8zXZkHemHfu6NN6QKtOtOhfWfVjWDTiUd_vx8fordQS5IYN91smKEqLf6sI9O1KQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-PvBgIyYn5K3tgxqJKYuN-w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.OhYC1t3tRm4.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/js/ads.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /js/ads.js?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xhamster\r\nCookie: lang=en_US; AppSession=c504bae1497e77b224e24e3823064a29; refXhamster=NWExZTM5MzIzZjcxZTI4OTI0ZDQ5YTVmN2E4YzIyMzNiYTA1MWIxMTA3N2Q0MjE2ZWZmOTdjYmQyZmJjYmEwZDLDkdI4BlqPo8a9O9tvhsJGT5DSwJZKnuKxJQsYjqBD; csrfToken=27cac879bf0e8b7ce39328a1c93fda9d0a281f64b54114d4c0c70560caf03400861281e2a3ab1728fa1cf7adc4fcafb2fdf614e72af0cf489969752b795a724d; app_visitor=Q2FrZQ%3D%3D.NDRjZjEyMDViYzI0NWEzOTQ0Nzk0N2Q2NWRjMjAxYWNkMzUwYTg0ZTZlYzk3YzE4NDQ1NTZjZWExOTNkZWI0Yy7PlnXTobN1dcQ9wvcHyUBpyFK%2FJ8ajLoiNEEva7XLHzugAwfDk6RckqwtMOmI%2BDTvh95YFmkOuKvqlsp7G9J54z4aWpDh2rZOO2PKhl%2FZi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 170\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"da-63ec26415ef07-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Tue, 04 Nov 2025 18:34:38 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 1122297\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5fRfQd%2Fe1%2FN05I%2BC0BbEN12CMaT78%2B1VoOUYl6sw67J4XZSidUU%2BHNLnKMfkv%2FXvwNy5S4SMRM2Cqwkc5Wg7Fbrswkn%2FnVihUGS%2FgCnc\"}]}\r\ncf-ray: 990a0ba15aa70883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"9e7e54b2d6fc22c0022b88b7125cbe03","sha1":"236c6e87760ac733a938cb1897d3a7cb6fc5c86c","sha256":"519204a7ecc3dc77ded647aa00567d6bf8c587049f389b1936914f7fab44c6fa","sha512":"9a1eaeb2af891a8b3b0ea6f02350e356371541154841b650a641533e89b254a1f357912b832209e5ea44ab99affbbd12fcedc7cbdaff7d1a0ee7b92e2715f4a6","ssdeep":"","tlshash":"9ed02273187812b40a2e25cb50f99b943e332190f29318ac4cfcce29832cc804836ec3","first_seen":"2023-09-09T21:18:47Z","last_seen":"2026-06-01T23:14:27.253299Z","times_seen":505,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"shrinkme.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yweakelandord.com/Z3hhbGtIRwIfVgI8IF49MSoqLTotEztcGC48UzYYNDkKLwkgLUcYAgNFVlVZVUFZShsOHFxdU0ELFQ0fEgtcXU0OFgcDVkEOXF1FV1ZTQl5BDVxdTRMIAAtWVl4RGB8LRVBbXVdAUF1eX0lYVV8","fqdn":"yweakelandord.com","domain":"yweakelandord.com","tld":"com"},"ip":{"addr":"172.67.146.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yweakelandord.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 08:53:24 GMT","end":"Mon, 05 Jan 2026 09:50:59 GMT"},"fingerprint":{"sha1":"E9:A5:59:FC:88:D4:57:19:6D:06:55:B2:AA:BA:2E:D4:5D:C1:D3:AC","sha256":"15:31:93:46:6D:B1:7F:8F:F2:25:E4:E9:A1:53:3E:FF:81:24:7E:B2:25:C0:07:FD:D9:48:B3:26:C3:17:1E:DB"}}},"request":{"raw":"GET /Z3hhbGtIRwIfVgI8IF49MSoqLTotEztcGC48UzYYNDkKLwkgLUcYAgNFVlVZVUFZShsOHFxdU0ELFQ0fEgtcXU0OFgcDVkEOXF1FV1ZTQl5BDVxdTRMIAAtWVl4RGB8LRVBbXVdAUF1eX0lYVV8 HTTP/1.1\r\nHost: yweakelandord.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mo9XlBg36birqTQ9aSmED2mzLDfYPnoBcm%2BlFtCt9JCHMHY63SNNZZ9eXtbRCabkhSrG%2F95U1PhpANNCLU59AeRNGCy3LbX7Cn0xNOhV5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 990a0ba45e615697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":94,"dns":1,"connect":1,"send":0,"wait":119,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o","date":"2025-10-18T18:19:44.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352623\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 14:33:20 GMT\r\nexpires: Thu, 15 Oct 2026 14:33:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Oct 2025 04:00:25 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 272784\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (583)","md5":"cbf084f2c375da6aa24d42ab271c8670","sha1":"6c72ac6800b5b02f04e4f89187ac5d89fab194c4","sha256":"73e625b8b6ed6212852ff1775b9075ed0be96a287758a917cf0bdb9963b2ee55","sha512":"5087c5203a9251c98be4b5b243b02e749b9f589aa9a8c029cbb3a89d41f2fb30b7a1575b653c61401ba3cd8db9850abbbcfb9c4c1aa6b3edb5833682480b7dec","ssdeep":"24576:STKgINW3zGqcGgfjYW79zV1/XIOy8sq7QM98bGQ:STKgINWDGqcGgLYW79zV1/XIp8sq7Tyz","tlshash":"3a053ae6718175a18336f7f6486b3019633e893bd8580d6db29584f02ef480974faeb7","first_seen":"2025-10-15T15:35:53.596736Z","last_seen":"2025-12-01T15:50:34.964506Z","times_seen":13770,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=8a49d67a-5144-4480-bb8b-3b675c43d02b","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:44.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=8a49d67a-5144-4480-bb8b-3b675c43d02b HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 451\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 18 Oct 2025 18:19:44 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://shrinkme.click\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":132,"dns":1,"connect":26,"send":0,"wait":29,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gleecheeftoo.net/impression/Xkt0aMCCGUdBXSaFpggD7FW1Vj5x1o-MKpxoKC6gZl4z29fszKL1sOLRenADFi3TSHaQ2JU39V5RHEoEVyHGLc5eZ_tWZ3SfhxriSmN2c7wqfZSxn3ysf9hKDax7JNEPIFY1-OEEDuBvgfPZ6IB2-Wm3h7CHr0CZ2eQ1c2oj05QroZ6WYkgmHy5kwDgCX6KOORogU1aHjuX0cToDpJmrkmQQlg-Jp9UHvBsS61t6v2RuZr74P0rY2mDhgjOz3kNMzoqLV0MsLwnHEidTJ8jw1m2xPx1y_XgN8xVZuqHyL9B3Wp3Fq64j0HE0yrxbvZL0Au4PM2kztjCzMDnJBj3IorSmWoVR_obocsr7WQhH2QkG9F63YXTTYBoejow6doFd1RkEF7cFQPhaHifa6lBuOb7AFW1RwdSNymiA5px2mQfeVoZf0WtxRR3xW7bFk2filb5RGJD5npUXOxkYO17eElbVGXv4V7MvGzbCF0kVNroXL_Z18C7COX4gdckJVTqVpZkiKJWUOtYThEmTLX26zLRtXM0FQL1PO-bitfRdnrK_NW0NTszjRZz9QWiARUd7eTA1qQ==?_z=5775069\u0026sw_version=v1.753.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"gleecheeftoo.net","domain":"gleecheeftoo.net","tld":"net"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:48.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gleecheeftoo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 05:17:56 GMT","end":"Tue, 06 Jan 2026 05:17:55 GMT"},"fingerprint":{"sha1":"8E:42:31:B9:51:AA:34:09:F5:03:CC:09:4E:7E:EE:3A:05:9C:E5:46","sha256":"86:B7:9A:A9:71:3A:F0:05:29:DC:A6:89:21:10:E3:EE:86:02:01:9B:AD:91:EA:F4:30:07:26:BC:FD:4C:1A:02"}}},"request":{"raw":"GET /impression/Xkt0aMCCGUdBXSaFpggD7FW1Vj5x1o-MKpxoKC6gZl4z29fszKL1sOLRenADFi3TSHaQ2JU39V5RHEoEVyHGLc5eZ_tWZ3SfhxriSmN2c7wqfZSxn3ysf9hKDax7JNEPIFY1-OEEDuBvgfPZ6IB2-Wm3h7CHr0CZ2eQ1c2oj05QroZ6WYkgmHy5kwDgCX6KOORogU1aHjuX0cToDpJmrkmQQlg-Jp9UHvBsS61t6v2RuZr74P0rY2mDhgjOz3kNMzoqLV0MsLwnHEidTJ8jw1m2xPx1y_XgN8xVZuqHyL9B3Wp3Fq64j0HE0yrxbvZL0Au4PM2kztjCzMDnJBj3IorSmWoVR_obocsr7WQhH2QkG9F63YXTTYBoejow6doFd1RkEF7cFQPhaHifa6lBuOb7AFW1RwdSNymiA5px2mQfeVoZf0WtxRR3xW7bFk2filb5RGJD5npUXOxkYO17eElbVGXv4V7MvGzbCF0kVNroXL_Z18C7COX4gdckJVTqVpZkiKJWUOtYThEmTLX26zLRtXM0FQL1PO-bitfRdnrK_NW0NTszjRZz9QWiARUd7eTA1qQ==?_z=5775069\u0026sw_version=v1.753.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: gleecheeftoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nCookie: OAID=08026627e8dc4debeb88849ac701bf02\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 18:19:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-trace-id: e84a1e7d3f65b6eb21a108872111cb47\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-06-02T18:10:00.324619Z","times_seen":100797,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xhamster\r\nCookie: lang=en_US; AppSession=c504bae1497e77b224e24e3823064a29; refXhamster=NWExZTM5MzIzZjcxZTI4OTI0ZDQ5YTVmN2E4YzIyMzNiYTA1MWIxMTA3N2Q0MjE2ZWZmOTdjYmQyZmJjYmEwZDLDkdI4BlqPo8a9O9tvhsJGT5DSwJZKnuKxJQsYjqBD; csrfToken=27cac879bf0e8b7ce39328a1c93fda9d0a281f64b54114d4c0c70560caf03400861281e2a3ab1728fa1cf7adc4fcafb2fdf614e72af0cf489969752b795a724d; app_visitor=Q2FrZQ%3D%3D.NDRjZjEyMDViYzI0NWEzOTQ0Nzk0N2Q2NWRjMjAxYWNkMzUwYTg0ZTZlYzk3YzE4NDQ1NTZjZWExOTNkZWI0Yy7PlnXTobN1dcQ9wvcHyUBpyFK%2FJ8ajLoiNEEva7XLHzugAwfDk6RckqwtMOmI%2BDTvh95YFmkOuKvqlsp7G9J54z4aWpDh2rZOO2PKhl%2FZi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:41 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 18 Oct 2025 19:07:41 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=02jAFkMKhTI21HkTysQqR7nqHNStSIhIJbYbrDDG5TvpxxFbxbDhfoVzYTjj4VHGONY5uw4OJDPClCXxR36ngsgDhGpXMDS9qS2kKBEN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 990a0ba15aaa0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-02T18:08:06.312288Z","times_seen":111272,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"shrinkme.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA4gztAvQSDd3kLPfzrgtHi5ez28CQG1eg7nXNzJ4l1v21RcvhZxHhkgBU1kzy96Q7_I48zzijE9D4ls7FiZ2cieZKFpkQ","date":"2025-10-18T18:19:45.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352623\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 14:33:20 GMT\r\nexpires: Thu, 15 Oct 2026 14:33:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Oct 2025 04:00:25 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 272785\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (583)","md5":"cbf084f2c375da6aa24d42ab271c8670","sha1":"6c72ac6800b5b02f04e4f89187ac5d89fab194c4","sha256":"73e625b8b6ed6212852ff1775b9075ed0be96a287758a917cf0bdb9963b2ee55","sha512":"5087c5203a9251c98be4b5b243b02e749b9f589aa9a8c029cbb3a89d41f2fb30b7a1575b653c61401ba3cd8db9850abbbcfb9c4c1aa6b3edb5833682480b7dec","ssdeep":"24576:STKgINW3zGqcGgfjYW79zV1/XIOy8sq7QM98bGQ:STKgINWDGqcGgLYW79zV1/XIp8sq7Tyz","tlshash":"3a053ae6718175a18336f7f6486b3019633e893bd8580d6db29584f02ef480974faeb7","first_seen":"2025-10-15T15:35:53.596736Z","last_seen":"2025-12-01T15:50:34.964506Z","times_seen":13770,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 14:13:33 GMT","end":"Sun, 23 Nov 2025 15:11:16 GMT"},"fingerprint":{"sha1":"1A:11:63:8A:09:D9:A9:1F:C1:06:34:29:E0:E0:95:E7:BA:BC:63:A3","sha256":"20:A6:48:1D:DB:42:37:88:BF:13:AD:64:91:6B:C4:6D:02:EA:D4:98:E1:E5:88:85:C0:D3:03:48:B4:F1:11:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LBWyYUvUKca0zdtP8Lc1t2pvKrfaPS9rf8y2QaHX2IZfsGZPM6EKi16zH%2BnKBsDL9d9aWrLR4i1Uk96shyufU1RTPMA6OCtoTpeevFZqTJuyGw%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: csu=863985408306507@1@1760811582; SameSite=None; Secure; Max-Age=31104000\r\ncf-ray: 990a0ba66dc6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"0746c665e86e0376f79b8e84826c334e","sha1":"61cf2e4afd96101cbc268742975c3c7996df3f30","sha256":"4efd4afee20326c2e0ff2ad6a225c93f8cbc962c54203f082a4904dc72ecec24","sha512":"070f8ca77fc09bfdb642caa1fffeb2e3c49479a9e06faed5e59176adb18308e62e2a80badee24081e4b31baf0d8c97aa5438ec4a8887223f2c849600aa19ffad","ssdeep":"","tlshash":"ca800000080b03022a82802383220e008828bf8280aa8088000a2880082032b0288a00","first_seen":"2025-10-18T18:20:16.068149Z","last_seen":"2025-10-18T18:20:16.068149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":104,"dns":3,"connect":4,"send":0,"wait":121,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e5af1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:43.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:44 GMT","end":"Mon, 15 Dec 2025 08:40:43 GMT"},"fingerprint":{"sha1":"02:50:AA:DF:C5:16:76:73:9E:ED:AD:C4:E5:98:EB:E7:2D:B9:C3:33","sha256":"6C:68:2F:0A:C2:03:62:A1:8E:7B:3B:BB:D6:6D:96:A7:78:6C:78:0F:1D:F0:EB:77:84:A5:4A:DD:07:44:9B:DD"}}},"request":{"raw":"GET /gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e5af1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Oct 2025 18:19:44 GMT\r\nexpires: Sat, 18 Oct 2025 18:19:44 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141869\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426734,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"e8236afab972a44f70976b0cf347898d","sha1":"26e738eaedbbc27c940f99e4f22da36c65492932","sha256":"e2dd94449281c9ddd4814c04e80085c70c52933739a0919be3fcde9d0380cef6","sha512":"fbdb57a9075e35deb9b384420465e207763c6ca1ddea7c467823bdd398d5ceef1a1bc7bd312d61f49686e0b6dc9b577f566c72a86f9a47c9da25c27488129bb7","ssdeep":"6144:fBFc6tQSyOe+hy4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:pa6rRRhy4nkEt7F0EqPeKRy1bv","tlshash":"b7940a8e73c674269396f078503f018ba57b29a2f45cc896f189cce42d74a9a4277f7c","first_seen":"2025-10-18T18:20:16.072886Z","last_seen":"2025-10-18T18:20:16.072886Z","times_seen":1,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","date":"2025-10-18T18:19:44.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:57:38 GMT\r\nexpires: Fri, 16 Oct 2026 12:57:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 192126\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:04:10.136647Z","times_seen":542210,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5Q2KMLS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:43.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:44 GMT","end":"Mon, 15 Dec 2025 08:40:43 GMT"},"fingerprint":{"sha1":"02:50:AA:DF:C5:16:76:73:9E:ED:AD:C4:E5:98:EB:E7:2D:B9:C3:33","sha256":"6C:68:2F:0A:C2:03:62:A1:8E:7B:3B:BB:D6:6D:96:A7:78:6C:78:0F:1D:F0:EB:77:84:A5:4A:DD:07:44:9B:DD"}}},"request":{"raw":"GET /gtm.js?id=GTM-5Q2KMLS HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Oct 2025 18:19:43 GMT\r\nexpires: Sat, 18 Oct 2025 18:19:43 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 18 Oct 2025 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 107279\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":316699,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5241)","md5":"db14ffc5ef688cf10b028b94573a935d","sha1":"b9b6ffc980de505c5e4554e844d1e875a81d2d9c","sha256":"1f0bebb1fa2e65c9c99c3e3e3313a35eace0e5d1b11ae8bee9ac9f215c0459a1","sha512":"9c500743c0e10ec2b7cfb1cb1159e1684460b2032320259aee21b7d3dced55d642638066ec02d23bde03414a2c7f962ff2553299f6dd79d46693fc51d0b7c137","ssdeep":"6144:Uc6tQSy9+d4nkEt7FLKWjxSqpRKvkAX6HJLUy1CuryDB:V6rxd4nkEt7FREqqZy1Qt","tlshash":"1b6418cdb3d6742683a2a478503f118bb17b6992f84cc895f185ccd42e74aaa4277f7c","first_seen":"2025-10-18T18:20:16.081165Z","last_seen":"2025-10-18T18:20:16.081165Z","times_seen":1,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":102,"dns":3,"connect":16,"send":0,"wait":47,"receive":43,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,700%7CMuli:300,300i,400","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css?family=Montserrat:400,700%7CMuli:300,300i,400 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Oct 2025 18:19:41 GMT\r\ndate: Sat, 18 Oct 2025 18:19:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7099,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2bc70e2429cfe4bf248107fb862aa803","sha1":"6591a064c29035df798b717f644d313e8aec28a4","sha256":"3c940a7938e39750cc9bd218d44d73c3f19bfbdac74937e87516f025bceb6188","sha512":"27acffe1a2d499342cc08f1e079cba61ee93aa2cbe7af7c12107dac9a1b6fe3b112f5ec848cc471c23eaf7a7ab1a74e10c38884126a82b46676d6964a53af79f","ssdeep":"192:qRa7h5OsuQRD780ORurnlmlJ8lxqLBmL8XL4mWH:+SVnbnQ8Tw0","tlshash":"20e1d151042be500a7872cca63cf7e31de4e7165b494c535affe1ca8aca6c366321b6d","first_seen":"2025-09-09T04:58:13.382403Z","last_seen":"2026-05-31T02:56:49.315441Z","times_seen":285,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":110,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 10:02:27 GMT\r\nexpires: Fri, 16 Oct 2026 10:02:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 202635\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-06-02T17:37:55.137086Z","times_seen":8799,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":158,"dns":5,"connect":20,"send":0,"wait":21,"receive":9,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:47 GMT","end":"Mon, 15 Dec 2025 08:42:46 GMT"},"fingerprint":{"sha1":"F8:E4:C1:2B:65:50:BA:A4:DA:7D:D7:25:67:C1:48:C6:5D:7D:7C:B7","sha256":"51:79:09:EA:9B:E1:44:D0:D2:B2:5F:3D:09:55:17:56:60:41:AF:0B:B4:1C:55:0B:A1:E2:FE:69:51:21:A9:29"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 18 Oct 2025 18:19:42 GMT\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"a8306189b754848a4195228df20f5209","sha1":"6421d996d3c38e1969c4c7bfa5e3526c307e11cb","sha256":"02c9d8036206483060f2b7001f4aa4cd4bd8b1efdc2c28bdfbc1ca92a31347af","sha512":"d6bb5e9016c560e26485ea6b03e2ffee7af1dfec8b9e9228353329b47a662568bab9798444b9b58b79b429c2d9e246380d68cb083abd965439dc9a1ed5cd3e36","ssdeep":"","tlshash":"aa1102b31618e0354b7219e1e1fbc771e092745cf11885eca516ea881e7acc7ce09595","first_seen":"2025-10-15T18:15:27.111087Z","last_seen":"2025-10-22T21:34:09.270076Z","times_seen":2286,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":160,"dns":2,"connect":28,"send":0,"wait":48,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1560985791%3A1760811582485132\u0026hl=en\u0026ifkv=AfYwgwVRHIl0lwp_f9SPd5qnzPTBkquUnm-jmVNUuQxBG6kifUsOgg2WTrK9WAuXOMiESw1sWrtsXg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:42 GMT","end":"Mon, 15 Dec 2025 08:42:41 GMT"},"fingerprint":{"sha1":"FA:CB:8B:4D:1E:E1:88:7C:A3:C4:6D:7C:67:E7:45:EA:91:C3:CA:93","sha256":"D0:B4:98:FF:9C:E4:26:18:7A:1C:9C:E5:59:51:C5:54:33:E0:7B:5A:DD:DE:BB:57:49:48:07:42:3F:E4:D3:64"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1560985791%3A1760811582485132\u0026hl=en\u0026ifkv=AfYwgwVRHIl0lwp_f9SPd5qnzPTBkquUnm-jmVNUuQxBG6kifUsOgg2WTrK9WAuXOMiESw1sWrtsXg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-ys2i9Hv24UzdEw2ZJOF17A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.OhYC1t3tRm4.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:48.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Oct 2025 18:19:48 GMT\r\ndate: Sat, 18 Oct 2025 18:19:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0674bb1b4725131d0ccedb9f2119d9fa","sha1":"354de89c766f790720b9b55a28ce76bc2f2878e8","sha256":"37e93534f20120328ca625c0011682d90e4e4f4e702b0f90baf22d0c1f7fc8b4","sha512":"db19ac78c34f52d076a4b91cc180acb24697a1c8385c2d848ea0363ca684177c9f01de0a7115c165c8a01d4ea1441e86c98c8ae32292c15d0bd373500c52db23","ssdeep":"768:DFAFRFYFKFf4FQLFDFXFRKNyEfSQv3rgXU/9ffQiqGr8vkSfEQNVR1GJuofOQjLh:EcvMo1","tlshash":"32c2fba108174000978358e223cebf34fe4f92507141d0b5abfdab6bedcbc6652693ad","first_seen":"2025-09-09T04:12:34.447807Z","last_seen":"2025-11-18T23:33:55.824058Z","times_seen":1117,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-2.2.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-2.2.4.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-14e4a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\nage: 2803472\r\nx-served-by: cache-lga21935-LGA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 37, 297532\r\nx-timer: S1760811582.209775,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 29811\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-02T18:04:31.684884Z","times_seen":282718,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":72,"dns":2,"connect":35,"send":0,"wait":32,"receive":10,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","date":"2025-10-18T18:19:44.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 11:51:00 GMT\r\nexpires: Thu, 23 Oct 2025 11:51:00 GMT\r\ncache-control: public, max-age=604800\r\nage: 196124\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-02T18:08:33.895604Z","times_seen":641683,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=8a49d67a-5144-4480-bb8b-3b675c43d02b","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:44.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=8a49d67a-5144-4480-bb8b-3b675c43d02b HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1404\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 18 Oct 2025 18:19:44 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://shrinkme.click\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-06-02T18:10:00.379968Z","times_seen":57309,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":119,"dns":3,"connect":26,"send":0,"wait":28,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:45.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:24:25 GMT","end":"Tue, 16 Dec 2025 05:21:54 GMT"},"fingerprint":{"sha1":"4D:D9:7B:8E:2E:B1:DF:4E:5A:71:CF:29:D6:3A:1D:7E:AA:3D:5A:A2","sha256":"88:8A:05:87:6E:69:15:70:D5:BC:48:78:60:76:1A:E9:45:82:CE:D7:2D:0B:89:EB:6B:09:58:DC:93:D4:79:E6"}}},"request":{"raw":"GET /www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 16893\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Mar 2025 02:12:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67d78504-41fd\"\r\nexpires: Sun, 19 Oct 2025 05:33:40 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 45964\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KjUxHc03VmQKEsN%2FZsQU0LmNClua%2Fv7Yd6XtWicg7%2FIRTP4Guv0QZx%2B3eBlt6%2FEJQUGflB0eR4gCrReaVWpg9Xt%2BqTqr1X6M4dpN%2BaP6qin\"}]}\r\ncf-ray: 990a0bb69ecb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"31f5bb5f43a7bd2800c6724e3a4125d2","sha1":"bc1bcd6aa31ac91dd34359c2fbbcaefb3e15c875","sha256":"e5dd86d52381d2bff5f1b74d3923443d3d95ced64048662307ed3ec2d52eb61b","sha512":"472e23766bb20f680ab31d5c358d9555ce56596444072978dd6340ca5e918aedcf1985a811c7f3f41b72bb15ce3df8ca98a2fddb5ec9a1eeb5f30d586fc7c23e","ssdeep":"384:wDIuIpXyvlnQ8HrcT30rRp8Rp6g9TzBtnL1Ti7DpHQ9:wsHyvBXHrQxF93By7DhQ9","tlshash":"0572c06f0a4a5703999d1c0d1eab7c9d667a425f007c2e6b23239c5cf94a36f6042df5","first_seen":"2025-03-17T02:19:44.486682Z","last_seen":"2025-11-29T07:50:01.235056Z","times_seen":1176,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":25,"dns":3,"connect":1,"send":0,"wait":7,"receive":3,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA4gztAvQSDd3kLPfzrgtHi5ez28CQG1eg7nXNzJ4l1v21RcvhZxHhkgBU1kzy96Q7_I48zzijE9D4ls7FiZ2cieZKFpkQ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:45.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:07 GMT","end":"Mon, 15 Dec 2025 08:41:06 GMT"},"fingerprint":{"sha1":"45:D2:B0:11:57:85:73:1A:77:99:5C:D1:E3:8A:75:CC:76:E7:80:23","sha256":"D0:7B:10:C2:74:88:1F:EA:52:98:78:3E:1B:F1:17:E6:33:77:C1:A4:DE:45:4C:5B:AE:5D:E8:07:0F:E2:C5:CC"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA4gztAvQSDd3kLPfzrgtHi5ez28CQG1eg7nXNzJ4l1v21RcvhZxHhkgBU1kzy96Q7_I48zzijE9D4ls7FiZ2cieZKFpkQ HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 18:19:45 GMT\r\ncontent-security-policy: script-src 'nonce-UX0iUyUF2wJT9dEOR6B1rg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7626,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c2362c5aeb06614fba4155e16a502514","sha1":"fa105c317ecaf6249bcbb26a45cddf93544de99d","sha256":"8b38cfc5b6471d9d4e0c6454095e3cc150a06ea9ee72f488feca5e351e458f11","sha512":"253f2fa44261b373959f701734afecf8f926e06da9010c86649855b97d23749150af0c0e5fe7a84d1aa0d34ff5c5b00003fce7683abe7977a6c3e7877255410d","ssdeep":"192:NjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpK8eT:M+tI/y6yekn+f8QZRtpGKuBjdu+8eT","tlshash":"4bf1ab80081a9410ab930cd273cf3e36ed4f51167146c8b6abfe58aceee7d27926474d","first_seen":"2025-10-18T18:20:16.124028Z","last_seen":"2025-10-18T18:20:16.124028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/js/script.min.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /modern_theme/build/js/script.min.js?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xhamster\r\nCookie: lang=en_US; AppSession=c504bae1497e77b224e24e3823064a29; refXhamster=NWExZTM5MzIzZjcxZTI4OTI0ZDQ5YTVmN2E4YzIyMzNiYTA1MWIxMTA3N2Q0MjE2ZWZmOTdjYmQyZmJjYmEwZDLDkdI4BlqPo8a9O9tvhsJGT5DSwJZKnuKxJQsYjqBD; csrfToken=27cac879bf0e8b7ce39328a1c93fda9d0a281f64b54114d4c0c70560caf03400861281e2a3ab1728fa1cf7adc4fcafb2fdf614e72af0cf489969752b795a724d; app_visitor=Q2FrZQ%3D%3D.NDRjZjEyMDViYzI0NWEzOTQ0Nzk0N2Q2NWRjMjAxYWNkMzUwYTg0ZTZlYzk3YzE4NDQ1NTZjZWExOTNkZWI0Yy7PlnXTobN1dcQ9wvcHyUBpyFK%2FJ8ajLoiNEEva7XLHzugAwfDk6RckqwtMOmI%2BDTvh95YFmkOuKvqlsp7G9J54z4aWpDh2rZOO2PKhl%2FZi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HFWkr1IlO99hd0zcweOLUxcsPQsrDUaV9B4WZC8pUTVfkk9wODDxmhMRu7lYOJ7Da5fGRXt99%2FRkpq8Ksb5s%2Bx8WQgxTyll4SlHUNA%3D%3D\"}]}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"38157-63ec26415fea7-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sun, 16 Nov 2025 05:08:14 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 133877\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 990a0ba40c0056bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229719,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"3c977f00919d1eb2e57a7f0fd3bd884b","sha1":"b09601a36fa50e61ce9d6ac0a34c6a894a8f81c8","sha256":"5619e29a6688312b15a2cc2d693083dd00198691b1a3918b64dee75c9eeef7c9","sha512":"f22ddcb1b2fffb6b5ac4f3557dabe92ac7c18dc96ab331f610161d82a9791b10f922e62ee378e9e4d456c8575f489b07207007a7ca299ad1a7d3e75c269c9584","ssdeep":"3072:IeeIygP3fulzhsz8jlvaDioQ47GKSDYFtVbmwpcYUpQVJ:IPIy6PultluPQ47GKSAmwpZwQVJ","tlshash":"53241a89b2a1742147ab71f5417f120bf236142ee409842cb56cd9e96fb8d8d623bf7c","first_seen":"2025-09-16T23:31:20.872491Z","last_seen":"2026-05-24T23:07:00.207906Z","times_seen":219,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"shrinkme.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:42 GMT","end":"Mon, 15 Dec 2025 08:42:41 GMT"},"fingerprint":{"sha1":"FA:CB:8B:4D:1E:E1:88:7C:A3:C4:6D:7C:67:E7:45:EA:91:C3:CA:93","sha256":"D0:B4:98:FF:9C:E4:26:18:7A:1C:9C:E5:59:51:C5:54:33:E0:7B:5A:DD:DE:BB:57:49:48:07:42:3F:E4:D3:64"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:wzM32QrFwWFCtQc7FtwkquNj-5ee3g:1W63rfzKi7u3gh1H; Expires=Mon, 18-Oct-2027 18:19:42 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1560985791:1760811582485132\u0026ifkv=AfYwgwWuTC_IKx-DkS4wTU5ivfbdHyBzJP5sHbfqtg2UxeRKy1Ak1H3Yeu6o5Dih6MLbXAkBQl1Dcg\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-2alqBuPb-Bixk9kyqbTBsQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":113,"dns":0,"connect":25,"send":0,"wait":37,"receive":1,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xhamster\r\nCookie: lang=en_US; AppSession=c504bae1497e77b224e24e3823064a29; refXhamster=NWExZTM5MzIzZjcxZTI4OTI0ZDQ5YTVmN2E4YzIyMzNiYTA1MWIxMTA3N2Q0MjE2ZWZmOTdjYmQyZmJjYmEwZDLDkdI4BlqPo8a9O9tvhsJGT5DSwJZKnuKxJQsYjqBD; csrfToken=27cac879bf0e8b7ce39328a1c93fda9d0a281f64b54114d4c0c70560caf03400861281e2a3ab1728fa1cf7adc4fcafb2fdf614e72af0cf489969752b795a724d; app_visitor=Q2FrZQ%3D%3D.NDRjZjEyMDViYzI0NWEzOTQ0Nzk0N2Q2NWRjMjAxYWNkMzUwYTg0ZTZlYzk3YzE4NDQ1NTZjZWExOTNkZWI0Yy7PlnXTobN1dcQ9wvcHyUBpyFK%2FJ8ajLoiNEEva7XLHzugAwfDk6RckqwtMOmI%2BDTvh95YFmkOuKvqlsp7G9J54z4aWpDh2rZOO2PKhl%2FZi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:41 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 18 Oct 2025 19:07:41 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUnf6yUBPzHSVCr5A4oiA7DW4hWHghuLIZob3ewDtC4bR3mYCHc%2FVu0rmg42kUZf8PR5ozoClOlv7r0eAvgX4tfp%2F7qm6L7hRncYTo6a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 990a0ba15a980883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-02T18:08:20.583548Z","times_seen":358143,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"shrinkme.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 00:01:55 GMT\r\nexpires: Fri, 16 Oct 2026 00:01:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 238667\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-02T18:10:00.385456Z","times_seen":503412,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-1607034517:1760811582486378\u0026ifkv=AfYwgwUIzQn8J4ja5ihGrLgXto3kFr59U3rzbWuBK3bAFe3XW_HTPw7cK9y9bta-NtAgW69xb0152Q","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:42 GMT","end":"Mon, 15 Dec 2025 08:42:41 GMT"},"fingerprint":{"sha1":"FA:CB:8B:4D:1E:E1:88:7C:A3:C4:6D:7C:67:E7:45:EA:91:C3:CA:93","sha256":"D0:B4:98:FF:9C:E4:26:18:7A:1C:9C:E5:59:51:C5:54:33:E0:7B:5A:DD:DE:BB:57:49:48:07:42:3F:E4:D3:64"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-1607034517:1760811582486378\u0026ifkv=AfYwgwUIzQn8J4ja5ihGrLgXto3kFr59U3rzbWuBK3bAFe3XW_HTPw7cK9y9bta-NtAgW69xb0152Q HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:8HMsJLZAGLHtLy_NEiC0O7OJBUMN2Q:Wr-r0x9vnsCSSl3b;Path=/;Expires=Mon, 18-Oct-2027 18:19:42 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-1607034517%3A1760811582486378\u0026hl=en\u0026ifkv=AfYwgwUicsWgFV8zXZkHemHfu6NN6QKtOtOhfWfVjWDTiUd_vx8fordQS5IYN91smKEqLf6sI9O1KQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-5f2Jr7aNoKhojHr5adkwFA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 418\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:43.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08026627e8dc4debeb88849ac701bf02; expires=Sun, 18 Oct 2026 18:19:43 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 990a0babbb9a5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"61da463baabd375c50e8f8ec339a6ea8","sha1":"ec18105dd4a8ea1f4b8d0bb187dc562f6d5f87ff","sha256":"a206f5a549137fa54724e8d95c89e69d0eac0e0584c7884e6a8cc74bd5a89c33","sha512":"77821c6970104aa947b2b4ee15c95baa5eb7f6c641acc2bf0f8e7e3c72300c78198a7626ed3bbd864eb909846fc3b7a97ca3c02227380168d62f92b2c6c79240","ssdeep":"","tlshash":"5aa02200080880c008300022af2fce0b80020c008800820082e0c200308383cc80bb80","first_seen":"2025-10-18T18:20:16.144892Z","last_seen":"2025-10-18T18:20:16.144892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":16,"dns":2,"connect":1,"send":0,"wait":38,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gleecheeftoo.net/500/5775069?excludes=\u0026oaid=08026627e8dc4debeb88849ac701bf02\u0026var=\u0026ymid=\u0026tgp=\u0026of=true\u0026sw_version=v1.753.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=3\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"gleecheeftoo.net","domain":"gleecheeftoo.net","tld":"net"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:44.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gleecheeftoo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 05:17:56 GMT","end":"Tue, 06 Jan 2026 05:17:55 GMT"},"fingerprint":{"sha1":"8E:42:31:B9:51:AA:34:09:F5:03:CC:09:4E:7E:EE:3A:05:9C:E5:46","sha256":"86:B7:9A:A9:71:3A:F0:05:29:DC:A6:89:21:10:E3:EE:86:02:01:9B:AD:91:EA:F4:30:07:26:BC:FD:4C:1A:02"}}},"request":{"raw":"GET /500/5775069?excludes=\u0026oaid=08026627e8dc4debeb88849ac701bf02\u0026var=\u0026ymid=\u0026tgp=\u0026of=true\u0026sw_version=v1.753.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=3\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: gleecheeftoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nCookie: OAID=08026627e8dc4debeb88849ac701bf02\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 18:19:45 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: a43b5fa4f5966c39c3a5cded700695c3\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=08026627e8dc4debeb88849ac701bf02; expires=Sun, 18 Oct 2026 18:19:44 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1729,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"b4ddc40fa20054fa387062f65f840c1c","sha1":"7af632a094aa07f8b283aaeb7258018efab5d8f3","sha256":"20e34432e0051b7384ccd1e4a358d2e2b3ab114f66c54c0f207c9eb2616e288e","sha512":"79fe66a2e1841555bbdee9cc0a373f271ebc1709812ac1a7325700df3c87fa30532ae087f9c07de039dd702c3ce421ba77a187268e7dfb7d103819e5cab460bb","ssdeep":"","tlshash":"7131e6ba335aaf0316483326e142aa68d59b201d5d1e1cddda1fa0ff1daf2e1b648304","first_seen":"2025-10-18T18:20:16.149856Z","last_seen":"2025-10-18T18:20:16.149856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:48.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 16 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 192226\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-02T18:08:20.372402Z","times_seen":863352,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/dyyehuis8.png","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"104.21.65.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 04:57:15 GMT","end":"Thu, 11 Dec 2025 05:55:55 GMT"},"fingerprint":{"sha1":"3D:E0:1B:85:88:16:EB:B4:29:27:8D:E7:7C:10:EA:07:33:FE:08:34","sha256":"1C:7A:2F:AC:AB:91:01:3B:74:01:1E:76:81:F2:B7:3D:10:13:CE:51:3F:F8:5D:31:0B:CD:8F:B9:82:D9:14:2D"}}},"request":{"raw":"GET /dyyehuis8.png HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 13368\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"3438-63ec202aa9a96\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 14:07:49 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 2779912\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yCwH9n%2FgS8ag61n2MwuP%2F2pftWO7EDMc1WU8YRznTXxICdf7yI7cfl3Y%2FeO9dCQzJbRrab9m1DHGwYCzG02L3MAxI8ogOD%2FdEruk\"}]}\r\ncf-ray: 990a0ba19f21c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 154, 8-bit colormap, non-interlaced","md5":"f293daf49bd343c38ae34614fa67a414","sha1":"b53a204e0c385f2fa62fb57de5ba26dfc6920d3a","sha256":"c2baa90aafc484c676f4d9365c6f37b41ed50a5f21bc07eab9ad57ddb546f48d","sha512":"b713ac065171c0103eb9dd3791bc92a068b833a7ff7b3aef31c077a32b929592893eb29f079d34cf587c4ab2f5a8d6c2e16493cc1218d71863de8a1afecfc23d","ssdeep":"384:s6/H0Od7dqWkScyrJHwNa3XiIlO3bhs9Sdmjtc8V:s6/HXd7d4SzrJHwNa31mbhs1jtjV","tlshash":"b652c053f695783d21994a7a857d0ba903e0ee653e2cb4d30688de7c859a0143c0dfab","first_seen":"2023-10-14T22:14:02Z","last_seen":"2026-05-24T23:07:00.237721Z","times_seen":889,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":28,"dns":3,"connect":4,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/VlY5Mm43NFpfUTdrWxQbJDoEF1wQcwt0CmViXlgIO2EMSAYmYQEcDTo5TFYIJDlXRkA4M00XXBA+XFw4ZBhSAjQRPlFjDTFiWncJImBoAgoTEgpkDRQHa2YlZjV+egUHPX9wWjQDC380EQQAZCQ6IV9wOD08elkJOBdRCjoHLgBXLAVmDH8WF2N4cCgaFFRBORAUUWANECFodSgAIWoDIw4DUAsmBwB7diITNWB1OyE9f1oFDhMKClYHEF51DxM+f2oFEz1/cCsMB20HCARmY2shAG9xYAkyb293OAIUaAsIBGZjcCQUBH1jBhhzC3AhEBR8cAQAG2hkQxsQfQNXHgRSY1kOZmABLGVjdmVeDzBYdwYQE29/GxMESWYsFyJwYDs1EV9nGhAEQXxLZBBqWiMwBHpVDRExDWYILC58YD8cPGpeIxIVCkVIPCVWXB5rBw1gB2A/UXo5GhM","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.063Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /VlY5Mm43NFpfUTdrWxQbJDoEF1wQcwt0CmViXlgIO2EMSAYmYQEcDTo5TFYIJDlXRkA4M00XXBA+XFw4ZBhSAjQRPlFjDTFiWncJImBoAgoTEgpkDRQHa2YlZjV+egUHPX9wWjQDC380EQQAZCQ6IV9wOD08elkJOBdRCjoHLgBXLAVmDH8WF2N4cCgaFFRBORAUUWANECFodSgAIWoDIw4DUAsmBwB7diITNWB1OyE9f1oFDhMKClYHEF51DxM+f2oFEz1/cCsMB20HCARmY2shAG9xYAkyb293OAIUaAsIBGZjcCQUBH1jBhhzC3AhEBR8cAQAG2hkQxsQfQNXHgRSY1kOZmABLGVjdmVeDzBYdwYQE29/GxMESWYsFyJwYDs1EV9nGhAEQXxLZBBqWiMwBHpVDRExDWYILC58YD8cPGpeIxIVCkVIPCVWXB5rBw1gB2A/UXo5GhM HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:43.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352623\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 14:33:20 GMT\r\nexpires: Thu, 15 Oct 2026 14:33:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Oct 2025 04:00:25 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 272783\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (583)","md5":"cbf084f2c375da6aa24d42ab271c8670","sha1":"6c72ac6800b5b02f04e4f89187ac5d89fab194c4","sha256":"73e625b8b6ed6212852ff1775b9075ed0be96a287758a917cf0bdb9963b2ee55","sha512":"5087c5203a9251c98be4b5b243b02e749b9f589aa9a8c029cbb3a89d41f2fb30b7a1575b653c61401ba3cd8db9850abbbcfb9c4c1aa6b3edb5833682480b7dec","ssdeep":"24576:STKgINW3zGqcGgfjYW79zV1/XIOy8sq7QM98bGQ:STKgINWDGqcGgLYW79zV1/XIp8sq7Tyz","tlshash":"3a053ae6718175a18336f7f6486b3019633e893bd8580d6db29584f02ef480974faeb7","first_seen":"2025-10-15T15:35:53.596736Z","last_seen":"2025-12-01T15:50:34.964506Z","times_seen":13770,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.ink/Xhamster","fqdn":"shrinkme.ink","domain":"shrinkme.ink","tld":"ink"},"ip":{"addr":"172.67.184.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T18:19:40.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 15:37:37 GMT","end":"Wed, 14 Jan 2026 16:36:08 GMT"},"fingerprint":{"sha1":"6F:13:6D:3A:67:4F:1C:DD:B6:31:7F:5E:DC:2F:17:CE:F2:69:E9:AE","sha256":"F2:6D:9B:07:3D:7C:FA:3C:EA:03:EB:11:44:16:47:83:DB:BF:13:DE:D3:FE:5B:BD:6A:92:18:7D:35:CC:8E:04"}}},"request":{"raw":"GET /Xhamster HTTP/1.1\r\nHost: shrinkme.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 18 Oct 2025 18:19:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://shrinkme.click/Xhamster\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeUj8X8PvK%2Bn44z0QR73TcdIpMDlXG2%2FUkj7SPvYl2INLYPbEhjm%2F8uUO%2B4ias0tRLk%2B6frU8wL95mGiHad%2FdtAJ5jAtsQPJOtA%3D\"}]}\r\ncf-ray: 990a0b9d18045697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25900,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":29,"dns":9,"connect":1,"send":0,"wait":91,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:43.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:47 GMT","end":"Mon, 15 Dec 2025 08:40:46 GMT"},"fingerprint":{"sha1":"89:EB:BC:DD:20:C6:D5:83:67:D1:C5:47:B8:9C:34:D0:CB:EB:F5:0F","sha256":"CA:94:18:CF:3D:99:B2:50:17:2E:EC:63:BD:BE:46:03:4A:EC:AB:BC:CC:15:73:A2:87:A3:21:CE:8C:8C:C7:C6"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 18:19:43 GMT\r\ncontent-security-policy: script-src 'nonce-6Ph54nxC9v1-e4ZxZJ0Syg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78409,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56645)","md5":"6882e5584c2263fb76ba678976549380","sha1":"c6c6bc9895990a5ed25d36761549cd1a443db312","sha256":"cc483d0ee7bec3c4d6a6ab6d3ce7e3f28083b02b39e8a26730b13858295cc43d","sha512":"3b723703515e5579d1893c9d7eed62b8c858a4e59a5e03e65c4545e5f6c8a8f20ad8a6c15747aacd3ed68fa50055da489e43296ba94350bc7b257d83c15774aa","ssdeep":"1536:GDUj6N9Yr8j+vk43ct7t8YHyLROe6zhq+lnJEhqN+xG6v7SYi/Xu:GDU/8y6aL6FqWEklLXu","tlshash":"cf73bf13564334aaef7f9ec137da3a75663e9186304208dc6bfe00859d6ac57a3683dc","first_seen":"2025-10-18T18:20:16.159852Z","last_seen":"2025-10-18T18:20:16.159852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","date":"2025-10-18T18:19:43.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42513\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 14:32:33 GMT\r\nexpires: Thu, 15 Oct 2026 14:32:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Oct 2025 04:00:25 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 272830\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1c703ffa04ec972def7996b210d1fb2a","sha1":"1dfa5ef5661f1bd73e7fa49410ee9b51e9894e17","sha256":"27a6e505db6cbe6efb651147488c88adf64141471fa900d76b07aa917bb270a1","sha512":"085c8f9e96cc0beb6bdb1cb79c48972486855e19755fce4a36c0b7c6cdd526dca8277e6320688dc74b91548563f2a26823cc091dfa0c140fa764ddc7abf7c3b7","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIZCdthXwW5l1Dx7:1GRFauOxLA/+IcTOpLX1","tlshash":"ca838f7338513b39fc2b9b616186b9edf22cc423e5514bfab6457a20c3db1968253b07","first_seen":"2025-10-15T14:13:57.112718Z","last_seen":"2025-12-01T15:50:34.924095Z","times_seen":12194,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/fonts/fontawesome-webfont.woff2","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /modern_theme/build/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/modern_theme/build/css/styles.min.css?ver=6.6.4\r\nCookie: lang=en_US; AppSession=c504bae1497e77b224e24e3823064a29; refXhamster=NWExZTM5MzIzZjcxZTI4OTI0ZDQ5YTVmN2E4YzIyMzNiYTA1MWIxMTA3N2Q0MjE2ZWZmOTdjYmQyZmJjYmEwZDLDkdI4BlqPo8a9O9tvhsJGT5DSwJZKnuKxJQsYjqBD; csrfToken=27cac879bf0e8b7ce39328a1c93fda9d0a281f64b54114d4c0c70560caf03400861281e2a3ab1728fa1cf7adc4fcafb2fdf614e72af0cf489969752b795a724d; app_visitor=Q2FrZQ%3D%3D.NDRjZjEyMDViYzI0NWEzOTQ0Nzk0N2Q2NWRjMjAxYWNkMzUwYTg0ZTZlYzk3YzE4NDQ1NTZjZWExOTNkZWI0Yy7PlnXTobN1dcQ9wvcHyUBpyFK%2FJ8ajLoiNEEva7XLHzugAwfDk6RckqwtMOmI%2BDTvh95YFmkOuKvqlsp7G9J54z4aWpDh2rZOO2PKhl%2FZi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Oct 2025 18:19:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gxCkc%2BOBgIzUigNztPXEG5ndMJsJAagWlRelkVcuX15oUS55rqvYhDaxsJhApLiE%2FiQBVpargpaQ1fjm6UJJqKu8vqVK%2FUHQWUW6RQ%3D%3D\"}]}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"12d68-63ec26415ef07\"\r\naccept-ranges: bytes\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 1550\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990a0ba29bf956bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-02T18:08:20.3984Z","times_seen":487019,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"shrinkme.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 00:01:55 GMT\r\nexpires: Fri, 16 Oct 2026 00:01:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 238666\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-02T18:10:00.385456Z","times_seen":503412,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":122,"dns":1,"connect":24,"send":0,"wait":23,"receive":24,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:43.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:07 GMT","end":"Mon, 15 Dec 2025 08:41:06 GMT"},"fingerprint":{"sha1":"45:D2:B0:11:57:85:73:1A:77:99:5C:D1:E3:8A:75:CC:76:E7:80:23","sha256":"D0:7B:10:C2:74:88:1F:EA:52:98:78:3E:1B:F1:17:E6:33:77:C1:A4:DE:45:4C:5B:AE:5D:E8:07:0F:E2:C5:CC"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 18 Oct 2025 18:19:43 GMT\r\ndate: Sat, 18 Oct 2025 18:19:43 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1088,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1088), with no line terminators","md5":"1d9afd2b9290e5b3b0cdb690435af5b6","sha1":"ae2fcb10b96e0e8cbedd88a44e39d9bd038474dd","sha256":"6d63466443438a4ecf45d9c45b5e414e2e119daf8f96f400d8a839a2b4656e33","sha512":"3daf1a48b94cea0e96bccfa62687acf3714e4b10b2176dfc70a5679be6308820fca92748b4d07b394c13b58b161f968a2eae0c7a51b388a8ff5d7762de86df14","ssdeep":"","tlshash":"691123b20608e0394b3219e1e1fbc7b1e091745cf11c85eca502ea841e79cc7cf09455","first_seen":"2025-10-16T13:53:07.641311Z","last_seen":"2025-10-22T05:51:59.911342Z","times_seen":28,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":188,"dns":4,"connect":28,"send":0,"wait":46,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gleecheeftoo.net/401/5775069?oo=1\u0026sw_version=v1.753.0-s\u0026oaid=08026627e8dc4debeb88849ac701bf02\u0026st=true","fqdn":"gleecheeftoo.net","domain":"gleecheeftoo.net","tld":"net"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:44.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gleecheeftoo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 05:17:56 GMT","end":"Tue, 06 Jan 2026 05:17:55 GMT"},"fingerprint":{"sha1":"8E:42:31:B9:51:AA:34:09:F5:03:CC:09:4E:7E:EE:3A:05:9C:E5:46","sha256":"86:B7:9A:A9:71:3A:F0:05:29:DC:A6:89:21:10:E3:EE:86:02:01:9B:AD:91:EA:F4:30:07:26:BC:FD:4C:1A:02"}}},"request":{"raw":"POST /401/5775069?oo=1\u0026sw_version=v1.753.0-s\u0026oaid=08026627e8dc4debeb88849ac701bf02\u0026st=true HTTP/1.1\r\nHost: gleecheeftoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3275\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 18:19:44 GMT\r\ncontent-type: application/json\r\nx-trace-id: f3877d247edba7976bd2fe753f6e92c4\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=08026627e8dc4debeb88849ac701bf02; expires=Sun, 18 Oct 2026 18:19:44 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2165,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e42753ed73b878e30ccac16e83ad905f","sha1":"37203895714f70619d00257ac757534914d60a62","sha256":"321e201bde9cd5b59c5ce37295631f724a347ff41ab6d603007002f3d0b2dbe7","sha512":"9715c3dc67b9a39824d4844c64ce80ffcdb7ce783952ceef589c56c790c79f8de70bf261c1e8c79ac25157d17e3e3a6affa448041d4f95614f674c305d6ab574","ssdeep":"","tlshash":"4e4123088d28017e92ee5ab5ec0b6d474abd161f7a0c752ee7450d1770ebce403eb20b","first_seen":"2025-10-18T18:20:16.171651Z","last_seen":"2025-10-18T18:20:16.171651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":128,"dns":42,"connect":26,"send":0,"wait":39,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","date":"2025-10-18T18:19:44.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:47 GMT","end":"Mon, 15 Dec 2025 08:40:46 GMT"},"fingerprint":{"sha1":"89:EB:BC:DD:20:C6:D5:83:67:D1:C5:47:B8:9C:34:D0:CB:EB:F5:0F","sha256":"CA:94:18:CF:3D:99:B2:50:17:2E:EC:63:BD:BE:46:03:4A:EC:AB:BC:CC:15:73:A2:87:A3:21:CE:8C:8C:C7:C6"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 18 Oct 2025 18:19:44 GMT\r\ndate: Sat, 18 Oct 2025 18:19:44 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"890bf46d78005007e5e6308addabc5ff","sha1":"06b596411d79e6ca284df86b278ac80d9dd15ba3","sha256":"e80e143fc9327d6ad7ed5a2f8e8743e6e574f0c9076d26b604a1b92cf52658de","sha512":"c0c5290f5df7184a62edb72be52e0e48acf65901f0c84964cef25bc11940cf163bde2fafa5fc591c3da11223fdf415f7bb953a9c60f89ef4d02f91ff9a8e556f","ssdeep":"","tlshash":"f4b012630a10c4195d000203c837b3b8e0425138de5080f840651ff842605738100851","first_seen":"2025-10-15T15:35:53.532677Z","last_seen":"2025-12-01T15:50:34.962066Z","times_seen":11788,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:48.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:24:25 GMT","end":"Tue, 16 Dec 2025 05:21:54 GMT"},"fingerprint":{"sha1":"4D:D9:7B:8E:2E:B1:DF:4E:5A:71:CF:29:D6:3A:1D:7E:AA:3D:5A:A2","sha256":"88:8A:05:87:6E:69:15:70:D5:BC:48:78:60:76:1A:E9:45:82:CE:D7:2D:0B:89:EB:6B:09:58:DC:93:D4:79:E6"}}},"request":{"raw":"GET /www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Oct 2025 18:19:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 16893\r\nlast-modified: Mon, 17 Mar 2025 02:12:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCP3c0BIgOdm%2Bbt4AcRRSwNrzi8SB9xnNdGZtFMFE%2Bk%2FJW2TulVUtR9uYhjeM52SwtjkA1buirauJDHvlELzm7BpGGLdH4uRMx9FlAQXscSy\"}]}\r\netag: \"67d78504-41fd\"\r\nexpires: Sun, 19 Oct 2025 05:33:40 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 45967\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 990a0bcd1e040daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"31f5bb5f43a7bd2800c6724e3a4125d2","sha1":"bc1bcd6aa31ac91dd34359c2fbbcaefb3e15c875","sha256":"e5dd86d52381d2bff5f1b74d3923443d3d95ced64048662307ed3ec2d52eb61b","sha512":"472e23766bb20f680ab31d5c358d9555ce56596444072978dd6340ca5e918aedcf1985a811c7f3f41b72bb15ce3df8ca98a2fddb5ec9a1eeb5f30d586fc7c23e","ssdeep":"384:wDIuIpXyvlnQ8HrcT30rRp8Rp6g9TzBtnL1Ti7DpHQ9:wsHyvBXHrQxF93By7DhQ9","tlshash":"0572c06f0a4a5703999d1c0d1eab7c9d667a425f007c2e6b23239c5cf94a36f6042df5","first_seen":"2025-03-17T02:19:44.486682Z","last_seen":"2025-11-29T07:50:01.235056Z","times_seen":1176,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:48.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 16 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 192226\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-02T18:08:20.372402Z","times_seen":863352,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yweakelandord.com/c1V0RDFcahc3DBE/NTNSOwMjBUYxEyACUjIXRChyJAQxBmMmDFIwWBdoQ30DQWxDYkEaMUl1FwAhFTBEAGhHdAFCcx0qVxxoRHQBQnMCeQBdZkBqAkV7QmJETmRSMEESMkl1FwMhACgMQmJCdAlCZEF8A0tnRg","fqdn":"yweakelandord.com","domain":"yweakelandord.com","tld":"com"},"ip":{"addr":"172.67.146.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yweakelandord.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 08:53:24 GMT","end":"Mon, 05 Jan 2026 09:50:59 GMT"},"fingerprint":{"sha1":"E9:A5:59:FC:88:D4:57:19:6D:06:55:B2:AA:BA:2E:D4:5D:C1:D3:AC","sha256":"15:31:93:46:6D:B1:7F:8F:F2:25:E4:E9:A1:53:3E:FF:81:24:7E:B2:25:C0:07:FD:D9:48:B3:26:C3:17:1E:DB"}}},"request":{"raw":"GET /c1V0RDFcahc3DBE/NTNSOwMjBUYxEyACUjIXRChyJAQxBmMmDFIwWBdoQ30DQWxDYkEaMUl1FwAhFTBEAGhHdAFCcx0qVxxoRHQBQnMCeQBdZkBqAkV7QmJETmRSMEESMkl1FwMhACgMQmJCdAlCZEF8A0tnRg HTTP/1.1\r\nHost: yweakelandord.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2FazwInzm8w3CjYpeqWDU2Faz79YRxEKzUbJ%2Fat8rUQPwc1caA0oGUIGiiwGAf6OaTzZ3K7H9oPzqh8BrseNPQh5ISBODSrmadNTI43%2BYg%3D%3D\"}]}\r\ncf-ray: 990a0ba8bfc07131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/5775069","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"172.67.205.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:43.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gloaphoo.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:57:16 GMT","end":"Sun, 23 Nov 2025 09:20:44 GMT"},"fingerprint":{"sha1":"D2:01:62:8C:1B:4E:6C:C5:9E:D4:FB:C6:01:2E:24:2F:F9:8D:5B:9D","sha256":"44:7C:2E:24:AF:09:60:CA:DF:B4:AE:48:AD:31:AD:E8:32:72:C1:C3:73:3C:83:88:CA:7F:A8:6C:65:CA:FE:4D"}}},"request":{"raw":"GET /401/5775069 HTTP/1.1\r\nHost: gloaphoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:43 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2Fxc4kISnKDQl8aPkEfNa14GtNP%2BbT%2BGbc1aWXZfFjeK3j9wJrxiN5EJYhNvVZxIEWInM7FukpGaqoTeTPKbVBCp5AXoF69kvWY2Mg%3D%3D\"}]}\r\ncf-ray: 990a0baa1a7649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f87ef1a18078e7b9163a6a02995b671f","sha1":"96edd3c2232c08efa1fe1802bee82c9b8fb3254d","sha256":"95f646237a716bb9cec166a14b5888f91eeff45adcb9f4a99af8b86eedddd398","sha512":"e58eedc2b1b34941bbbcc4e2f4afe9047dd8b34c07f1654dfd42517e71b90ce8fe1ce851718bfd28b0c3c7534efb1f9c372ac8ec3a0f273cd7bcaa676b8480b0","ssdeep":"3072:uKlUMtmDDjvO2BfPxkI8dZfJ1+zcGiPSHG720p0Gy6/2DUa8S443V0EFICtxnfv/:XulkI8Oz1iPSAO6/2DUaYIVjIExnHiw","tlshash":"f7f3d788b192b1551d72a134322f824eb6dfab605c4e4a80d19be1b27f3706ed377dd8","first_seen":"2025-10-18T18:20:16.182432Z","last_seen":"2025-10-20T16:12:15.449933Z","times_seen":12,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":28,"dns":8,"connect":1,"send":0,"wait":73,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:43.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352623\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 14:33:20 GMT\r\nexpires: Thu, 15 Oct 2026 14:33:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Oct 2025 04:00:25 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 272783\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (583)","md5":"cbf084f2c375da6aa24d42ab271c8670","sha1":"6c72ac6800b5b02f04e4f89187ac5d89fab194c4","sha256":"73e625b8b6ed6212852ff1775b9075ed0be96a287758a917cf0bdb9963b2ee55","sha512":"5087c5203a9251c98be4b5b243b02e749b9f589aa9a8c029cbb3a89d41f2fb30b7a1575b653c61401ba3cd8db9850abbbcfb9c4c1aa6b3edb5833682480b7dec","ssdeep":"24576:STKgINW3zGqcGgfjYW79zV1/XIOy8sq7QM98bGQ:STKgINWDGqcGgLYW79zV1/XIp8sq7Tyz","tlshash":"3a053ae6718175a18336f7f6486b3019633e893bd8580d6db29584f02ef480974faeb7","first_seen":"2025-10-15T15:35:53.596736Z","last_seen":"2025-12-01T15:50:34.964506Z","times_seen":13770,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":37,"dns":1,"connect":8,"send":0,"wait":9,"receive":39,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T18:19:41.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /Xhamster HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-robots-tag: noindex, nofollow\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=keitj4VgLAe8t7MOwxwkafMI4uNAiq52LVwwuyaXsHKigSFZsSyRLJH8HTDFBbyMfo2BBVYsMB2HxOoKBaHCPDBgqMqv5dTEwulJALla\"}]}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: lang=en_US; Path=/; Max-Age=31104000; Expires=Tue, 13 Oct 2026 18:19:30 GMT\nAppSession=c504bae1497e77b224e24e3823064a29; HttpOnly; Path=/\nrefXhamster=NWExZTM5MzIzZjcxZTI4OTI0ZDQ5YTVmN2E4YzIyMzNiYTA1MWIxMTA3N2Q0MjE2ZWZmOTdjYmQyZmJjYmEwZDLDkdI4BlqPo8a9O9tvhsJGT5DSwJZKnuKxJQsYjqBD; HttpOnly; Path=/; Max-Age=300; Expires=Sat, 18 Oct 2025 18:24:30 GMT\ncsrfToken=27cac879bf0e8b7ce39328a1c93fda9d0a281f64b54114d4c0c70560caf03400861281e2a3ab1728fa1cf7adc4fcafb2fdf614e72af0cf489969752b795a724d; HttpOnly; Path=/\napp_visitor=Q2FrZQ%3D%3D.NDRjZjEyMDViYzI0NWEzOTQ0Nzk0N2Q2NWRjMjAxYWNkMzUwYTg0ZTZlYzk3YzE4NDQ1NTZjZWExOTNkZWI0Yy7PlnXTobN1dcQ9wvcHyUBpyFK%2FJ8ajLoiNEEva7XLHzugAwfDk6RckqwtMOmI%2BDTvh95YFmkOuKvqlsp7G9J54z4aWpDh2rZOO2PKhl%2FZi; HttpOnly; Path=/; Max-Age=86400; Expires=Sun, 19 Oct 2025 18:19:30 GMT\r\ncf-ray: 990a0b9f5d270883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}],"data":{"size":25900,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1144), with CRLF, LF line terminators","md5":"0f20848984d87770cffa4cd3767339e0","sha1":"2a1428bba56d6b112fab7d219980004a96412eb4","sha256":"d7cd03a4b3847b364b41d5e35279701251c6e581151ea457905874c80ccf4dd4","sha512":"764a498e9d7240c699a3a49268e9d3dbd0ce5205ddb6624d6765ccd02a83c96a02ee767b85d440c820cf8d421ca76103928e768acb79ac4fd153614439374d3b","ssdeep":"768:UP8imXzZlfI7c9ZGxOSeyU8gC5/LSMDZpQ4/:XiQlfI7c9ZwOxyU8gM/VZpQ4/","tlshash":"69c2e826bddd5427016200e876b7fb0ced19a02bea068921f9ec53552fe6fe44c57e8c","first_seen":"2025-10-18T18:20:16.187406Z","last_seen":"2025-10-18T18:20:16.187406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":255,"dns":28,"connect":1,"send":0,"wait":99,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"shrinkme.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/css/styles.min.css?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 16:35:04 GMT","end":"Sat, 03 Jan 2026 17:32:46 GMT"},"fingerprint":{"sha1":"B0:23:6F:D5:F5:BD:A0:97:2E:2A:1F:82:B3:49:A3:77:CA:EA:FE:B0","sha256":"BF:3B:F9:90:7B:D8:8C:04:6F:8F:9D:75:DE:10:F8:0A:2B:0D:FA:09:59:78:F1:66:C0:5B:45:5C:0A:44:0F:21"}}},"request":{"raw":"GET /modern_theme/build/css/styles.min.css?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xhamster\r\nCookie: lang=en_US; AppSession=c504bae1497e77b224e24e3823064a29; refXhamster=NWExZTM5MzIzZjcxZTI4OTI0ZDQ5YTVmN2E4YzIyMzNiYTA1MWIxMTA3N2Q0MjE2ZWZmOTdjYmQyZmJjYmEwZDLDkdI4BlqPo8a9O9tvhsJGT5DSwJZKnuKxJQsYjqBD; csrfToken=27cac879bf0e8b7ce39328a1c93fda9d0a281f64b54114d4c0c70560caf03400861281e2a3ab1728fa1cf7adc4fcafb2fdf614e72af0cf489969752b795a724d; app_visitor=Q2FrZQ%3D%3D.NDRjZjEyMDViYzI0NWEzOTQ0Nzk0N2Q2NWRjMjAxYWNkMzUwYTg0ZTZlYzk3YzE4NDQ1NTZjZWExOTNkZWI0Yy7PlnXTobN1dcQ9wvcHyUBpyFK%2FJ8ajLoiNEEva7XLHzugAwfDk6RckqwtMOmI%2BDTvh95YFmkOuKvqlsp7G9J54z4aWpDh2rZOO2PKhl%2FZi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 35024\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"30c03-63ec26415ef07-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Tue, 04 Nov 2025 18:40:55 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 1121920\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ET9iCXQjq3lyCdLamK6wy2n7fzEbeEIM1v9ByJ2z%2BOsjdEsNWMbAvvhn7uj2mtEC6pf%2Bkp5jvLOWl6Eku%2BVBSgmroRY358jqG4HaqVN\"}]}\r\ncf-ray: 990a0ba14a6a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199683,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65369)","md5":"0c921e67880117735ca85ba7fe87bafb","sha1":"12901b42a59bb331ea952af5c9700a3f6d520e40","sha256":"0b3646e0fa00be9c1cbb3a7dc1ad1d0348dbdbec5b6e023b012cf8e0d2927fe1","sha512":"34da3e923eee4d30b3e1e79e19d2d7b96abad7b9343b9dc9dbf0b75d57f32a8df2e9b53f547defea79c7b7eb4e04408045857f9ff04d9ac707c2547cc2d59274","ssdeep":"3072:6co/oFiS22l7p0rQUT63i6PSNhwEx28mLh2LK:Bo/BS22crQUT63i6PSNhwEx28mLh2LK","tlshash":"2014a6a0e51420da3323c15bbbd0fa99227cf263d5564dbaf21f659c4fc46c912a3f1a","first_seen":"2023-04-19T07:39:51Z","last_seen":"2026-05-31T02:56:49.320421Z","times_seen":295,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"shrinkme.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aseinprofitefukhatex.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","fqdn":"aseinprofitefukhatex.com","domain":"aseinprofitefukhatex.com","tld":"com"},"ip":{"addr":"54.240.174.92","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aseinprofitefukhatex.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"02:2D:E2:FE:C5:03:2C:E8:4C:5A:67:77:1C:35:6F:6C:27:56:76:55","sha256":"F5:78:6A:62:49:E9:AA:A5:19:E0:20:17:D5:CC:96:72:F5:45:39:5B:13:15:5D:A7:48:55:1F:91:6F:95:EA:25"}}},"request":{"raw":"GET /TW1WNUwsDzVYcyxQNBM5PwFrEH4LSGRzKH5ZMV8qIFpjTyQ9Wm4bLyECI1EqPwI4QWIjCCIQfgsXN2AnOjgCfAcHAWIGCB9dMWMLOisDfT8ODBdjHAI4HwUaCzxgYg8DDxRMBikjFEIHBzs9TBsYVTxkNngOEW0eJCoOQisAOyVcDyQOP3Q7CzgdX3l6CWZsGAE8Z10KDDg5bSYUPQJMNCggMQwVL1wTBBkLP29zJRsuFFwFAyITRgEHXBtHGww8b2cEKSUVfR4pPT1SDQc7IUIKfB4GdxR1LgJ9PwwIA2ANB1wHEH4PPwRFPwwAEFYEGhoVbB0DNwxCYQ9dF2Y4Piw7cwoMLjVyFh8JN3Y0GwcXXQpoXxB3BBwvHQc7DjQDdCovLBtkDXwdb30hCA8CfT8MIzpWBwQBbwUNDlRhdAsMLgFtKww0FFEuKDsPAR0MGiBtNSY1AUJ0DzQxbwQoPw9eCHwKcF8/IgMmCB4FIx9NJz5VGF5/HQsVQgc HTTP/1.1\r\nHost: aseinprofitefukhatex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1221\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=8Ad8g38qILlTG+0RTe3WA/txi064y7TT39gWKIoAA0xsPMIfFXJoa27SIufM+90nWmFOV9QOW9ytJcx+QXDavEbLZ9wxE45NkenUokI0lJOBY5Z60JgsAMR30bzh; Expires=Sat, 25 Oct 2025 18:19:42 GMT; Path=/\nAWSALBCORS=8Ad8g38qILlTG+0RTe3WA/txi064y7TT39gWKIoAA0xsPMIfFXJoa27SIufM+90nWmFOV9QOW9ytJcx+QXDavEbLZ9wxE45NkenUokI0lJOBY5Z60JgsAMR30bzh; Expires=Sat, 25 Oct 2025 18:19:42 GMT; Path=/; SameSite=None\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: kwaQ7EKD4FJ8_waoqPBqAwaRubL4MMa1XaRkUxHSHOH9PdEqSsrlqw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3078), with no line terminators","md5":"b5be2136b1ba2ba4f0f8a2440a312224","sha1":"da845ac97cc6859e08766c21b0bb264e55175259","sha256":"b1ba7766e6e6e20de758f22d413faa76cec7be8f53c5b275fb4e4f7ad670ffe9","sha512":"fa87258273fe7deba1e33b5bd1764ac43789ef98d7cba6157248f6387afb8c75f4d09a5425a632fd1aa48305aacabab0f0b9f924ffb96262007ab5409aa8bf23","ssdeep":"","tlshash":"5551008d34f3a0c282f26019447bb59afa285aa5834ccb14867d92bdbc715ed6357f4c","first_seen":"2025-10-18T18:20:16.19429Z","last_seen":"2025-10-18T18:20:16.19429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":115,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1560985791:1760811582485132\u0026ifkv=AfYwgwWuTC_IKx-DkS4wTU5ivfbdHyBzJP5sHbfqtg2UxeRKy1Ak1H3Yeu6o5Dih6MLbXAkBQl1Dcg","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:42 GMT","end":"Mon, 15 Dec 2025 08:42:41 GMT"},"fingerprint":{"sha1":"FA:CB:8B:4D:1E:E1:88:7C:A3:C4:6D:7C:67:E7:45:EA:91:C3:CA:93","sha256":"D0:B4:98:FF:9C:E4:26:18:7A:1C:9C:E5:59:51:C5:54:33:E0:7B:5A:DD:DE:BB:57:49:48:07:42:3F:E4:D3:64"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1560985791:1760811582485132\u0026ifkv=AfYwgwWuTC_IKx-DkS4wTU5ivfbdHyBzJP5sHbfqtg2UxeRKy1Ak1H3Yeu6o5Dih6MLbXAkBQl1Dcg HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:ruU4RdQHoGjZa9x6loj4QpckD3HTPA:8_fWLYw24E24TSaX;Path=/;Expires=Mon, 18-Oct-2027 18:19:42 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1560985791%3A1760811582485132\u0026hl=en\u0026ifkv=AfYwgwVRHIl0lwp_f9SPd5qnzPTBkquUnm-jmVNUuQxBG6kifUsOgg2WTrK9WAuXOMiESw1sWrtsXg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-security-policy: script-src 'nonce-M6O3BYkNh6FjmsUymtQMvw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 420\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/logo-sm.webp","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"104.21.65.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 04:57:15 GMT","end":"Thu, 11 Dec 2025 05:55:55 GMT"},"fingerprint":{"sha1":"3D:E0:1B:85:88:16:EB:B4:29:27:8D:E7:7C:10:EA:07:33:FE:08:34","sha256":"1C:7A:2F:AC:AB:91:01:3B:74:01:1E:76:81:F2:B7:3D:10:13:CE:51:3F:F8:5D:31:0B:CD:8F:B9:82:D9:14:2D"}}},"request":{"raw":"GET /logo-sm.webp HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31236\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"7a04-63ec202aaaa36\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Thu, 24 Sep 2026 07:36:02 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 2112217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Flba3d79FDI7YVJ6X%2B7qkhYEpIhWqyNvR6tQsIk%2Fd5OCx0uOq2i051DpNNka0fxw31CA%2B0Mk6zkeWXWpmysJxtZXgMGYXggfEjpo\"}]}\r\ncf-ray: 990a0ba19f2cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53658e8a7ae22169e5b89744bfa9f9cc","sha1":"157a684bdf8e3be19cbfabc80cf3a53bfbeaa175","sha256":"9777428de88c524584f0133c3c0d9becf5a3840597eb16dc873bbc29b9a0bf58","sha512":"591c520934512496bfd28831a5c5039c29146034d03a97c7a4c04a153388f21480e1d59e4528c7161ee696a33025a3727ecda3bf05b7dd1b18fdf45f7b4b5b91","ssdeep":"768:Wh2yCYVpdbxAIf8/1AIdV1EeWkgoZ8NJ1/+qK:Wh2yCsbxxOPqeAouDE","tlshash":"c1e2f19b2b3f558af7137380622828d5c15dfcb5605a8b38083bfa278755b554ae30bf","first_seen":"2023-04-21T09:30:41Z","last_seen":"2026-05-24T23:07:00.2111Z","times_seen":912,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yweakelandord.com/YzNWbW5MDDUeUzpfPVwgO1s3DAk2cgc7GhNyMRU+NWQxKC8mQHAZBwcOYVRcUQphSx4KV2tcSBBHNxkbEA5nSwcNVTlQSBUOZ0NdVx1lW0BVFSNQX0VHJgwJXgJwHRoXX2tcWVUDblxfVgtnVFlX","fqdn":"yweakelandord.com","domain":"yweakelandord.com","tld":"com"},"ip":{"addr":"172.67.146.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yweakelandord.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 08:53:24 GMT","end":"Mon, 05 Jan 2026 09:50:59 GMT"},"fingerprint":{"sha1":"E9:A5:59:FC:88:D4:57:19:6D:06:55:B2:AA:BA:2E:D4:5D:C1:D3:AC","sha256":"15:31:93:46:6D:B1:7F:8F:F2:25:E4:E9:A1:53:3E:FF:81:24:7E:B2:25:C0:07:FD:D9:48:B3:26:C3:17:1E:DB"}}},"request":{"raw":"GET /YzNWbW5MDDUeUzpfPVwgO1s3DAk2cgc7GhNyMRU+NWQxKC8mQHAZBwcOYVRcUQphSx4KV2tcSBBHNxkbEA5nSwcNVTlQSBUOZ0NdVx1lW0BVFSNQX0VHJgwJXgJwHRoXX2tcWVUDblxfVgtnVFlX HTTP/1.1\r\nHost: yweakelandord.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urXhRk0urh8fnbEbzymRbsz0mb1u6BXKYUEyWrMJsyyWkJ7jOV9Vqn64Ibvn4PAtW979Y7V9mEKgjCpOFWrU5te2ENtEc7FsUwdwGc%2FD3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 990a0ba43e495697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":125,"dns":4,"connect":1,"send":0,"wait":139,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:44.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 14:26:46 GMT","end":"Fri, 12 Dec 2025 07:20:07 GMT"},"fingerprint":{"sha1":"F3:16:05:8F:DD:38:43:0F:BB:E2:C4:D7:85:80:BC:FF:31:61:3D:76","sha256":"B5:31:C1:B7:C6:EF:62:4B:FF:EC:63:B7:C3:FC:AB:46:1C:7C:09:8C:E2:11:C2:6C:DC:B2:3A:57:84:15:F3:EC"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 18:19:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRSaf2SzlSS0TxAi0z2dl%2FrtOfxpkuZJ1NxsfaAjybpTU7ohjkeCs2mUv7pFBgFXZNb8XFUtGyVBXK0lqvl7eoDUtwLP%2B0XcXBF%2F\"}]}\r\nage: 3265\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2be-45d7\"\r\ncontent-encoding: br\r\ncf-ray: 990a0bb3fc1fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17229)","md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-06-02T12:05:36.236715Z","times_seen":6989,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":25,"dns":6,"connect":1,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/favicon-3.webp","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"104.21.65.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:42.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 04:57:15 GMT","end":"Thu, 11 Dec 2025 05:55:55 GMT"},"fingerprint":{"sha1":"3D:E0:1B:85:88:16:EB:B4:29:27:8D:E7:7C:10:EA:07:33:FE:08:34","sha256":"1C:7A:2F:AC:AB:91:01:3B:74:01:1E:76:81:F2:B7:3D:10:13:CE:51:3F:F8:5D:31:0B:CD:8F:B9:82:D9:14:2D"}}},"request":{"raw":"GET /favicon-3.webp HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Oct 2025 18:19:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12694\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9WxsDNnu54sbyFWIhwSeoJKx%2F4Gnei%2FPxkIBUYHoVw4sxTGhyOscR061MsVq%2B16txv1m9BVJ3x17AkCbYP5otYOd1Bq2e%2Fq69M6\"}]}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"3196-63ec202aa9a96\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 13:19:29 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 2782812\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 990a0ba5bf010daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"103971bd196afd0ca8f772c9680c9e4c","sha1":"8340e472b9426202e0745d04956c468366256994","sha256":"663cf4358e3e1fdbb64e946bbf381b04db3654d54fe7ba5d8cd47463b733425b","sha512":"4052713576aee93c2f5ee7f6f1de47ad290ee90ec87278407e178fad46af9a64968d551d9bbb3a5c2841ec361c5bfbdb55264f308978ef84529b5513e38fbb78","ssdeep":"384:DNqHAE4/4a2bemzV6wsEwdJn6f4Te4wg0v5M6:evyoDHsEC6gwHvC","tlshash":"5142c02b5dbfc8fb91a62f6f643f0366ccfbbd6b52d82a15460048646095120fc93b5e","first_seen":"2023-05-08T21:09:43Z","last_seen":"2026-05-24T23:07:00.221817Z","times_seen":946,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=KmpMK968ITgSdSG_2lbUmd1o\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=kplau1evqssh","date":"2025-10-18T18:19:43.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /recaptcha/releases/KmpMK968ITgSdSG_2lbUmd1o/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352623\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 14:33:20 GMT\r\nexpires: Thu, 15 Oct 2026 14:33:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Oct 2025 04:00:25 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 272783\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (583)","md5":"cbf084f2c375da6aa24d42ab271c8670","sha1":"6c72ac6800b5b02f04e4f89187ac5d89fab194c4","sha256":"73e625b8b6ed6212852ff1775b9075ed0be96a287758a917cf0bdb9963b2ee55","sha512":"5087c5203a9251c98be4b5b243b02e749b9f589aa9a8c029cbb3a89d41f2fb30b7a1575b653c61401ba3cd8db9850abbbcfb9c4c1aa6b3edb5833682480b7dec","ssdeep":"24576:STKgINW3zGqcGgfjYW79zV1/XIOy8sq7QM98bGQ:STKgINWDGqcGgLYW79zV1/XIp8sq7Tyz","tlshash":"3a053ae6718175a18336f7f6486b3019633e893bd8580d6db29584f02ef480974faeb7","first_seen":"2025-10-15T15:35:53.596736Z","last_seen":"2025-12-01T15:50:34.964506Z","times_seen":13770,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34gjfm75zhp78.cloudfront.net/?mfjgd=792297","fqdn":"d34gjfm75zhp78.cloudfront.net","domain":"d34gjfm75zhp78.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.106","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:41.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?mfjgd=792297 HTTP/1.1\r\nHost: d34gjfm75zhp78.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 79164\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Sat, 18 Oct 2025 18:19:41 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: VEWyAZAP1bU3o7a6OCYZBghUgKVF16vYVxnzmn7kRU_GJho3QyowGw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":232363,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"d1df53821082d3d6cb354e91ac4d5153","sha1":"bd97bf6db60b4e031594f5b1da69115acb747890","sha256":"15f8323377c1d2f5bbdad9cf56f3fa718b8e2f74ab3e7fcf54572df492d17110","sha512":"3eaa32dbb4cc2b187d72f7fed4583d2dd6fde91301a7484e596913641465e91a1cfef8fa197fedf63fc91ac4a81549f3b6927b25fa1c55b2297cef1540a90c2c","ssdeep":"3072:XBUNPgDYzi07L02raYDbe+Y5UKS+7L0x2iG+Zc53+Zc0M8E2:XuN4DUi07w2rnXJZU3+iAp","tlshash":"d7344cc9ba923469836374b540bf124ab23f5a69bc084dd4f496d4d07db8d0a437bfac","first_seen":"2025-10-18T18:20:16.205503Z","last_seen":"2025-10-18T18:20:16.205503Z","times_seen":1,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":35,"dns":14,"connect":11,"send":0,"wait":177,"receive":3,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gleecheeftoo.net/500/5775069?excludes=\u0026oaid=08026627e8dc4debeb88849ac701bf02\u0026var=\u0026ymid=\u0026tgp=\u0026of=true\u0026sw_version=v1.753.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=3\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"gleecheeftoo.net","domain":"gleecheeftoo.net","tld":"net"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster","date":"2025-10-18T18:19:44.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gleecheeftoo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 05:17:56 GMT","end":"Tue, 06 Jan 2026 05:17:55 GMT"},"fingerprint":{"sha1":"8E:42:31:B9:51:AA:34:09:F5:03:CC:09:4E:7E:EE:3A:05:9C:E5:46","sha256":"86:B7:9A:A9:71:3A:F0:05:29:DC:A6:89:21:10:E3:EE:86:02:01:9B:AD:91:EA:F4:30:07:26:BC:FD:4C:1A:02"}}},"request":{"raw":"OPTIONS /500/5775069?excludes=\u0026oaid=08026627e8dc4debeb88849ac701bf02\u0026var=\u0026ymid=\u0026tgp=\u0026of=true\u0026sw_version=v1.753.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=3\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: gleecheeftoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://shrinkme.click/\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 18:19:44 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":90,"dns":0,"connect":27,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"gleecheeftoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}