{"report_id":"ea1a11bb-8e33-4057-a0de-ab2104efaa06","version":6,"status":"done","tags":[],"date":"2026-01-03T16:34:26Z","url":{"schema":"https","addr":"shrinkme.ink/Xhamster_011","fqdn":"shrinkme.ink","domain":"shrinkme.ink","tld":"ink"},"ip":{"addr":"172.67.184.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"oundhertobeconsist.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%3D","fqdn":"oundhertobeconsist.org","domain":"oundhertobeconsist.org","tld":"org"},"title":"oundhertobeconsist.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%3D","dom":{"size":5521,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4425)","md5":"22b37f378130ad13d826683d14310429","sha1":"f3ccb79fe73449513015b9b1eb9f52410c1dc80e","sha256":"5317f343cb32ec9c44e76c7e573ff22f7b914c0ff936acc233ec6dd6b8be30f0","sha512":"084e95f65cffb2824bbb9fc8b029b97f702aecc40fa8b562b27a35a1bfcc64ae92bef26923d27961b65d5e60acfd6bc29e0868e2ec266e5e1711f10770084842","ssdeep":"96:zkalVFm+bY3kjyJo1gk8s6G84ISTP9J1e+GRJe:zkalXQo1FC679J8+wJe","tlshash":"e0b11a67f9d120400107819c6aa7b7bcbfbe911087014d7a75ad33bcaf8edf708a1288","dom_hash":"domhash5128625ecf67ad91d375a42e49456f5b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"shrinkme.ink/Xhamster_011","fqdn":"shrinkme.ink","domain":"shrinkme.ink","tld":"ink"},"ip":{"addr":"172.67.184.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T16:34:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"torealiukzemydr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-12-28T22:24:05.936453Z","alert_count":0,"request_count":8,"received_data":4423560,"sent_data":3851,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ukankingwithea.com","ip":{"addr":"104.21.68.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-12-30T01:59:11.301646Z","alert_count":3,"request_count":1,"received_data":834,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ohffs.com","ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2018-08-31","domain_rank":0,"first_seen":"2025-11-20T12:06:05.800824Z","last_seen":"2026-01-01T22:59:20.125155Z","alert_count":0,"request_count":4,"received_data":7445,"sent_data":3878,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"shrinkme.click","ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-05","domain_rank":0,"first_seen":"2025-10-06T10:23:13.692811Z","last_seen":"2026-01-01T23:27:47.91203Z","alert_count":0,"request_count":7,"received_data":553781,"sent_data":6837,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2025-12-30T06:56:59.681963Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":970,"comment":"","tags":null,"fingerprints":null},{"fqdn":"torealiukzemydr.org","ip":{"addr":"104.21.3.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2025-12-21T08:49:45.283212Z","last_seen":"2025-12-28T09:14:33.95479Z","alert_count":4,"request_count":4,"received_data":2112,"sent_data":2323,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":2,"received_data":35386,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d34gjfm75zhp78.cloudfront.net","ip":{"addr":"54.230.241.169","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-10-27T18:06:47Z","last_seen":"2026-01-01T23:27:48.08954Z","alert_count":2,"request_count":1,"received_data":232798,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-12-28T22:27:44.219613Z","alert_count":0,"request_count":1,"received_data":86169,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-12-29T14:32:54.672001Z","alert_count":0,"request_count":1,"received_data":837,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"homeeshbecom.org","ip":{"addr":"3.164.240.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2026-01-02T15:40:36.059081Z","last_seen":"2026-01-02T15:40:36.059081Z","alert_count":0,"request_count":1,"received_data":3713,"sent_data":1012,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"bobapsoabauns.com","ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16239,"first_seen":"2025-03-26T18:52:40.148632Z","last_seen":"2026-01-01T21:05:39.253839Z","alert_count":0,"request_count":2,"received_data":144195,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gloaphoo.net","ip":{"addr":"172.67.205.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-09-09","domain_rank":283321,"first_seen":"2022-09-10T12:44:27Z","last_seen":"2026-01-01T23:27:48.891047Z","alert_count":1,"request_count":1,"received_data":168766,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":6,"received_data":233734,"sent_data":3272,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":2,"received_data":755186,"sent_data":884,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-12-28T22:22:31.188277Z","alert_count":0,"request_count":1,"received_data":1717,"sent_data":418,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shrinkme.ink","ip":{"addr":"172.67.184.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-28","domain_rank":71507,"first_seen":"2024-08-28T12:10:11Z","last_seen":"2025-12-18T20:35:24.367951Z","alert_count":0,"request_count":1,"received_data":27802,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":17838,"first_seen":"2022-01-14T22:55:14Z","last_seen":"2026-01-01T21:05:40.495811Z","alert_count":0,"request_count":2,"received_data":906,"sent_data":1167,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"shrinkme.io","ip":{"addr":"104.21.65.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-18","domain_rank":218590,"first_seen":"2019-04-01T23:10:55Z","last_seen":"2026-01-01T23:27:47.960063Z","alert_count":0,"request_count":3,"received_data":59799,"sent_data":1299,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-12-29T00:14:05.184038Z","alert_count":0,"request_count":6,"received_data":13824,"sent_data":3774,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.recaptcha.net","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2025-12-29T04:04:11.349558Z","alert_count":0,"request_count":4,"received_data":114479,"sent_data":2585,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tzegilo.com","ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":18163,"first_seen":"2022-01-14T15:27:15Z","last_seen":"2025-12-30T21:53:53.473544Z","alert_count":0,"request_count":1,"received_data":18655,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5Q2KMLS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d402d3e291b34d55bd44601818b0075b","sha1":"5300a09b08bc6905e4a954d218b5092623da48fb","sha256":"4742f00f76c4620ae17cd7037b53e038f48459affd8071edc984a0f3eaffa643","sha512":"bc1c31ee2e6b9661fa0569c49c5ece9d2838d73afdf0b33f2fb47cd2800c123f7789185568f39de7c440a69b64e3570df270009997f1461e6489340cdaec8435","ssdeep":"6144:MIeJq2bulKYv9VHDmHYmyBFzfnsiaWdxRZ1:tSbu7llDnsFWdxN","tlshash":"066418cdb3da742683a2a474503f118ba17b69d2f44cc895f186ccd42e74aaa4237f7d","size":320421,"data":"","first_seen":"2026-01-03T16:34:36.474055Z","last_seen":"2026-01-03T16:34:36.474055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cbf9a702bab1669ab74e045262a1312b","sha1":"921ae968e7fd450a96417b3663de87852fbc5fb6","sha256":"0a996ceb9cb59dd57b7e749850d8a020ff1bc9daad4ae8b2488186446f057479","sha512":"4165ddb3e3553c0f9ba579ca7017f5656a9c0cc81a069ab0107a5204d35e62aeaecba565d5173beb8e1965ae8eabbef47e04873422721b67b07d70dca7176660","ssdeep":"384:vDbSlvjgR6DcHiixu034cEo6naeLk6NuD1xNuVP/Q7:/K7gwwe034czQaeoB5xNuJk","tlshash":"fea2c68cf6e1f16d92b6a4b4006f111df6b67811da08281cf151c6d86e70e9d90abffe","size":22919,"data":"","first_seen":"2025-12-14T13:12:03.315334Z","last_seen":"2026-01-07T13:19:12.526415Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster_011","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c159e948d0dffa35c9fa1b2f57e2ad9","sha1":"d41386efc96b16ecfc3084773de1948a0ff82c82","sha256":"e8d10f795b22263c50a3befe98f0e0abfe14bcb696997504215c4736f4fe4813","sha512":"c9851977c0a35ac53673e07b6dbfe4ebc107286d5c0e1b9ac6083931be392fa7ddda8129118c4af4e603be6c589ec76ef16deac875d47e70bf853a97b259e7e5","ssdeep":"","tlshash":"dfe0ab299ce706384cf63a841038ca3930f83ca0aaa3d067925cc86ccd39fc50c10aed","size":424,"data":"","first_seen":"2024-01-29T00:33:00Z","last_seen":"2026-01-25T20:45:26.450454Z","times_seen":509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","size":849529,"data":"","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-05-04T11:01:24.318309Z","times_seen":49447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","size":17879,"data":"","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-05-09T14:42:05.605372Z","times_seen":6699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-09T15:32:36.045447Z","times_seen":331395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster_011","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51184ec34afc7805084a44c1c22a8563","sha1":"bedad06bd3d2357c4e8c94f7050326074d89bc8d","sha256":"b3e9ca41264450af2fcd077280d87b2ae968fc1c0fb315f043a65e92c3ed63dd","sha512":"4850fd93c43842c74cca8a643a159774a6b673c389c3f4736a72c0962c1992ef78d8475b846f547c46f8a4271cfdd128dcb5e9ca7a097f4eefc5780b9ad9c793","ssdeep":"","tlshash":"490149b839f7105107b22329c6df5140f130f35b6c5acd4eb89c97964fb1668b5ca64c","size":768,"data":"","first_seen":"2023-10-14T22:14:02Z","last_seen":"2026-05-07T05:23:28.272808Z","times_seen":687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster_011","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73497a37c3561adbd8ce84e4f017b368","sha1":"9193ae73cb3dd2833be8c942714d5544bfb628c9","sha256":"9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351","sha512":"b265a65f30fa9ffac3fb7ffca07326823466dcd67a238a47091a497c7f2b2d13e09603cbb8e85dce136efeb8bbb9d246e4894d6f672dededc47c88a1a85d9a5b","ssdeep":"","tlshash":"c150000003000003030c0000c000000000000003000030c000c0000000000000000000","size":9,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-05-09T13:03:28.826152Z","times_seen":5469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","size":849529,"data":"","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-05-04T11:01:24.318309Z","times_seen":49447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"497770a2ab62f2aa5e9a92139301634d","sha1":"49c10647ffe35e24f84f743006f162ff0fe16399","sha256":"0663d282ac18b3e9d3e81725926a5310e5cae5e6954873f09b7ee193136fb5e4","sha512":"94a5141ed28656c5873a486aebfdda52790c8517426987bf905bf3c44163a25932ab17ac498215ddbea8e0e9887a8dabe6ed80acc950c993bdc61ecf977724b9","ssdeep":"","tlshash":"06a001b2053584208e6299509553bac4e187605dfd81819470265a89f3e15e7d144940","size":72,"data":"","first_seen":"2023-03-07T01:11:36Z","last_seen":"2026-05-09T14:33:20.865116Z","times_seen":23472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4bdbb487475b3e6bb2edeb30f3c16e92","sha1":"76f4f1ecfe92e127cc0dd93ce60279b99bf2bace","sha256":"9a66353e221e9d6a76dd9c8000dd2f822c6bdf6b8cc7dea367aed6fda6e29fb1","sha512":"770d30aaf19f48b48cd679c33d17e69d0c2d3ca92eec5bf38fc397c4530a8f489d0dc2086d8e5bac383ab1ea8c840ec307f872612cdabf27cfae3844aa6fa8e3","ssdeep":"","tlshash":"23a0220c0e30ca30002a2082a00a00a80e20200000e00f002ab080830b28cbc00330ef","size":62,"data":"","first_seen":"2025-12-10T10:56:06.864317Z","last_seen":"2026-01-20T21:14:28.954464Z","times_seen":19435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster_011","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cf6f85d4fd22db7db674d7afc2b6aef","sha1":"714de681854c07465e640b1e31d74a76fa2636d0","sha256":"8605dc71537232a4f8fb99355bc1c64fe756bb91ae3ad910e3b031a85f2879d8","sha512":"626e1893955f263d54e8067c48e391b73e3da0dfd3ba1c1ec18de2a9cbf4bfa38eef682e13df733d4180b2fd6d5b655d11201ef24384af1ec88d3b79cf3092e1","ssdeep":"","tlshash":"6dc08038b5245424009d489e7277d75cfcf311987d925453c85fce5c5870ed50865cb4","size":176,"data":"","first_seen":"2023-03-26T09:44:15Z","last_seen":"2026-01-25T20:45:26.43665Z","times_seen":727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/js/script.min.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c977f00919d1eb2e57a7f0fd3bd884b","sha1":"b09601a36fa50e61ce9d6ac0a34c6a894a8f81c8","sha256":"5619e29a6688312b15a2cc2d693083dd00198691b1a3918b64dee75c9eeef7c9","sha512":"f22ddcb1b2fffb6b5ac4f3557dabe92ac7c18dc96ab331f610161d82a9791b10f922e62ee378e9e4d456c8575f489b07207007a7ca299ad1a7d3e75c269c9584","ssdeep":"3072:IeeIygP3fulzhsz8jlvaDioQ47GKSDYFtVbmwpcYUpQVJ:IPIy6PultluPQ47GKSAmwpZwQVJ","tlshash":"53241a89b2a1742147ab71f5417f120bf236142ee409842cb56cd9e96fb8d8d623bf7c","size":229719,"data":"","first_seen":"2025-09-16T23:31:20.872491Z","last_seen":"2026-05-07T12:55:03.569882Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81711ae088d412d1312c11684a178389","sha1":"4785941aafa3b539d07a184c02c9d95db1b011d1","sha256":"6ce3dc16fb43a910c77c54cb57ba54c3e7a18961f9780131e265a24386d31fa4","sha512":"dfa555db3c49b010ac5bcf9bc8fbfe819d1a15cc6f9e98b228834c38cbafcd263f6686d5f6f804954cfbca01c95045dd28174258da5a7e3cf10aef9b0fc42084","ssdeep":"","tlshash":"aa11fc721a05f0394f3219d1e2ffcab1e492b01df16885d8a515aa946f79ccbcf04989","size":1088,"data":"","first_seen":"2025-12-17T19:11:41.487555Z","last_seen":"2026-01-08T10:32:55.354193Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"80a136188bec6220b35e6c44d082442d","sha1":"fe79ea5daea6e49b2e4f62e8a0cbe7b9e40e26b7","sha256":"d326e6a29bfc2f2ee08ad87de3db54108581b913b6931baec9af1ff79040ddea","sha512":"91040eed959559277a6ae29faa95dc6925bb0b9de7419b8f969a0f28f51db3a2285c7af01dea2df43c39ce3f311e54357d1c19ac6f26d8344c6541eb73ab76b6","ssdeep":"6144:fhIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:6C8bu7/1mbrnsy39WbMpb","tlshash":"0a941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","size":433531,"data":"","first_seen":"2026-01-03T16:34:36.502437Z","last_seen":"2026-01-03T16:34:36.502437Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","size":849529,"data":"","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-05-04T11:01:24.318309Z","times_seen":49447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster_011","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc29169c13e48228dad8dd361ce8f6b","sha1":"59018ba95e0a67c5babc535649d96573ec30ca3f","sha256":"2fa8aaf793bcef496c761719e35e35ea54b2029e1960efe2d8aa1702ec0d1c68","sha512":"b52961e6d8e02a7bac496c358a9d5f9070cd030dc89ca5a67071904c75bdd8b40f2cffd075dd2c7b4e9baf38014b914cb7f5419343d3363f4c437a3495f5477a","ssdeep":"","tlshash":"6421113da65de8f22f5080a87540b8d2daa01326f71d1a4bc5a85d2e0bcb5d9420bc59","size":1180,"data":"","first_seen":"2025-10-06T16:48:10.452124Z","last_seen":"2026-05-03T19:36:55.253763Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a31c3faa7f070bea0dfcd135efc91335","sha1":"2c0a419826c5438ac8e96f10b597224c4d8601f9","sha256":"e07765ac0698cb214ef4df8056a9f69df72a0f904321d110a37222a4a7532f9a","sha512":"92c78fcd89ec97d1ec6b73a825c4e22fd53411ade7216fa3421c5ea77b5652348be64c295e7ff6e743da11c18e64c8e659e32ac6b93bfe5cf9d31f5906e0a9a0","ssdeep":"384:nDBSlvjgR6DcHiixu034cEo6naeLk6NuD1xNuV7/QD:NK7gwwe034czQaeoB5xNuVo","tlshash":"f892c6cc3ae1f16d82b7a4b4046f111df6ba39115a08280cf151c6d86e74e9d90abffe","size":19698,"data":"","first_seen":"2025-12-10T10:56:06.863546Z","last_seen":"2026-01-20T21:14:28.959026Z","times_seen":19421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/js/ads.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7e54b2d6fc22c0022b88b7125cbe03","sha1":"236c6e87760ac733a938cb1897d3a7cb6fc5c86c","sha256":"519204a7ecc3dc77ded647aa00567d6bf8c587049f389b1936914f7fab44c6fa","sha512":"9a1eaeb2af891a8b3b0ea6f02350e356371541154841b650a641533e89b254a1f357912b832209e5ea44ab99affbbd12fcedc7cbdaff7d1a0ee7b92e2715f4a6","ssdeep":"","tlshash":"9ed02273187812b40a2e25cb50f99b943e332190f29318ac4cfcce29832cc804836ec3","size":218,"data":"","first_seen":"2023-09-09T21:18:47Z","last_seen":"2026-05-09T04:07:35.403747Z","times_seen":488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34gjfm75zhp78.cloudfront.net/?mfjgd=792297","fqdn":"d34gjfm75zhp78.cloudfront.net","domain":"d34gjfm75zhp78.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.169","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"31f76ac44ba50f9d45cef5edba4c177a","sha1":"c9070714eb5cc36c0fd5b572c3302ff79f6326f8","sha256":"c1ab505339cdcc8a7b72a1ed1eb9b6038cdfa0cdf6bac96169dc70af302979f9","sha512":"29ed4e66a3171398e92cb1a7ad40e02517df4dc325faf0ab2e574c4af6a798583463b05bfd823d1c2727a0be22c780b93242199776bb9af5bfae6641ad381f71","ssdeep":"3072:XBUNP5+Ya/06R42Da7oV6+53UOng7L9vN9U+Zc53+Zc0M8ER:XuNR+t/06G2D02wZU3+iAo","tlshash":"1c344cc9ba923429836374f540bf124ab23f5a69b8084dd4f496d4d07db8d4a437bfac","size":232337,"data":"","first_seen":"2026-01-03T16:34:36.557416Z","last_seen":"2026-01-03T16:34:36.557416Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homeeshbecom.org/SmI2R2UrAFUqWitfVGEQOA4LYlcMRwQBAXlWUS0DJ1UDPQ06VQ5pBiYNQyMDOA1YM0skB0JiVwwoUgAzITVdJD0JBVl/AAsjewYiLhViEQEdOwUFNgwwb2JXDCtjLDIOIVEyIi1WfBdXITp1FlV/LnAONQwYYzcnDAVnAwwPBnctVX4nQRYdBjBwLyQIWncdVi4xdRYweitzKyELNmcsNhwwdQgcBzVhASdyL0EWLg5QVTQhGBV6CyYLJXIWBm9QcB40DydhEwYlJlEwLAQLbBUzMyhAJjAYI2AqFTwjQTAuGgtRAyMhJFkjHSUwZxANeTBgES4rD3wPL3pPcCgBPS97BAgyGGMRPCcEBREgAjR8MjwhAVgWMiJRdC8rCANnHSMcDnR3AXtTdxEIJQVzFjwaLGENIgNTbDYBITBgETI6UGMRAR8ydXMiCyN/djV7JG4OCD5SZwIRHwRyDS8cIxAtFiUMRnoRHgRfIDwoNkYTLAE","fqdn":"homeeshbecom.org","domain":"homeeshbecom.org","tld":"org"},"ip":{"addr":"3.164.240.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a2aa85d106262be1b0f966d57dd3316","sha1":"2ddeb3f1b86bf32fd220364ab8b64cae7aa50cb6","sha256":"2c780638db3641eb3695131a4d412b42bcea206175235a0ab86861b70cce7c0d","sha512":"ca1d9ce0de85edb635494a53aa51827fbcdea8e708027451d6140e4d4184535308ee3113a35dfe999f980079d21ebecc9bc02f10920a2db0d4febb27d52a073f","ssdeep":"","tlshash":"7a510e8e30f3b0c282f2a025457bb59afa385a91834cde14863d96bcbd715e96357f0c","size":2998,"data":"","first_seen":"2026-01-03T16:34:36.607826Z","last_seen":"2026-01-03T16:34:36.607826Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/5775069","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"172.67.205.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe11e50e0976437bdbe0de831bae88c7","sha1":"b085db578cc917314def9b252cb8f347869a7fe4","sha256":"d4054bfa71f4af2747598393000e337a0bd66965304aa7eaf96f54475e72141b","sha512":"8d783e653228e78d5c0d51b7b1b4b6e83cb83366cc1f55a670f160b2c3eee19e62e7a8270a0bad763bba24f70873b3dac31bce13eb43f2f27d3e7be60f4b8088","ssdeep":"3072:FPV6Wtgjm0jmyFIJHAFIrD+rUXqEkVTAg4fbut6Aq6/2DRaTIJyk9hc2VzBnqM:VV6pjm0jmy6AsPXqE0hMb76/2DRaMAkH","tlshash":"d9f3e988b192b1552d636534322fd14eb59bdb20584e4a80d0dae1b27f370afd377ee8","size":167887,"data":"","first_seen":"2025-12-12T14:03:36.47737Z","last_seen":"2026-01-12T04:15:31.336732Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"368447d079bd6786c29a8324096f87ab","sha1":"60168ee76733f23d3df4c112d289e6663367f973","sha256":"9ef636a7d5350f3bfc49cf81767b152b0502a743e49a215f43971983ff28788f","sha512":"8b91ad341ac02b8ecfea56109f1bfbbab6451c5002c2b94a6c3683758700b878484a7e7a10031fbfee6298afc0edbe50e7a771e764059b468b885642405288be","ssdeep":"","tlshash":"767000082c08a820202ab03800cb000a202a02a200020202a00022882c3c02e000288c","size":22,"data":"","first_seen":"2025-12-10T10:56:06.868347Z","last_seen":"2026-01-20T21:14:28.953887Z","times_seen":19435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-2.2.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-09T15:23:46.839754Z","times_seen":277538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2cbfc190ab6c48dce4a0c1144bed4b89","sha1":"939ce956431baf5a1baa979023480395adb44677","sha256":"b12dc152e4c63519d2bf01cb2e4886043b4a0dcd42b774427c9c8adb96dce73f","sha512":"e7e6eb9cc0e47702f2611ca7b7d927e789729d8c47b56e6e35f80d166d75005a690608ec193ac4c81b138304efc3dd7542f826cad50f85ab00160f8014d4e48a","ssdeep":"1536:bSRUnYQ9PJhRsagY+r21Bof+oPalpgmmZdMEqWUC:jhJrEY+rGi+oPalpgmS","tlshash":"e573cf2fa78770efdfbe9b002ad2dbd61279945a554709c816bb01c24c2cdde67a80dc","size":74235,"data":"","first_seen":"2026-01-03T16:34:36.614586Z","last_seen":"2026-01-03T16:34:36.614586Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1648ffb33ce66c1dce6b100fb73c7c63","sha1":"61574351b5733c57872898265a6dd39558ab3a68","sha256":"75cc6262bd210f440be1ca9365604501866618ad4078ba5ece982c9c616138c3","sha512":"9bd1293710fd96eb2b379a0ff158870216879fc8fc5e774f20c7d86f4b71cccff51807f621d6076cfe928b1526e92fb563584005fdbe71ee1411fc13c2f562f7","ssdeep":"","tlshash":"8d7000082c08a820202a3038008bc00a202a020200020c02a00822880cb802e0802a8e","size":22,"data":"","first_seen":"2025-12-10T10:56:06.867552Z","last_seen":"2026-01-20T21:14:28.949715Z","times_seen":19439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","size":849529,"data":"","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-05-04T11:01:24.318309Z","times_seen":49447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-09T15:17:17.168354Z","times_seen":104736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster_011","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e47b957b5bfb6afe476c10feb2518c6e","sha1":"c5a2fff9c3717a41e0474a853d5cbbaf8ff0818a","sha256":"949ddb39192218706ef99abf441d6a5ddf7a6f69d093fe12a0d81b956516e11f","sha512":"0186ffc3786970eb68b10839fca21b64ee35314484e795f028cef433e759bc81208dfcdf3894618eff115decce138d20e579cedbc029a91823ae45f8dffa2449","ssdeep":"","tlshash":"9ee028de74511c7570ed05f633b1a1187183560cb8091c22cdfdcd1428285d74c134cc","size":341,"data":"","first_seen":"2024-02-01T23:09:53Z","last_seen":"2026-05-03T19:36:55.249714Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster_011","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e82f1e9f9f11642f57928c133254d46","sha1":"8081b6d8caac03e0cb9baa3b47a533ef15bbe4a1","sha256":"bd445588497980e8d05916507c7c4df59d0233242a35887c2a6dc8deeff2606c","sha512":"ed43eebd246bf235bf0bd99482461f735392b7fff46bac17bbdbeaeaeb9ebfc486218d3135032a6ca8033bc55ddfced2eafa348087270c1740be319a577b5374","ssdeep":"","tlshash":"f1b012ca0080100631f131a16f03b308346310f70c0c610055408b303b6831fda3bac4","size":94,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-05-09T01:57:38.490755Z","times_seen":1522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b57455c9a0032c8d67868882258a4a19","sha1":"017f1d5e957af25bc7ee498e8e6104da00835773","sha256":"1aa296f8312ecf0d0959f759affc2850e1ed52b321033a51355cc1f37fd5dc89","sha512":"24db4575be8e92cfb7b408e04e6bee7cc5257a22b46488a3f4e9a8dbc05f75c3f4a465fea59e4ea866c1a9f3afb145f50b60fb5969a61ef7c466d572a7197e57","ssdeep":"","tlshash":"581165731a04f0350b3209d1e1ffc7b5e482b01cf12845dca511ea842f79ccbce04589","size":1017,"data":"","first_seen":"2025-12-15T23:56:17.122996Z","last_seen":"2026-01-20T22:35:06.74886Z","times_seen":7485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5ImxW9zpN78rQ23Vgg_gWtcRywDa9DMzX52mHU7lhG-rYmvtrUHqksp2fexBj8sWQ2ASUvXJbwOx0TR0F4mfia1IyK2Q","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"497770a2ab62f2aa5e9a92139301634d","sha1":"49c10647ffe35e24f84f743006f162ff0fe16399","sha256":"0663d282ac18b3e9d3e81725926a5310e5cae5e6954873f09b7ee193136fb5e4","sha512":"94a5141ed28656c5873a486aebfdda52790c8517426987bf905bf3c44163a25932ab17ac498215ddbea8e0e9887a8dabe6ed80acc950c993bdc61ecf977724b9","ssdeep":"","tlshash":"06a001b2053584208e6299509553bac4e187605dfd81819470265a89f3e15e7d144940","size":72,"data":"","first_seen":"2023-03-07T01:11:36Z","last_seen":"2026-05-09T14:33:20.865116Z","times_seen":23472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5ImxW9zpN78rQ23Vgg_gWtcRywDa9DMzX52mHU7lhG-rYmvtrUHqksp2fexBj8sWQ2ASUvXJbwOx0TR0F4mfia1IyK2Q","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"380e20f6cc8c74f3ef1d2c1b306c9952","sha1":"9ea76a4fe0b1fb77f2a7b18d984b3606974a46a8","sha256":"7d6536095cc0ee2d01edf213055329091d85d1578d01163b5bc1ef1044b26a72","sha512":"a2394d811b01b55a80a90a88ec2a27b696578b4f468c4f7f5861d006794539b0867d0c94e830e8dd48c5a31341069a0be654943e77b656e1f3823e4cd96bbe59","ssdeep":"","tlshash":"cad022a3a6061cf75c26ac304876005a6c880823a02387fcbace7dc5afb0e017a00974","size":219,"data":"","first_seen":"2025-08-28T10:01:59.050539Z","last_seen":"2026-05-03T22:35:04.03067Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/fonts/fontawesome-webfont.woff2","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /modern_theme/build/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/modern_theme/build/css/styles.min.css?ver=6.6.4\r\nCookie: lang=en_US; AppSession=790a577de093ecf11d20dba9de6b332f; refXhamster_011=ZTM2ODlhMWU1YmU4MTI3MWQyNmZkNDQyNmM3OTk3YzZhNmI3NzhkNTM0NWUxNWYxNDU0NmYwMGQ2YWEyZWFkOUDGwVlUO%2F%2BNNcL5RdJPUYtXcpuh%2F7U0WZ5svlClQkUB; csrfToken=06159de78e2ec13409fe507987d8d8fd88fb4b0eb6b0e317124de0849310884ed0f65791a8e0104b04f98a754fa57d5b4418eed3c5501b9b408a21228d55adc3; app_visitor=Q2FrZQ%3D%3D.ZTMxMDMzYjhiNjgwOTAxYTM1MjJkZjYyNjNkYzgzZjY1MTU3ZmM1NmMzNWRkZjQ4Y2VlNTMyMmU3MDM3MTM2NJ8fKH7sB6SRPAsw0BZbQ73tn3JX0upsYOVivASU3IvefB8A87bt6%2B8dYjZkYS8p7fBxWzmTa1Y3k0pLuLYTaY3ivoQSEtphxLKM3uFzpYCY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\npriority: u=4,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"12d68-63ec26415ef07\"\r\naccept-ranges: bytes\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6vlCJWTgrZmCuufTd2orDxm4cY8tlM5V09d9XqR9cQhyaw5r1JRNJ3xd2XBIcqxLviqoBJQp3pfVfw3%2Bp9vcIKTLRq0rw3LMHPTLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83e6c86cb256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-05-09T15:27:51.726927Z","times_seen":460468,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Jan 2026 00:42:30 GMT\r\nexpires: Sat, 02 Jan 2027 00:42:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 143494\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-05-09T15:39:35.539364Z","times_seen":392538,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":37,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S555799676:1767458044675637\u0026ifkv=Ac2yZaUOfP_v8Lm6nAKgldxy8ZPg3b4yICjAiogYoVkxh2qtrl-zzkhq9-fAM7LoC6qbSLzOkRxMrA","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:21 GMT","end":"Wed, 25 Feb 2026 15:57:20 GMT"},"fingerprint":{"sha1":"D5:E1:28:04:A2:5B:9C:21:BA:4A:37:C4:BB:E4:7D:93:53:75:26:02","sha256":"11:38:E4:46:CD:40:CF:56:D7:CE:A5:4A:87:26:DF:58:92:54:80:79:8D:FE:8D:33:0E:9D:5E:53:C9:19:6C:20"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S555799676:1767458044675637\u0026ifkv=Ac2yZaUOfP_v8Lm6nAKgldxy8ZPg3b4yICjAiogYoVkxh2qtrl-zzkhq9-fAM7LoC6qbSLzOkRxMrA HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:494MEHs6zroitlh7J3uwRdGkuwL9LQ:sMviN3zjTbJLwhrp;Path=/;Expires=Mon, 03-Jan-2028 16:34:04 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S555799676%3A1767458044675637\u0026hl=en\u0026ifkv=Ac2yZaU5hTBzm6njKi6KR4MgRsl7XmSX4yyBEImvID1zOpHFO1HkQ6uoDVm79TnTZTqkWju7z1e8ew\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-fpsR2JwimRQwXKCisl1HXQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 415\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:06.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:46 GMT","end":"Wed, 25 Feb 2026 15:53:45 GMT"},"fingerprint":{"sha1":"42:8E:23:9C:33:58:89:3C:52:72:60:A6:59:3A:49:6B:6C:33:8A:CB","sha256":"83:AB:3D:79:FE:90:7F:F5:54:1E:59:8B:29:1B:C6:62:E9:48:61:48:EF:9A:89:C6:3D:60:AF:AF:7F:0A:89:A8"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 03 Jan 2026 16:34:06 GMT\r\ncontent-security-policy: script-src 'nonce-TlFtgTtAnPkqgeGiAxaidw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92584,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47209)","md5":"2f1ab267b790a2e1fb7a6c9902a4fd9e","sha1":"68d41485202f45665f9b9ddfb379dce02bbf6c0f","sha256":"f598ffc9b0cf8618c297ba3d8b2f87cd2b0aec3cbc25cd781059b9ea9753927b","sha512":"54f293423529fe7793886882ea1a7f2e82f3aa68469ca50b3f0b3cbbf57e72bd55464a8965f342a078bdad4a42df5a4b8ac3d2895d3b81303aecfd28fb41e933","ssdeep":"1536:y+k1vIoeSRUnYQ9PJhRsagY+r21Bof+oPalpgmmZdMEqWUZ:y+k1shJrEY+rGi+oPalpgmJ","tlshash":"0493bf164547708adfeb8e8127caefb1f23e9015614244e427ff07979caec9b52682dc","first_seen":"2026-01-03T16:34:36.454092Z","last_seen":"2026-01-03T16:34:36.454092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:06.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 06:43:47 GMT","end":"Mon, 09 Feb 2026 07:38:46 GMT"},"fingerprint":{"sha1":"D5:38:99:61:B8:EA:99:50:AE:A6:42:89:19:46:3D:27:F6:80:AE:53","sha256":"EB:AA:B8:24:FF:C4:D3:0A:D8:6E:81:A6:73:F2:98:E7:69:A1:0F:95:6F:52:21:C6:59:D5:A0:26:AD:55:F8:CC"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 16:34:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4%2Fxnft3N8AzBBrx3%2F0vDa%2FN2Qhwe5nx9WJtsyEJu4sGZmwPdV5NgHcDRW2FGrhnN4F0KJN3dmZ7zkj2W6Z6KPMWI6p6Hi7Ivw%3D%3D\"}]}\r\nage: 1126\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2be-45d7\"\r\ncontent-encoding: br\r\ncf-ray: 9b83e6d59e8f56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17229)","md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-05-09T14:42:05.605372Z","times_seen":6699,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","date":"2026-01-03T16:34:06.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42555\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 09:30:09 GMT\r\nexpires: Wed, 30 Dec 2026 09:30:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371037\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1e1e7ef5663f5b92b4516b94446dde2c","sha1":"e986dbaced4170ab6fd5852aa806ba6ed1e8cc14","sha256":"f71a14f41c5875c258dcece1dddf55d50a26b8e5bfb626ea07b948551f40fcad","sha512":"5ef4991a1755e9cdc4d2497050219de08745fb473b7d945f52abf572ae921472a64cba48a5bcd590a0ed63f3f4ae9c456d77db584b8637b65b03a5b45fe5c7f8","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOImIdthXwW5l1Dx7:1GRFauOxLA/+IcTOuLX1","tlshash":"dc838e7338513b39fc2b9b616186b9edf21cc423e5514bfab5497a20c3db19a8253b07","first_seen":"2025-12-11T19:34:34.541785Z","last_seen":"2026-05-05T20:37:11.136107Z","times_seen":44148,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"104.21.68.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 14:41:35 GMT","end":"Sat, 21 Mar 2026 15:38:12 GMT"},"fingerprint":{"sha1":"F5:49:6B:45:9A:B4:87:30:F2:34:12:BC:49:A1:48:31:A2:B6:9B:7F","sha256":"55:CC:57:AE:F5:9A:5C:FB:E7:85:83:CD:13:37:E9:19:A2:79:01:68:7B:D7:7F:4B:80:61:9B:7D:C8:9A:17:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: csu=1125474125139396@1@1767458044; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0WVdEnGq0JQb6YM0eslq1gmTh%2Brwn4fhQUP3T6Ti62p%2FJS2uj7uK8ekBPwa2KOZ%2F83sFgp8dreNzmccUFlkW6VbmlMfp3Qxp5h0%2FNXOTfJ0%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b83e6ca787e0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"c703e7d2b1e433295dc04c18401f1498","sha1":"7f836e5e92b9c7daf0fb9e504d1d0b095fd37b00","sha256":"5d03c07be63f913caadc62d28330105c6bf1d3d4257018fd3c7ef6803d54fb46","sha512":"42dbced018f47147d4231c1cd875366c1380bf2ba55032ec0c9c2f42fa2bb61d654d838b34f14f644a97c5800ef38fe8ce9089759415c8a11c71fb2bb6604d73","ssdeep":"","tlshash":"16800080be3888a0a0883e2002bcb2288888000e8c8c320200c00a082b3a0000000200","first_seen":"2026-01-03T16:34:36.465438Z","last_seen":"2026-01-03T16:34:36.465438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":130,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1378582859%3A1767458044655500\u0026hl=en\u0026ifkv=Ac2yZaUtM2ic7BB1_Xnw_gOssXh2eb-Xba7OuHGFQyMH-WkbirzDt3vbvin1kw0t2FWKB_gPfqo-8A\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1378582859%3A1767458044655500\u0026hl=en\u0026ifkv=Ac2yZaUtM2ic7BB1_Xnw_gOssXh2eb-Xba7OuHGFQyMH-WkbirzDt3vbvin1kw0t2FWKB_gPfqo-8A\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-XSne1sx6eQptUpdGRrktOw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.jam3aJYHpRA.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5ImxW9zpN78rQ23Vgg_gWtcRywDa9DMzX52mHU7lhG-rYmvtrUHqksp2fexBj8sWQ2ASUvXJbwOx0TR0F4mfia1IyK2Q","date":"2026-01-03T16:34:07.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 362552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 09:14:45 GMT\r\nexpires: Wed, 30 Dec 2026 09:14:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371962\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":849529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-05-04T11:01:24.318309Z","times_seen":49447,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1378582859:1767458044655500\u0026ifkv=Ac2yZaWuq1J1CT9WR0PM7aWrUt9qRxrIJwelEMKBB5XRRbJi0jlBdQ8jyJA2RNCUbt-7kCu8FjQQlw","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:21 GMT","end":"Wed, 25 Feb 2026 15:57:20 GMT"},"fingerprint":{"sha1":"D5:E1:28:04:A2:5B:9C:21:BA:4A:37:C4:BB:E4:7D:93:53:75:26:02","sha256":"11:38:E4:46:CD:40:CF:56:D7:CE:A5:4A:87:26:DF:58:92:54:80:79:8D:FE:8D:33:0E:9D:5E:53:C9:19:6C:20"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1378582859:1767458044655500\u0026ifkv=Ac2yZaWuq1J1CT9WR0PM7aWrUt9qRxrIJwelEMKBB5XRRbJi0jlBdQ8jyJA2RNCUbt-7kCu8FjQQlw HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:BwfDrKVdloyXKfo9L9Qm3AHgZ0k08Q:6hs67QC0phhlOC8m;Path=/;Expires=Mon, 03-Jan-2028 16:34:04 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1378582859%3A1767458044655500\u0026hl=en\u0026ifkv=Ac2yZaUtM2ic7BB1_Xnw_gOssXh2eb-Xba7OuHGFQyMH-WkbirzDt3vbvin1kw0t2FWKB_gPfqo-8A\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: script-src 'nonce-fpc9DyHdtHOlxgivO4OxWg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 418\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S555799676%3A1767458044675637\u0026hl=en\u0026ifkv=Ac2yZaU5hTBzm6njKi6KR4MgRsl7XmSX4yyBEImvID1zOpHFO1HkQ6uoDVm79TnTZTqkWju7z1e8ew\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S555799676%3A1767458044675637\u0026hl=en\u0026ifkv=Ac2yZaU5hTBzm6njKi6KR4MgRsl7XmSX4yyBEImvID1zOpHFO1HkQ6uoDVm79TnTZTqkWju7z1e8ew\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shrinkme.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy: script-src 'nonce-zuu2J5sayFSU599p8Cje5A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.jam3aJYHpRA.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5Q2KMLS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:05.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtm.js?id=GTM-5Q2KMLS HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 03 Jan 2026 16:34:05 GMT\r\nexpires: Sat, 03 Jan 2026 16:34:05 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 03 Jan 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 108588\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":320421,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5340)","md5":"d402d3e291b34d55bd44601818b0075b","sha1":"5300a09b08bc6905e4a954d218b5092623da48fb","sha256":"4742f00f76c4620ae17cd7037b53e038f48459affd8071edc984a0f3eaffa643","sha512":"bc1c31ee2e6b9661fa0569c49c5ece9d2838d73afdf0b33f2fb47cd2800c123f7789185568f39de7c440a69b64e3570df270009997f1461e6489340cdaec8435","ssdeep":"6144:MIeJq2bulKYv9VHDmHYmyBFzfnsiaWdxRZ1:tSbu7llDnsFWdxN","tlshash":"066418cdb3da742683a2a474503f118ba17b69d2f44cc895f186ccd42e74aaa4237f7d","first_seen":"2026-01-03T16:34:36.474055Z","last_seen":"2026-01-03T16:34:36.474055Z","times_seen":1,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":109,"dns":5,"connect":20,"send":0,"wait":48,"receive":50,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/401/5775069?oo=1\u0026sw_version=v1.770.0-s\u0026oaid=0802b3ed36764312fecfb8c8e3926524\u0026st=true","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:06.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"POST /401/5775069?oo=1\u0026sw_version=v1.770.0-s\u0026oaid=0802b3ed36764312fecfb8c8e3926524\u0026st=true HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3407\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3407,"data":"{\"sync\":\"TBtSUh8cJhwUBWcfHEsSAwEFUA5MXwMBbAIlKz9KWUBcHAtKQ1AVSQZbGgxbGwkEVkYLASoQTktDCFFYQkkARB5PDQwGGlgQAwdXWAhFW04WNRkDLUMHGmhOWl4lEwE3AhtnAAFmFgwNNAFVBjJEUWxFDTsKCQI9Wx4mWglIVFpeFhoeaF1WQh8HDQ0RQAJZVRsLGRsKUA5eQRVXQ2kKAFtSRk4aARBVQ1BfX0YYTBheXREMSkhbDAcEGlNJFUMaAklIBEJPWV4RDEpIWxwPQAJYQRVDBAxJSAVCT1lYQxRAVVVKBRYaU0kVQw8YCh4WVF0bG1tVWF5IRFcGVUtDCE1IHB8GFlRdGxtQXiULGwJXWAhFW1cWNRkPUA5eQRVWQFUKEVtSRU4aARBdBQ8ASUgFQk9UUWxZGA4mARsGXRFbA1FGTBwbWjEGUkBAaRYBFw8BChpTSBVDCQEHHUYxCVJJR15YXklEVxRdBx1WE0hUW14WCQxaXENXHhdbUkROGgcVZg8GHUlIBUJPVFZfWQg7HgkYF0xLQwtNSB4NHhZUXBsbUEUTRkNYWUBbBQ0bW1pCSRhHHk8NCR8UCgoNSk9TFEsJVxMJTFFDGEwdW1hHUBUWFDcRB0wMGk0OGExRRBhMA1JKEQxIXQREVxBRS0MbDQYYBgJdHggVFRFEDEZDSjgHSwhbFUMYHhtQDl1BFU1JWVheSURXFU9LQwhTUl5HUEMGTw0IAwROSFsfHBUaU0gLWVpCSQVdBk8NCAMETkhbHw1AAllVGxYTTFFCGEwETxsJBlZGDg4WQAJYVRsSCwZJSAVeXwMVEUUSRkNZRVAMRVtKFkhUWkAMXkEVSlJBWF5IWk1SFEsNSj4OCx8XVxoIUxsJBlZGExsAAxpTW3QOEAcHHlVBWBkJEx4tDRcMGhVLSTdtQVteRUIPTjpeVwUCQUQBXkFZGBsPA1BZWkVCHU4qUlpYWVVWSVlFUglZSBknAxwOFFsWQgYKBxhKRlVKGxIaU0gVQxoKSUgWBwNDXEFYGwhUGBEEFR8QXBYPHFEbRz4kDFBdQh8WFwkZT0gNHxQXAwscF0ZUBERpeg0TCg0NBwxZBVRJBQxDHRtRGQhFA1pFKi1CARsWXRsXWA1HHg8UGRgEUk5WREANCjg8WVEHDVwTBA8HX0QKCxpPWlMNAQtSHBFoIEIbTUgGAh4WVFwbG0ZfHkZDBgAOVEVbXRMMTFFQFkJPR1URDFgMDRwFEQJGVkoJGAcFGVkLQ1RVWlURSyEAFA9LHRxLPlpfWlAYTANQGwkGVkYNEldYGjwtekNGTAUQFlRcGxtdVwpGQ0oiC1ZaSxtNSB4fUA5eQRVcRVcWRkNbQk4aARobW15WR1BQA08NFAIaWBYNHFdYFVhVGwICMQQQXkxXBxURWA1GQ1lZQE8NWwMHCwIYFxhMAkRaQ0NYXlskHAxNEVlBWVwxXUYWQk9fUFdSHwpbUhMDVBocFUMJBjQdVgQyXldXUwJGQ0VEThoeEFc+AQsSAWsCCFleR15YXktQRE4aChZVDhgxDxdEGgUVAwECVkYPDRsGVxtbA0NIQkkVVQMIR1hXRVheSURXDFRLQxsEBEM+IRZCT1lVQBRARhwGWDdrRRxXQ0ZMCB1YAR9oXlJbDxBbUlcRSg4bG01IHg0eFlRPFRURVRYQW1IOHxRLE0oRSFRaXhYeA0MbCQZWRgkGBwEaU0kVQxoCCgZSAR9aZldTDgEaHBoQGlMCGwgZMQocUBwCXl0RDBwFFRsQThoACmYVGAcPF1oaTw1fUloJAVVKHBFnChFLDgcHHh9rVltoVkFpFAEODQdAAg8YVRIPQkkbRzEOX0tcWxMRFEpPBFkFClxNSAcYLVEKClIbCVAbCAoNWUBRGiZeBAkFBFAOGh9CXB8UExcmHxAAZwIQTUNQCAoeRwtBFVBAaQ0BGzceC0w2TwlXNQEZLVoLGlJLEQwcBRUbEE4aAApmBQ8dAAZbHjJEWFVXCA1bUhMDVBocFUMDHTQRXBwCWlBGWyULCQ0HAxpTH1gNGQsWXhYACEQbCRRLUU9aQVYAWEABQ0ZMCB5dCwNDZlpSWF5bHRsJVgYOV0NGTAoUUgcBXlhHUyUNHUpPQBpFW00TCwgNG1cxHlhMQVUfOxAMV1gaS1UbAA4YDgBABx5SS2xfHkZDSldOGgoYVBELBwwcawcJFQMRFFZGGh0GFlcEJlAFNV9JSBZMQRVaRkUOCxQ3HAZnW1sDQ0hCSRFYBw5cZlpSWF5bSllAWwYKTUNQTEleFgMIQ1FcUlheWwIGFlkOWxVDGDEeG1BMVxUbHxQVBSYBEUACS1sVQwsKDxtABwJZWF9pEwAKSk85ZRQ=\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://shrinkme.click/Xhamster_011\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":1,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:34:06 GMT\r\ncontent-type: application/json\r\nx-trace-id: 6a1c4c7e67241ef66fa1ecbd56a45a84\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=0802b3ed36764312fecfb8c8e3926524; expires=Sun, 03 Jan 2027 16:34:06 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2157,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6c2aa7f3ce5b3c0ad2371591aa12c6ba","sha1":"e5ba690714772d59dfad7e06bbd4153da55e0cc7","sha256":"096d7b20f97fe0e33426ef5c89d81ee387b90d9207556f3193cb5b02d4c3f87b","sha512":"f77b67e33a46253bdeac2365c0e682ed1b1838eaeb820c8bef66074c3aad97d3d95e38e6930d4ea46143ad2d532f63d26b60c07c041cd340bb693f4ba60d10a3","ssdeep":"","tlshash":"fb4126084d28057e82ee5ab6ed076d474bbd162f7a4c752ee7490d1770ebca403eb20b","first_seen":"2026-01-03T16:34:36.478516Z","last_seen":"2026-01-03T16:34:36.478516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":70,"dns":10,"connect":26,"send":0,"wait":31,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","date":"2026-01-03T16:34:06.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 362552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 09:14:45 GMT\r\nexpires: Wed, 30 Dec 2026 09:14:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371961\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":849529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-05-04T11:01:24.318309Z","times_seen":49447,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/cb55f19666b911e02de62e18caa3f521.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:08.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:06:49 GMT","end":"Fri, 13 Feb 2026 10:05:15 GMT"},"fingerprint":{"sha1":"1E:80:62:5B:0A:AE:45:C7:23:30:B5:BA:23:77:27:CF:C7:7E:2B:E5","sha256":"BD:DA:C2:A9:EA:C4:6B:B2:C8:71:38:93:D3:DF:34:10:57:C4:48:46:8C:A2:5E:BE:D1:C5:60:FD:35:71:AA:BE"}}},"request":{"raw":"GET /www/images/cb55f19666b911e02de62e18caa3f521.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 16:34:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 71341\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 20:44:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"692a09c9-116ad\"\r\nexpires: Sun, 04 Jan 2026 09:42:29 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24699\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=40WWRoaBgN33nLB%2F2z6iqZq0d6vn9ftBXYxQlkcjyFisDTkmProPbshLMB2NbUnCztc7BZVOmQQ7HJBFK1NbucFpLf90ZS2JpGYTmjCGCTe1\"}]}\r\ncf-ray: 9b83e6e46c1c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"cb55f19666b911e02de62e18caa3f521","sha1":"cf19977b44f0d54b23db29272766c154fc3fbb8d","sha256":"8b949101d477c1aeac172972ef4f35f7569a9bbff819025b15b5d2f250f5b5ba","sha512":"d3a47fc12cc8f60ec2eacdf6abe66ab6ab81ff08399bc38b30cca3a09db96720f04e06863e32ab7726fd1f8c705c91b3a5be91ba8b78c974ded53b473738d65f","ssdeep":"1536:sehMWBCPglrEjMsK9/MsoYyx9hO7r6XxFAo70wgMeUejiSNc:seOAl4s+//jI7r6XEoAxbjiSNc","tlshash":"63630237f190771eba93309d3672850e7d3d8890ec646ba5da5c6332c7da23d098af09","first_seen":"2025-12-22T18:21:54.393269Z","last_seen":"2026-01-07T16:25:56.096069Z","times_seen":20,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":6,"receive":3,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:03.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xhamster_011\r\nCookie: lang=en_US; AppSession=790a577de093ecf11d20dba9de6b332f; refXhamster_011=ZTM2ODlhMWU1YmU4MTI3MWQyNmZkNDQyNmM3OTk3YzZhNmI3NzhkNTM0NWUxNWYxNDU0NmYwMGQ2YWEyZWFkOUDGwVlUO%2F%2BNNcL5RdJPUYtXcpuh%2F7U0WZ5svlClQkUB; csrfToken=06159de78e2ec13409fe507987d8d8fd88fb4b0eb6b0e317124de0849310884ed0f65791a8e0104b04f98a754fa57d5b4418eed3c5501b9b408a21228d55adc3; app_visitor=Q2FrZQ%3D%3D.ZTMxMDMzYjhiNjgwOTAxYTM1MjJkZjYyNjNkYzgzZjY1MTU3ZmM1NmMzNWRkZjQ4Y2VlNTMyMmU3MDM3MTM2NJ8fKH7sB6SRPAsw0BZbQ73tn3JX0upsYOVivASU3IvefB8A87bt6%2B8dYjZkYS8p7fBxWzmTa1Y3k0pLuLYTaY3ivoQSEtphxLKM3uFzpYCY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 03 Jan 2026 17:22:03 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csIqC5SYvXIC8zQx%2BlL0oLbirtZxDKPg%2BhjBm3swLahqM2gvIzmPrF78xFWeOb6kMPlOU5ks8iWDw2V2Dv90SD2BUSdajt4FeQ6JuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:34:03 GMT\r\ncf-ray: 9b83e6c68c9a56a8-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-09T15:32:36.045447Z","times_seen":331395,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/N2RmRXVWBgUoSlZZBGMARQhbYEdxQVQDEQRQAS8TWlNTPx1HU15rFlsLEyETRQsIMVtZARJgR3ECPAIzYzEMAD1zDlZ1MV8lLwtHDyM+EztfBREpNnI3I3YjBg81Cgx1PSUiGhJWJAsNDywiERpPMw0MOX4gVyMzcRM/Bx5cLCUoLFImJwcnZwo0Az1QMhMcHVQtJwFFBiAjDDBnMCMII2IHHwsZeT4wHSBZMSAuOGcnDhw2dlQfIQJ6DTANRF4iIB8nUh0wHDZQMV4PIH0mM3c4DzYzAyFuVisHJlsiVBwteSYzdzhbMyc1LW1XBQY/XDYOHB5bNzAdWG0MBXUzYz0fBz1mMi8WLEAuNxFHeVMgAy9lKiIhJnMTU3csfwAxECJ9DScTI2U9CCYxYSUFczxxNSUBHENXJzw/Zj0hHBNhIQUoF0AlQC8GWAoWeD5jHAUuQHtRAnUY","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.295Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /N2RmRXVWBgUoSlZZBGMARQhbYEdxQVQDEQRQAS8TWlNTPx1HU15rFlsLEyETRQsIMVtZARJgR3ECPAIzYzEMAD1zDlZ1MV8lLwtHDyM+EztfBREpNnI3I3YjBg81Cgx1PSUiGhJWJAsNDywiERpPMw0MOX4gVyMzcRM/Bx5cLCUoLFImJwcnZwo0Az1QMhMcHVQtJwFFBiAjDDBnMCMII2IHHwsZeT4wHSBZMSAuOGcnDhw2dlQfIQJ6DTANRF4iIB8nUh0wHDZQMV4PIH0mM3c4DzYzAyFuVisHJlsiVBwteSYzdzhbMyc1LW1XBQY/XDYOHB5bNzAdWG0MBXUzYz0fBz1mMi8WLEAuNxFHeVMgAy9lKiIhJnMTU3csfwAxECJ9DScTI2U9CCYxYSUFczxxNSUBHENXJzw/Zj0hHBNhIQUoF0AlQC8GWAoWeD5jHAUuQHtRAnUY HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:21 GMT","end":"Wed, 25 Feb 2026 15:57:20 GMT"},"fingerprint":{"sha1":"D5:E1:28:04:A2:5B:9C:21:BA:4A:37:C4:BB:E4:7D:93:53:75:26:02","sha256":"11:38:E4:46:CD:40:CF:56:D7:CE:A5:4A:87:26:DF:58:92:54:80:79:8D:FE:8D:33:0E:9D:5E:53:C9:19:6C:20"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:NQ3cfU_NA4EUGey12a6707R2ih5qYA:XhqAaCAoWCrvW8lE; Expires=Mon, 03-Jan-2028 16:34:04 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S555799676:1767458044675637\u0026ifkv=Ac2yZaUOfP_v8Lm6nAKgldxy8ZPg3b4yICjAiogYoVkxh2qtrl-zzkhq9-fAM7LoC6qbSLzOkRxMrA\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-usGdMyEtQfvTtVEJWsZkig' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":120,"dns":2,"connect":36,"send":0,"wait":42,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/cb55f19666b911e02de62e18caa3f521.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:12.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:06:49 GMT","end":"Fri, 13 Feb 2026 10:05:15 GMT"},"fingerprint":{"sha1":"1E:80:62:5B:0A:AE:45:C7:23:30:B5:BA:23:77:27:CF:C7:7E:2B:E5","sha256":"BD:DA:C2:A9:EA:C4:6B:B2:C8:71:38:93:D3:DF:34:10:57:C4:48:46:8C:A2:5E:BE:D1:C5:60:FD:35:71:AA:BE"}}},"request":{"raw":"GET /www/images/cb55f19666b911e02de62e18caa3f521.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:34:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 71341\r\nlast-modified: Fri, 28 Nov 2025 20:44:57 GMT\r\npriority: u=4,i=?0\r\netag: \"692a09c9-116ad\"\r\nexpires: Sun, 04 Jan 2026 09:42:29 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24702\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RpW82cyGwkcE2dJCUvGkhpwLOazcjnsSZwn82TPSscuwJwn7z1UtpOkPFZt%2FFKACa1HR5GC7X3wNLUaoK%2Bb0ClNDB%2Fy4Qk%2BXFrYVfq%2FvcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b83e6fcce1356c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"cb55f19666b911e02de62e18caa3f521","sha1":"cf19977b44f0d54b23db29272766c154fc3fbb8d","sha256":"8b949101d477c1aeac172972ef4f35f7569a9bbff819025b15b5d2f250f5b5ba","sha512":"d3a47fc12cc8f60ec2eacdf6abe66ab6ab81ff08399bc38b30cca3a09db96720f04e06863e32ab7726fd1f8c705c91b3a5be91ba8b78c974ded53b473738d65f","ssdeep":"1536:sehMWBCPglrEjMsK9/MsoYyx9hO7r6XxFAo70wgMeUejiSNc:seOAl4s+//jI7r6XEoAxbjiSNc","tlshash":"63630237f190771eba93309d3672850e7d3d8890ec646ba5da5c6332c7da23d098af09","first_seen":"2025-12-22T18:21:54.393269Z","last_seen":"2026-01-07T16:25:56.096069Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:03.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xhamster_011\r\nCookie: lang=en_US; AppSession=790a577de093ecf11d20dba9de6b332f; refXhamster_011=ZTM2ODlhMWU1YmU4MTI3MWQyNmZkNDQyNmM3OTk3YzZhNmI3NzhkNTM0NWUxNWYxNDU0NmYwMGQ2YWEyZWFkOUDGwVlUO%2F%2BNNcL5RdJPUYtXcpuh%2F7U0WZ5svlClQkUB; csrfToken=06159de78e2ec13409fe507987d8d8fd88fb4b0eb6b0e317124de0849310884ed0f65791a8e0104b04f98a754fa57d5b4418eed3c5501b9b408a21228d55adc3; app_visitor=Q2FrZQ%3D%3D.ZTMxMDMzYjhiNjgwOTAxYTM1MjJkZjYyNjNkYzgzZjY1MTU3ZmM1NmMzNWRkZjQ4Y2VlNTMyMmU3MDM3MTM2NJ8fKH7sB6SRPAsw0BZbQ73tn3JX0upsYOVivASU3IvefB8A87bt6%2B8dYjZkYS8p7fBxWzmTa1Y3k0pLuLYTaY3ivoQSEtphxLKM3uFzpYCY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 03 Jan 2026 17:22:03 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=THd5AM6qSWjylRhC%2B3wmi1%2BYT%2F1rH%2FaPRcbnSOIGUwtc%2FgoHtgfcGkEiWIXjzM2nTM56lP%2BIzH3jItUdJ%2FPshwCXSyMTDK09%2BQaNow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:34:03 GMT\r\ncf-ray: 9b83e6c68c9c56a8-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-09T15:17:17.168354Z","times_seen":104736,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homeeshbecom.org/SmI2R2UrAFUqWitfVGEQOA4LYlcMRwQBAXlWUS0DJ1UDPQ06VQ5pBiYNQyMDOA1YM0skB0JiVwwoUgAzITVdJD0JBVl/AAsjewYiLhViEQEdOwUFNgwwb2JXDCtjLDIOIVEyIi1WfBdXITp1FlV/LnAONQwYYzcnDAVnAwwPBnctVX4nQRYdBjBwLyQIWncdVi4xdRYweitzKyELNmcsNhwwdQgcBzVhASdyL0EWLg5QVTQhGBV6CyYLJXIWBm9QcB40DydhEwYlJlEwLAQLbBUzMyhAJjAYI2AqFTwjQTAuGgtRAyMhJFkjHSUwZxANeTBgES4rD3wPL3pPcCgBPS97BAgyGGMRPCcEBREgAjR8MjwhAVgWMiJRdC8rCANnHSMcDnR3AXtTdxEIJQVzFjwaLGENIgNTbDYBITBgETI6UGMRAR8ydXMiCyN/djV7JG4OCD5SZwIRHwRyDS8cIxAtFiUMRnoRHgRfIDwoNkYTLAE","fqdn":"homeeshbecom.org","domain":"homeeshbecom.org","tld":"org"},"ip":{"addr":"3.164.240.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homeeshbecom.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 23 Nov 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6C:14:7D:3E:F3:9A:2B:05:D9:DB:8A:C1:6E:55:13:ED:69:F5:FC:34","sha256":"0E:50:BD:95:D3:FA:3E:1E:33:81:FB:BB:40:F3:F1:1F:7D:BF:2A:C2:0B:CC:1C:7F:F8:66:80:CB:3B:CB:88:3B"}}},"request":{"raw":"GET /SmI2R2UrAFUqWitfVGEQOA4LYlcMRwQBAXlWUS0DJ1UDPQ06VQ5pBiYNQyMDOA1YM0skB0JiVwwoUgAzITVdJD0JBVl/AAsjewYiLhViEQEdOwUFNgwwb2JXDCtjLDIOIVEyIi1WfBdXITp1FlV/LnAONQwYYzcnDAVnAwwPBnctVX4nQRYdBjBwLyQIWncdVi4xdRYweitzKyELNmcsNhwwdQgcBzVhASdyL0EWLg5QVTQhGBV6CyYLJXIWBm9QcB40DydhEwYlJlEwLAQLbBUzMyhAJjAYI2AqFTwjQTAuGgtRAyMhJFkjHSUwZxANeTBgES4rD3wPL3pPcCgBPS97BAgyGGMRPCcEBREgAjR8MjwhAVgWMiJRdC8rCANnHSMcDnR3AXtTdxEIJQVzFjwaLGENIgNTbDYBITBgETI6UGMRAR8ydXMiCyN/djV7JG4OCD5SZwIRHwRyDS8cIxAtFiUMRnoRHgRfIDwoNkYTLAE HTTP/1.1\r\nHost: homeeshbecom.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1216\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 575a0c6f16652571820285002db8b856.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: YHzdYywUA6X3WGRjjfBLRO34QMFXzAFAquyg_R2wtkWlpvU6iSO84Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3069,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3069), with no line terminators","md5":"033afa923a0043fcf0ed08b504b3421b","sha1":"acfb26e9e555b32fbb254735bef8632eb6361295","sha256":"7246015fa5d5e9ea548ff69030ea43c2a3a22b56e2d94377563fc83571f9335a","sha512":"1574e38e8fb4a76249312af7da4aca7894c670ad730be4045f24ddee878814cda22f283d1b84ef12092f5179328b7639c77ab0075d4a6b193219689fa3a241b8","ssdeep":"","tlshash":"8551119d34f3b082c2f2a064447bb59afa285a91834cdf14863d96bcbd705e96317f4c","first_seen":"2026-01-03T16:34:36.49726Z","last_seen":"2026-01-03T16:34:36.49726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":27,"dns":5,"connect":9,"send":0,"wait":120,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:05.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-YWLL2122G2\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 03 Jan 2026 16:34:05 GMT\r\nexpires: Sat, 03 Jan 2026 16:34:05 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143378\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433531,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"80a136188bec6220b35e6c44d082442d","sha1":"fe79ea5daea6e49b2e4f62e8a0cbe7b9e40e26b7","sha256":"d326e6a29bfc2f2ee08ad87de3db54108581b913b6931baec9af1ff79040ddea","sha512":"91040eed959559277a6ae29faa95dc6925bb0b9de7419b8f969a0f28f51db3a2285c7af01dea2df43c39ce3f311e54357d1c19ac6f26d8344c6541eb73ab76b6","ssdeep":"6144:fhIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:6C8bu7/1mbrnsy39WbMpb","tlshash":"0a941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","first_seen":"2026-01-03T16:34:36.502437Z","last_seen":"2026-01-03T16:34:36.502437Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=05f4830e-22bb-4163-8c7c-4186aa0af8e0","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:06.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=05f4830e-22bb-4163-8c7c-4186aa0af8e0 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1409\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1409,"data":"L\u001bRR\u001f\u001c\u0026\u001c\u0014\u0005g\u001f\u001cK\u0012\u0003\u0001\u0005P\u000eL_\u0003\u000e\u0011\u001aX\u0016\u0010JO@T\u0005\u000fT\u0011\u0003\u001e\u000eP\u0018L\u001fA\u001b\t\u00147\u0001\n\tWN\u001a\u001b\tICP_[^\u0016\u001a\u0017X\u001b\t\u0006VF\u000e\u001fWX\t[A\tMH\u0019\u0003P\u000e_]\u0005\r\u001f\u0014\r\r\u000eJOS\nQI\u0015C\u001d\u0007\u0003P\u000e_]\u0005\r\u001f\u0014\r\u001c[REN\u001a\u001e\u0000\u001b[ZBI\u001bLLW\u0007\u0015\u0011A\u001c\u0007[RGN\u001a\u001a\u0018QCP_[@\u0000BODQ\u0011\fKTK\\Y@K\u001e[\u0003PXV[^\u0016\u001d\f@\u001b\t\u0007H\\IDW\u0016K6\u001d\\\u0015\u000f\r\u001f\u0017PLW\u0007\u0015\u0011\\\t\u0011\u0018JO@u\u0006\u0003P\r\u0006\u000fDG\u001a^M\u001fnZX\u001e\u000b\u000e\u001bU,lIH\tOZUK%]\u0000[\u0003\u0002\u0013NLPBH\u0007\u0014\u0002XJ\rOZGK5Q\r\u0006X\u0016\u0001\u0006KTIYES\u0018/\u0010K\u0004\f\u0001\u0013]\u0005]Y\u0019\t\u0011\u001aX\n\tJOS\u0014K\t]CPL\u0002\u001c@\u000b\u001fYX_\u001b\n\u0000\u001fE\u0003\u000b]\u001e\u001cK[\u0003\u001d;;\u000f\u0007\u0003C\\AX\u001b\bT\u0018\u0011\u0004\u0015\u001f\u0010\\\u0016\u000f\u001cQ\u001bG\u003e$\fP]B\u001f\u0016\u0017\t\u0019OH\r\u001f\u0014\u0017\u0003\u000b\u001c\u0017FT\u0004Diz\r\u0013\n\r\r\u0007\fY\u0005TI\u0005\fC\u001d\u001bQ\u0019\bE\u0003ZE*-B\u0001\u001b\u0016]\u001b\u0017X\rG\u001e\u000f\u0014\u0019\u0018\u0004RNVD@\r\n8\u003cY\u001aE[L\b\u000eLQ\u001cA\u0002\u0001\u001b\u001bWD\u001cFCJWN\u001a\u0019\u0015\u001b[H\u0006\u001f\u0006D\u001dW\u0018\u0016@^\b\r\u0017\u0003\u0018\u0007\u0016\n\u0015P\u0002\u0001A3\u001aU\u0003\u001eC\\AiJUHJY@V\u000e[\u0003QFL\u001f\b\u0016TObmp\u0014VF\u0017\nWX\tE[W\u0000\u001aLQPc\u0007\u0003\u0004\u000b\u0011\u001aX\u0014\rJOR\u0014K\u001cO\u0000\u0006LQA\u0003BO_Z\u0011\fN\\UJ\u0011\u000f\u001aST\bMH\u001c\u001f\u0006\u0016T@\u0006\u0015\u0011U\u0012;\u0016\n\u001f@\u0002YU\u001b\u000f\u001dLQC\u0018L\u001aS\u001b\tP\u001b\b\n\rY@W\u001a\u001aI\u0014HTI\u003e]\u0000\u0018O\u0019K\u000eL;O\\WN\u001a\u0001\u0010]\u0005\u000f\u0000IHR\u000f\u0001D\\\u001f\u0014\u0019\f\u0026\u0007\u0017\bg\u0000\u0017]\u0004\u0012LQ_\u0005BO@P]i\u0011\u0001\u0000\u001b*\u000e]\u0007\u001eM\tHTYK\u0004BOTV_Y\b;\u001d\r\u0005\u0016PKC\u000bUFL\u001d\u0017Z\n\u0002E\u001b\t\u0014XH[\u000f\u0014\u000f]\u0019\u0018]\u0012HT[^\u0016\u0000\u0001\u0015\u0003\u0011S\u0014I,;WN\u001a\u0007\u0015JCPL\u000e\u001c\u0019;\u003e\u001b\\]\u0014VF\u001a\u0007\u0019\rJ6\u001eX\f\u001f\u001aIH\u0016\u001d\u001fP[\u0011\u001aX\u0014\u001f\u0004WX\u001aKU\u001b\u0002\u0006\u001aIHO\u0013A\u0015I_W\u000e\u0002\u0016\u001a\u0018=\\\f\r\\\u0002\u001e\u0001\u0019P\u000e\u0015O^JlW\u0014\u0000\u000b\u0007\u001c\u0006\u001aS\u001fX\r\u0019\u000bGP]\u001d2CKZR\u001f\n\rJO\u0004Y\u0005\n\\MH\u0007\u0018-W\u0006\u001fXTZC\u0017;A^*\rJ6\u0017\\\u0016\u000f\u001cIHR\u000f\u0001D\\\u001f\u0014\u0013\u0017\u0026\u000b\u001d\u0010W\u0004\u0010L\fHT\r\u0013X\u001d\b\u001b\u001bZE%\u0001\u001d\u000f\u0010@\u0002\u000f\u0018U\u0012\u000fBI\u001bG1\nRZXYX^\r\u001a\u0000\u0007\u0014K\u0010J\u003e\u001d\u000b\t-_\u0007\u0019\u0015\u0003UW\u0016\u0017\u001cDW\u000bK6\u000e\\\u00035\u0005\u0002\u0006kX]\u0001f\\D%\n\u001c\u001f\u0010\u0010\u001aS\u001fX\r\u0019\u000bGP]\u001d2S\\@]\u000e\u000b\t7\u0006\u0003^\b\u000bPCP\b\n\u001eG\u000bA\u0015P@i\u0019\f\u000b\u0007\u0018\u000bM\u0004\u0026V\u0011\u000f\u001c\nP\u000e\b\f[JVKVF\u0017\r\u0006@\u0002KH\fWXZ_J\u0005WU\u0015\u0015\u0011U\u0016\r\u001c\u0006\u0001=Q\r[\u0003C[\n\tK\u0005XTQ\u0014\n\u0006\u001cPT\\\u0017P\\D\u001b\fP]C\t\u0011\u0000Y\fV[\u0002\u000f\u0019U\u001fJY@Y\u000f\u001fP\r\u0003\u000f\u001f\u0017k\u0007\t\u0015\u0003\u0011\u0014VF\r\u001a\u0014\u0004^\u0000\u001af\u0012\u0005\u001b\u0019\u0011Q1\u0004S\u001b\t\u0014OSN]ET\u0001KU\u001b\u0000\u000e\u0018\u000e\u0000@\u0007\u001eRKl_\u001eFCJWN\u001a\n\u0018T\u0011\u000b\u0007\f\u001ck\u0007\t\u0015\u0003\u0011\u0014VF\u001a\u001d\u0006\u0016W\u0004\u0026P\u00055_IH\u0016\u001e\u0018DQX_\u0014FUJ\u0016\u0017K\u001d\u0016T\u003e\u0003\n4@\u0016TO\u0015\u0015\u0011U\u0016\r\u001a\u0003*\u000b\\KC\u001b\u0018_\u001b\u001f\u0011\u0019^\u001fSQBN\u0000\u000e\u0000\u000eG@\u0014K\u001aV\u0012\u001eLQP\u0016BOZ\\G^\u0015\u0000[RW\u0001Y\n\u0011\\L\u0000\u001dF\u0006U\tO\u001b\u001bAi\u000f\r\u001dJO@\b\\\u001f\rYY^\u000e_\u0006\\\u000fU\u0014\u0007\u0007LWTP\u0016U[DM\bY\\\u000f\nBU\bUR\t\u0011\u001aX\u000b\u00187\u001c\u0006\u001aS[\tYZ\\\tAQ\n^\u0001\u000e\u0005\u0002IUK\u000e\u0010\u0001^\u000bAZY\u000f]R@\u0002[_\u0003\u001b\u001f\u0014\u001b\u0000\u001d\u0001\u0001\u000bW\u0007\u0018U\u003e\u0003\n\u0018P\u000e50J"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 03 Jan 2026 16:34:06 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://shrinkme.click\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-05-09T14:42:05.604476Z","times_seen":56735,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":81,"dns":1,"connect":26,"send":0,"wait":27,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=05f4830e-22bb-4163-8c7c-4186aa0af8e0","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:06.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=05f4830e-22bb-4163-8c7c-4186aa0af8e0 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 451\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":451,"data":"L\u001b[_\u001e\u0000\u001c\u0006*\u000b^\u001b\u0018T\u0004HT[^\u0016\f\fC\u001b\tMX\r\n7\u0017\u0003LKC\tMH\r\u0003\u0013F\t\u0004Y^\u0011\fJH[\u000b\u001d\u0003J\u000e\u0010W\u00065\u001a\u0002\u001fQLW\u0007\u0015\u0011R\u0013\u0017\u001a\u0000\u0014\u0010_\u0000\u0017^\u003e\u001e\u0007\u0006\u0017\u0016T]\u001b\u001b_S\f\u0001\u0015JOREE[Z\r\u0003\u000b\u0005\u0006k\u0007\t\u0015\u0003\u0011\u0007\u001e\u0006@YC[^D@\t\u0007^C_\u0010\u0006\n@U\f\u0002\u0001W\u0006\u001a\\B\u0003Y\u000bH\u0000\u0002[\bI^\u0016\u000f\u000bQP__\u001b\u0010\u001c7\u001c\u0006\u001aS[\u001bMH\u001a\u0019\u0013R\b\u0004Tf@Y\u000f\u0016\u001a\r*\u000b\\KC\u001bT]Y^B\u0002WO\u001b\u001bRR\f\u0001\u000b\u001c\u001c\u0011]\u001b\u0026P\u0005HTIP\u0018L\u000eVTCW\u0013\u0003\u00177\u001c\u0006\u001aS[\u001bMH\r\u001e\u0001@\u0001\u0000hPWiKFCJ\u0005\u0017K\u0001\u0012P\u000fHBI\u0011A\u001d\u0019XTl_\u001e;KJO@\u001aE[Z\r\u0003\r\u0000-]\nO\r\u001bJ\u0003\u000f\u0010\u001aEE\u0010\\\u0001\bA\u001b\u0000\u0017\r@\u0016BOTV@BX^[JY@U\f\rQ\u000e\u000eLQPW\u000f\u000e_\\\u001e\\\tI\r\t\u0012@\u0014K\u000bf\u0014\u0003\nIH\u0016^XQ\r\u000b\u0005J\u0001TZG\u0000ZDM\bWYCS\u0011\u0003\r@\u0003\b\u000b\u0000\u001b\u0005I\t\u0013Z]Y[\u0015C\u0005\u000f4\u001bPLW\u0015\t\u000b\u0006H\u0006J\r\u0011Q\u000e^O\rR[\\\r\u0017W\b\u000f\u000fZ\u000bSI]K^@P\fKU\u001b\u0000\u000e\n\u0002\u0006]\u0001\u0003VUl_\u001e\u0017[R.?E"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 03 Jan 2026 16:34:06 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://shrinkme.click\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":81,"dns":0,"connect":26,"send":0,"wait":26,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/logo-sm.webp","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"104.21.65.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:03.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 07:18:54 GMT","end":"Sun, 08 Feb 2026 08:16:40 GMT"},"fingerprint":{"sha1":"9A:08:FE:79:0C:A8:6A:14:E1:74:D1:86:A4:F6:52:0D:AB:44:14:06","sha256":"D1:95:64:22:D7:7C:35:C7:0D:1F:F0:F6:92:76:91:03:CB:62:1D:19:8C:4A:4A:56:63:A6:C5:A9:BA:1C:F9:65"}}},"request":{"raw":"GET /logo-sm.webp HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 16:34:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31236\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"7a04-63ec202aaaa36\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Thu, 24 Sep 2026 07:36:02 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 8758679\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BxB8mOELJv1DibbrkAHmquNE0XFiK%2FUDM43fhzy59lY6gm4wuaE5HnxfCWe60dLI3Z%2BQaYFk2CjnNp1UCPhjQeUMGx9OJw8CYhfB\"}]}\r\ncf-ray: 9b83e6c6ac111a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53658e8a7ae22169e5b89744bfa9f9cc","sha1":"157a684bdf8e3be19cbfabc80cf3a53bfbeaa175","sha256":"9777428de88c524584f0133c3c0d9becf5a3840597eb16dc873bbc29b9a0bf58","sha512":"591c520934512496bfd28831a5c5039c29146034d03a97c7a4c04a153388f21480e1d59e4528c7161ee696a33025a3727ecda3bf05b7dd1b18fdf45f7b4b5b91","ssdeep":"768:Wh2yCYVpdbxAIf8/1AIdV1EeWkgoZ8NJ1/+qK:Wh2yCsbxxOPqeAouDE","tlshash":"c1e2f19b2b3f558af7137380622828d5c15dfcb5605a8b38083bfa278755b554ae30bf","first_seen":"2023-04-21T09:30:41Z","last_seen":"2026-05-07T12:55:03.56893Z","times_seen":906,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:21 GMT","end":"Wed, 25 Feb 2026 15:57:20 GMT"},"fingerprint":{"sha1":"D5:E1:28:04:A2:5B:9C:21:BA:4A:37:C4:BB:E4:7D:93:53:75:26:02","sha256":"11:38:E4:46:CD:40:CF:56:D7:CE:A5:4A:87:26:DF:58:92:54:80:79:8D:FE:8D:33:0E:9D:5E:53:C9:19:6C:20"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:g2j6yKsq-u2UKp7WcmIo6Yyb8n6JjA:HiL6DxRuk0_TxKUt; Expires=Mon, 03-Jan-2028 16:34:04 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1378582859:1767458044655500\u0026ifkv=Ac2yZaWuq1J1CT9WR0PM7aWrUt9qRxrIJwelEMKBB5XRRbJi0jlBdQ8jyJA2RNCUbt-7kCu8FjQQlw\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: script-src 'nonce-9atSOcwzJXp7URpValNajA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":98,"dns":0,"connect":23,"send":0,"wait":39,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:05.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:46 GMT","end":"Wed, 25 Feb 2026 15:53:45 GMT"},"fingerprint":{"sha1":"42:8E:23:9C:33:58:89:3C:52:72:60:A6:59:3A:49:6B:6C:33:8A:CB","sha256":"83:AB:3D:79:FE:90:7F:F5:54:1E:59:8B:29:1B:C6:62:E9:48:61:48:EF:9A:89:C6:3D:60:AF:AF:7F:0A:89:A8"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 03 Jan 2026 16:34:05 GMT\r\ndate: Sat, 03 Jan 2026 16:34:05 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1088,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1088), with no line terminators","md5":"81711ae088d412d1312c11684a178389","sha1":"4785941aafa3b539d07a184c02c9d95db1b011d1","sha256":"6ce3dc16fb43a910c77c54cb57ba54c3e7a18961f9780131e265a24386d31fa4","sha512":"dfa555db3c49b010ac5bcf9bc8fbfe819d1a15cc6f9e98b228834c38cbafcd263f6686d5f6f804954cfbca01c95045dd28174258da5a7e3cf10aef9b0fc42084","ssdeep":"","tlshash":"aa11fc721a05f0394f3219d1e2ffcab1e492b01df16885d8a515aa946f79ccbcf04989","first_seen":"2025-12-17T19:11:41.487555Z","last_seen":"2026-01-08T10:32:55.354193Z","times_seen":49,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":122,"dns":3,"connect":30,"send":0,"wait":47,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho","date":"2026-01-03T16:34:06.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 362552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 09:14:45 GMT\r\nexpires: Wed, 30 Dec 2026 09:14:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371961\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":849529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-05-04T11:01:24.318309Z","times_seen":49447,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 00:07:05 GMT\r\nexpires: Wed, 30 Dec 2026 00:07:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 404819\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-05-09T15:05:54.071174Z","times_seen":7810,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":193,"dns":1,"connect":27,"send":0,"wait":16,"receive":6,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torealiukzemydr.org/ZkpQQ0tJdTMwdigcPC8oCy0XIh0sDgcCLxUSBRUSJ3hhJxgKfnY3IgJ3Z3p5VHNnZTsPLm1ybRU+MTc+FXdhZSIILD9+bRB3YW14UmRjdWVRbCV+ekA+ICIsW3t2Mz8SJm1yfFB9ZHZzVn5kcX5W","fqdn":"torealiukzemydr.org","domain":"torealiukzemydr.org","tld":"org"},"ip":{"addr":"104.21.3.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torealiukzemydr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 16:32:37 GMT","end":"Wed, 04 Mar 2026 17:29:41 GMT"},"fingerprint":{"sha1":"E4:88:98:0C:79:8A:86:67:9B:27:C3:69:5F:77:A4:65:E6:18:C9:F3","sha256":"6F:A1:4B:E2:F8:C7:BF:1C:EE:EA:6D:4F:44:EA:A3:8C:6C:8B:11:75:C8:28:F1:EA:BF:9D:32:1A:85:10:12:55"}}},"request":{"raw":"GET /ZkpQQ0tJdTMwdigcPC8oCy0XIh0sDgcCLxUSBRUSJ3hhJxgKfnY3IgJ3Z3p5VHNnZTsPLm1ybRU+MTc+FXdhZSIILD9+bRB3YW14UmRjdWVRbCV+ekA+ICIsW3t2Mz8SJm1yfFB9ZHZzVn5kcX5W HTTP/1.1\r\nHost: torealiukzemydr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lvg3uwt51CABNbcJBZqu3r8lmnHhoQ5Zw1jgqldbm8BcbRcCNeFDVA0lPBQIRgLCPEP2EDmbDga68Trmh02fCrcwj4qNd3JcVcBCiIcc1eLS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b83e6c8dfe056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":21,"dns":4,"connect":1,"send":0,"wait":125,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"torealiukzemydr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:05.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 362552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 09:14:45 GMT\r\nexpires: Wed, 30 Dec 2026 09:14:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371960\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":849529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-05-04T11:01:24.318309Z","times_seen":49447,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":28,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:14.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 23:52:35 GMT\r\nexpires: Wed, 30 Dec 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 319299\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-09T15:22:38.78062Z","times_seen":805665,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,700%7CMuli:300,300i,400","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:03.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css?family=Montserrat:400,700%7CMuli:300,300i,400 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 03 Jan 2026 16:34:04 GMT\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7099,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2bc70e2429cfe4bf248107fb862aa803","sha1":"6591a064c29035df798b717f644d313e8aec28a4","sha256":"3c940a7938e39750cc9bd218d44d73c3f19bfbdac74937e87516f025bceb6188","sha512":"27acffe1a2d499342cc08f1e079cba61ee93aa2cbe7af7c12107dac9a1b6fe3b112f5ec848cc471c23eaf7a7ab1a74e10c38884126a82b46676d6964a53af79f","ssdeep":"192:qRa7h5OsuQRD780ORurnlmlJ8lxqLBmL8XL4mWH:+SVnbnQ8Tw0","tlshash":"20e1d151042be500a7872cca63cf7e31de4e7165b494c535affe1ca8aca6c366321b6d","first_seen":"2025-09-09T04:58:13.382403Z","last_seen":"2026-05-07T12:55:03.540077Z","times_seen":274,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":234,"dns":1,"connect":15,"send":0,"wait":33,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/5775069","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"172.67.205.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:05.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gloaphoo.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 08:55:59 GMT","end":"Sat, 21 Mar 2026 09:54:44 GMT"},"fingerprint":{"sha1":"83:D2:68:91:37:31:66:50:94:E6:C1:E0:3C:49:4A:D1:62:42:77:33","sha256":"44:30:1E:B5:22:1E:F5:08:B0:4C:31:13:E1:0F:61:10:6F:15:67:F4:00:F0:DF:80:87:CB:E2:92:BC:07:49:50"}}},"request":{"raw":"GET /401/5775069 HTTP/1.1\r\nHost: gloaphoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 16:34:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Um9f8PpYyc%2BtnK0IeqZ7Gu2djboQJprWe9%2BkHaKoEYsnj19CqUjW1BVWxncdkHZR6%2BnifD%2FOzc9XuyecYhvjA%2BHeN7oPxMnuSx8%3D\"}]}\r\ncf-ray: 9b83e6ce3e1856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167887,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fe11e50e0976437bdbe0de831bae88c7","sha1":"b085db578cc917314def9b252cb8f347869a7fe4","sha256":"d4054bfa71f4af2747598393000e337a0bd66965304aa7eaf96f54475e72141b","sha512":"8d783e653228e78d5c0d51b7b1b4b6e83cb83366cc1f55a670f160b2c3eee19e62e7a8270a0bad763bba24f70873b3dac31bce13eb43f2f27d3e7be60f4b8088","ssdeep":"3072:FPV6Wtgjm0jmyFIJHAFIrD+rUXqEkVTAg4fbut6Aq6/2DRaTIJyk9hc2VzBnqM:VV6pjm0jmy6AsPXqE0hMb76/2DRaMAkH","tlshash":"d9f3e988b192b1552d636534322fd14eb59bdb20584e4a80d0dae1b27f370afd377ee8","first_seen":"2025-12-12T14:03:36.47737Z","last_seen":"2026-01-12T04:15:31.336732Z","times_seen":58,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":26,"dns":8,"connect":1,"send":0,"wait":77,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:05.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 362552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 09:14:45 GMT\r\nexpires: Wed, 30 Dec 2026 09:14:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371960\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":849529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-05-04T11:01:24.318309Z","times_seen":49447,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":81,"dns":1,"connect":28,"send":0,"wait":29,"receive":120,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:14.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 23:52:35 GMT\r\nexpires: Wed, 30 Dec 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 319299\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-09T15:22:38.78062Z","times_seen":805665,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/js/ads.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:03.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /js/ads.js?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xhamster_011\r\nCookie: lang=en_US; AppSession=790a577de093ecf11d20dba9de6b332f; refXhamster_011=ZTM2ODlhMWU1YmU4MTI3MWQyNmZkNDQyNmM3OTk3YzZhNmI3NzhkNTM0NWUxNWYxNDU0NmYwMGQ2YWEyZWFkOUDGwVlUO%2F%2BNNcL5RdJPUYtXcpuh%2F7U0WZ5svlClQkUB; csrfToken=06159de78e2ec13409fe507987d8d8fd88fb4b0eb6b0e317124de0849310884ed0f65791a8e0104b04f98a754fa57d5b4418eed3c5501b9b408a21228d55adc3; app_visitor=Q2FrZQ%3D%3D.ZTMxMDMzYjhiNjgwOTAxYTM1MjJkZjYyNjNkYzgzZjY1MTU3ZmM1NmMzNWRkZjQ4Y2VlNTMyMmU3MDM3MTM2NJ8fKH7sB6SRPAsw0BZbQ73tn3JX0upsYOVivASU3IvefB8A87bt6%2B8dYjZkYS8p7fBxWzmTa1Y3k0pLuLYTaY3ivoQSEtphxLKM3uFzpYCY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:34:03 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 170\r\npriority: u=3,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"da-63ec26415ef07-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sat, 03 Jan 2026 18:39:19 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 2584509\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcFXr3apwr9ZCP7oBFJIZqnf%2FLwsSqykYAN914XmC%2BVB1mX9womlrC9UJ66y0joGV0xV%2FIK67qAjndSatsvaG2YgtBRd6T%2BavamSGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83e6c68c9b56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"9e7e54b2d6fc22c0022b88b7125cbe03","sha1":"236c6e87760ac733a938cb1897d3a7cb6fc5c86c","sha256":"519204a7ecc3dc77ded647aa00567d6bf8c587049f389b1936914f7fab44c6fa","sha512":"9a1eaeb2af891a8b3b0ea6f02350e356371541154841b650a641533e89b254a1f357912b832209e5ea44ab99affbbd12fcedc7cbdaff7d1a0ee7b92e2715f4a6","ssdeep":"","tlshash":"9ed02273187812b40a2e25cb50f99b943e332190f29318ac4cfcce29832cc804836ec3","first_seen":"2023-09-09T21:18:47Z","last_seen":"2026-05-09T04:07:35.403747Z","times_seen":488,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/500/5775069?excludes=\u0026oaid=0802b3ed36764312fecfb8c8e3926524\u0026tgp=\u0026of=true\u0026sw_version=v1.770.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster_011\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:08.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"OPTIONS /500/5775069?excludes=\u0026oaid=0802b3ed36764312fecfb8c8e3926524\u0026tgp=\u0026of=true\u0026sw_version=v1.770.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster_011\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://shrinkme.click/\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:34:08 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":60,"dns":0,"connect":26,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/500/5775069?excludes=\u0026oaid=0802b3ed36764312fecfb8c8e3926524\u0026tgp=\u0026of=true\u0026sw_version=v1.770.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster_011\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:08.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"GET /500/5775069?excludes=\u0026oaid=0802b3ed36764312fecfb8c8e3926524\u0026tgp=\u0026of=true\u0026sw_version=v1.770.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster_011\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nCookie: OAID=0802b3ed36764312fecfb8c8e3926524\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:34:08 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 90ed8c717e70db0f4a1603f743b8c415\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=0802b3ed36764312fecfb8c8e3926524; expires=Sun, 03 Jan 2027 16:34:08 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2025,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"b5c9481ff55b25b96eb2f072746653fc","sha1":"692613b9b0ededd754ea4efabdee15fe99549c30","sha256":"4a5735338aeb500cccd50a68cf68a42515c04c921f8599e50ed454e08303b3b2","sha512":"c19c33b7ec012d78e9e4a849043963d9f4dfe82a714d62bc9913210dd00b28d2b7c344de5f44d2da4b4e3b4ebb8b815ea9f6ffb1ddae35f21a84b530042d3501","ssdeep":"","tlshash":"724108c6407a583b4b7aa12b0d665ad8c4572f01cb90e9dbdc2b8851029e22a608b5bc","first_seen":"2026-01-03T16:34:36.531347Z","last_seen":"2026-01-03T16:34:36.531347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/css/styles.min.css?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:03.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /modern_theme/build/css/styles.min.css?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xhamster_011\r\nCookie: lang=en_US; AppSession=790a577de093ecf11d20dba9de6b332f; refXhamster_011=ZTM2ODlhMWU1YmU4MTI3MWQyNmZkNDQyNmM3OTk3YzZhNmI3NzhkNTM0NWUxNWYxNDU0NmYwMGQ2YWEyZWFkOUDGwVlUO%2F%2BNNcL5RdJPUYtXcpuh%2F7U0WZ5svlClQkUB; csrfToken=06159de78e2ec13409fe507987d8d8fd88fb4b0eb6b0e317124de0849310884ed0f65791a8e0104b04f98a754fa57d5b4418eed3c5501b9b408a21228d55adc3; app_visitor=Q2FrZQ%3D%3D.ZTMxMDMzYjhiNjgwOTAxYTM1MjJkZjYyNjNkYzgzZjY1MTU3ZmM1NmMzNWRkZjQ4Y2VlNTMyMmU3MDM3MTM2NJ8fKH7sB6SRPAsw0BZbQ73tn3JX0upsYOVivASU3IvefB8A87bt6%2B8dYjZkYS8p7fBxWzmTa1Y3k0pLuLYTaY3ivoQSEtphxLKM3uFzpYCY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:34:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 35024\r\npriority: u=2,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"30c03-63ec26415ef07-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Sat, 03 Jan 2026 18:54:59 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 2583569\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4uMDiU2%2FEUPKjnRjGjaM3C9l7GyTxJfNe4my3mfckyaZUVzntoie%2FG9Ln2LEMlADVL9fiF5FHZZo7NZb1jl2%2Fe0Kb9LtHLObwBM4DA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83e6c66c9756a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199683,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65369)","md5":"0c921e67880117735ca85ba7fe87bafb","sha1":"12901b42a59bb331ea952af5c9700a3f6d520e40","sha256":"0b3646e0fa00be9c1cbb3a7dc1ad1d0348dbdbec5b6e023b012cf8e0d2927fe1","sha512":"34da3e923eee4d30b3e1e79e19d2d7b96abad7b9343b9dc9dbf0b75d57f32a8df2e9b53f547defea79c7b7eb4e04408045857f9ff04d9ac707c2547cc2d59274","ssdeep":"3072:6co/oFiS22l7p0rQUT63i6PSNhwEx28mLh2LK:Bo/BS22crQUT63i6PSNhwEx28mLh2LK","tlshash":"2014a6a0e51420da3323c15bbbd0fa99227cf263d5564dbaf21f659c4fc46c912a3f1a","first_seen":"2023-04-19T07:39:51Z","last_seen":"2026-05-07T12:55:03.554161Z","times_seen":285,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","date":"2026-01-03T16:34:06.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:46 GMT","end":"Wed, 25 Feb 2026 15:53:45 GMT"},"fingerprint":{"sha1":"42:8E:23:9C:33:58:89:3C:52:72:60:A6:59:3A:49:6B:6C:33:8A:CB","sha256":"83:AB:3D:79:FE:90:7F:F5:54:1E:59:8B:29:1B:C6:62:E9:48:61:48:EF:9A:89:C6:3D:60:AF:AF:7F:0A:89:A8"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 03 Jan 2026 16:34:06 GMT\r\ndate: Sat, 03 Jan 2026 16:34:06 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"884763df105a7eb061a62c244fa7832c","sha1":"bfc4d2601e5af803e2dccd964e469f624f167be1","sha256":"cd968daeca8c270c3ea51f8eecfa315a5d805bca263da5ef6f9c4c64254afc9a","sha512":"096a5e005a5b9f72fb552517cf5d4615f74c0111d6b97f23f9c989107426292f11090eb097ed66b5f20e05aacd401ec18ad33eae5b97705188b7c34649abf80a","ssdeep":"","tlshash":"6eb012231596dc280c00420ad427d3b8e012d138e65180f181342fe856249f34110940","first_seen":"2025-12-11T19:34:34.569022Z","last_seen":"2026-01-20T22:35:06.704801Z","times_seen":43041,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5ImxW9zpN78rQ23Vgg_gWtcRywDa9DMzX52mHU7lhG-rYmvtrUHqksp2fexBj8sWQ2ASUvXJbwOx0TR0F4mfia1IyK2Q","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:07.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:46 GMT","end":"Wed, 25 Feb 2026 15:53:45 GMT"},"fingerprint":{"sha1":"42:8E:23:9C:33:58:89:3C:52:72:60:A6:59:3A:49:6B:6C:33:8A:CB","sha256":"83:AB:3D:79:FE:90:7F:F5:54:1E:59:8B:29:1B:C6:62:E9:48:61:48:EF:9A:89:C6:3D:60:AF:AF:7F:0A:89:A8"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5ImxW9zpN78rQ23Vgg_gWtcRywDa9DMzX52mHU7lhG-rYmvtrUHqksp2fexBj8sWQ2ASUvXJbwOx0TR0F4mfia1IyK2Q HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 03 Jan 2026 16:34:07 GMT\r\ncontent-security-policy: script-src 'nonce-AKxU0aVgwsdTGesd2ziCew' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17038,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"df45b80cecf3044720f9c4d6c3b396d2","sha1":"edda87dbb1bab001fde821a4758a4ca0d79fb8d2","sha256":"05e06666919468d79ea3b826e8c8f2e99c3a340f366b5bc32f14cf1351a1bc84","sha512":"b6ba654966f9f58f0d0282890c42df36537908118b9dac9641044373b7b694ac5b599e8a3f779d45a100dc959d4c9053f36c334fb5b7aeeb5639039d20b57a97","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/s:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+/","tlshash":"3572f050041744009b835ce223ce7f30fe4e92517146d0b1abfdab6beedbda6926939d","first_seen":"2026-01-03T16:34:36.542915Z","last_seen":"2026-01-03T16:34:36.542915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/dyyehuis8.png","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"104.21.65.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:03.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 07:18:54 GMT","end":"Sun, 08 Feb 2026 08:16:40 GMT"},"fingerprint":{"sha1":"9A:08:FE:79:0C:A8:6A:14:E1:74:D1:86:A4:F6:52:0D:AB:44:14:06","sha256":"D1:95:64:22:D7:7C:35:C7:0D:1F:F0:F6:92:76:91:03:CB:62:1D:19:8C:4A:4A:56:63:A6:C5:A9:BA:1C:F9:65"}}},"request":{"raw":"GET /dyyehuis8.png HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 16:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 13368\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"3438-63ec202aa9a96\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 14:07:49 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 9426374\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DD6CelhQRLeg0eJ7SOEFGcKYBVtDU6Tw0pj%2BekbC78%2FQqKa8BY1vkpXkhOVrFzk71HKGumdDxuxAU2wRtjvKXmE2UNdFNn%2Fz0Qf7\"}]}\r\ncf-ray: 9b83e6c6ac0e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 154, 8-bit colormap, non-interlaced","md5":"f293daf49bd343c38ae34614fa67a414","sha1":"b53a204e0c385f2fa62fb57de5ba26dfc6920d3a","sha256":"c2baa90aafc484c676f4d9365c6f37b41ed50a5f21bc07eab9ad57ddb546f48d","sha512":"b713ac065171c0103eb9dd3791bc92a068b833a7ff7b3aef31c077a32b929592893eb29f079d34cf587c4ab2f5a8d6c2e16493cc1218d71863de8a1afecfc23d","ssdeep":"384:s6/H0Od7dqWkScyrJHwNa3XiIlO3bhs9Sdmjtc8V:s6/HXd7d4SzrJHwNa31mbhs1jtjV","tlshash":"b652c053f695783d21994a7a857d0ba903e0ee653e2cb4d30688de7c859a0143c0dfab","first_seen":"2023-10-14T22:14:02Z","last_seen":"2026-05-07T12:55:03.548333Z","times_seen":883,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/modern_theme/build/js/script.min.js?ver=6.6.4","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /modern_theme/build/js/script.min.js?ver=6.6.4 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/Xhamster_011\r\nCookie: lang=en_US; AppSession=790a577de093ecf11d20dba9de6b332f; refXhamster_011=ZTM2ODlhMWU1YmU4MTI3MWQyNmZkNDQyNmM3OTk3YzZhNmI3NzhkNTM0NWUxNWYxNDU0NmYwMGQ2YWEyZWFkOUDGwVlUO%2F%2BNNcL5RdJPUYtXcpuh%2F7U0WZ5svlClQkUB; csrfToken=06159de78e2ec13409fe507987d8d8fd88fb4b0eb6b0e317124de0849310884ed0f65791a8e0104b04f98a754fa57d5b4418eed3c5501b9b408a21228d55adc3; app_visitor=Q2FrZQ%3D%3D.ZTMxMDMzYjhiNjgwOTAxYTM1MjJkZjYyNjNkYzgzZjY1MTU3ZmM1NmMzNWRkZjQ4Y2VlNTMyMmU3MDM3MTM2NJ8fKH7sB6SRPAsw0BZbQ73tn3JX0upsYOVivASU3IvefB8A87bt6%2B8dYjZkYS8p7fBxWzmTa1Y3k0pLuLYTaY3ivoQSEtphxLKM3uFzpYCY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:54:44 GMT\r\netag: \"38157-63ec26415fea7-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Tue, 20 Jan 2026 02:33:56 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nage: 1173647\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUyVkUj9M6PE%2FbNoNghUEopiD558fQbtmo3o52TJd7FlsN5y8Ajj8KAyrZDii4nm0Jt0Brc9SLASHuNTX0VYR%2FYDCv6Uc2y75EGCZw%3D%3D\"}]}\r\ncf-ray: 9b83e6c8ecbb56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229719,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"3c977f00919d1eb2e57a7f0fd3bd884b","sha1":"b09601a36fa50e61ce9d6ac0a34c6a894a8f81c8","sha256":"5619e29a6688312b15a2cc2d693083dd00198691b1a3918b64dee75c9eeef7c9","sha512":"f22ddcb1b2fffb6b5ac4f3557dabe92ac7c18dc96ab331f610161d82a9791b10f922e62ee378e9e4d456c8575f489b07207007a7ca299ad1a7d3e75c269c9584","ssdeep":"3072:IeeIygP3fulzhsz8jlvaDioQ47GKSDYFtVbmwpcYUpQVJ:IPIy6PultluPQ47GKSAmwpZwQVJ","tlshash":"53241a89b2a1742147ab71f5417f120bf236142ee409842cb56cd9e96fb8d8d623bf7c","first_seen":"2025-09-16T23:31:20.872491Z","last_seen":"2026-05-07T12:55:03.569882Z","times_seen":212,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torealiukzemydr.org/aFFyN3pHbhFERw0FMGE1L2g9dC0LECRcSiwII18tPDY8WT4EOlRDEwxsRQ5IWmhFEQoBNU8GXBslE0MPG2xBERMGNx0KGQQ4EVxcHmxDGUlcf0EBVF93BwpLWWNHA01cYEACS1toQQ5MTiUCVh1VYFRHDhw9TwZNXmZGAkJYZUQGTVA","fqdn":"torealiukzemydr.org","domain":"torealiukzemydr.org","tld":"org"},"ip":{"addr":"104.21.3.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:06.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torealiukzemydr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 16:32:37 GMT","end":"Wed, 04 Mar 2026 17:29:41 GMT"},"fingerprint":{"sha1":"E4:88:98:0C:79:8A:86:67:9B:27:C3:69:5F:77:A4:65:E6:18:C9:F3","sha256":"6F:A1:4B:E2:F8:C7:BF:1C:EE:EA:6D:4F:44:EA:A3:8C:6C:8B:11:75:C8:28:F1:EA:BF:9D:32:1A:85:10:12:55"}}},"request":{"raw":"POST /aFFyN3pHbhFERw0FMGE1L2g9dC0LECRcSiwII18tPDY8WT4EOlRDEwxsRQ5IWmhFEQoBNU8GXBslE0MPG2xBERMGNx0KGQQ4EVxcHmxDGUlcf0EBVF93BwpLWWNHA01cYEACS1toQQ5MTiUCVh1VYFRHDhw9TwZNXmZGAkJYZUQGTVA HTTP/1.1\r\nHost: torealiukzemydr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ndate: Sat, 03 Jan 2026 16:34:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lSqbamR5qgfxSHNTPjJN9xwqYFv3gZjv%2BjXEYrJihOR1XQQQuC%2FmT9PuKac4Cl2hnW5IN4LLVtzvOEHUJgkLZ%2BGnB2cIIW2tGkkNasLwd7S3\"}]}\r\ncf-ray: 9b83e6d4a8565690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"torealiukzemydr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torealiukzemydr.org/TW5ndVdiUQQGaikFLTY2fjglEGQPOjMwHTUKCwEaHDYhAg8YI0EBPilTUExlf1dQUyckClpEcT4aBgEiPlNSUz4jCAhIcTtTVltkeUBUQ3l6SBJIZnxcUkFgeV9VQGZ+V1RMYWsaFxQwcF9BBSM5AlpEYHtZU0BvfVpRR2B0","fqdn":"torealiukzemydr.org","domain":"torealiukzemydr.org","tld":"org"},"ip":{"addr":"104.21.3.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:06.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torealiukzemydr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 16:32:37 GMT","end":"Wed, 04 Mar 2026 17:29:41 GMT"},"fingerprint":{"sha1":"E4:88:98:0C:79:8A:86:67:9B:27:C3:69:5F:77:A4:65:E6:18:C9:F3","sha256":"6F:A1:4B:E2:F8:C7:BF:1C:EE:EA:6D:4F:44:EA:A3:8C:6C:8B:11:75:C8:28:F1:EA:BF:9D:32:1A:85:10:12:55"}}},"request":{"raw":"POST /TW5ndVdiUQQGaikFLTY2fjglEGQPOjMwHTUKCwEaHDYhAg8YI0EBPilTUExlf1dQUyckClpEcT4aBgEiPlNSUz4jCAhIcTtTVltkeUBUQ3l6SBJIZnxcUkFgeV9VQGZ+V1RMYWsaFxQwcF9BBSM5AlpEYHtZU0BvfVpRR2B0 HTTP/1.1\r\nHost: torealiukzemydr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ndate: Sat, 03 Jan 2026 16:34:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86qDECYm%2FPnXekmxYMoPYbX0538OG5pJY0NkoGYoMw%2Brjthtw36zNToNJxGOi5HYNL7zso8A7HoJf2fchS1obQyi1s1a0LkoO2WR0LOAxSg5\"}]}\r\ncf-ray: 9b83e6d5785f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"torealiukzemydr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohffs.com/impression/pP3pcaQcYBAc0pFueSICfujKgvsiwvOzfBpoEmkccx9EApJJYZWT_s8x-RES8VmXQVWhSdtwZ770ermKJdy6fIitXOlPEDQnOVC5iAOQItLvkvhtyl3EBaRRuGOeNEpL5yfWhC8K4SaVZbOujrYH-pMCD5lclgweEXvRnZQ84juTCm2iSW4-n_aHjo7F_Z60s-RqgpL58Es7AVsqScOpAdxOb7xj4BN9MTDZbdCd8A3GkZcPP2j3SmXEaNGm_QDfhC8K-qW27DM8rgqQtYNd6X-5pHvCLNPu-SFcJKGA0FAFkF6cpEautqwrevBn6OZ3AYYxn9AeRrZ6Gz9910EsWkipi7wThCeQUnpp3Hlk9LUF4t_fkz0oap5Rwu_a3TJxrUjzq0upnSs8HlaLQx46pB-Y8gl75yWI6XBxLcxyLR7T27NcyYZ0yihJq6XAsdtzBnqR5BwyL8tz0KGr3mwx2wkERh6ONq_w8MkR_qkO4EhDje3lEUJvXBIBeZSfOaOt26PJZkHvwVmM_x9lHhO9YzH0UjOE6YB2dCfeUAr8XLJ2lZC3LNLKsF3d7qtO9qrcu8Slul__xwxea84-9W27V4J7cjIy7d9DfiOZSsIuH8dq8vz7i-gni0H4vCqnfS5uKA9N5nhUUb3rO03lXaLhmiqePCnn8EVJZVJp30NXEfJbxg2SXakyaqLMF_sVYgNM5qxnOuzQ6m9gWy5fCF8Oiqvn831ENxQhccI5a7qyjP2L5ix6r-fYlwKLy0Wkf8QjusJMaHQKyzlMrZ0whLw1BFnXAvhoaRUzFbbvBexLO4dXZA4345eZFFwlgGNShYEg_Uqq2zHyQsEMu2rJZtQIorSAucjJ11PzqI6uotW47a4ygBA3cSnT92gHbKQ=?_z=5775069\u0026sw_version=v1.770.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster_011\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ohffs.com","domain":"ohffs.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:10.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohffs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 14:59:52 GMT","end":"Mon, 09 Feb 2026 14:59:51 GMT"},"fingerprint":{"sha1":"84:C5:86:80:4A:11:ED:8B:09:5E:53:86:96:DE:28:CD:B9:7B:37:7B","sha256":"F1:2E:0E:CC:6E:DD:55:2D:96:F7:17:EA:1C:A1:D1:B2:2E:01:1D:BF:0A:8E:B5:77:BE:23:08:B5:89:03:5E:4D"}}},"request":{"raw":"GET /impression/pP3pcaQcYBAc0pFueSICfujKgvsiwvOzfBpoEmkccx9EApJJYZWT_s8x-RES8VmXQVWhSdtwZ770ermKJdy6fIitXOlPEDQnOVC5iAOQItLvkvhtyl3EBaRRuGOeNEpL5yfWhC8K4SaVZbOujrYH-pMCD5lclgweEXvRnZQ84juTCm2iSW4-n_aHjo7F_Z60s-RqgpL58Es7AVsqScOpAdxOb7xj4BN9MTDZbdCd8A3GkZcPP2j3SmXEaNGm_QDfhC8K-qW27DM8rgqQtYNd6X-5pHvCLNPu-SFcJKGA0FAFkF6cpEautqwrevBn6OZ3AYYxn9AeRrZ6Gz9910EsWkipi7wThCeQUnpp3Hlk9LUF4t_fkz0oap5Rwu_a3TJxrUjzq0upnSs8HlaLQx46pB-Y8gl75yWI6XBxLcxyLR7T27NcyYZ0yihJq6XAsdtzBnqR5BwyL8tz0KGr3mwx2wkERh6ONq_w8MkR_qkO4EhDje3lEUJvXBIBeZSfOaOt26PJZkHvwVmM_x9lHhO9YzH0UjOE6YB2dCfeUAr8XLJ2lZC3LNLKsF3d7qtO9qrcu8Slul__xwxea84-9W27V4J7cjIy7d9DfiOZSsIuH8dq8vz7i-gni0H4vCqnfS5uKA9N5nhUUb3rO03lXaLhmiqePCnn8EVJZVJp30NXEfJbxg2SXakyaqLMF_sVYgNM5qxnOuzQ6m9gWy5fCF8Oiqvn831ENxQhccI5a7qyjP2L5ix6r-fYlwKLy0Wkf8QjusJMaHQKyzlMrZ0whLw1BFnXAvhoaRUzFbbvBexLO4dXZA4345eZFFwlgGNShYEg_Uqq2zHyQsEMu2rJZtQIorSAucjJ11PzqI6uotW47a4ygBA3cSnT92gHbKQ=?_z=5775069\u0026sw_version=v1.770.0-s\u0026dmn=gloaphoo.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=4\u0026pl=https%3A%2F%2Fshrinkme.click%2FXhamster_011\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ohffs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nCookie: OAID=0802b3ed36764312fecfb8c8e3926524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:34:10 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-trace-id: a1b1a5f4a4f166e0978ebae3312919fb\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-05-09T15:18:45.334277Z","times_seen":99341,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34gjfm75zhp78.cloudfront.net/?mfjgd=792297","fqdn":"d34gjfm75zhp78.cloudfront.net","domain":"d34gjfm75zhp78.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.169","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:03.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?mfjgd=792297 HTTP/1.1\r\nHost: d34gjfm75zhp78.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 79132\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Sat, 03 Jan 2026 16:34:03 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: GSTHpWgWYFQ1j6PfGrX9ohoK55CZK81RmhIwlQylv7wwcZqzisKL_g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":232337,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"31f76ac44ba50f9d45cef5edba4c177a","sha1":"c9070714eb5cc36c0fd5b572c3302ff79f6326f8","sha256":"c1ab505339cdcc8a7b72a1ed1eb9b6038cdfa0cdf6bac96169dc70af302979f9","sha512":"29ed4e66a3171398e92cb1a7ad40e02517df4dc325faf0ab2e574c4af6a798583463b05bfd823d1c2727a0be22c780b93242199776bb9af5bfae6641ad381f71","ssdeep":"3072:XBUNP5+Ya/06R42Da7oV6+53UOng7L9vN9U+Zc53+Zc0M8ER:XuNR+t/06G2D02wZU3+iAo","tlshash":"1c344cc9ba923429836374f540bf124ab23f5a69b8084dd4f496d4d07db8d4a437bfac","first_seen":"2026-01-03T16:34:36.557416Z","last_seen":"2026-01-03T16:34:36.557416Z","times_seen":1,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":56,"dns":53,"connect":1,"send":0,"wait":172,"receive":20,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"d34gjfm75zhp78.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Jan 2026 00:42:30 GMT\r\nexpires: Sat, 02 Jan 2027 00:42:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 143494\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-05-09T15:39:35.539364Z","times_seen":392538,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":116,"dns":1,"connect":15,"send":0,"wait":18,"receive":19,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-2.2.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-2.2.4.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-14e4a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\nage: 2184645\r\nx-served-by: cache-lga21935-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 37, 41667\r\nx-timer: S1767458044.365696,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 29811\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-09T15:23:46.839754Z","times_seen":277538,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":47,"dns":1,"connect":13,"send":0,"wait":14,"receive":5,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","date":"2026-01-03T16:34:06.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Dec 2025 08:03:23 GMT\r\nexpires: Mon, 05 Jan 2026 08:03:23 GMT\r\ncache-control: public, max-age=604800\r\nage: 462643\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-05-09T15:22:38.762003Z","times_seen":601208,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:12.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 03 Jan 2026 16:34:12 GMT\r\ndate: Sat, 03 Jan 2026 16:34:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"51e82f70d1b655f1447b6881fc12c970","sha1":"d07fb502aaf2635cd74dd1ad42d916b2bfe923c1","sha256":"9c313d568db4279e917f0ed107f57397c1e14d5e2f29667f207f31c409658440","sha512":"60b0345cf672afd26c41e56155e3fefc18e6f92e1d969f25dd33d6aa5e49c624e7017f9dc49d5f35ba2f85886546c1fcb93e7303d045618e3508bb3f0f6d1e5a","ssdeep":"768:DFSFjFGFUFB4FiLFZF1Fn8XguBSivFRa1KRzBfiiMgFK1GIBEiNnr7gr8yBOijh1:WCJiWp","tlshash":"8bc20fa1041b500057834ce223cebf34fe1f52507142d0b5abfdab6badcbc6652693ad","first_seen":"2025-11-19T00:27:59.992265Z","last_seen":"2026-02-19T18:18:33.653497Z","times_seen":1142,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torealiukzemydr.org/VUFGc1l6fiUAZAFxEDQUPjFwEGo2CiNAYGwiFwcjMwk+CxoyZzIaPWh2f0FrbHlgAzAxfHdLfyY1JwcsJnx3VTA7JylOfyN8d11pe3NoRn8gfHdVLSUgIU5oczEyBzVocHFFbmF0fkNtYXNwRg","fqdn":"torealiukzemydr.org","domain":"torealiukzemydr.org","tld":"org"},"ip":{"addr":"104.21.3.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torealiukzemydr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 16:32:37 GMT","end":"Wed, 04 Mar 2026 17:29:41 GMT"},"fingerprint":{"sha1":"E4:88:98:0C:79:8A:86:67:9B:27:C3:69:5F:77:A4:65:E6:18:C9:F3","sha256":"6F:A1:4B:E2:F8:C7:BF:1C:EE:EA:6D:4F:44:EA:A3:8C:6C:8B:11:75:C8:28:F1:EA:BF:9D:32:1A:85:10:12:55"}}},"request":{"raw":"GET /VUFGc1l6fiUAZAFxEDQUPjFwEGo2CiNAYGwiFwcjMwk+CxoyZzIaPWh2f0FrbHlgAzAxfHdLfyY1JwcsJnx3VTA7JylOfyN8d11pe3NoRn8gfHdVLSUgIU5oczEyBzVocHFFbmF0fkNtYXNwRg HTTP/1.1\r\nHost: torealiukzemydr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9ZuitdihQEJYVLUiac1uvjI6Md%2BY%2BNWtRNIvRfk6hOma2YoPAp%2F3jM1BQHdP9L3%2B1b1WoiGFP2YYQcglbaVYOUyKdk2KLIRKafPnx2HpdZ2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b83e6c8dfe756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"torealiukzemydr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:31 GMT","end":"Wed, 25 Feb 2026 15:57:30 GMT"},"fingerprint":{"sha1":"68:80:26:07:1C:4F:AC:C8:FF:32:F4:DD:86:41:D6:6E:85:27:90:D4","sha256":"6D:27:81:39:F2:6D:26:4E:B8:CE:4F:0B:02:95:B6:5D:C4:E2:58:C9:A9:A0:80:1D:02:70:91:FB:E9:98:E6:8B"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 03 Jan 2026 16:34:04 GMT\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"b57455c9a0032c8d67868882258a4a19","sha1":"017f1d5e957af25bc7ee498e8e6104da00835773","sha256":"1aa296f8312ecf0d0959f759affc2850e1ed52b321033a51355cc1f37fd5dc89","sha512":"24db4575be8e92cfb7b408e04e6bee7cc5257a22b46488a3f4e9a8dbc05f75c3f4a465fea59e4ea866c1a9f3afb145f50b60fb5969a61ef7c466d572a7197e57","ssdeep":"","tlshash":"581165731a04f0350b3209d1e1ffc7b5e482b01cf12845dca511ea842f79ccbce04589","first_seen":"2025-12-15T23:56:17.122996Z","last_seen":"2026-01-20T22:35:06.74886Z","times_seen":7485,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":117,"dns":1,"connect":16,"send":0,"wait":35,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.io/favicon-3.webp","fqdn":"shrinkme.io","domain":"shrinkme.io","tld":"io"},"ip":{"addr":"104.21.65.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:04.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 07:18:54 GMT","end":"Sun, 08 Feb 2026 08:16:40 GMT"},"fingerprint":{"sha1":"9A:08:FE:79:0C:A8:6A:14:E1:74:D1:86:A4:F6:52:0D:AB:44:14:06","sha256":"D1:95:64:22:D7:7C:35:C7:0D:1F:F0:F6:92:76:91:03:CB:62:1D:19:8C:4A:4A:56:63:A6:C5:A9:BA:1C:F9:65"}}},"request":{"raw":"GET /favicon-3.webp HTTP/1.1\r\nHost: shrinkme.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:34:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12694\r\npriority: u=6,i=?0\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 14 Sep 2025 12:27:29 GMT\r\netag: \"3196-63ec202aa9a96\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Thu, 19 Nov 2026 02:17:36 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent, accept-encoding\r\nage: 3939398\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UfGu6x0xzcn%2B823IffQS25MaSGnp7w93ooXqGwT42I4YtpFxNuHPrBIj6Tfy7LUNopcgfLHzIUNcH5Ja%2B8pwbl9Ltm8XQjYrAG5K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83e6ca58d75fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"103971bd196afd0ca8f772c9680c9e4c","sha1":"8340e472b9426202e0745d04956c468366256994","sha256":"663cf4358e3e1fdbb64e946bbf381b04db3654d54fe7ba5d8cd47463b733425b","sha512":"4052713576aee93c2f5ee7f6f1de47ad290ee90ec87278407e178fad46af9a64968d551d9bbb3a5c2841ec361c5bfbdb55264f308978ef84529b5513e38fbb78","ssdeep":"384:DNqHAE4/4a2bemzV6wsEwdJn6f4Te4wg0v5M6:evyoDHsEC6gwHvC","tlshash":"5142c02b5dbfc8fb91a62f6f643f0366ccfbbd6b52d82a15460048646095120fc93b5e","first_seen":"2023-05-08T21:09:43Z","last_seen":"2026-05-07T12:55:03.509844Z","times_seen":940,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/bframe?hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026bft=0dAFcWeA5ImxW9zpN78rQ23Vgg_gWtcRywDa9DMzX52mHU7lhG-rYmvtrUHqksp2fexBj8sWQ2ASUvXJbwOx0TR0F4mfia1IyK2Q","date":"2026-01-03T16:34:07.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42555\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 09:30:09 GMT\r\nexpires: Wed, 30 Dec 2026 09:30:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371038\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1e1e7ef5663f5b92b4516b94446dde2c","sha1":"e986dbaced4170ab6fd5852aa806ba6ed1e8cc14","sha256":"f71a14f41c5875c258dcece1dddf55d50a26b8e5bfb626ea07b948551f40fcad","sha512":"5ef4991a1755e9cdc4d2497050219de08745fb473b7d945f52abf572ae921472a64cba48a5bcd590a0ed63f3f4ae9c456d77db584b8637b65b03a5b45fe5c7f8","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOImIdthXwW5l1Dx7:1GRFauOxLA/+IcTOuLX1","tlshash":"dc838e7338513b39fc2b9b616186b9edf21cc423e5514bfab5497a20c3db19a8253b07","first_seen":"2025-12-11T19:34:34.541785Z","last_seen":"2026-05-05T20:37:11.136107Z","times_seen":44148,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.ink/Xhamster_011","fqdn":"shrinkme.ink","domain":"shrinkme.ink","tld":"ink"},"ip":{"addr":"172.67.184.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T16:34:03.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 20:06:12 GMT","end":"Sat, 14 Mar 2026 21:03:43 GMT"},"fingerprint":{"sha1":"5D:27:70:92:42:FD:51:F2:EA:2A:12:C2:E1:B0:33:83:5B:79:AF:2B","sha256":"73:CE:18:CC:0D:01:84:7D:BD:5D:E2:1D:21:EE:4F:C9:72:B8:85:57:73:1C:C9:AA:C5:B2:19:26:9D:55:22:B3"}}},"request":{"raw":"GET /Xhamster_011 HTTP/1.1\r\nHost: shrinkme.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 03 Jan 2026 16:34:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://shrinkme.click/Xhamster_011\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xHe7vnAntEWPyfIcLKnldWq5y%2BO33KHJka8JpRjeHOmWYrA3rwz0BTuawMssc7FJI2H5fkcHCZobdIy%2FWzJHZUsJ94vcTNHVvM%3D\"}]}\r\ncf-ray: 9b83e6c2898256a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27118,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":41,"dns":28,"connect":1,"send":0,"wait":135,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shrinkme.click/Xhamster_011","fqdn":"shrinkme.click","domain":"shrinkme.click","tld":"click"},"ip":{"addr":"104.21.86.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T16:34:03.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinkme.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 17:11:55 GMT","end":"Tue, 03 Mar 2026 18:10:36 GMT"},"fingerprint":{"sha1":"EB:66:6E:CB:0C:9E:12:5B:E8:79:55:A0:4A:22:26:23:69:74:BE:96","sha256":"08:7C:CC:46:24:41:54:C0:5C:F3:FC:F1:9C:D2:62:A4:7D:EE:79:80:7A:43:FD:AA:5D:B3:37:75:DE:3E:AA:45"}}},"request":{"raw":"GET /Xhamster_011 HTTP/1.1\r\nHost: shrinkme.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 16:34:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-robots-tag: noindex, nofollow\r\nset-cookie: lang=en_US; expires=Tue, 29 Dec 2026 16:34:55 GMT; Max-Age=31104000; path=/\nAppSession=790a577de093ecf11d20dba9de6b332f; path=/; HttpOnly\nrefXhamster_011=ZTM2ODlhMWU1YmU4MTI3MWQyNmZkNDQyNmM3OTk3YzZhNmI3NzhkNTM0NWUxNWYxNDU0NmYwMGQ2YWEyZWFkOUDGwVlUO%2F%2BNNcL5RdJPUYtXcpuh%2F7U0WZ5svlClQkUB; expires=Sat, 03 Jan 2026 16:39:55 GMT; Max-Age=300; path=/; HttpOnly\ncsrfToken=06159de78e2ec13409fe507987d8d8fd88fb4b0eb6b0e317124de0849310884ed0f65791a8e0104b04f98a754fa57d5b4418eed3c5501b9b408a21228d55adc3; path=/; HttpOnly\napp_visitor=Q2FrZQ%3D%3D.ZTMxMDMzYjhiNjgwOTAxYTM1MjJkZjYyNjNkYzgzZjY1MTU3ZmM1NmMzNWRkZjQ4Y2VlNTMyMmU3MDM3MTM2NJ8fKH7sB6SRPAsw0BZbQ73tn3JX0upsYOVivASU3IvefB8A87bt6%2B8dYjZkYS8p7fBxWzmTa1Y3k0pLuLYTaY3ivoQSEtphxLKM3uFzpYCY; expires=Sun, 04 Jan 2026 16:34:55 GMT; Max-Age=86400; path=/; HttpOnly\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIohCQvq8TGWyJnFUT6xUsghD68F0Ge2GZkHzy%2F7ewWTX7SMWSsty65ji%2FzMQLr4%2FGUECoihdKZ4jqKm%2FxhTYiC2UKnZQm7TI3IzDg%3D%3D\"}]}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b83e6c3f8ab56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27118,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1144), with CRLF, LF line terminators","md5":"d9d5a08f5c76637cf02dc1eb0c662603","sha1":"f455883af24031f59935d93c16febc4f6823addd","sha256":"edfb5fa99d9880eed3d6c6577f72827f08aabf6b4a0f7e2c69501b789e3b432c","sha512":"1d6959dc660df8c14e4cf6709447c1967b5ed0f3cd7962bd8bf896e4f63e8323ace99d423e258073bf7636694c91b6117849e59207140fa951fe65034874dc5f","ssdeep":"768:MP8u2nzZlfY7crZSxtaj4SU/LTMvZpQ4T:/uYlfY7crZEtaj4Z/yZpQ4T","tlshash":"b7c20b23adcd502b016300e477b3f70ce9299427ea068e71f9dc82552fa2fa55967e8d","first_seen":"2026-01-03T16:34:36.576646Z","last_seen":"2026-01-03T16:34:36.576646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":95,"dns":73,"connect":1,"send":0,"wait":117,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shrinkme.click/Xhamster_011","date":"2026-01-03T16:34:05.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:37:04 GMT","end":"Tue, 24 Mar 2026 18:37:01 GMT"},"fingerprint":{"sha1":"05:4F:CA:93:1E:46:6C:B4:A4:49:3A:2A:0C:AD:DB:CA:8C:CF:BC:9C","sha256":"81:B0:0B:B9:30:D8:5D:FE:11:36:CE:28:36:04:4F:41:74:05:00:57:EE:04:F0:1D:44:B3:B4:6F:A6:4F:D8:FD"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shrinkme.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shrinkme.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 16:34:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://shrinkme.click\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802b3ed36764312fecfb8c8e3926524; expires=Sun, 03 Jan 2027 16:34:05 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b83e6cfaf9b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"76a0ee2d8a1a99632234ec12b9f3d225","sha1":"24645003dfe4eed3e94e9a52822ac82e24e14825","sha256":"999673a9b19d44072f79addc96ae56a4bab5ac598dfea086ac2842d689b280dc","sha512":"aba245c86eb595e480f8654830f8950ad27ac0370e87adf28a1473f06ae3942638a156374941b357e5a8cc7c1facd17d0cc76c5d0134f0cb2dc80f54d0255fb4","ssdeep":"","tlshash":"12a02200080e0288c0a08023ee83cb02800000b080082b8800e083222acb80c030eb20","first_seen":"2026-01-03T16:34:36.579336Z","last_seen":"2026-01-03T16:34:36.579336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":29,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LfFeLErAAAAAHYOQfqM3-7BpopXCbBQPAMEeh4B\u0026co=aHR0cHM6Ly9zaHJpbmttZS5jbGljazo0NDM.\u0026hl=en\u0026v=7gg7H51Q-naNfhmCP3_R47ho\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=pkbxws76wt1b","date":"2026-01-03T16:34:06.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Jan 2026 08:14:23 GMT\r\nexpires: Sat, 02 Jan 2027 08:14:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116383\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-09T15:22:38.78062Z","times_seen":805665,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}