https://app.tapkit.com/projects/-NQdLbYAXOdcTMtF5gqE/landing/-NQdLbMQ5csN9c6SmkXR

Scan ID:: 1eaed69f-e270-4931-9229-c0a7df43cb1fFinished
Submitted URL:: https://tinyurl.com/fansly-lyytiketolaRedirected
Report Finished:: Apr 12, 2025, 16:52:01Public

Cookies · 8 found

Cookies are small text files stored on a user's device, often used to remember user preferences and enable personalized experiences

Name	Value	Domain	Path	Expires (UTC)	Secure	HTTP Only
__cf_bm	doov22eNOOKOZhN_iF4eNhD4FMA_W.8kWV1okMFZpss-1744476728-1.0.1.1-uh2OHLqwtK1yxko.3OFuKxS0_54QmJh49L4FNfpmv63VtRpVOIborV7HqnKljnC202dRCUfCTvxZ93kdsnGCZN5MI0.TNEhHAOyx8ErcyR0	.tinyurl.com	/	Apr 12, 2025, 17:22:08	Yes	Yes
YSC	k8WJgy9SIm4	.youtube.com	/	Dec 31, 1969, 23:59:59	Yes	Yes
__Secure-ROLLOUT_TOKEN	[__Secure-ROLLOUT_TOKEN redacted]	.youtube.com	/	Oct 9, 2025, 16:52:09	Yes	Yes
VISITOR_INFO1_LIVE	W79QnjgJS2c	.youtube.com	/	Oct 9, 2025, 16:52:09	Yes	Yes
VISITOR_PRIVACY_METADATA	CgJFUxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBk	.youtube.com	/	Oct 9, 2025, 16:52:09	Yes	Yes
_ga	GA1.2.1829361978.1744476729	.tapkit.com	/	May 17, 2026, 16:52:09	No	No
_gid	GA1.2.131532679.1744476729	.tapkit.com	/	Apr 13, 2025, 16:52:09	No	No
mp_6db1632f37eb4b79ddefff8aa78f0b4b_mixpanel	%7B%22distinct_id%22%3A%22%24device%3A635a60c4-8917-4bd3-9f41-08309940e0c0%22%2C%22%24device_id%22%3A%22635a60c4-8917-4bd3-9f41-08309940e0c0%22%2C%22%24initial_referrer%22%3A%22%24direct%22%2C%22%24initial_referring_domain%22%3A%22%24direct%22%2C%22__mps%22%3A%7B%7D%2C%22__mpso%22%3A%7B%22%24initial_referrer%22%3A%22%24direct%22%2C%22%24initial_referring_domain%22%3A%22%24direct%22%7D%2C%22__mpus%22%3A%7B%7D%2C%22__mpa%22%3A%7B%7D%2C%22__mpu%22%3A%7B%7D%2C%22__mpr%22%3A%5B%5D%2C%22__mpap%22%3A%5B%5D%7D	.tapkit.com	/	Apr 12, 2026, 16:52:09	No	No

JavaScript variables · 32 found

Global JavaScript variables loaded on the window object of a page, are variables declared outside of functions and accessible from anywhere in the code within the current scope

Name	Type
0	object
onbeforetoggle	object
documentPictureInPicture	object
onpageswap	object
onpagereveal	object
onscrollend	object
churnkey	object
webpackJsonp	object
__core-js_shared__	object
core	object

Console log messages · 1 found

Messages logged to the web console

Level	Source	Message
error	network	URL https://cdn.linkmink.com/lm-js/2.3.1/lm.js Text Failed to load resource: net::ERR_CONNECTION_CLOSED

Security headers · 2 found

HTTP response headers that can harden the security of a web application

Name	Value	Support	Info
Strict-Transport-Security	max-age=31556926	Good	Declare that a website is only accessible over a secure connection (HTTPS). Click to learn more...
X-Frame-Options	SAMEORIGIN	Good	Indicate whether a browser should be allowed to render a page in a <frame>, <iframe>, <embed> or <object>. Click to learn more...
X-Content-Type-Options	—	Good	Indicate that the MIME types advertised in the Content-Type headers should be followed and not be changed. Click to learn more...
Content-Security-Policy	—	Good	Control resources the user agent is allowed to load for a given page. Click to learn more...
Referrer-Policy	—	Good	Control how much referrer information should be included with requests. Click to learn more...
Clear-Site-Data	—	Good	Control the data stored by a client browser for their origins. Click to learn more...
X-Permitted-Cross-Domain-Policies	—	Good	Control whether a web client such as Adobe Flash Player or Adobe Acrobat has permission to handle data across domains. Click to learn more...
Permissions-Policy	—	New	Allow and deny the use of browser features in a document or iframe. Click to learn more...
Cross-Origin-Embedder-Policy	—	New	Configure embedding cross-origin resources into the document. Click to learn more...
Cross-Origin-Opener-Policy	—	New	Ensure a top-level document does not share a browsing context group with cross-origin documents. Click to learn more...
Cross-Origin-Resource-Policy	—	New	Request that the browser blocks no-cors cross-origin/cross-site requests to the given resource. Click to learn more...
X-XSS-Protection	—	Deprecated	Deprecated. Stops pages from loading when they detect reflected cross-site scripting (XSS) attacks. Click to learn more...
Feature-Policy	—	Deprecated	Deprecated. Replaced by the Permissions-Policy header. Click to learn more...
Expect-CT	—	Deprecated	Deprecated. Opt in to reporting and/or enforcement of Certificate Transparency requirements. Click to learn more...
Public-Key-Pins	—	Deprecated	Deprecated. Allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates. Click to learn more...

The PerformanceNavigationTiming interface provides metrics regarding the browser's document navigation events

Process Unload Event

Event	Timing (ms)
unloadEventStart	0
unloadEventEnd	0

Redirect

Event	Timing (ms)
redirectStart	0
redirectEnd	0

Service Worker Init

Event	Timing (ms)
workerStart	0

Service Worker Fetch Event

Event	Timing (ms)
fetchStart	311

DNS

Event	Timing (ms)
domainLookupStart	311
domainLookupEnd	311

TCP

Event	Timing (ms)
connectStart	313
secureConnectionStart	324
connectEnd	464

Request

Event	Timing (ms)
requestStart	465

Response

Event	Timing (ms)
responseStart	562
responseEnd	566

Processing

Event	Timing (ms)
domInteractive	796
domContentLoadedEventStart	1050
domContentLoadedEventEnd	1051
domComplete	2122

Load

Event	Timing (ms)
loadEventStart	2122
loadEventEnd	2123