GET pornotarado.com/wp-admin/admin-ajax.php?action=rank_math_overlay_thumb&id=2152399&type=play&hash=cc42c5f7df53f5072ca2e8f1806deb50
404 Not Found 0 B URL GET pornotarado.com/wp-admin/admin-ajax.php?action=rank_math_overlay_thumb&id=2152399&type=play&hash=cc42c5f7df53f5072ca2e8f1806deb50
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectpornotarado.com
FingerprintC0:B7:CA:8D:D7:7E:49:42:C8:E6:60:3B:01:BC:32:34:8C:26:33:66
ValidityWed, 12 Mar 2025 02:59:27 GMT - Tue, 10 Jun 2025 03:57:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-admin/admin-ajax.php?action=rank_math_overlay_thumb&id=2152399&type=play&hash=cc42c5f7df53f5072ca2e8f1806deb50 HTTP/1.1
Host: pornotarado.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=30000, must-revalidate
expires: Fri, 28 Mar 2025 14:46:24 GMT
last-modified: Fri, 21 Mar 2025 16:06:24 GMT
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-micro-cache: BYPASS
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OuO6qgmNOksYA80dK5Suvc8d84%2FaUDh1ASVogV4kXAmKq%2Fa%2Boh0Uy3Zh72GSVa0GHDBUm08XvuP7lM2A8beqt4L4zZEanP2fZveHjBwPukOMpjbtWz30MWclgq8DGOwDrXc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4ea4af2d1bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4152&min_rtt=878&rtt_var=2559&sent=47&recv=53&lost=0&retrans=0&sent_bytes=6015&recv_bytes=3623&delivery_rate=240901&cwnd=12000&unsent_bytes=0&cid=60710aeeb69a38a3&ts=3653&x=1", cfExtPri, cfHdrFlush;dur=0
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:35 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wCsJDt0gymhxNV4llTlcug9mU6ORZUG8h8kq1e79rEXbzTFoVtpCJWEu6HZk4m1lMrj8ow%2FEaELA4Fx3QL6AQnzNO0%2FK2kT8ruIxzZkgHNM7ict6y2Wx5itemy6YnC5GDo8kBw%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81406
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4ebd99a70b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET cinepornogratis.com/favicon.ico
404 Not Found 0 B URL GET cinepornogratis.com/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectcinepornogratis.com
FingerprintA1:25:E4:25:BC:40:6C:DB:90:76:1F:C2:4B:4C:2D:EF:63:6F:AC:8C
ValidityThu, 06 Feb 2025 23:06:53 GMT - Thu, 08 May 2025 00:06:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: cinepornogratis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=300
cf-cache-status: HIT
age: 12856
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dHSW7OE%2BAFq8HTNwPhY2SZSreuBkzIrdK%2BFQkyqv8HrwuB7Fr8sZpz%2FaatF3okTS88Cc9j88MSsE5wmfyLaovVFKJni0NeRxf7iPpoDVEe7EP7sWw6Wofimgkdo8FF3s5NjAvSY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e8b6f0a56a3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1928&min_rtt=430&rtt_var=2825&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3297&recv_bytes=1197&delivery_rate=3246636&cwnd=254&unsent_bytes=0&cid=102d818f6e373485&ts=417&x=0"
X-Firefox-Spdy: h2
GET www.porno26.com/wp-content/uploads/2022/04/sex-na-escola.jpg
200 OK 16 kB URL GET www.porno26.com/wp-content/uploads/2022/04/sex-na-escola.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectporno26.com
FingerprintD7:7C:8C:4F:D7:6E:31:DA:76:87:B5:47:A9:2D:4C:93:4B:E7:49:BF
ValidityTue, 25 Feb 2025 23:46:23 GMT - Tue, 27 May 2025 00:44:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 600x337, components 3
Hash 7a2de94c244fae3ee6908f0c9baa4bb4
87819d4ae5915fe148b525f2d990ba5f6437b254
68bf94a6ba42cd28838af9771f610e18a8895bac3672ee1cd0bc39b42b713a57
GET /wp-content/uploads/2022/04/sex-na-escola.jpg HTTP/1.1
Host: www.porno26.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 15660
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D6%2BTukMOU%2BvwR0Hy3P7TfS8wtwb%2FuiXbWUD6Ru9sQchUJ9nhH24zIw8q192oJNWmtAnb7MOvRHzNXdwQRvdMvRP%2BKooC6AR6ePwq52S2nb2f7BR5ZjnQf2mheKg2xBFlbAY%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 23 Apr 2022 06:20:51 GMT
etag: "62639ac3-3d2c"
version: MS24102501
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Sat, 25 Oct 2025 19:25:42 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
accept-ranges: bytes
cf-ray: 925b4ea48ede569d-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET xvideosrei.com/wp-cdn/uploads/video/flagra-novinha-na-escola.mp4
302 Found 4.4 MB URL GET xvideosrei.com/wp-cdn/uploads/video/flagra-novinha-na-escola.mp4
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
Size 4.4 MB (4423680 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-cdn/uploads/video/flagra-novinha-na-escola.mp4 HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 25 Mar 2025 03:26:14 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Cookie
location: https://cdn77-vid-mp4.xvideos-cdn.com/2kOQS8qVNOoW227-3v7BAA==,1742882437/videos/mp4/7/e/2/xvideos.com_7e21a217dcc03deca70f6caf8baee20a.mp4?ui=MTA0LjE2Ny4yNy43My0tL2VtYmVkZnJhbWUvdW1wdG9pYWUyZTE=
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-micro-cache: MISS
strict-transport-security: max-age=31536000;
X-Firefox-Spdy: h2
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash be4733c7722d9c6322ff4ddb1ff3b2e0
923b01a91025b7511bd6242cd12dfc363890f46e
284e20f03d68b873aabb6cf20f2707cf081e5fe83ac14c5edac58545421684d1
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19508
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET js.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/4
200 OK 274 kB URL GET js.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/4
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Size 274 kB (274169 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tagjpa.php?noself=1&url=av.4freedom.click/4 HTTP/1.1
Host: js.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:21 GMT
content-type: text/html; charset=UTF-8
8tagproxuri: /tagjpa.php?noself=1&url=av.4freedom.click/4
x-frame-options: ALLOWALL
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=72000
597tagproxuri: /tagjpa.php?noself=1&url=av.4freedom.click/4
623httpcode: 200
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: jjs./tagjpa.php?noself=1&url=av.4freedom.click/4-A-js.4jpg.top-js.4jpg.top-myzone---no
x-proxy-cache-g-la: MISS
xkey-g-la: js.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/4--js.4jpg.top--my_zone
cf-cache-status: HIT
age: 20760
last-modified: Mon, 24 Mar 2025 21:40:21 GMT
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FpuMAE36%2BlE%2FdcXz%2FajXXUnmX9%2FAaA%2B2jYQsH5OnrcnqFRDEETJ3C0WK3PVd1zowaR%2B%2FHjPXn%2BnVEo%2BmF6lyEu0OVtJrKPnJALWsuCUc8NpVIRupU5j3tyHRFb2J6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e655b38568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=20207&min_rtt=1254&rtt_var=26479&sent=200&recv=48&lost=0&retrans=1&sent_bytes=191552&recv_bytes=7776&delivery_rate=45076&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=4337&x=1", cfExtPri, cfHdrFlush;dur=0
HEAD ads.google.com/
429 Too Many Requests 0 B IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subjectadwords.google.com
FingerprintD1:21:31:99:C9:E1:76:ED:96:CA:45:EC:64:A7:75:DC:7A:55:2C:6F
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: ads.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
content-length: 1103
content-type: text/html; charset=UTF-8
date: Tue, 25 Mar 2025 03:26:27 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pict2.anybunny.org/imgt/a/z/q/g/d/safada_fazendo_sexo_na_cam-4_tmb.jpg
200 OK 9.0 kB URL GET pict2.anybunny.org/imgt/a/z/q/g/d/safada_fazendo_sexo_na_cam-4_tmb.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerZeroSSL
Subjectpict.anybunny.org
FingerprintB9:CC:7F:5F:71:F8:E4:B7:A2:B0:B7:DF:D4:15:BB:C6:9D:D8:F9:FE
ValidityWed, 19 Mar 2025 00:00:00 GMT - Tue, 17 Jun 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x240, components 3
Hash 91f3fb74ae35171792b5f40fe6579218
00d054b8728a777688e7badb8a957b2c670fb4f7
cdf6a267ba2e11e358494ee844eb54af96b2cbf68528ab81e67753cd2d92b456
GET /imgt/a/z/q/g/d/safada_fazendo_sexo_na_cam-4_tmb.jpg HTTP/1.1
Host: pict2.anybunny.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 25 Mar 2025 03:26:31 GMT
Content-Type: image/jpeg
Content-Length: 8952
Last-Modified: Sun, 14 Jun 2015 16:11:45 GMT
Connection: keep-alive
ETag: "557da7c1-22f8"
Expires: Thu, 24 Apr 2025 03:26:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
GET cacrz.tube-dl.top/?cacvlink=https%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%23https%3A%2F%2Fxvideosrei.com%2Fwp-content%2Fuploads%2F2021%2F07%2Fflagra-novinha-na-escola.jpg
200 OK 193 B URL GET cacrz.tube-dl.top/?cacvlink=https%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%23https%3A%2F%2Fxvideosrei.com%2Fwp-content%2Fuploads%2F2021%2F07%2Fflagra-novinha-na-escola.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash c8e31f75435605eed1f37a33424edf4a
f6f934e86a5b87aca04c136b636d3b2f68c61442
42ab15666211485aedff5ef4ad996e011ea5a805a8da35022b5e5c3b34114746
GET /?cacvlink=https%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%23https%3A%2F%2Fxvideosrei.com%2Fwp-content%2Fuploads%2F2021%2F07%2Fflagra-novinha-na-escola.jpg HTTP/1.1
Host: cacrz.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:22 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line12: host-cacrz.tube-dl.top:5c98:b0b7-myhost-:7381:e66f/?cacvlink=https%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%23https%3A%2F%2Fxvideosrei.com%2Fwp-content%2Fuploads%2F2021%2F07%2Fflagra-novinha-na-escola.jpg
phost:
pdo-line55: host-cacrz.tube-dl.top:5c98:b0b7-myhost-:7381:e66f/?cacvlink=https%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%23https%3A%2F%2Fxvideosrei.com%2Fwp-content%2Fuploads%2F2021%2F07%2Fflagra-novinha-na-escola.jpg
line1263: notjp-nojp-myhost--filteron-
access-control-allow-headers: Cake
access-control-allow-origin: *
cache-control: public, max-age=14400
mycache-control: public, max-age=2880
ahost: RZ
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:22 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lzhWETEd4HJoWdktVRpHtMI%2FadxnYgRwWalIR94ksXQs8uSU7b2jUlV%2FNix6e2kx96Y23cQjIOLgf3YTUvM59A9HizTOktG1bPzxU8ZIGmY8XgtxJvUjqNOE4GCytsfDrgb6fA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e65ec5c56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2080&min_rtt=437&rtt_var=507&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3197&recv_bytes=1185&delivery_rate=3313501&cwnd=254&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=1777&x=0"
X-Firefox-Spdy: h2
GET page.phic4.top/myda.php
200 OK 0 B IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/tags/6
Certificate IssuerGoogle Trust Services
Subjectphic4.top
FingerprintA1:CF:F4:32:94:8A:80:92:CC:2C:15:DC:BB:2B:D6:E2:5C:3F:79:6C
ValidityMon, 03 Mar 2025 22:00:39 GMT - Sun, 01 Jun 2025 22:58:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /myda.php HTTP/1.1
Host: page.phic4.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=utf-8
myda: myda2a02:2121:6a9:d1ea::509e:5859
vary: User-Agent, Accept-Encoding
age: 3972
cache-control: max-age=14400
cf-cache-status: HIT
last-modified: Tue, 25 Mar 2025 02:20:08 GMT
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2g7PehKUS27JVk3MnzYGLC3dexioCY6tfvFJrCRqy26UDjD9rnXA3Xp0T%2F78h0SGkCzMzaaVJeleNI%2F%2FGzMcrMYihsH7wakJEVmz7Q8I%2BfxT9fG2Zrg9QYO%2FUkkojSITRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e630b26b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7083&min_rtt=3631&rtt_var=3827&sent=13&recv=7&lost=0&retrans=0&sent_bytes=4818&recv_bytes=1300&delivery_rate=163553&cwnd=12000&unsent_bytes=0&cid=a1e0f4a40766de7e&ts=252&x=1", cfExtPri, cfHdrFlush;dur=0
GET xvideosrei.com/wp-content/uploads/2021/06/pegando-novinha-na-escola.jpg
200 OK 29 kB URL GET xvideosrei.com/wp-content/uploads/2021/06/pegando-novinha-na-escola.jpg
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 600x337, components 3
Hash b54b78e398b3c78eda364d309b376d75
9d387afa5f41228431a105ae7036565a69b5b965
39ab374dad272e2213f854657abab1c6980b20cf37da2469e27c143c30b4ed3b
GET /wp-content/uploads/2021/06/pegando-novinha-na-escola.jpg HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: image/jpeg
content-length: 29333
last-modified: Fri, 18 Jun 2021 09:40:46 GMT
etag: "60cc6a1e-7295"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET pics.serviporno.com/videos/6/e/3/8/9/6e38978e4ad4c80e8d6730e78e7147c736eb47ac.mp4-preview-3.jpg
200 OK 25 kB URL GET pics.serviporno.com/videos/6/e/3/8/9/6e38978e4ad4c80e8d6730e78e7147c736eb47ac.mp4-preview-3.jpg
IP
ASN #60068 Datacamp Limited
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subject1684115694.rsc.cdn77.org
Fingerprint98:6F:71:9A:47:9C:6D:22:3F:02:C4:44:95:36:09:CD:2F:E4:F8:D0
ValidityFri, 17 Jan 2025 08:54:33 GMT - Thu, 17 Apr 2025 08:54:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Lavc55.12.100", baseline, precision 8, 640x360, components 3
Hash c890306abbc77a0783ef586c172e92df
cc03176c7b6d669703ae85f8f7434aea538faffd
a7e97382b6ad275f6da57edd991998ebfeea4281f83f0a4ab4147d8274801317
GET /videos/6/e/3/8/9/6e38978e4ad4c80e8d6730e78e7147c736eb47ac.mp4-preview-3.jpg HTTP/1.1
Host: pics.serviporno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 24729
last-modified: Wed, 29 Aug 2018 16:18:26 GMT
etag: "5b86c752-6099"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
x-77-nzt: EwgBuUwJGwFBDAG5TAoMAdf3yAkADAGKxyXEAbdZzG8C
x-77-nzt-ray: fdb541232d6f4bc66722e26731bbaa10
x-77-cache: HIT
x-77-age: 641271
server: CDN77-Turbo
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 29047886-22554-3424.unrertivermalous.com/v2/a/na/image?d=BQ5qQHPe-JWerjm5EA4Q5dcqEhD6UY6e3kvWWENwZU1IEP_BnyFt9f7ApPFWDC1nF3chxrJ_E0D2d-NpZH9h-RUOpMg5RZ2f2DacAOfhFvV98SIdn5NNyE6coFLjoRY9Sr_TNTs8bSKFAxyUGGgfhxaBSfdPHAYf2pye4fl-teUM_DdjlJEwWYxVcAZJoRYoKRzxhEH3VqDfidwqUNeg4alF0zH6742XdxLGC2Nz5GrpYA2MgmCj32e9caiU8vKsLr8pX4KCdcYx-Skl9-G-E9LeJeTwzU3tsRBFoqnMGN50pW5bAeDxaEFx8hd7UwtrxF56B6lezgXkTIT0myJPRBxc5A5Alk9kKGcAVymHfdGbYxpo4qkU4ySSp8qF_5JWX27RJiC44eaaz_Lb1xZlDHRpj_gkAjVvOUH0PcC2SFMH91lYZyv7oR4klfAvfbi4_5D96_DTa7BxMSypItx-JXn5QJVgc34LoqjiZZcJk3p0YCsoMjHfZZD55eP6m9qLAdjbZi8fkgiX2RrftbebPkR-YvitUf4dXWy05FCDYR0jJcljD7OO_B3A-3HoZUEcKn6KHnQbqKuDJkc8LEET4H0qkPpvRgnszhsPQ2bfwtjGziJ6Q6H1SQE7axia8UuDfIBYon7S3Dk6_CEDg0-rAC37yj2gWruf1RqhT3g6gIhSwAFSEqQYoiLQJS30-PxFyo7HVh_DzGOB0tVwCkx8_ZhXVN8TuBKCiKieqxW71dLbeQq3isVhywPjZ56E0D25BDjDdDy3pnhfoddkLqx60g5nGJjPZcSxEXUxXcBGv1V5E48ASs8xw8dDqdamEdVy3cZUO6PJeTDjLr9aBAaX_nKll5wt2b49ci4x-vdYZQp2G-4IMw7JoVyjlGntmPeNPfa1tfpMeVH-ha3FRTPlNGwtOGPwZESphBszE8_M-eMEJBXQGrc9TnVcSfmIWjRpbn467cVGEG0T4yYmKAPMFVCPShDlnjq5jtj6BIpzC00jWXigXcyWT8naXBc-svXPqzImRIM0W4QSG68hShQfRI2nr9kUGYkis5XfuUVJzSd-wCJ03N2beYDmUC7_AQB0f-v-JWjTLBearT262ClRXVNGr7vjAXBj6xxRXQtxODmGhRJADuTkWrAgAlZnavrjkYMwTcJi9zExEMELscRYGp4bXH7OrjhcAUJI0D9m8eRWSec5
200 OK 68 B URL GET 29047886-22554-3424.unrertivermalous.com/v2/a/na/image?d=BQ5qQHPe-JWerjm5EA4Q5dcqEhD6UY6e3kvWWENwZU1IEP_BnyFt9f7ApPFWDC1nF3chxrJ_E0D2d-NpZH9h-RUOpMg5RZ2f2DacAOfhFvV98SIdn5NNyE6coFLjoRY9Sr_TNTs8bSKFAxyUGGgfhxaBSfdPHAYf2pye4fl-teUM_DdjlJEwWYxVcAZJoRYoKRzxhEH3VqDfidwqUNeg4alF0zH6742XdxLGC2Nz5GrpYA2MgmCj32e9caiU8vKsLr8pX4KCdcYx-Skl9-G-E9LeJeTwzU3tsRBFoqnMGN50pW5bAeDxaEFx8hd7UwtrxF56B6lezgXkTIT0myJPRBxc5A5Alk9kKGcAVymHfdGbYxpo4qkU4ySSp8qF_5JWX27RJiC44eaaz_Lb1xZlDHRpj_gkAjVvOUH0PcC2SFMH91lYZyv7oR4klfAvfbi4_5D96_DTa7BxMSypItx-JXn5QJVgc34LoqjiZZcJk3p0YCsoMjHfZZD55eP6m9qLAdjbZi8fkgiX2RrftbebPkR-YvitUf4dXWy05FCDYR0jJcljD7OO_B3A-3HoZUEcKn6KHnQbqKuDJkc8LEET4H0qkPpvRgnszhsPQ2bfwtjGziJ6Q6H1SQE7axia8UuDfIBYon7S3Dk6_CEDg0-rAC37yj2gWruf1RqhT3g6gIhSwAFSEqQYoiLQJS30-PxFyo7HVh_DzGOB0tVwCkx8_ZhXVN8TuBKCiKieqxW71dLbeQq3isVhywPjZ56E0D25BDjDdDy3pnhfoddkLqx60g5nGJjPZcSxEXUxXcBGv1V5E48ASs8xw8dDqdamEdVy3cZUO6PJeTDjLr9aBAaX_nKll5wt2b49ci4x-vdYZQp2G-4IMw7JoVyjlGntmPeNPfa1tfpMeVH-ha3FRTPlNGwtOGPwZESphBszE8_M-eMEJBXQGrc9TnVcSfmIWjRpbn467cVGEG0T4yYmKAPMFVCPShDlnjq5jtj6BIpzC00jWXigXcyWT8naXBc-svXPqzImRIM0W4QSG68hShQfRI2nr9kUGYkis5XfuUVJzSd-wCJ03N2beYDmUC7_AQB0f-v-JWjTLBearT262ClRXVNGr7vjAXBj6xxRXQtxODmGhRJADuTkWrAgAlZnavrjkYMwTcJi9zExEMELscRYGp4bXH7OrjhcAUJI0D9m8eRWSec5
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.unrertivermalous.com
Fingerprint79:20:B3:AF:0C:13:23:74:B6:04:49:94:51:E9:C0:A9:F8:C7:B5:CD
ValiditySat, 01 Mar 2025 14:29:48 GMT - Fri, 30 May 2025 14:29:47 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPe-JWerjm5EA4Q5dcqEhD6UY6e3kvWWENwZU1IEP_BnyFt9f7ApPFWDC1nF3chxrJ_E0D2d-NpZH9h-RUOpMg5RZ2f2DacAOfhFvV98SIdn5NNyE6coFLjoRY9Sr_TNTs8bSKFAxyUGGgfhxaBSfdPHAYf2pye4fl-teUM_DdjlJEwWYxVcAZJoRYoKRzxhEH3VqDfidwqUNeg4alF0zH6742XdxLGC2Nz5GrpYA2MgmCj32e9caiU8vKsLr8pX4KCdcYx-Skl9-G-E9LeJeTwzU3tsRBFoqnMGN50pW5bAeDxaEFx8hd7UwtrxF56B6lezgXkTIT0myJPRBxc5A5Alk9kKGcAVymHfdGbYxpo4qkU4ySSp8qF_5JWX27RJiC44eaaz_Lb1xZlDHRpj_gkAjVvOUH0PcC2SFMH91lYZyv7oR4klfAvfbi4_5D96_DTa7BxMSypItx-JXn5QJVgc34LoqjiZZcJk3p0YCsoMjHfZZD55eP6m9qLAdjbZi8fkgiX2RrftbebPkR-YvitUf4dXWy05FCDYR0jJcljD7OO_B3A-3HoZUEcKn6KHnQbqKuDJkc8LEET4H0qkPpvRgnszhsPQ2bfwtjGziJ6Q6H1SQE7axia8UuDfIBYon7S3Dk6_CEDg0-rAC37yj2gWruf1RqhT3g6gIhSwAFSEqQYoiLQJS30-PxFyo7HVh_DzGOB0tVwCkx8_ZhXVN8TuBKCiKieqxW71dLbeQq3isVhywPjZ56E0D25BDjDdDy3pnhfoddkLqx60g5nGJjPZcSxEXUxXcBGv1V5E48ASs8xw8dDqdamEdVy3cZUO6PJeTDjLr9aBAaX_nKll5wt2b49ci4x-vdYZQp2G-4IMw7JoVyjlGntmPeNPfa1tfpMeVH-ha3FRTPlNGwtOGPwZESphBszE8_M-eMEJBXQGrc9TnVcSfmIWjRpbn467cVGEG0T4yYmKAPMFVCPShDlnjq5jtj6BIpzC00jWXigXcyWT8naXBc-svXPqzImRIM0W4QSG68hShQfRI2nr9kUGYkis5XfuUVJzSd-wCJ03N2beYDmUC7_AQB0f-v-JWjTLBearT262ClRXVNGr7vjAXBj6xxRXQtxODmGhRJADuTkWrAgAlZnavrjkYMwTcJi9zExEMELscRYGp4bXH7OrjhcAUJI0D9m8eRWSec5 HTTP/1.1
Host: 29047886-22554-3424.unrertivermalous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 242 kB URL GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
Size 242 kB (242447 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 88616
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.366.0
x-jsd-version-type: version
etag: W/"3b30f-xasoqLlON+0SM11iGCxWGKe469U"
content-encoding: br
accept-ranges: bytes
date: Tue, 25 Mar 2025 03:26:25 GMT
age: 30629
x-served-by: cache-fra-eddf8230100-FRA, cache-hel1410021-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
HEAD ads.google.com/
429 Too Many Requests 0 B IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subjectadwords.google.com
FingerprintD1:21:31:99:C9:E1:76:ED:96:CA:45:EC:64:A7:75:DC:7A:55:2C:6F
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: ads.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
content-length: 1103
content-type: text/html; charset=UTF-8
date: Tue, 25 Mar 2025 03:26:27 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 8f89400ff1aa14fa36a43e33317d173a
e711c1ee136b7d909bfcd483caa80a0ce02bee8a
5a1499e1529f47450a303e14a3421b7b03a42c4e7a41f99006cb599f8d383bae
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:26 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19510
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET www.cnnamador.com/
301 Moved Permanently 0 B IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectcnnamador.com
Fingerprint11:CA:AF:D8:F2:36:CD:DD:14:54:C3:75:7A:3D:D7:12:2C:86:E9:25
ValidityFri, 14 Feb 2025 14:43:04 GMT - Thu, 15 May 2025 15:40:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.cnnamador.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: text/html; charset=iso-8859-1
location: http://cnnamador.com/
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QwkdoNORJQKZIDztxtsdBMUhARGvZbG9mJrNRSq6YJbIQjlIwIuQXiActINSMMxIEf%2BUpzerw5W9rKtAO%2F5mgatPAklhUTicV5MaM5iNQrkqKhb3TP2Mfb5mPVgVaEPSnzsvnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e8faf675699-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=720&min_rtt=401&rtt_var=410&sent=131&recv=33&lost=0&retrans=0&sent_bytes=166217&recv_bytes=1274&delivery_rate=37969010&cwnd=254&unsent_bytes=0&cid=5ac9f69b13232661&ts=1394&x=0"
X-Firefox-Spdy: h2
GET cdn.bancychialk.com/24011/ad3f379b-1551-11ec-ba28-5f54dd64648d.png
200 OK 258 kB URL GET cdn.bancychialk.com/24011/ad3f379b-1551-11ec-ba28-5f54dd64648d.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.bancychialk.com
FingerprintFA:DA:33:40:79:54:B2:FD:B8:D7:FD:AD:E7:20:D9:56:9E:3D:DC:40
ValidityWed, 19 Feb 2025 08:49:49 GMT - Tue, 20 May 2025 08:49:48 GMT
File type PNG image data, 492 x 328, 8-bit/color RGB, non-interlaced
Size 258 kB (257771 bytes)
Hash f3b1f8b77a0244926c66de4259358586
93106fe43ea91eb2ff6e9c93be3bce504985ed10
5ed221159f63de877ba8359eaf0e7bc846814cd23c9702f59cbd50254a4f6dac
GET /24011/ad3f379b-1551-11ec-ba28-5f54dd64648d.png HTTP/1.1
Host: cdn.bancychialk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 257771
traceparent: 00-bd7512bde145a3fe77406d18ad9ca6f2-d308be6bcf5adfa1-01
x-id-fe: osix-hw-edge-gc4
last-modified: Tue, 14 Sep 2021 11:48:28 GMT
etag: "61408c0c-3eeeb"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149592
cache: HIT
x-cached-since: 2025-03-23T09:53:17+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
HEAD ads.google.com/
429 Too Many Requests 0 B IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subjectadwords.google.com
FingerprintD1:21:31:99:C9:E1:76:ED:96:CA:45:EC:64:A7:75:DC:7A:55:2C:6F
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: ads.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
content-length: 1103
content-type: text/html; charset=UTF-8
date: Tue, 25 Mar 2025 03:26:27 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET 29047886-22554-ex.gloricragnews.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A25%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.2 kB URL GET 29047886-22554-ex.gloricragnews.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A25%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.gloricragnews.com
FingerprintD6:10:22:04:B8:B2:02:0A:55:5B:4C:AB:3C:8B:E2:88:DD:BE:03:F1
ValidityMon, 27 Jan 2025 14:25:18 GMT - Sun, 27 Apr 2025 14:25:17 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4191), with no line terminators
Hash 9b3ffecf589d0b99369b1b80c5e6ce71
c807808e834c257f922c9d88b3af3ac29daeb645
27017daee9b4b6ff0137ecb66f23b8d258215de6a892fc15fb6111bd1e5d2c6a
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A25%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.gloricragnews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:28 UTC
expires: Tue, 25 Mar 2025 03:26:28 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET 29047886-22554-3424.gloricragnews.com/v2/a/na/image?d=BQ5qQHPe-5WGrjlZEQ0Q9dfYEpy1p2xSmxOhoH0mID550AzUfd3ddeQS_5Y9qazg5oLJKb16E0BqVOdpZHv7eCXGpy7lnVVkIWlDN7FhMV_mN099cz8KNIiDsMTQXdCKpcjmHj1mbuynFV9x9JMeAVbEF4Hk2u5Z9lBI2l6FvxCKXWq8Qr2u-fD8o-6EcMcqdEI8vnQBIvMirHXzZVUguWK2egBw3v-nYPPFC2t95GrpQwWOjmGI9FxoDfSDKYAFCe6VEZlxquQngdYr9-HeY87fBWCfxX3paALOZB08nVXp6uoAs0PibHMh0g0v4ppgLDq18wrE2X_UF6rf5P1AL7281tNPls9kKGQAVyFHfdOfYhpsBakc4yySv8joloSAVKBNBmDLUqzV7zq_AuJpj4HI1nDVbgsuMuJU7Oh3fdH_wf2-S9xfzVZzszVWXarhrkxv3HKvZnW4ayCjbysFIXIvF8UnL7Cl5r52eUUT70lsPjh33DjjbY4FdZ9LtRSW9V5vYGGX6jhgKxRWKNhC_kE4NbeJusZdgZFZJLIMiZSBBQEeaGtKzDPVrjJlE9324HltEbAZIjUCPudGMOoT5jjCPrIVsdA3kGMH67NysTZXSAEoFJ-W1C5pBDVicls9jINIJG9UzNk6bkdA8o9lSnM2INMAqAJi0TjToYoz4MhGgfOG58Q1oUllnki3K0nvBBlbH9Iq_7Wikj0h1WYUfEo5iossBdtls5RzCF-6f8RQy6dBN42TsOmVto8Ep98K2Pd3Swbe_sNJnP4dNYodAenWPjO2HrhXLwqBRvWEdtpZcpyVoN3akoIclxw-k0X-a6oJObY7VUUL3bpIR4AePD0SUvhYQagFMKDXatGELurXeF5CGeKHOhCZSoR_iz_Fq0z10QkdbQNvK5lYz_AQKP0xNZddnSAANMJo4-78Uki2MnCU64dVD4aBVseMHQz7cOzmpFhCu31WoFh-Vo9mBY-K64LQVjVYXWtVQPvdfiUdx6sbibQrwBQ6PEiPrBgTCr9St8c8ff4l5R50oL9MxaJczkPokv8UcHbkFrprv1c-ZvZNTkvDOw7LbbNhiR8dJ6c4-BftSOytIY0Z0Kh7nOzgW8C8QKcpYQEt0fEdxJPcEdOG6nifgsV_wEJvwju_RuIF0qL-hWXtYUV-Wo5IH1Uhc66lHU1wq_efYJ8EtlBigasuIw
200 OK 68 B URL GET 29047886-22554-3424.gloricragnews.com/v2/a/na/image?d=BQ5qQHPe-5WGrjlZEQ0Q9dfYEpy1p2xSmxOhoH0mID550AzUfd3ddeQS_5Y9qazg5oLJKb16E0BqVOdpZHv7eCXGpy7lnVVkIWlDN7FhMV_mN099cz8KNIiDsMTQXdCKpcjmHj1mbuynFV9x9JMeAVbEF4Hk2u5Z9lBI2l6FvxCKXWq8Qr2u-fD8o-6EcMcqdEI8vnQBIvMirHXzZVUguWK2egBw3v-nYPPFC2t95GrpQwWOjmGI9FxoDfSDKYAFCe6VEZlxquQngdYr9-HeY87fBWCfxX3paALOZB08nVXp6uoAs0PibHMh0g0v4ppgLDq18wrE2X_UF6rf5P1AL7281tNPls9kKGQAVyFHfdOfYhpsBakc4yySv8joloSAVKBNBmDLUqzV7zq_AuJpj4HI1nDVbgsuMuJU7Oh3fdH_wf2-S9xfzVZzszVWXarhrkxv3HKvZnW4ayCjbysFIXIvF8UnL7Cl5r52eUUT70lsPjh33DjjbY4FdZ9LtRSW9V5vYGGX6jhgKxRWKNhC_kE4NbeJusZdgZFZJLIMiZSBBQEeaGtKzDPVrjJlE9324HltEbAZIjUCPudGMOoT5jjCPrIVsdA3kGMH67NysTZXSAEoFJ-W1C5pBDVicls9jINIJG9UzNk6bkdA8o9lSnM2INMAqAJi0TjToYoz4MhGgfOG58Q1oUllnki3K0nvBBlbH9Iq_7Wikj0h1WYUfEo5iossBdtls5RzCF-6f8RQy6dBN42TsOmVto8Ep98K2Pd3Swbe_sNJnP4dNYodAenWPjO2HrhXLwqBRvWEdtpZcpyVoN3akoIclxw-k0X-a6oJObY7VUUL3bpIR4AePD0SUvhYQagFMKDXatGELurXeF5CGeKHOhCZSoR_iz_Fq0z10QkdbQNvK5lYz_AQKP0xNZddnSAANMJo4-78Uki2MnCU64dVD4aBVseMHQz7cOzmpFhCu31WoFh-Vo9mBY-K64LQVjVYXWtVQPvdfiUdx6sbibQrwBQ6PEiPrBgTCr9St8c8ff4l5R50oL9MxaJczkPokv8UcHbkFrprv1c-ZvZNTkvDOw7LbbNhiR8dJ6c4-BftSOytIY0Z0Kh7nOzgW8C8QKcpYQEt0fEdxJPcEdOG6nifgsV_wEJvwju_RuIF0qL-hWXtYUV-Wo5IH1Uhc66lHU1wq_efYJ8EtlBigasuIw
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.gloricragnews.com
FingerprintD6:10:22:04:B8:B2:02:0A:55:5B:4C:AB:3C:8B:E2:88:DD:BE:03:F1
ValidityMon, 27 Jan 2025 14:25:18 GMT - Sun, 27 Apr 2025 14:25:17 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPe-5WGrjlZEQ0Q9dfYEpy1p2xSmxOhoH0mID550AzUfd3ddeQS_5Y9qazg5oLJKb16E0BqVOdpZHv7eCXGpy7lnVVkIWlDN7FhMV_mN099cz8KNIiDsMTQXdCKpcjmHj1mbuynFV9x9JMeAVbEF4Hk2u5Z9lBI2l6FvxCKXWq8Qr2u-fD8o-6EcMcqdEI8vnQBIvMirHXzZVUguWK2egBw3v-nYPPFC2t95GrpQwWOjmGI9FxoDfSDKYAFCe6VEZlxquQngdYr9-HeY87fBWCfxX3paALOZB08nVXp6uoAs0PibHMh0g0v4ppgLDq18wrE2X_UF6rf5P1AL7281tNPls9kKGQAVyFHfdOfYhpsBakc4yySv8joloSAVKBNBmDLUqzV7zq_AuJpj4HI1nDVbgsuMuJU7Oh3fdH_wf2-S9xfzVZzszVWXarhrkxv3HKvZnW4ayCjbysFIXIvF8UnL7Cl5r52eUUT70lsPjh33DjjbY4FdZ9LtRSW9V5vYGGX6jhgKxRWKNhC_kE4NbeJusZdgZFZJLIMiZSBBQEeaGtKzDPVrjJlE9324HltEbAZIjUCPudGMOoT5jjCPrIVsdA3kGMH67NysTZXSAEoFJ-W1C5pBDVicls9jINIJG9UzNk6bkdA8o9lSnM2INMAqAJi0TjToYoz4MhGgfOG58Q1oUllnki3K0nvBBlbH9Iq_7Wikj0h1WYUfEo5iossBdtls5RzCF-6f8RQy6dBN42TsOmVto8Ep98K2Pd3Swbe_sNJnP4dNYodAenWPjO2HrhXLwqBRvWEdtpZcpyVoN3akoIclxw-k0X-a6oJObY7VUUL3bpIR4AePD0SUvhYQagFMKDXatGELurXeF5CGeKHOhCZSoR_iz_Fq0z10QkdbQNvK5lYz_AQKP0xNZddnSAANMJo4-78Uki2MnCU64dVD4aBVseMHQz7cOzmpFhCu31WoFh-Vo9mBY-K64LQVjVYXWtVQPvdfiUdx6sbibQrwBQ6PEiPrBgTCr9St8c8ff4l5R50oL9MxaJczkPokv8UcHbkFrprv1c-ZvZNTkvDOw7LbbNhiR8dJ6c4-BftSOytIY0Z0Kh7nOzgW8C8QKcpYQEt0fEdxJPcEdOG6nifgsV_wEJvwju_RuIF0qL-hWXtYUV-Wo5IH1Uhc66lHU1wq_efYJ8EtlBigasuIw HTTP/1.1
Host: 29047886-22554-3424.gloricragnews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.xvidstub.com/xvideos/asian-porno-novinha-de-13-416626.html/title/myhash/3
200 OK 107 B URL GET pdocac.tube-dl.top/v/s://www.xvidstub.com/xvideos/asian-porno-novinha-de-13-416626.html/title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash c1c333a2bd6745ba4ad803ad202cd406
8c088b172a54e0139aaa8a2ea85360e85fe5d869
9153cfa256ef0153f1181e00754288b7b51a28b6ea1c02f8400bd81b8731116e
GET /v/s://www.xvidstub.com/xvideos/asian-porno-novinha-de-13-416626.html/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.xvidstub.com/xvideos/asian-porno-novinha-de-13-416626.html/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://www.xvidstub.com/xvideos/asian-porno-novinha-de-13-416626.html/title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo4/07/4f/a7a666, lfm-1-127551, lmd-127551, lud-1300111, xfvlen-392696, fsize-46618, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.xvidstub.com/xvideos/asian-porno-novinha-de-13-416626.html/title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dfLHujQdU1r473u98xijmOFTYzG1t%2Bki6iMxqRwi54ESL9y0dfybw9%2BGZFFKYEPT2RH%2FIfNkOfPp39Mg599eVvqCOxcQ%2F0YPdG%2FTtAGaK9%2B%2BMI0%2FxL%2F%2BsN0%2FKjIQ8sLK0MbV5as%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bac5e56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1750&min_rtt=417&rtt_var=2148&sent=82&recv=75&lost=0&retrans=3&sent_bytes=28898&recv_bytes=6602&delivery_rate=6135593&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9012&x=0"
X-Firefox-Spdy: h2
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:23 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kvs9ZCSPZQCQ%2BlZ4egR03amADg6XBIf4xv80a1%2BFPdlmw6IXAhNm%2B3ouoeoyRD%2F1B8li3kqaVb7M7pyVtC7YmoUEFoDrq2pmJ1wyKuopryelhwsv4nPxB8EVH7MeOmwXauCBLg%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81394
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e77190d0b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET incesto.blog.br/favicon.ico
404 Not Found 0 B URL GET incesto.blog.br/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectincesto.blog.br
Fingerprint00:B6:70:E8:E5:FE:8D:69:2C:9B:35:56:A9:FA:D3:43:59:35:C9:D3
ValidityThu, 13 Mar 2025 15:50:25 GMT - Wed, 11 Jun 2025 16:49:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: incesto.blog.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html
cache-control: private, max-age=1800, must-revalidate
pragma: no-cache
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 4250
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ekpHuS8Rq6WMd4b0dF11aPLzxxdP5Vc8ctpZILqmWIlUhXMFfUlSja396fHMW3zxeXJRDQMRXT%2Fv6BR6%2BRvQAfzxhuXcZgQgtKsj3ul7trJIYyaqxj%2BltvudDaqWEf34sn4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e8c7db4712f-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=452&min_rtt=401&rtt_var=139&sent=6&recv=10&lost=0&retrans=0&sent_bytes=3283&recv_bytes=1160&delivery_rate=7489655&cwnd=253&unsent_bytes=0&cid=174e62233e706cb0&ts=431&x=0"
X-Firefox-Spdy: h2
GET xvideosrei.com/wp-content/uploads/2021/07/flagra-novinha-na-escola.jpg
200 OK 16 kB URL GET xvideosrei.com/wp-content/uploads/2021/07/flagra-novinha-na-escola.jpg
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 600x337, components 3
Hash b7fb5c783aea2cc8e9b4a9e6894577c1
d6229fcc0dd1e7b7f377fc356bf5d4288408c89d
93218cb3d7f3ee8f7bcb0879657559ce65d57e6db1bf9490c1c208fa52c56aa9
GET /wp-content/uploads/2021/07/flagra-novinha-na-escola.jpg HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:13 GMT
content-type: image/jpeg
content-length: 16519
last-modified: Wed, 07 Jul 2021 02:48:19 GMT
etag: "60e515f3-4087"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:13 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.flagrasamadores.net/favicon.ico
302 Found 1.8 kB URL GET www.flagrasamadores.net/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectflagrasamadores.net
FingerprintB9:8B:46:DA:A3:12:DA:3F:92:17:49:91:C3:7E:E0:7F:EE:61:CF:09
ValiditySun, 16 Mar 2025 17:55:33 GMT - Sat, 14 Jun 2025 18:53:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.flagrasamadores.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=UTF-8
location: https://www.flagrasamadores.net/wp-content/uploads/2024/07/cropped-flagras-amadores_ico1-1-32x32.png
link: <https://www.flagrasamadores.net/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000;
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=os89nVRYz0J%2FhtdMG9w74PGkfhbDqIe307KrLIGHIkdZzHNFEWKVNP%2F9puKqqVRd%2Be4QtF8wxDrkHSmB5akCPUj3nm9ShFIiyFSJEugmvFsXIJzUXvbL2%2FvypJltYL5UXEStr4cgSD8Y2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e8b8d8d56cc-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2500&min_rtt=441&rtt_var=3724&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3223&recv_bytes=1069&delivery_rate=3283446&cwnd=254&unsent_bytes=0&cid=87dec0e0c80fca7f&ts=590&x=0"
X-Firefox-Spdy: h2
GET xvideosrei.com/wp-content/uploads/2021/06/novinha-chupando-pau-na-escola.jpg
200 OK 24 kB URL GET xvideosrei.com/wp-content/uploads/2021/06/novinha-chupando-pau-na-escola.jpg
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 600x337, components 3
Hash d03229846ea4f5e0655c200ba47e2274
fb414f6e22235dfd37a5f122eae7546d1f8db117
be5554563504a553f0e818e8faf47db1e10d0d6b3e74a15a7b4a0152f7aef320
GET /wp-content/uploads/2021/06/novinha-chupando-pau-na-escola.jpg HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: image/jpeg
content-length: 23582
last-modified: Wed, 30 Jun 2021 01:57:37 GMT
etag: "60dbcf91-5c1e"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET xvideosrei.com/wp-content/uploads/2021/06/novinha-chupando-na-escola.jpg
200 OK 16 kB URL GET xvideosrei.com/wp-content/uploads/2021/06/novinha-chupando-na-escola.jpg
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 600x337, components 3
Hash 576badf93c3fa54726e571a2c94eb59d
26548cf22dc596bb7b1cd90f9b79a0d00a948078
22065d93782752133c4e016009d493191b1e1cde808e662dbac12137e1ad3c48
GET /wp-content/uploads/2021/06/novinha-chupando-na-escola.jpg HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: image/jpeg
content-length: 16109
last-modified: Fri, 18 Jun 2021 14:20:19 GMT
etag: "60ccaba3-3eed"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash be4733c7722d9c6322ff4ddb1ff3b2e0
923b01a91025b7511bd6242cd12dfc363890f46e
284e20f03d68b873aabb6cf20f2707cf081e5fe83ac14c5edac58545421684d1
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19508
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET cdn.phascregairks.com/3424/35eaa433-53d6-11ee-92a5-15be44bed8ee.jpg
200 OK 52 kB URL GET cdn.phascregairks.com/3424/35eaa433-53d6-11ee-92a5-15be44bed8ee.jpg
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.phascregairks.com
FingerprintF2:2B:B6:6D:A3:A6:55:4A:88:6B:2A:2F:EC:3C:F3:8D:03:95:45:94
ValidityWed, 19 Feb 2025 08:49:48 GMT - Tue, 20 May 2025 08:49:47 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x270, components 3
Hash 22f13a9ad5e97673662ca971af2d3d87
c938a99701652ab63704f2dc99a303b772d25af7
a045fce2009eeb96d6dda3c1f908c7631eaebe41471abb288213bc7f14e3c7d7
GET /3424/35eaa433-53d6-11ee-92a5-15be44bed8ee.jpg HTTP/1.1
Host: cdn.phascregairks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/jpeg
content-length: 52538
traceparent: 00-60048c0c7c061845aeb0d203bdfe2182-1662c9af1f287507-01
x-id-fe: osix-hw-edge-gc4
last-modified: Fri, 15 Sep 2023 14:43:18 GMT
etag: "65046d86-cd3a"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149807
cache: HIT
x-cached-since: 2025-03-23T09:49:42+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.videosdesexo.mobi/favicon.ico
0 B URL GET www.videosdesexo.mobi/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.videosdesexo.mobi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET novinhafudendo.com/wp-content/uploads/2016/09/cropped-media-md-32x32.png
200 OK 1.3 kB URL GET novinhafudendo.com/wp-content/uploads/2016/09/cropped-media-md-32x32.png
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectnovinhafudendo.com
Fingerprint22:18:97:06:51:5C:9C:B5:AE:36:1C:1F:F4:71:3C:0D:8D:DF:46:A4
ValidityTue, 25 Feb 2025 22:53:54 GMT - Mon, 26 May 2025 23:52:37 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash 25cfe626fd8aac86dead3ca71236d765
6484e3d57d25399b6d92a2db8f26085285d94eb5
e72f5c038e0dff05e594fba669fec13824093a08880e6431094c3a83ba5a0e32
GET /wp-content/uploads/2016/09/cropped-media-md-32x32.png HTTP/1.1
Host: novinhafudendo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: image/png
content-length: 1288
last-modified: Wed, 08 Mar 2023 19:19:36 GMT
etag: "6408dfc8-508"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 77917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h%2BQBAKevALOu%2B%2FGXDIFI02jFDOKzsGJdZxRiVuiyg97FNVkFPTLGGs%2Bgd9UNnwLfLsDlNmehlPCTdmls3cD36r1zM8tBuYcHyrcnfJx9dC50nufZ27Ldz0xX8eDMMXEF76Yg0l0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e8f7be0b4f1-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1641&min_rtt=423&rtt_var=1237&sent=11&recv=13&lost=0&retrans=0&sent_bytes=4114&recv_bytes=1300&delivery_rate=4292490&cwnd=256&unsent_bytes=0&cid=8c54d44e9ed63a83&ts=1065&x=0"
X-Firefox-Spdy: h2
GET filmesporno.xxx/wp-content/uploads/2019/11/video-com-uma-novinha-fazendo-sexo-na-escola.jpg
200 OK 11 kB URL GET filmesporno.xxx/wp-content/uploads/2019/11/video-com-uma-novinha-fazendo-sexo-na-escola.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectfilmesporno.xxx
Fingerprint21:88:4A:28:A1:02:E4:46:60:9E:3F:3B:D1:0F:D7:AA:19:BB:7C:CB
ValiditySat, 01 Feb 2025 09:05:19 GMT - Fri, 02 May 2025 10:02:17 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 352x198, components 3
Hash 4237c1c80d24a4dbfcfab3c081af38f4
0ef09402d2a41cbaf65f559353b02bf074991db0
4c53a6c20ad71bed092255ff5ffa45a661894b1b6f3450bb43719696c825e00a
GET /wp-content/uploads/2019/11/video-com-uma-novinha-fazendo-sexo-na-escola.jpg HTTP/1.1
Host: filmesporno.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 11040
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qloUjTJ40etuHto9tfwarSXmw0wEC8Fshc3jo45I8y4u%2BKWkcx0VqKlnAihAIxvuhNlv9V0daS6K9t2BiMrP63KM1k1Lqr2sTp9x5qwqhCmT8HcxPnAQftdfmGTOSFSev7Y%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 27 Nov 2019 13:09:32 GMT
etag: "5dde758c-2b20"
version: MS24102801
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Thu, 27 Nov 2025 04:05:03 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 39729
accept-ranges: bytes
cf-ray: 925b4ea3b8960afa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
200 OK 4.6 kB URL GET cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectsc.gl
Fingerprint67:A4:7F:E0:42:30:CD:09:BF:D1:B3:6C:32:AC:32:FD:24:F3:0F:F4
ValidityFri, 14 Feb 2025 15:57:25 GMT - Thu, 15 May 2025 16:53:40 GMT
File type JavaScript source, ASCII text, with very long lines (4659), with no line terminators
Hash 16f6b2d7d05eb79ddd9417c9f1785c78
48b19fa48c68d03d10c2cd65004a96ebcfd348fa
b41db332c310ffe73221c423fff030c53e40e4a6cd827e78ec8e3330a86b2648
GET /videojs-hotkeys/latest/videojs.hotkeys.min.js HTTP/1.1
Host: cdn.sc.gl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/javascript
content-length: 1827
last-modified: Sat, 12 Oct 2024 06:22:16 GMT
etag: "11d9-624419ffee9fe-gzip"
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cache-control: public, max-age=7200
cf-cache-status: HIT
age: 2346
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JCEq6kKmVSTkdfLiP3CKzASYh2vAeZqKqntex7QF0tBV9uw4IY%2BkK4hKBLqYX18nD0w5CiseuNVzLwFd%2FnGsT4UviV2tRKr718boDTDbU07%2BZGQL1WBvsme0qc8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e5f980056b4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4133&min_rtt=2908&rtt_var=1697&sent=16&recv=10&lost=0&retrans=0&sent_bytes=6740&recv_bytes=1482&delivery_rate=3794&cwnd=12000&unsent_bytes=0&cid=d3376fd24227791a&ts=854&x=1", cfExtPri, cfHdrFlush;dur=0
GET pornotarado.com/favicon.ico
404 Not Found 0 B URL GET pornotarado.com/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectpornotarado.com
FingerprintC0:B7:CA:8D:D7:7E:49:42:C8:E6:60:3B:01:BC:32:34:8C:26:33:66
ValidityWed, 12 Mar 2025 02:59:27 GMT - Tue, 10 Jun 2025 03:57:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: pornotarado.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
age: 20065
cache-control: max-age=300
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZNNB7bnSqlFwgbOen%2Bw1xbv4D9eE7YDzfdBAz2mYaYiK5VOZGocJtL8aNYNX2B%2Bg%2FLnjF2rm7F6g8%2B%2FLeGLv4mGDvCUOZlFO6FE6BNOxgzN7VVN1YJGGCD5WEBrLbD7Bc08%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e8d8dc97130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=518&min_rtt=410&rtt_var=154&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3212&recv_bytes=1032&delivery_rate=7017770&cwnd=253&unsent_bytes=0&cid=26590711e738e49c&ts=494&x=0"
X-Firefox-Spdy: h2
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t18HxlTGQ8TwgX5vmdLF9Lou1WJL4fqkal5PfFWb1S5cmUVhvJhfduOzlHFt%2FmPxEsKAb2CyAw%2BV1KlDCSBbK42IuW8TWAdlYkuBHbXn%2BwPsw6wX4FhfPtlI3Ne%2FoSC3%2Bbxfqw%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81391
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e6098ce0b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET cdn.phascregairks.com/24234/cc0852ca-617d-11ec-a1f6-a44922a49201.jpeg
200 OK 67 kB URL GET cdn.phascregairks.com/24234/cc0852ca-617d-11ec-a1f6-a44922a49201.jpeg
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.phascregairks.com
FingerprintF2:2B:B6:6D:A3:A6:55:4A:88:6B:2A:2F:EC:3C:F3:8D:03:95:45:94
ValidityWed, 19 Feb 2025 08:49:48 GMT - Tue, 20 May 2025 08:49:47 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 607x360, components 3
Hash eaf76a32d086929eb8f244168c40a379
882c07387edf410c0a5056e3d493c0dd1713dcdd
a3ed48d6d3420287f37aa545fbe6ab00afa8202178ebaff0d6f7a8a948b07cd2
GET /24234/cc0852ca-617d-11ec-a1f6-a44922a49201.jpeg HTTP/1.1
Host: cdn.phascregairks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/jpeg
content-length: 66726
traceparent: 00-028874e383f8f889a342a0cfb545e15b-1ad0ae51d6738a14-01
x-id-fe: osix-hw-edge-gc4
last-modified: Mon, 20 Dec 2021 10:15:46 GMT
etag: "61c057d2-104a6"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149530
cache: HIT
x-cached-since: 2025-03-23T09:54:19+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
200 OK 4.6 kB URL GET cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectsc.gl
Fingerprint67:A4:7F:E0:42:30:CD:09:BF:D1:B3:6C:32:AC:32:FD:24:F3:0F:F4
ValidityFri, 14 Feb 2025 15:57:25 GMT - Thu, 15 May 2025 16:53:40 GMT
File type JavaScript source, ASCII text, with very long lines (4659), with no line terminators
Hash 16f6b2d7d05eb79ddd9417c9f1785c78
48b19fa48c68d03d10c2cd65004a96ebcfd348fa
b41db332c310ffe73221c423fff030c53e40e4a6cd827e78ec8e3330a86b2648
GET /videojs-hotkeys/latest/videojs.hotkeys.min.js HTTP/1.1
Host: cdn.sc.gl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: text/javascript
content-length: 1827
last-modified: Sat, 12 Oct 2024 06:22:16 GMT
etag: "11d9-624419ffee9fe-gzip"
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cache-control: public, max-age=7200
cf-cache-status: HIT
age: 2350
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rk8%2FV%2FDmn3ieQjxTxaWGsOwMCR5T4z4eY0JvzF9Twv2u2SfvCYnNcqUrQCYdmHS4YNoW4em2ygho5IBiLLqPKwhapP8P%2FzeZO6iVcbU5o%2BY1afEY2DueFWCc5tQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e7a8b9556b4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3863&min_rtt=1968&rtt_var=1814&sent=20&recv=12&lost=0&retrans=0&sent_bytes=9368&recv_bytes=1773&delivery_rate=316467&cwnd=12000&unsent_bytes=0&cid=d3376fd24227791a&ts=5161&x=1", cfExtPri, cfHdrFlush;dur=0
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 8f89400ff1aa14fa36a43e33317d173a
e711c1ee136b7d909bfcd483caa80a0ce02bee8a
5a1499e1529f47450a303e14a3421b7b03a42c4e7a41f99006cb599f8d383bae
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:26 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19510
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/suruba-com-novinha-da-escola//title/myhash/3
200 OK 249 B URL GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/suruba-com-novinha-da-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 08672c593865c8e97dcd600ebace9bd8
57d1557aaf3f95c95b0ccee44ec6dbbb5038c586
2a790e05a66eee66b11f4df9c9175de250ed64ade23b57977f295909a722cee7
GET /v/s://xvideosrei.com/porno/suruba-com-novinha-da-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideosrei.com/porno/suruba-com-novinha-da-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-es-pt-myhost--filteron-
line1432: notjp-es-pt-myhost--filteron-/v/s://xvideosrei.com/porno/suruba-com-novinha-da-escola//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo2/b1/0c/d98b54, lfm-1-1390, lmd-1390, lud-97536, xfvlen-457965, fsize-56089, played-13
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideosrei.com/porno/suruba-com-novinha-da-escola//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: HIT
age: 3331444
last-modified: Fri, 14 Feb 2025 14:02:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M73tjpylclm0GeKQKijspSN3Lv9%2BHajPH5g%2F%2F3c%2FUCiIuMRQQFO%2Bq4EjNHrGoCNXIRpUBP9byZCGGayDq8SMJ4Zbw5%2Bl8oPsv2IoHaPehgb8m8FKP03%2BuxeyCQDnDVYBdKfooUU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc7f56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2937&min_rtt=437&rtt_var=2702&sent=41&recv=47&lost=0&retrans=1&sent_bytes=11333&recv_bytes=5020&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8676&x=0"
X-Firefox-Spdy: h2
GET xvideos.blog.br/favicon.ico
302 Found 508 B URL GET xvideos.blog.br/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectxvideos.blog.br
Fingerprint49:07:C9:59:6E:92:2A:32:D5:97:87:74:0A:79:29:33:7A:7D:84:5B
ValidityThu, 06 Mar 2025 05:44:52 GMT - Wed, 04 Jun 2025 06:44:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: xvideos.blog.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=UTF-8
location: https://xvideos.blog.br/wp-content/uploads/2023/03/porno.png
x-dns-prefetch-control: on
link: <https://xvideos.blog.br/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
x-litespeed-cache: hit
cache-control: no-cache, no-store, must-revalidate, max-age=0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hK3rdJMf9jL7sxxWCF6GooPfuaVMKiI13JBfyiMVaVseCQ2ADxcMv1Ewg0Z4RkEpXdFDO5dCulE5V6rvSU5vSHSuyhI0wpt46MpzsTovv4avQaZKSucpjYXORabkbK1g0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 925b4e8c7db3712f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2845&min_rtt=401&rtt_var=4874&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3287&recv_bytes=1191&delivery_rate=7425641&cwnd=254&unsent_bytes=0&cid=0888fecc6c7c6071&ts=617&x=0"
X-Firefox-Spdy: h2
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 8f89400ff1aa14fa36a43e33317d173a
e711c1ee136b7d909bfcd483caa80a0ce02bee8a
5a1499e1529f47450a303e14a3421b7b03a42c4e7a41f99006cb599f8d383bae
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:26 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19510
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 242 kB URL GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
Size 242 kB (242447 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 88616
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.366.0
x-jsd-version-type: version
etag: W/"3b30f-xasoqLlON+0SM11iGCxWGKe469U"
content-encoding: br
accept-ranges: bytes
date: Tue, 25 Mar 2025 03:26:25 GMT
age: 30629
x-served-by: cache-fra-eddf8230100-FRA, cache-hel1410021-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 29047886-22554-ex.gloricragnews.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%225%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.1 kB URL GET 29047886-22554-ex.gloricragnews.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%225%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.gloricragnews.com
FingerprintD6:10:22:04:B8:B2:02:0A:55:5B:4C:AB:3C:8B:E2:88:DD:BE:03:F1
ValidityMon, 27 Jan 2025 14:25:18 GMT - Sun, 27 Apr 2025 14:25:17 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4173), with no line terminators
Hash 98a505649518538a9f259265b1a789a0
5082afcaa9ca9bb40b96de8b119e6ce6a12f46b5
3c72bb34e19e8c0153109de4b1c5dca41853cf1d9c635e02d9e601338b5a6068
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%225%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.gloricragnews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:28 UTC
expires: Tue, 25 Mar 2025 03:26:28 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET 29047886-22554-ex.undeciliste.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.1 kB URL GET 29047886-22554-ex.undeciliste.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.undeciliste.com
FingerprintB2:B4:0B:3C:3C:3D:57:A1:33:77:D7:34:88:54:24:68:02:99:D5:B9
ValidityMon, 03 Feb 2025 14:34:59 GMT - Sun, 04 May 2025 14:34:58 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4162), with no line terminators
Hash 81c81bd0b20364685556458aebe71d4b
f2c228e796b48ac360a28dc92d7cd102e990b3dd
c5ccf240a36d2023172b67c307106aaa15057360c82555e3fe6bc9797ba8dd4f
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.undeciliste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:29 UTC
expires: Tue, 25 Mar 2025 03:26:29 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET css.4jpg.top/index.php?js=very
200 OK 0 B URL GET css.4jpg.top/index.php?js=very
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:25 GMT
content-type: text/html; charset=UTF-8
imghost: 104194820-h-css4jpgtopmh--NO-rm104238220248/index.php?js=very
56nloadrate: 1.214375
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: EXPIRED
xkey-192la: jcss./index.php?js=very-A-css.4jpg.top--myzone---no
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mL89Qz4JxeW9Q4rg3ZfnkzVokcKfMhQlLcYM9Udz4h6M05z1Qsd2SLytlqA%2Fb91JqK8AYj2KojptBxkODk9RXI2PQCPDyd1Q4roCSNsUtF%2FJz8KSBozf25LD%2B2TYIlU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e7c5d8b568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=44921&min_rtt=1254&rtt_var=56815&sent=296&recv=61&lost=0&retrans=2&sent_bytes=292029&recv_bytes=10159&delivery_rate=535352&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=8369&x=1", cfExtPri, cfHdrFlush;dur=0
GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&page-ref=https%3A%2F%2Fav.4freedom.click%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A218509961%3Az%3A0%3Ai%3A20250325032624%3Aet%3A1742873185%3Ac%3A1%3Arn%3A1072469295%3Arqn%3A2%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C509%2C0%2C1177%2C1177%2C0%2C540%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873180032%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873185%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
200 OK 551 B URL GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&page-ref=https%3A%2F%2Fav.4freedom.click%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A218509961%3Az%3A0%3Ai%3A20250325032624%3Aet%3A1742873185%3Ac%3A1%3Arn%3A1072469295%3Arqn%3A2%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C509%2C0%2C1177%2C1177%2C0%2C540%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873180032%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873185%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint4E:A6:D4:57:F5:B7:FB:C1:98:C0:40:D2:B8:FA:B4:10:43:09:41:94
ValiditySun, 09 Mar 2025 21:02:24 GMT - Sun, 31 Aug 2025 20:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (609), with no line terminators
Hash 9a6ff714cbca5168de0158d2ed0c220a
ec743c2f40df6a43564350621a8aebfd05568a8b
e55d0150ec9fa737583c6748c552aa88cfd4b4a577e49a6835f33ca46805af78
GET /watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&page-ref=https%3A%2F%2Fav.4freedom.click%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A218509961%3Az%3A0%3Ai%3A20250325032624%3Aet%3A1742873185%3Ac%3A1%3Arn%3A1072469295%3Arqn%3A2%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C509%2C0%2C1177%2C1177%2C0%2C540%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873180032%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873185%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1796366081742873181; i=AG2CG3h7JX5D6uHkdu1fjbkaQFhf9AzeJaWXfXbd4fp05BYJ8B7Q9matfl4LqbJvP1MnCnsi8jHnkCQCa8X42KYmMEg=; yandexuid=1842795031742873181; yuidss=1842795031742873181; ymex=1774409181.yrts.1742873181#1774409181.yrtsi.1742873181; bh=YN3EiL8GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 551
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
access-control-allow-credentials: true
x-content-type-options: nosniff
pragma: no-cache
x-xss-protection: 1; mode=block
access-control-allow-origin: https://fixedjs.jtube.top
last-modified: Tue, 25-Mar-2025 03:26:25 GMT
content-type: application/json; charset=utf-8
expires: Tue, 25-Mar-2025 03:26:25 GMT
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/pagando-peitinho-na-escola//title/myhash/3
200 OK 243 B URL GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/pagando-peitinho-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 3739eefd11750c27ea46189da26142a0
2fe13baf278410ff4c6f4d45ff038ea8f0c08e63
bb0aa1e3f3d3fc7f724ca19632547aec8eb77c8df6981be5dca9697dcc889e58
GET /v/s://xvideosrei.com/porno/pagando-peitinho-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideosrei.com/porno/pagando-peitinho-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line1431: notjp-nojp-myhost--filteron-/v/s://xvideosrei.com/porno/pagando-peitinho-na-escola//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/05/c0/08b452, lfm-1-2827, lmd-2827, lud-39286, xfvlen-108091, fsize-18712, played-22
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideosrei.com/porno/pagando-peitinho-na-escola//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: HIT
age: 75858
last-modified: Mon, 24 Mar 2025 06:22:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2FcO9zD9RDSrPs%2BBQz4aTDiyF%2B6qzr42ih6U8636M9aUuvMpBwANMmhrH18znLD6mbqwBJIixiM3%2FzWAT%2BRxfllnhG1coq3O98Hww%2F7u7%2BdT%2B2J9UKm77yIdMyh%2BWEqypUrXn6I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc9356b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2674&min_rtt=437&rtt_var=2552&sent=49&recv=49&lost=0&retrans=1&sent_bytes=14566&recv_bytes=5264&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8684&x=0"
X-Firefox-Spdy: h2
GET 29047886-22554-3424.pelverityrerlob.com/v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q9dfYEpy1p2xSmxOhoH0mIjZptvziOevYdegS_5Y9qazg5oLJKb16E0BqVOdpBL8RyRUOZEhKRaW_0La8HOfRFvFz8SYRH_B1xk68oJXirxZ9Or_T9TogbSOFjz1Q4gEl2nRa0rQTTZDPE3i6QkycgeQNjMCY4ZN5ghxoM3jsqAWQzv6exRhrO9bY5xdAElExAPRZGSF0--tATnEqh9dXr7T6dKej6FzfoqTC9kSvn21nRkzpjK-fFaEJcTjTAkHjsDsKRionQ-Uc2ifY6WwXKm8yyPtuYpIs2vt6Zh3Ufnv1AfE8yCo9mGPoO5NyGYB_g1o_WBzcgGLkAH4tOunGa6F3WEGRwrLVNNbhbJ6z28-4P7hiYN0g4QbGg0reutgYbtsStnka4xi4t6uf7m_4QORUyujgpNXv6U8vucflbp9RUjwOZ9hFlC8JuctapfguJTUmVVeDivhCxEPG4BcnDiXJw_uJ_yqG-bxPXUxhSWXS-fp7LQnE82pw8kLHqhDUgd5wtCPtNh4VxYHSykr7kBzJDJ_LNZRvFhHCpI34UWtSJv_HM7z5duyMP0I2r5CLR2KPuUVpfhZM9J5mS-XHb48QEo9gSUYSgJgxCYiFBOuNLEgMzA0Yfw0TG7M5Kd1dSc1970qnz7Nz8pqg_VVnlhY97lrK3NN7cX4nREUT4SL3xt3luQPO5XeyPTbZKVmlwAHEXeAOjGNVNY0htN318HMJ8abET50exz9VCgTYsmrqr6kMXT64xSjV_4S8lO81i_sxIuSUf3lP_5yqpmU1-9fVe00OQM2qhuMLCFbH7eBtJrR1q1I4As0ZGQfVzIbf97cgREsthCTiunvrHTglGrPRt2tbe4wI7heOrqk0USHsq4dZUAjKg1cFQKT4ri9FeJb55h82_09pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMhm5KVVlqgZiHMvDOxwMg7XFkX_Y
200 OK 68 B URL GET 29047886-22554-3424.pelverityrerlob.com/v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q9dfYEpy1p2xSmxOhoH0mIjZptvziOevYdegS_5Y9qazg5oLJKb16E0BqVOdpBL8RyRUOZEhKRaW_0La8HOfRFvFz8SYRH_B1xk68oJXirxZ9Or_T9TogbSOFjz1Q4gEl2nRa0rQTTZDPE3i6QkycgeQNjMCY4ZN5ghxoM3jsqAWQzv6exRhrO9bY5xdAElExAPRZGSF0--tATnEqh9dXr7T6dKej6FzfoqTC9kSvn21nRkzpjK-fFaEJcTjTAkHjsDsKRionQ-Uc2ifY6WwXKm8yyPtuYpIs2vt6Zh3Ufnv1AfE8yCo9mGPoO5NyGYB_g1o_WBzcgGLkAH4tOunGa6F3WEGRwrLVNNbhbJ6z28-4P7hiYN0g4QbGg0reutgYbtsStnka4xi4t6uf7m_4QORUyujgpNXv6U8vucflbp9RUjwOZ9hFlC8JuctapfguJTUmVVeDivhCxEPG4BcnDiXJw_uJ_yqG-bxPXUxhSWXS-fp7LQnE82pw8kLHqhDUgd5wtCPtNh4VxYHSykr7kBzJDJ_LNZRvFhHCpI34UWtSJv_HM7z5duyMP0I2r5CLR2KPuUVpfhZM9J5mS-XHb48QEo9gSUYSgJgxCYiFBOuNLEgMzA0Yfw0TG7M5Kd1dSc1970qnz7Nz8pqg_VVnlhY97lrK3NN7cX4nREUT4SL3xt3luQPO5XeyPTbZKVmlwAHEXeAOjGNVNY0htN318HMJ8abET50exz9VCgTYsmrqr6kMXT64xSjV_4S8lO81i_sxIuSUf3lP_5yqpmU1-9fVe00OQM2qhuMLCFbH7eBtJrR1q1I4As0ZGQfVzIbf97cgREsthCTiunvrHTglGrPRt2tbe4wI7heOrqk0USHsq4dZUAjKg1cFQKT4ri9FeJb55h82_09pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMhm5KVVlqgZiHMvDOxwMg7XFkX_Y
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.pelverityrerlob.com
FingerprintB9:FB:16:E0:95:A3:3F:15:A3:07:CB:73:80:87:7B:CB:CA:59:1E:16
ValidityThu, 30 Jan 2025 14:22:16 GMT - Wed, 30 Apr 2025 14:22:15 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q9dfYEpy1p2xSmxOhoH0mIjZptvziOevYdegS_5Y9qazg5oLJKb16E0BqVOdpBL8RyRUOZEhKRaW_0La8HOfRFvFz8SYRH_B1xk68oJXirxZ9Or_T9TogbSOFjz1Q4gEl2nRa0rQTTZDPE3i6QkycgeQNjMCY4ZN5ghxoM3jsqAWQzv6exRhrO9bY5xdAElExAPRZGSF0--tATnEqh9dXr7T6dKej6FzfoqTC9kSvn21nRkzpjK-fFaEJcTjTAkHjsDsKRionQ-Uc2ifY6WwXKm8yyPtuYpIs2vt6Zh3Ufnv1AfE8yCo9mGPoO5NyGYB_g1o_WBzcgGLkAH4tOunGa6F3WEGRwrLVNNbhbJ6z28-4P7hiYN0g4QbGg0reutgYbtsStnka4xi4t6uf7m_4QORUyujgpNXv6U8vucflbp9RUjwOZ9hFlC8JuctapfguJTUmVVeDivhCxEPG4BcnDiXJw_uJ_yqG-bxPXUxhSWXS-fp7LQnE82pw8kLHqhDUgd5wtCPtNh4VxYHSykr7kBzJDJ_LNZRvFhHCpI34UWtSJv_HM7z5duyMP0I2r5CLR2KPuUVpfhZM9J5mS-XHb48QEo9gSUYSgJgxCYiFBOuNLEgMzA0Yfw0TG7M5Kd1dSc1970qnz7Nz8pqg_VVnlhY97lrK3NN7cX4nREUT4SL3xt3luQPO5XeyPTbZKVmlwAHEXeAOjGNVNY0htN318HMJ8abET50exz9VCgTYsmrqr6kMXT64xSjV_4S8lO81i_sxIuSUf3lP_5yqpmU1-9fVe00OQM2qhuMLCFbH7eBtJrR1q1I4As0ZGQfVzIbf97cgREsthCTiunvrHTglGrPRt2tbe4wI7heOrqk0USHsq4dZUAjKg1cFQKT4ri9FeJb55h82_09pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMhm5KVVlqgZiHMvDOxwMg7XFkX_Y HTTP/1.1
Host: 29047886-22554-3424.pelverityrerlob.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET mc.webvisor.org/watch/48140495?wmode=7&page-url=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&page-ref=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Af9t8efumbe4l8kadlsqxea7gs67%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1156218247728%3Ahid%3A11855179%3Az%3A0%3Ai%3A20250325032619%3Aet%3A1742873180%3Ac%3A1%3Arn%3A213153312%3Arqn%3A1%3Au%3A1742873180760117592%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1909%3Awv%3A2%3Ads%3A0%2C0%2C989%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873177098%3Afip%3A1394e1c173a4866d31f6f1da471bacd3-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873181%3At%3AOkulda%20yepyeni-Seks%2C%20Porno-Xhamster%20%5B11%20%3A01x360p%5D&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(21562884)fip(1)ti(1)
302 Found 540 B URL GET mc.webvisor.org/watch/48140495?wmode=7&page-url=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&page-ref=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Af9t8efumbe4l8kadlsqxea7gs67%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1156218247728%3Ahid%3A11855179%3Az%3A0%3Ai%3A20250325032619%3Aet%3A1742873180%3Ac%3A1%3Arn%3A213153312%3Arqn%3A1%3Au%3A1742873180760117592%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1909%3Awv%3A2%3Ads%3A0%2C0%2C989%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873177098%3Afip%3A1394e1c173a4866d31f6f1da471bacd3-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873181%3At%3AOkulda%20yepyeni-Seks%2C%20Porno-Xhamster%20%5B11%20%3A01x360p%5D&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(21562884)fip(1)ti(1)
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint4E:A6:D4:57:F5:B7:FB:C1:98:C0:40:D2:B8:FA:B4:10:43:09:41:94
ValiditySun, 09 Mar 2025 21:02:24 GMT - Sun, 31 Aug 2025 20:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch/48140495?wmode=7&page-url=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&page-ref=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Af9t8efumbe4l8kadlsqxea7gs67%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1156218247728%3Ahid%3A11855179%3Az%3A0%3Ai%3A20250325032619%3Aet%3A1742873180%3Ac%3A1%3Arn%3A213153312%3Arqn%3A1%3Au%3A1742873180760117592%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1909%3Awv%3A2%3Ads%3A0%2C0%2C989%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873177098%3Afip%3A1394e1c173a4866d31f6f1da471bacd3-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873181%3At%3AOkulda%20yepyeni-Seks%2C%20Porno-Xhamster%20%5B11%20%3A01x360p%5D&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(21562884)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
access-control-allow-origin: https://av.4freedom.click
location: /watch/48140495/1?wmode=7&page-url=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&page-ref=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Af9t8efumbe4l8kadlsqxea7gs67%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1156218247728%3Ahid%3A11855179%3Az%3A0%3Ai%3A20250325032619%3Aet%3A1742873180%3Ac%3A1%3Arn%3A213153312%3Arqn%3A1%3Au%3A1742873180760117592%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1909%3Awv%3A2%3Ads%3A0%2C0%2C989%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873177098%3Afip%3A1394e1c173a4866d31f6f1da471bacd3-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873181%3At%3AOkulda%20yepyeni-Seks%2C%20Porno-Xhamster%20%5B11%20%3A01x360p%5D&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2821562884%29fip%281%29ti%281%29&redirnss=1
set-cookie: yabs-sid=1796366081742873181; Path=/; SameSite=None; Secure
i=AG2CG3h7JX5D6uHkdu1fjbkaQFhf9AzeJaWXfXbd4fp05BYJ8B7Q9matfl4LqbJvP1MnCnsi8jHnkCQCa8X42KYmMEg=; Expires=Fri, 23-Mar-2035 03:26:14 GMT; Domain=.webvisor.org; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1842795031742873181; Expires=Fri, 23-Mar-2035 03:26:14 GMT; Domain=.webvisor.org; Path=/; Secure; SameSite=None
yuidss=1842795031742873181; Expires=Wed, 25-Mar-2026 03:26:21 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure
ymex=1774409181.yrts.1742873181#1774409181.yrtsi.1742873181; Expires=Wed, 25-Mar-2026 03:26:21 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure
bh=YN3EiL8GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Wed, 29 Apr 2026 03:26:21 GMT; SameSite=None; Secure
access-control-allow-credentials: true
expires: Tue, 25-Mar-2025 03:26:21 GMT
pragma: no-cache
last-modified: Tue, 25-Mar-2025 03:26:21 GMT
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://pornvideoq.com/ver-flagras-reais-porno-de-novinhas-transando-nas-favelas.htm/title/myhash/3
200 OK 410 B URL GET pdocac.tube-dl.top/v/s://pornvideoq.com/ver-flagras-reais-porno-de-novinhas-transando-nas-favelas.htm/title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with very long lines (410), with no line terminators
Hash 1e9d6abd523666abe5a971ad87fb7250
816740f86617fe293dce1b2d340a451cf6bbba07
19b1bd1ab7b19a16be397972ea816093d052e26a9955cb659d890999715f462d
GET /v/s://pornvideoq.com/ver-flagras-reais-porno-de-novinhas-transando-nas-favelas.htm/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://pornvideoq.com/ver-flagras-reais-porno-de-novinhas-transando-nas-favelas.htm/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1431: notjp-es-pt-myhost--filteron-/v/s://pornvideoq.com/ver-flagras-reais-porno-de-novinhas-transando-nas-favelas.htm/title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/02/3f/5f6a80, lfm-1-9929, lmd-9929, lud-28678939, xfvlen-733701, fsize-95577, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://pornvideoq.com/ver-flagras-reais-porno-de-novinhas-transando-nas-favelas.htm/title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wpQH2uYTf%2BPLNF0rlR6n5TGxiz5eXY6QBoUK7DEqKM%2B%2FkHFT7IzA6ITAhQJF191v6OhnOaJGrR4LrYQ9vMJ04U0cDsNMKTmTSEuDzmz95pcGL3OJZjpf9Eiw4Whk59ikcCiooXg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bac5c56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2150&min_rtt=417&rtt_var=2586&sent=80&recv=73&lost=0&retrans=3&sent_bytes=27773&recv_bytes=6602&delivery_rate=6135593&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9008&x=0"
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js
200 OK 11 kB URL GET cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC
ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File type JavaScript source, ASCII text, with very long lines (10613)
Hash ea77f824de2ef57acb12e7cb6596365e
10bad0dbdf30a0471c2c786b349daeb1dd19180e
2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c
GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 3953
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ed16b69-29bf"
last-modified: Fri, 29 May 2020 20:07:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 301772
expires: Sun, 15 Mar 2026 03:26:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y7DFPIFnqB2QiQJ%2FQuIymki2V9zpcgBGk7wAv7CFch4HsquZ4%2F726Bx%2BEelYPpebv0Gb6uzHfgFw1b%2BtFKf4L0hb5ZIQ52CEAnufe4%2FHU6LLiUgc5W1IbADWiUBYtg15j22iZjnq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 925b4e57b8c75697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 29047886-22554-3424.supopurytheals.com/v2/a/na/image?d=BQ5qQHPeF5QurjmJEQsQ5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2PcYBXV-eaAJ8Jd19WE9UJTcXky3IVNF52l5AZPVJKQdrJQUFb0K0B-RhCCgeiXX9bCS-5YwOivotg9GOBzYTUSoMEgP6qyz_RM-Ikoi3qUwcyn8FJPXbqdotAlzJ62Xj3-bkp2rsDFAiWl1jvzIRibbQ_YBojZ2QTTSIeTeTerANIW0tCt-ZDw2bCFQNNjuLPqvoqc1PNIopeafierb-Ul5IfCyQ5cwTKuVzjPRCgrx603BRS4JUlaE_5x4c_kx-p5IOkVzbvK7i6scXgvRWRpoHP8HhwFwQTn5UzFiR3WvI0zjXoCmoR72cuQI23c3v8Srono2SE-QWFdt85Xsg5K17ubwveliCIhR-yMfoClAJzu7xqmzxiubufLCOkfipJOve6H-bpRfTIpuUfG7N5oSlHZE8j9DpiZ7wV3133gli_Kz30u4Gj3v6_PZhOVh3VTv7Ur7HsqP8NazCE8LClcWMmXle5YRl2Ju0vpiMEEwj_ELhFQw8-fAH3nWtJ5nbTjF8YDOjsaq_uJyyTKp7FX9-2hP6-hQd7IErp0tAMTt_Y_Q0YLb1sKBmTDbY4BPX7pItxcKKPi07gimAS4o2CZC23h_ttuRUpFShb3F3EUx_E6aBmJLoeDUxaxCSiAx0xacIV7Ogm7sw87th8N77ych9Mnq0NwIaDNEpkViKUS-_mRifRNLp8RkKYUmhEHW1fXu5PNER_n0qXUcIdh_nFzurQVcuEoYlajftosQ7oF1D0J2wExslW40h63dRQuV6gHUWUglTtxKKVu2oASWZJ_eAaUCM7-o
200 OK 68 B URL GET 29047886-22554-3424.supopurytheals.com/v2/a/na/image?d=BQ5qQHPeF5QurjmJEQsQ5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2PcYBXV-eaAJ8Jd19WE9UJTcXky3IVNF52l5AZPVJKQdrJQUFb0K0B-RhCCgeiXX9bCS-5YwOivotg9GOBzYTUSoMEgP6qyz_RM-Ikoi3qUwcyn8FJPXbqdotAlzJ62Xj3-bkp2rsDFAiWl1jvzIRibbQ_YBojZ2QTTSIeTeTerANIW0tCt-ZDw2bCFQNNjuLPqvoqc1PNIopeafierb-Ul5IfCyQ5cwTKuVzjPRCgrx603BRS4JUlaE_5x4c_kx-p5IOkVzbvK7i6scXgvRWRpoHP8HhwFwQTn5UzFiR3WvI0zjXoCmoR72cuQI23c3v8Srono2SE-QWFdt85Xsg5K17ubwveliCIhR-yMfoClAJzu7xqmzxiubufLCOkfipJOve6H-bpRfTIpuUfG7N5oSlHZE8j9DpiZ7wV3133gli_Kz30u4Gj3v6_PZhOVh3VTv7Ur7HsqP8NazCE8LClcWMmXle5YRl2Ju0vpiMEEwj_ELhFQw8-fAH3nWtJ5nbTjF8YDOjsaq_uJyyTKp7FX9-2hP6-hQd7IErp0tAMTt_Y_Q0YLb1sKBmTDbY4BPX7pItxcKKPi07gimAS4o2CZC23h_ttuRUpFShb3F3EUx_E6aBmJLoeDUxaxCSiAx0xacIV7Ogm7sw87th8N77ych9Mnq0NwIaDNEpkViKUS-_mRifRNLp8RkKYUmhEHW1fXu5PNER_n0qXUcIdh_nFzurQVcuEoYlajftosQ7oF1D0J2wExslW40h63dRQuV6gHUWUglTtxKKVu2oASWZJ_eAaUCM7-o
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.supopurytheals.com
Fingerprint6F:9B:2A:35:69:8D:CC:F0:E1:82:08:83:DA:0C:1D:71:7B:1C:0E:61
ValidityTue, 25 Feb 2025 14:40:57 GMT - Mon, 26 May 2025 14:40:56 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPeF5QurjmJEQsQ5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2PcYBXV-eaAJ8Jd19WE9UJTcXky3IVNF52l5AZPVJKQdrJQUFb0K0B-RhCCgeiXX9bCS-5YwOivotg9GOBzYTUSoMEgP6qyz_RM-Ikoi3qUwcyn8FJPXbqdotAlzJ62Xj3-bkp2rsDFAiWl1jvzIRibbQ_YBojZ2QTTSIeTeTerANIW0tCt-ZDw2bCFQNNjuLPqvoqc1PNIopeafierb-Ul5IfCyQ5cwTKuVzjPRCgrx603BRS4JUlaE_5x4c_kx-p5IOkVzbvK7i6scXgvRWRpoHP8HhwFwQTn5UzFiR3WvI0zjXoCmoR72cuQI23c3v8Srono2SE-QWFdt85Xsg5K17ubwveliCIhR-yMfoClAJzu7xqmzxiubufLCOkfipJOve6H-bpRfTIpuUfG7N5oSlHZE8j9DpiZ7wV3133gli_Kz30u4Gj3v6_PZhOVh3VTv7Ur7HsqP8NazCE8LClcWMmXle5YRl2Ju0vpiMEEwj_ELhFQw8-fAH3nWtJ5nbTjF8YDOjsaq_uJyyTKp7FX9-2hP6-hQd7IErp0tAMTt_Y_Q0YLb1sKBmTDbY4BPX7pItxcKKPi07gimAS4o2CZC23h_ttuRUpFShb3F3EUx_E6aBmJLoeDUxaxCSiAx0xacIV7Ogm7sw87th8N77ych9Mnq0NwIaDNEpkViKUS-_mRifRNLp8RkKYUmhEHW1fXu5PNER_n0qXUcIdh_nFzurQVcuEoYlajftosQ7oF1D0J2wExslW40h63dRQuV6gHUWUglTtxKKVu2oASWZJ_eAaUCM7-o HTTP/1.1
Host: 29047886-22554-3424.supopurytheals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET page.phic4.top/myda.php
200 OK 0 B IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectphic4.top
FingerprintA1:CF:F4:32:94:8A:80:92:CC:2C:15:DC:BB:2B:D6:E2:5C:3F:79:6C
ValidityMon, 03 Mar 2025 22:00:39 GMT - Sun, 01 Jun 2025 22:58:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /myda.php HTTP/1.1
Host: page.phic4.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=utf-8
myda: myda2a02:2121:6a9:d1ea::509e:5859
vary: User-Agent, Accept-Encoding
age: 3972
cache-control: max-age=14400
cf-cache-status: HIT
last-modified: Tue, 25 Mar 2025 02:20:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tzL9eLPMMucZhTg6IGFk84HQskvBUIh3Qd9iksbwzZB1rN1X4uqtFQSZ50agLaYcloKGjVcNaAaf6zcULRrNlmo4Vmd%2FMTlq21Dds%2BelAOBbHyaV27O2m0nskaHKJl1kgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e616a6c56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=844&min_rtt=634&rtt_var=355&sent=9&recv=12&lost=0&retrans=0&sent_bytes=3932&recv_bytes=1116&delivery_rate=4908474&cwnd=256&unsent_bytes=0&cid=ec9d3750db5e28c5&ts=55&x=0"
X-Firefox-Spdy: h2
GET cacrz.4jpg.top/AV4.us.jpg
200 OK 8.7 kB URL GET cacrz.4jpg.top/AV4.us.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3
Hash edfe007a6e5b3d268b2528f564b60b43
1644c8ef97c871079e07e5079d613af5cb94052f
bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: cacrz.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: image/jpeg
content-length: 8741
etag: "2225-5499bcea176c0"
access-control-allow-origin: *
access-control-allow-headers: Cake
ahost: RZ
cache-control: public, max-age=3600000
cf-cache-status: HIT
age: 1042214
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JBr4BExz%2FbapFhPectYppcT0TtxNy%2FD1LCtfxfBTg5ZZaeY4bsBL9Gmj1%2BfAeNLZWtp9d80npRhosGasBbdWuOIeQ8iBSzx9GYqb39qdaKuJ%2F%2BfIkBv1TPHAJkIZeJ1AuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e7b4d35568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=48980&min_rtt=1254&rtt_var=64927&sent=280&recv=56&lost=0&retrans=2&sent_bytes=279488&recv_bytes=8803&delivery_rate=10513&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=7843&x=1", cfExtPri, cfHdrFlush;dur=0
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash b1230c4711fbdf326243e9397df5537d
24b59cb0b270bfa53c1bb5d5d8d5353b1a619233
83d09142c7aa3ddd4ed153e8235f2434402726bedf304f27f416c72bc4a9c0cf
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:25 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19505
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET xvideosrei.com/wp-content/uploads/2021/06/suruba-com-novinha-da-escola.jpg
200 OK 21 kB URL GET xvideosrei.com/wp-content/uploads/2021/06/suruba-com-novinha-da-escola.jpg
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 600x337, components 3
Hash 413caad4f5b5c6fcb45e3042c97a35cc
4d26ec58ff5776a7d32b5119a55e8eab7b0d2947
2a5a9aaaa0ffcde637162864a759692b8747891902ff72e70c088089b3953eaa
GET /wp-content/uploads/2021/06/suruba-com-novinha-da-escola.jpg HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: image/jpeg
content-length: 20935
last-modified: Tue, 29 Jun 2021 23:18:25 GMT
etag: "60dbaa41-51c7"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET motherless.com/favicon.ico
200 OK 1.2 kB URL GET motherless.com/favicon.ico
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoGetSSL
Subject*.motherless.com
Fingerprint91:ED:C0:91:51:B7:52:31:38:BB:48:DC:64:31:32:81:FB:98:A0:92
ValidityWed, 06 Mar 2024 00:00:00 GMT - Sun, 06 Apr 2025 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 71fed71dccb91a13bdf68a6444f25ce4
38da7202842147ecda5521d50f094a54d1381f2c
18f6675d329e6cb3bb7d7d1e546a1c68c5cc599f1b3ae98c2abbd21a53dc42c2
GET /favicon.ico HTTP/1.1
Host: motherless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Mar 2025 03:26:27 GMT
Content-Type: image/x-icon
Content-Length: 1150
Connection: keep-alive
Last-Modified: Thu, 20 Apr 2023 06:59:04 GMT
ETag: "6440e2b8-47e"
X-Server-W: web806
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Status: HIT
Accept-Ranges: bytes
GET 29047886-22554-ex.trachizentrating.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.3 kB URL GET 29047886-22554-ex.trachizentrating.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.trachizentrating.com
Fingerprint5F:76:92:F4:5D:52:89:E7:8C:11:FD:30:C1:B0:36:29:D2:33:49:AB
ValiditySun, 16 Feb 2025 14:52:19 GMT - Sat, 17 May 2025 14:52:18 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4311), with no line terminators
Hash 03daed062542947b80b257692424bacb
1b594a9fdccffe71fc61805aab68938b2f110c56
4e7041dc4d6090dcc987c746bd7387a925744fd1a8c248b0751a3a4e9926c5d0
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.trachizentrating.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:28 UTC
expires: Tue, 25 Mar 2025 03:26:28 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET css.4jpg.top/mycss/av4.css?33
200 OK 4.2 kB URL GET css.4jpg.top/mycss/av4.css?33
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
File type Unicode text, UTF-8 text, with very long lines (4483), with no line terminators
Hash d31c3010aac9eabd19d2e27abefa8b5d
5560417df04197d1fe2d136c7a2df55987f63609
c31786acbabc0d6035bcfc842c55984831c2ba650a7acbd8c1f7270a39c149c3
GET /mycss/av4.css?33 HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:18 GMT
content-type: text/css
etag: W/"103e-62edbddabc000"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 150256
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H6ytB9OUzJDc59UoxmqUw%2BO4tdIZfNVbYHZKT6oNhu2iJ9DGDrSdp7ZCtC8%2FjUyrRG%2BpmQ3dAzFgWjIMFbYhyTHbEWEhASrYm1FS8m5RqgkkjhMQOG8wSEBa5M56Gk8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e579d25568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8102&min_rtt=3029&rtt_var=6137&sent=55&recv=15&lost=0&retrans=0&sent_bytes=50159&recv_bytes=2173&delivery_rate=38143&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=2127&x=1", cfExtPri, cfHdrFlush;dur=0
GET css.4jpg.top/index.php?js=very
200 OK 0 B URL GET css.4jpg.top/index.php?js=very
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
imghost: 104194820-h-css4jpgtopmh--NO-rm104238220248/index.php?js=very
56nloadrate: 1.1078125
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: EXPIRED
xkey-192la: jcss./index.php?js=very-A-css.4jpg.top--myzone---no
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Gh%2Fs2oj%2Fi0okEv1WAM1146%2BannI9XSK0IGrgDDYz%2Fjqt2UIZOkvOc%2BhPyTW4a4aP8wjLHoh%2B2eaNc4wOLJjz9ipFY3yfzEPLksrjFS4SqPBvbwfEBxnp6e3MJu6ilo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e6008e5568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4845&min_rtt=1254&rtt_var=2946&sent=178&recv=40&lost=0&retrans=0&sent_bytes=171434&recv_bytes=6889&delivery_rate=8251&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=3845&x=1", cfExtPri, cfHdrFlush;dur=0
GET xvideosrei.com/wp-content/uploads/2023/03/sofia-felix-mc-bionica-novinha-250x150.jpg
200 OK 5.4 kB URL GET xvideosrei.com/wp-content/uploads/2023/03/sofia-felix-mc-bionica-novinha-250x150.jpg
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 250x150, components 3
Hash 807067440ab965a161ab4b52f0ec72b6
9d968e039dd281179e98a3df885ecb8deabd6f10
c37d6e10e68048205efeee7d3a7767ec22a6fc58106137d11e7fa3ee53f7253e
GET /wp-content/uploads/2023/03/sofia-felix-mc-bionica-novinha-250x150.jpg HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: image/jpeg
content-length: 5384
last-modified: Thu, 02 Mar 2023 03:28:46 GMT
etag: "640017ee-1508"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn5-thumbs.motherlessmedia.com/thumbs/C9FD0BF.jpg
302 Moved Temporarily 20 kB URL GET cdn5-thumbs.motherlessmedia.com/thumbs/C9FD0BF.jpg
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoGetSSL
Subject*.motherlessmedia.com
Fingerprint57:B3:92:20:5F:2C:FA:27:4E:CD:E5:6F:BC:3E:04:43:42:3A:93:E8
ValidityMon, 04 Nov 2024 00:00:00 GMT - Fri, 05 Dec 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbs/C9FD0BF.jpg HTTP/1.1
Host: cdn5-thumbs.motherlessmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
server: openresty/1.21.4.1
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html
content-length: 151
location: https://cdn5-static.motherlessmedia.com/images/no_image.jpg
x-cache: MISS
GET 29047886-22554-3424.undeciliste.com/v2/a/na/image?d=BQ5qQHPeUJSOqTmZFggQ9dfYEpT6h7xQXXKzoH1MBD8Y2QzUfd3ddeTS0jeojWjsxAEBCat6lQtRocy9-hgOID0ixp228a2JF3HDqI_Valbbnezd8zFQPS6W5XV_jl2IO8KYmtyDXnONJhxFtMZyx50y8RGzzsstxRmBsvu9MhA6_wHnu-Gw2l1Mg-4GEMcqdEI0vnQDIvMirHXzZVXQuGKOy_DxMvgbTnEqh9dTr7T6tKCv9F7foqTCauyjn21nXu6VEZlJdcYz-aHXjTEwijQ1FE5eR-dzQ_NnS1QotNzUV9Rx4ZribLNN5Pn2fvku3lsJGEtEhxGR1A4UYB7nWjR_SAkMbo58MAmXyW1kDJKvEjmScQSCSjxMMxWN-xzR68EUYtG_2Gq3FJnHwXFn46s2ycm_x1vm3LZWPBDhUwZ7D-yFBihincWkhj2NQpu2FAu8FjbU7px_5TgmBCm_sG5LFOwY64VyZhY4ycbOK3OAQDFlD3_VRXUiohO1f7i7avPnRWdGAeHpclXGqg8U2NN_kZP4uYJdetxYBSai7rTD1wHSJLL08maLnTn1zC_F6xzXyW1iMps0ZFcv4hnmrcY4ywy7WYhWNNB4veFU-wXCVl0X3h4jrzqIpb_L7WpJa67-TX7U2FY6quCrFSN4Tm6Jx23D0XETFFtR5oJEBttcDzWSfc6yUiTavN0Jd-ve98O4O0_61qlVgs2VM4QEpToQNp0oozzkUVScQtvlnAu9t8rAKx-6ktpLdd__EAdFeqH_FNgAknPAB0X8A7jyWN26JFJV0hXB8mFgf4vC9gK5KkOyQQ0KkDU_EEQjWc_XR1-ll1pbCndro9PzlxRNZxw4whWbsUHTDohjpFjMByjvm86_3TBfK19eJwI53nx19Y-d5RKBjMGCDpAFSHHWrzFqUAtS9MEINirKwElOjFR4f1941ve-11lErqrZb6y13M1mLS6NzJ3y5h9k9jbNBKkuIRX8gZyTXrFGh3QX9dS1qJfO-tbQyqUISvZWJ-TAK5NCShZNNPb_fKaZ65tN1cl9esWnJn-Zwb7iCb0H6g1XIZPAKfD8COwoeeBkqU-3q016YPvyU6RKboRKETDDtqMUHcWii6U7GD5LxISI9cxhr9KX9msrO-MDmM5HglOSSH4VrbBTS4jFElnJLx8SIDIF_quIx3DxMfUncQfQqenPQuxRfepZMtU-ZbSbj2qADJNgCW_HCQRUP3jFZ34E6wX_dYAULw
200 OK 68 B URL GET 29047886-22554-3424.undeciliste.com/v2/a/na/image?d=BQ5qQHPeUJSOqTmZFggQ9dfYEpT6h7xQXXKzoH1MBD8Y2QzUfd3ddeTS0jeojWjsxAEBCat6lQtRocy9-hgOID0ixp228a2JF3HDqI_Valbbnezd8zFQPS6W5XV_jl2IO8KYmtyDXnONJhxFtMZyx50y8RGzzsstxRmBsvu9MhA6_wHnu-Gw2l1Mg-4GEMcqdEI0vnQDIvMirHXzZVXQuGKOy_DxMvgbTnEqh9dTr7T6tKCv9F7foqTCauyjn21nXu6VEZlJdcYz-aHXjTEwijQ1FE5eR-dzQ_NnS1QotNzUV9Rx4ZribLNN5Pn2fvku3lsJGEtEhxGR1A4UYB7nWjR_SAkMbo58MAmXyW1kDJKvEjmScQSCSjxMMxWN-xzR68EUYtG_2Gq3FJnHwXFn46s2ycm_x1vm3LZWPBDhUwZ7D-yFBihincWkhj2NQpu2FAu8FjbU7px_5TgmBCm_sG5LFOwY64VyZhY4ycbOK3OAQDFlD3_VRXUiohO1f7i7avPnRWdGAeHpclXGqg8U2NN_kZP4uYJdetxYBSai7rTD1wHSJLL08maLnTn1zC_F6xzXyW1iMps0ZFcv4hnmrcY4ywy7WYhWNNB4veFU-wXCVl0X3h4jrzqIpb_L7WpJa67-TX7U2FY6quCrFSN4Tm6Jx23D0XETFFtR5oJEBttcDzWSfc6yUiTavN0Jd-ve98O4O0_61qlVgs2VM4QEpToQNp0oozzkUVScQtvlnAu9t8rAKx-6ktpLdd__EAdFeqH_FNgAknPAB0X8A7jyWN26JFJV0hXB8mFgf4vC9gK5KkOyQQ0KkDU_EEQjWc_XR1-ll1pbCndro9PzlxRNZxw4whWbsUHTDohjpFjMByjvm86_3TBfK19eJwI53nx19Y-d5RKBjMGCDpAFSHHWrzFqUAtS9MEINirKwElOjFR4f1941ve-11lErqrZb6y13M1mLS6NzJ3y5h9k9jbNBKkuIRX8gZyTXrFGh3QX9dS1qJfO-tbQyqUISvZWJ-TAK5NCShZNNPb_fKaZ65tN1cl9esWnJn-Zwb7iCb0H6g1XIZPAKfD8COwoeeBkqU-3q016YPvyU6RKboRKETDDtqMUHcWii6U7GD5LxISI9cxhr9KX9msrO-MDmM5HglOSSH4VrbBTS4jFElnJLx8SIDIF_quIx3DxMfUncQfQqenPQuxRfepZMtU-ZbSbj2qADJNgCW_HCQRUP3jFZ34E6wX_dYAULw
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.undeciliste.com
FingerprintB2:B4:0B:3C:3C:3D:57:A1:33:77:D7:34:88:54:24:68:02:99:D5:B9
ValidityMon, 03 Feb 2025 14:34:59 GMT - Sun, 04 May 2025 14:34:58 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPeUJSOqTmZFggQ9dfYEpT6h7xQXXKzoH1MBD8Y2QzUfd3ddeTS0jeojWjsxAEBCat6lQtRocy9-hgOID0ixp228a2JF3HDqI_Valbbnezd8zFQPS6W5XV_jl2IO8KYmtyDXnONJhxFtMZyx50y8RGzzsstxRmBsvu9MhA6_wHnu-Gw2l1Mg-4GEMcqdEI0vnQDIvMirHXzZVXQuGKOy_DxMvgbTnEqh9dTr7T6tKCv9F7foqTCauyjn21nXu6VEZlJdcYz-aHXjTEwijQ1FE5eR-dzQ_NnS1QotNzUV9Rx4ZribLNN5Pn2fvku3lsJGEtEhxGR1A4UYB7nWjR_SAkMbo58MAmXyW1kDJKvEjmScQSCSjxMMxWN-xzR68EUYtG_2Gq3FJnHwXFn46s2ycm_x1vm3LZWPBDhUwZ7D-yFBihincWkhj2NQpu2FAu8FjbU7px_5TgmBCm_sG5LFOwY64VyZhY4ycbOK3OAQDFlD3_VRXUiohO1f7i7avPnRWdGAeHpclXGqg8U2NN_kZP4uYJdetxYBSai7rTD1wHSJLL08maLnTn1zC_F6xzXyW1iMps0ZFcv4hnmrcY4ywy7WYhWNNB4veFU-wXCVl0X3h4jrzqIpb_L7WpJa67-TX7U2FY6quCrFSN4Tm6Jx23D0XETFFtR5oJEBttcDzWSfc6yUiTavN0Jd-ve98O4O0_61qlVgs2VM4QEpToQNp0oozzkUVScQtvlnAu9t8rAKx-6ktpLdd__EAdFeqH_FNgAknPAB0X8A7jyWN26JFJV0hXB8mFgf4vC9gK5KkOyQQ0KkDU_EEQjWc_XR1-ll1pbCndro9PzlxRNZxw4whWbsUHTDohjpFjMByjvm86_3TBfK19eJwI53nx19Y-d5RKBjMGCDpAFSHHWrzFqUAtS9MEINirKwElOjFR4f1941ve-11lErqrZb6y13M1mLS6NzJ3y5h9k9jbNBKkuIRX8gZyTXrFGh3QX9dS1qJfO-tbQyqUISvZWJ-TAK5NCShZNNPb_fKaZ65tN1cl9esWnJn-Zwb7iCb0H6g1XIZPAKfD8COwoeeBkqU-3q016YPvyU6RKboRKETDDtqMUHcWii6U7GD5LxISI9cxhr9KX9msrO-MDmM5HglOSSH4VrbBTS4jFElnJLx8SIDIF_quIx3DxMfUncQfQqenPQuxRfepZMtU-ZbSbj2qADJNgCW_HCQRUP3jFZ34E6wX_dYAULw HTTP/1.1
Host: 29047886-22554-3424.undeciliste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.musasporno.com/xvudeos//title/myhash/3
200 OK 275 B URL GET pdocac.tube-dl.top/v/s://www.musasporno.com/xvudeos//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 6a90f2ac587eaa7116ba014914e631d6
518566e3fe79c8f8b5278ca0384403fbf9f6fedc
4627c7e9774cd98c8b282af9ce70d3e5cbfdd970b9df4f2d7e6a2c98ef3368fd
GET /v/s://www.musasporno.com/xvudeos//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.musasporno.com/xvudeos//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://www.musasporno.com/xvudeos//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo4/25/95/541131, lfm-1-1142, lmd-1142, lud-309565, xfvlen-701993, fsize-106869, played-10
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.musasporno.com/xvudeos//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: HIT
age: 1506994
last-modified: Fri, 07 Mar 2025 16:49:55 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Has0HgJxrPV%2Fz0iLJnpyB2VQB8Vi8Trl2Pc2gnNVl4AOIcTg%2F0HsP1GudHJFPBGOXILftxChQhBDmS%2BbDIicpPPnjcoamHOPBObit3PukDdaoM0b873BdsQI5ZAan%2Br4ZCBVTQw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9c5cb556b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2622&min_rtt=426&rtt_var=3100&sent=66&recv=63&lost=0&retrans=2&sent_bytes=21273&recv_bytes=6126&delivery_rate=6008298&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8759&x=0"
X-Firefox-Spdy: h2
GET 29047886-22554-3424.unrertivermalous.com/v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPn34vMJmS39XSCiBEhvP6fGGZyIBldFQsa4GjADQcQOxgWG2ph6pCPGi15PbnvC5LRIM3_cXT0S-du-zA6B1UZOX4S3vvLDiomNw5UTAPRq6X4v1-arJBnpLcVJuL1bPLx9tBrR0e0Lgf6vvoO-oE0wQ0v32eld0i7v9cIqXpCAt83q7LRpW_jpvxD-iqIVjngSJK_13AjU8XhGIXt1clG6JtLJBwZ_sd09pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMocplruZFbDJ6Bp73UVTqG2YUoiw
200 OK 68 B URL GET 29047886-22554-3424.unrertivermalous.com/v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPn34vMJmS39XSCiBEhvP6fGGZyIBldFQsa4GjADQcQOxgWG2ph6pCPGi15PbnvC5LRIM3_cXT0S-du-zA6B1UZOX4S3vvLDiomNw5UTAPRq6X4v1-arJBnpLcVJuL1bPLx9tBrR0e0Lgf6vvoO-oE0wQ0v32eld0i7v9cIqXpCAt83q7LRpW_jpvxD-iqIVjngSJK_13AjU8XhGIXt1clG6JtLJBwZ_sd09pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMocplruZFbDJ6Bp73UVTqG2YUoiw
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.unrertivermalous.com
Fingerprint79:20:B3:AF:0C:13:23:74:B6:04:49:94:51:E9:C0:A9:F8:C7:B5:CD
ValiditySat, 01 Mar 2025 14:29:48 GMT - Fri, 30 May 2025 14:29:47 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPn34vMJmS39XSCiBEhvP6fGGZyIBldFQsa4GjADQcQOxgWG2ph6pCPGi15PbnvC5LRIM3_cXT0S-du-zA6B1UZOX4S3vvLDiomNw5UTAPRq6X4v1-arJBnpLcVJuL1bPLx9tBrR0e0Lgf6vvoO-oE0wQ0v32eld0i7v9cIqXpCAt83q7LRpW_jpvxD-iqIVjngSJK_13AjU8XhGIXt1clG6JtLJBwZ_sd09pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMocplruZFbDJ6Bp73UVTqG2YUoiw HTTP/1.1
Host: 29047886-22554-3424.unrertivermalous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8xuMbDJTa01mQNQz%2Fsx1n0hACNaKd4nW8TcAq0mPYDhxF2Q1tB17RJNRBa7wF%2FE7kcvYGz61xiPkuo3kDJBr28nfXxBtkHDwo%2FnlPCEGtZY4nAdrBapji3mOSx5HD3sp%2BEu3oA%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81391
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e60a8d10b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:23 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y1BkkBCHtun846%2FhfE7yLffJj55n7k0L79HsSO4s3iDMYYnYY9vd90ixhf3V4cV2Bx1ZSSj18IOEmaubaXadg8pGQmzWPYeNrUoCmY91oih0Hp2EYUY2ejHkcsAbOBti6alDtw%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81394
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e7719100b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET 29047886-22554-ex.undeciliste.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.1 kB URL GET 29047886-22554-ex.undeciliste.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.undeciliste.com
FingerprintB2:B4:0B:3C:3C:3D:57:A1:33:77:D7:34:88:54:24:68:02:99:D5:B9
ValidityMon, 03 Feb 2025 14:34:59 GMT - Sun, 04 May 2025 14:34:58 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4173), with no line terminators
Hash 17696b81dd4dca8be2e5b9e6407a0791
39cd364c0a364229560604ffcb019a1d41f5b68f
91f4fefcfcbbfc666a9b2100b1df6a91259aaf30878309da0530703d6cac2965
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.undeciliste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:28 UTC
expires: Tue, 25 Mar 2025 03:26:28 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/comendo-novinha-na-escola//title/myhash/3
200 OK 240 B URL GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/comendo-novinha-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 910613144bd27ec57cc92d5b24e2522a
c0df40dbf7543d725bfe5c21795147012b458d04
380d63ed5988e1afee266282a0c92a23f04e4946b6ad353cf2e499eb5226a870
GET /v/s://xvideosrei.com/porno/comendo-novinha-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideosrei.com/porno/comendo-novinha-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://xvideosrei.com/porno/comendo-novinha-na-escola//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo6/ac/93/305151, lfm-1-205, lmd-205, lud-294177, xfvlen-714010, fsize-152022, played-135
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideosrei.com/porno/comendo-novinha-na-escola//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: HIT
age: 2150544
last-modified: Fri, 28 Feb 2025 06:04:05 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ElNoz77D2CN3TDo1C64lALeViu%2Fe85qgv4e%2Bd7AxqirhTH%2FSioyO4ebt2HPBKr39%2BcRS35rc%2Bpy2cT874OHwIzz%2Bv%2FGsyf3JZxWwlbNvQfURo%2BHlqM7C8cijaLJ0bHIIBFvndG0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9b9c4c56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2268&min_rtt=437&rtt_var=1881&sent=18&recv=23&lost=0&retrans=1&sent_bytes=5809&recv_bytes=2334&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8641&x=0"
X-Firefox-Spdy: h2
GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A545831537%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A673217591%3Arqn%3A4%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1385%2C1%2C3762%2C3762%2C0%2C3076%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182285%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
200 OK 551 B URL GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A545831537%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A673217591%3Arqn%3A4%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1385%2C1%2C3762%2C3762%2C0%2C3076%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182285%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint4E:A6:D4:57:F5:B7:FB:C1:98:C0:40:D2:B8:FA:B4:10:43:09:41:94
ValiditySun, 09 Mar 2025 21:02:24 GMT - Sun, 31 Aug 2025 20:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (609), with no line terminators
Hash 3f386d2d55df78a60cc3675c73fe2aa5
c81bc621d78345f313ff84e06ae838d614a6897d
5b05c68004c5de8d850f6858cff6b64308b827102fa2aaa702032741599a2875
GET /watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A545831537%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A673217591%3Arqn%3A4%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1385%2C1%2C3762%2C3762%2C0%2C3076%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182285%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1796366081742873181; i=AG2CG3h7JX5D6uHkdu1fjbkaQFhf9AzeJaWXfXbd4fp05BYJ8B7Q9matfl4LqbJvP1MnCnsi8jHnkCQCa8X42KYmMEg=; yandexuid=1842795031742873181; yuidss=1842795031742873181; ymex=1774409181.yrts.1742873181#1774409181.yrtsi.1742873181; bh=YN3EiL8GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 551
content-type: application/json; charset=utf-8
access-control-allow-origin: https://fixedjs.jtube.top
pragma: no-cache
x-xss-protection: 1; mode=block
last-modified: Tue, 25-Mar-2025 03:26:30 GMT
expires: Tue, 25-Mar-2025 03:26:30 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-content-type-options: nosniff
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
X-Firefox-Spdy: h2
GET i.imgur.com/n08EtAv.png
200 OK 130 B IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintE4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D
ValidityWed, 29 Jan 2025 00:00:00 GMT - Sat, 14 Feb 2026 23:59:59 GMT
File type PNG image data, 31 x 30, 4-bit colormap, non-interlaced
Hash e98c17066c8faaf0d892409591043ac8
b8020acb755ae32a8071e7f09b5ff5f31de56aeb
2c1ac0b57a3f6fd384088b0ef8124d97d78a915fe90d8bc4c731f4d0479b5069
GET /n08EtAv.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
last-modified: Mon, 25 Nov 2024 12:40:51 GMT
etag: "e98c17066c8faaf0d892409591043ac8"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: oazafBtIuPVIWMjW0gVXhI5joe22kcv3JZ9ciOuXfa8hFa1N6PeU7Q==
cache-control: public, max-age=31536000
accept-ranges: bytes
age: 1012353
date: Tue, 25 Mar 2025 03:26:31 GMT
x-served-by: cache-iad-kcgs7200152-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 57, 0
x-timer: S1742873191.220044,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 130
X-Firefox-Spdy: h2
GET www.porno26.com/wp-content/uploads/2022/04/3-novinhas-na-escola-fudendo-com-goza.jpg
200 OK 26 kB URL GET www.porno26.com/wp-content/uploads/2022/04/3-novinhas-na-escola-fudendo-com-goza.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectporno26.com
FingerprintD7:7C:8C:4F:D7:6E:31:DA:76:87:B5:47:A9:2D:4C:93:4B:E7:49:BF
ValidityTue, 25 Feb 2025 23:46:23 GMT - Tue, 27 May 2025 00:44:05 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 600x337, components 3
Hash 19e7caa01e20f2e8e2413121262b047d
976fb4dcc27935615499b318cee205a23b005d57
9c47af04fbf86876365f672b6286c84861feafc25ad3e176989fbeb0b1954bcf
GET /wp-content/uploads/2022/04/3-novinhas-na-escola-fudendo-com-goza.jpg HTTP/1.1
Host: www.porno26.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 26155
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S5GBw8DxaPqOUGNYiFY0gZOxTWL3aosLI%2FiIB0E0qpkMqYi7lPM0Xv2Zpq6EIlwc3qN7vuwfoTf%2FxikHk6QpaON%2FKjPvLtagnwKpubVcfy77kpstiH0yN0lhSQxIWtH7EU0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 25 Apr 2022 17:32:21 GMT
etag: "6266db25-662b"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Thu, 12 Feb 2026 17:20:56 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 120674
accept-ranges: bytes
cf-ray: 925b4ea49edf569d-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pdocac.tube-dl.top/v/s://www.porno16.com/video/sex-na-escola//title/myhash/3
200 OK 181 B URL GET pdocac.tube-dl.top/v/s://www.porno16.com/video/sex-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 1c49aeb803303292a78e91f7932ee9cf
4ad2c9521bb379de62317929a798a62a9bca9a36
89d316a76b72e21e008837cd4578b54c54889b9c59f949ab0d86cf0252a6e86e
GET /v/s://www.porno16.com/video/sex-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.porno16.com/video/sex-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-es-pt-myhost--filteron-
line1432: notjp-es-pt-myhost--filteron-/v/s://www.porno16.com/video/sex-na-escola//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo2/b4/82/1c2f40, lfm-1-7020, lmd-7020, lud-16891788, xfvlen-516372, fsize-270127, played-20
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.porno16.com/video/sex-na-escola//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4OQysdJtgCk3YTQieqRihBLeDqebAjXlb5lGV832XOm0SnQoALSz3iMbl6GxRwlYS4y2bmPZpTTHDlR5HrDXdIvuDls0P1XvGiVJkW7NcZaCNyUxydpL0ltX%2BZw3QPh2O30mT7g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc9156b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2159&min_rtt=381&rtt_var=2701&sent=104&recv=87&lost=0&retrans=3&sent_bytes=39309&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9045&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.mrvideosdesexo.xxx/sorte-de-ter-sexo-na-escola-com-a-gata-mais-linda//title/myhash/3
200 OK 0 B URL GET pdocac.tube-dl.top/v/s://www.mrvideosdesexo.xxx/sorte-de-ter-sexo-na-escola-com-a-gata-mais-linda//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://www.mrvideosdesexo.xxx/sorte-de-ter-sexo-na-escola-com-a-gata-mais-linda//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.mrvideosdesexo.xxx/sorte-de-ter-sexo-na-escola-com-a-gata-mais-linda//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1432: notjp-es-pt-myhost--filteron-/v/s://www.mrvideosdesexo.xxx/sorte-de-ter-sexo-na-escola-com-a-gata-mais-linda//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/48/c7/80af77, lfm-1-8624119, lmd-8624120, lud-16968355, xfvlen-92994, fsize-18531, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.mrvideosdesexo.xxx/sorte-de-ter-sexo-na-escola-com-a-gata-mais-linda//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FPAPE%2FVdvWpbbZQQAJaGFLIqGFbaCGsw4110zIuJe7spTz4ydz4kafpzcUjSPemyHN%2BC1Koc%2BEjfaaRtrPKfSHVxoKBKm8uZUSz%2Fq%2FkB1BBe3pqLupOlVNTxGmFxmoelxouymyI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9c4cac56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4513&min_rtt=381&rtt_var=6734&sent=123&recv=88&lost=0&retrans=3&sent_bytes=48822&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9090&x=0"
X-Firefox-Spdy: h2
GET css.4jpg.top/index.php?js=very
200 OK 0 B URL GET css.4jpg.top/index.php?js=very
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
imghost: 104194820-h-css4jpgtopmh--NO-rm104238220248/index.php?js=very
56nloadrate: 1.1078125
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: EXPIRED
xkey-192la: jcss./index.php?js=very-A-css.4jpg.top--myzone---no
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e8MaLbJUfCO16nHo4tdC9zFQvJMEnBop6Fu0YG13NDo93sVrzZ9FnFdzOPpcrnzWOfK%2FVMsj6fkYEwhSbHe845zNubrAdO2U%2FGfsz6HYIiJjE6d4lXknODBSsvgpxZs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e6028f0568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4669&min_rtt=1254&rtt_var=3458&sent=175&recv=37&lost=0&retrans=0&sent_bytes=170476&recv_bytes=6281&delivery_rate=3302&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=3823&x=1", cfExtPri, cfHdrFlush;dur=0
GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 242 kB URL GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
Size 242 kB (242447 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 88616
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.366.0
x-jsd-version-type: version
etag: W/"3b30f-xasoqLlON+0SM11iGCxWGKe469U"
content-encoding: br
accept-ranges: bytes
date: Tue, 25 Mar 2025 03:26:25 GMT
age: 30629
x-served-by: cache-fra-eddf8230100-FRA, cache-hel1410021-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET page.phic4.top/myda.php
200 OK 0 B IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectphic4.top
FingerprintA1:CF:F4:32:94:8A:80:92:CC:2C:15:DC:BB:2B:D6:E2:5C:3F:79:6C
ValidityMon, 03 Mar 2025 22:00:39 GMT - Sun, 01 Jun 2025 22:58:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /myda.php HTTP/1.1
Host: page.phic4.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=utf-8
myda: myda2a02:2121:6a9:d1ea::509e:5859
vary: User-Agent, Accept-Encoding
age: 3972
cache-control: max-age=14400
cf-cache-status: HIT
last-modified: Tue, 25 Mar 2025 02:20:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kFMEmNmpvz49u7bWTEO6NpX7rbJLmFPeAGTl75qIS3iAihM7h8ztzUWMit8crE5ZYKnQPsDpJRD6sMMUie1vHHRQIjVGbhLo1VAnX6YZLdv7u1rNj7I%2BU2hhFdwgwXBpcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e615a6656b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=768&min_rtt=634&rtt_var=273&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3190&recv_bytes=1044&delivery_rate=4908474&cwnd=254&unsent_bytes=0&cid=ec9d3750db5e28c5&ts=45&x=0"
X-Firefox-Spdy: h2
GET 29047886-22554-3424.pelverityrerlob.com/v2/a/na/image?d=BQ5qQHPe-5WGrjlZEQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFt-fb0gfcCzqbsPtehROJ8E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXhEomTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XDiY5vGz085fVNUNa9OoAq0MiTTM653UEuD3boWYBG6VvxoshuuESTmhKnRNc5I6IEEJbpB5yRX3ne8Sx6X5EWNJEOnwF6_Iz_pJWPyRaPF_Ah5NYw94X8DGBZ7ujHjYeqILl8AYxbQvQY0sqRHcRoNhnV1pdtsKDxLA50_TfgDfeEdjggN3dkioaYv-hZrgStdlvL__EUXg4gB--wlmIzUkwoGdj4fZeSiy0823luG6L6jhgJ7EeaYxVninORV5S3pxrst2-6LOKg_IWg6lBYOvRF2pbmcKMoqsFKpscF7VR3c-m_pwi4Mm5HMO0VIzKGiEpyRsPQ-bfwtjG3iJ6Q6H1QQE7CKa7x8ST-3S5lGAP_kgt22_bg0-rACv7yj2gWpuf1QqxHtDTKC7aMq2r3qwu2E_3SHPMdyicooOnXBmfvHWE3gOn-22rX2Hqsm5hFmMvVvjqMIb70mbsXLb8iNWk1p2O7oLUkdDvdRMoSKDI-MPJfGpSnZsRRpEHwYb-RrDPkGVLu9_CbFIZynX5ALyXVcse50dSZYs_C4sBOdvoZ5jI4K3VQIAWPD0iUvhYeagFPqDXetGELurReNoMdwglKikTqSFczZvIty-Z0Qk8aQNvK5lYz-AglviYSFULlkoANMJo4-78Uki2MnCU64dVD4aBVseMHQz7cOzmpFhCu31WoFh-Vo9mBY-K64LQVjVYXWtVQPvdfiUdx6sbibQrwBQ6PEiPrBgTCr9St8c8ff4l5R50oL9MxaJczkPokv8UcHbkFrprv1c-ZvZNTkvDOw7LbbNhiR8dJ6c4-BftSOytIY0Z0Kh7nOzgW8C8QKcpYQEt0fEdxJPcEdOG6nifgsV_wEJvwju_RuIF0qL-hWXtYUV-Wo5IH1UCPEezgzGUSo7D_G4YPfk5QR-gSg
200 OK 68 B URL GET 29047886-22554-3424.pelverityrerlob.com/v2/a/na/image?d=BQ5qQHPe-5WGrjlZEQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFt-fb0gfcCzqbsPtehROJ8E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXhEomTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XDiY5vGz085fVNUNa9OoAq0MiTTM653UEuD3boWYBG6VvxoshuuESTmhKnRNc5I6IEEJbpB5yRX3ne8Sx6X5EWNJEOnwF6_Iz_pJWPyRaPF_Ah5NYw94X8DGBZ7ujHjYeqILl8AYxbQvQY0sqRHcRoNhnV1pdtsKDxLA50_TfgDfeEdjggN3dkioaYv-hZrgStdlvL__EUXg4gB--wlmIzUkwoGdj4fZeSiy0823luG6L6jhgJ7EeaYxVninORV5S3pxrst2-6LOKg_IWg6lBYOvRF2pbmcKMoqsFKpscF7VR3c-m_pwi4Mm5HMO0VIzKGiEpyRsPQ-bfwtjG3iJ6Q6H1QQE7CKa7x8ST-3S5lGAP_kgt22_bg0-rACv7yj2gWpuf1QqxHtDTKC7aMq2r3qwu2E_3SHPMdyicooOnXBmfvHWE3gOn-22rX2Hqsm5hFmMvVvjqMIb70mbsXLb8iNWk1p2O7oLUkdDvdRMoSKDI-MPJfGpSnZsRRpEHwYb-RrDPkGVLu9_CbFIZynX5ALyXVcse50dSZYs_C4sBOdvoZ5jI4K3VQIAWPD0iUvhYeagFPqDXetGELurReNoMdwglKikTqSFczZvIty-Z0Qk8aQNvK5lYz-AglviYSFULlkoANMJo4-78Uki2MnCU64dVD4aBVseMHQz7cOzmpFhCu31WoFh-Vo9mBY-K64LQVjVYXWtVQPvdfiUdx6sbibQrwBQ6PEiPrBgTCr9St8c8ff4l5R50oL9MxaJczkPokv8UcHbkFrprv1c-ZvZNTkvDOw7LbbNhiR8dJ6c4-BftSOytIY0Z0Kh7nOzgW8C8QKcpYQEt0fEdxJPcEdOG6nifgsV_wEJvwju_RuIF0qL-hWXtYUV-Wo5IH1UCPEezgzGUSo7D_G4YPfk5QR-gSg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.pelverityrerlob.com
FingerprintB9:FB:16:E0:95:A3:3F:15:A3:07:CB:73:80:87:7B:CB:CA:59:1E:16
ValidityThu, 30 Jan 2025 14:22:16 GMT - Wed, 30 Apr 2025 14:22:15 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPe-5WGrjlZEQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFt-fb0gfcCzqbsPtehROJ8E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXhEomTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XDiY5vGz085fVNUNa9OoAq0MiTTM653UEuD3boWYBG6VvxoshuuESTmhKnRNc5I6IEEJbpB5yRX3ne8Sx6X5EWNJEOnwF6_Iz_pJWPyRaPF_Ah5NYw94X8DGBZ7ujHjYeqILl8AYxbQvQY0sqRHcRoNhnV1pdtsKDxLA50_TfgDfeEdjggN3dkioaYv-hZrgStdlvL__EUXg4gB--wlmIzUkwoGdj4fZeSiy0823luG6L6jhgJ7EeaYxVninORV5S3pxrst2-6LOKg_IWg6lBYOvRF2pbmcKMoqsFKpscF7VR3c-m_pwi4Mm5HMO0VIzKGiEpyRsPQ-bfwtjG3iJ6Q6H1QQE7CKa7x8ST-3S5lGAP_kgt22_bg0-rACv7yj2gWpuf1QqxHtDTKC7aMq2r3qwu2E_3SHPMdyicooOnXBmfvHWE3gOn-22rX2Hqsm5hFmMvVvjqMIb70mbsXLb8iNWk1p2O7oLUkdDvdRMoSKDI-MPJfGpSnZsRRpEHwYb-RrDPkGVLu9_CbFIZynX5ALyXVcse50dSZYs_C4sBOdvoZ5jI4K3VQIAWPD0iUvhYeagFPqDXetGELurReNoMdwglKikTqSFczZvIty-Z0Qk8aQNvK5lYz-AglviYSFULlkoANMJo4-78Uki2MnCU64dVD4aBVseMHQz7cOzmpFhCu31WoFh-Vo9mBY-K64LQVjVYXWtVQPvdfiUdx6sbibQrwBQ6PEiPrBgTCr9St8c8ff4l5R50oL9MxaJczkPokv8UcHbkFrprv1c-ZvZNTkvDOw7LbbNhiR8dJ6c4-BftSOytIY0Z0Kh7nOzgW8C8QKcpYQEt0fEdxJPcEdOG6nifgsV_wEJvwju_RuIF0qL-hWXtYUV-Wo5IH1UCPEezgzGUSo7D_G4YPfk5QR-gSg HTTP/1.1
Host: 29047886-22554-3424.pelverityrerlob.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET 29047886-22554-3424.aceadynict.com/v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPkH4vMJmS39XSCiBEhvP6fGGZyIBldFQsa4GjADQcQOxgWG2ph6pCPGi15PbnvC5LRIM3_cXT0S-du-zA6B1UZOX4S3vvLDiomNw5bBNegM59RvvDoA6kDvQVUf019AKM9n1O118IKDuyasc_BvWNi9N3J7Qj9Kv9v4oLKJ9b9uuoLZXEenZxxpB-brPEugXhQzk4ZJQ06tGOwcOnLDNUoj3eJj55p81_U9pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMt5AsZ9FOzCTawFNcGTS5BRYI4nX
200 OK 68 B URL GET 29047886-22554-3424.aceadynict.com/v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPkH4vMJmS39XSCiBEhvP6fGGZyIBldFQsa4GjADQcQOxgWG2ph6pCPGi15PbnvC5LRIM3_cXT0S-du-zA6B1UZOX4S3vvLDiomNw5bBNegM59RvvDoA6kDvQVUf019AKM9n1O118IKDuyasc_BvWNi9N3J7Qj9Kv9v4oLKJ9b9uuoLZXEenZxxpB-brPEugXhQzk4ZJQ06tGOwcOnLDNUoj3eJj55p81_U9pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMt5AsZ9FOzCTawFNcGTS5BRYI4nX
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPkH4vMJmS39XSCiBEhvP6fGGZyIBldFQsa4GjADQcQOxgWG2ph6pCPGi15PbnvC5LRIM3_cXT0S-du-zA6B1UZOX4S3vvLDiomNw5bBNegM59RvvDoA6kDvQVUf019AKM9n1O118IKDuyasc_BvWNi9N3J7Qj9Kv9v4oLKJ9b9uuoLZXEenZxxpB-brPEugXhQzk4ZJQ06tGOwcOnLDNUoj3eJj55p81_U9pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMt5AsZ9FOzCTawFNcGTS5BRYI4nX HTTP/1.1
Host: 29047886-22554-3424.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
200 OK 22 kB URL User Request GET av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
IP
Certificate IssuerGoogle Trust Services
Subject4freedom.click
FingerprintC0:8C:2B:C0:A2:B6:46:DB:1F:F5:72:2F:C7:01:3C:16:E5:8D:6C:63
ValidityMon, 03 Mar 2025 20:25:41 GMT - Sun, 01 Jun 2025 21:20:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p] HTTP/1.1
Host: av.4freedom.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/v/s:/xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Cookie: cnt=0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:18 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Egk3oW%2FSZlRZ8mCyzPkbBRdhJwdtuQwKgM9Keo%2FKjRilLGULHNJD7Dyb6aPKp56Zdn99%2FSA2Xbw2mbFexe9ZmNOsWssvPFV57hxoDICho3a4sw2KX%2F3z%2B%2FIUyzF2%2FFKSO1pYkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
pdojs-line8: host-av.4freedom.click4.194.8.20-myhost-av.4freedom.click38.220.248/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
phost: av.4freedom.click
pdojs-line355: notjp--myhost-av.4freedom.click-filteron-
pdojs-line963: notjp--myhost-av.4freedom.click-filteron-/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
pdo120: feedvid-, cachefileb-cacpdo4/41/f5/d93549, lfm-1-14, lmd-14, lud-7199728, xfvlen-742304, fsize-102226, played-1
pdo393: feedvid-, cachefileb-cacpdo4/41/f5/d93549, lfm-1-14, lmd-14, lud-7199728, xfvlen-742304, fsize-102226, played-1
pdophp-line426: -; cachetime- 115625.04339554; ctime- 20250101042753; lmd- 20250325122307
pdoline1574: method-1: ik-ok|||ul|||da||| y|||ep|||ye|||ni|||-s|||ek|||s,||| p|||or|||no|||-x|||ha|||ms|||te|||r |||[1|||1 |||:0|||1x|||36|||0p|||] ||| ||| |||okulda|||yepyeni|||seks|||porno|||xhamster|||x|||p|||ik====okulda yepyeni-seks, porno-xhamster [11 :01x360p] : vidlang-es-pt4823
pdoline1679: method-1: ik-ok|||ul|||da||| y|||ep|||ye|||ni|||-s|||ek|||s,||| p|||or|||no|||-x|||ha|||ms|||te|||r |||[1|||1 |||:0|||1x|||36|||0p|||] ||| ||| |||okulda|||yepyeni|||seks|||porno|||xhamster|||x|||p|||okulda yepyeni-seks, porno-xhamster [11 :01x360p] : vidlang-es-pt4823
pdoline1680: sarray-0es-pt
pdoline1743: notjp-: fvkwcnt-4823
pdoline1747: notjp-: fvkwcnt-4823
pdoline1765: notjp-: mblenik-53: khitTop-59.777777777778: sdeep-: scount-0: xfvcount-4823: icnt-1614: ikarraycnt-35ok|||ul|||da||| y|||ep|||ye|||ni|||-s|||ek|||s,||| p|||or|||no|||-x|||ha|||ms|||te|||r |||[1|||1 |||:0|||1x|||36|||0p|||] ||| ||| |||okulda|||yepyeni|||seks|||porno|||xhamster|||x|||p|||: yhkey-
pdoline2033: $i-52$load-1.16625
line2354: sitet-åç»
cache-control: public, max-age=377212
genre: genre=
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: MISS
xkey-192la: av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]-B-av.4freedom.click-av.4freedom.click-myzone---yes
x-proxy-cache-g-sg1: MISS
xkey-g-sg1: av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]-B-av.4freedom.click--my_zone
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:18 GMT
content-encoding: br
cf-ray: 925b4e4da92856cb-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 87 kB URL GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA
ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 25 Mar 2025 02:09:47 GMT
expires: Wed, 25 Mar 2026 02:09:47 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 4591
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET xvideosrei.com/favicon.ico
404 Not Found 0 B URL GET xvideosrei.com/favicon.ico
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:17 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
etag: W/"67d053ea-ce6"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000;
content-encoding: br
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.videosdesexo.mobi/video/8924/novinhas-transando-na-escola//title/myhash/3
200 OK 124 B URL GET pdocac.tube-dl.top/v/s://www.videosdesexo.mobi/video/8924/novinhas-transando-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 6583cc7e6a072181ec703b2d189812f0
1c91304f8d0a8f80b86082415a6bccaa1c113bc8
1e15b330c5e256663441218b8d745832880b28d3f86571f3e66fe9452de6aa20
GET /v/s://www.videosdesexo.mobi/video/8924/novinhas-transando-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.videosdesexo.mobi/video/8924/novinhas-transando-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://www.videosdesexo.mobi/video/8924/novinhas-transando-na-escola//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo4/29/1f/2b4966, lfm-1-16101, lmd-16101, lud-7118819, xfvlen-1068938, fsize-127948, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.videosdesexo.mobi/video/8924/novinhas-transando-na-escola//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sSFxUUgDz0RZs7wT41DKLzVEW%2FbUs0SklQHu7sEdtuDUcIIztjPZQkTpr5UMp09WqN3wAHfkwoxf5fvJopfHdoyorNF%2B2ChYkCNdY%2FZLAxexxgdecT3LewjBjfkJS39rXweHE1M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9c6cbe56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6141&min_rtt=381&rtt_var=6792&sent=129&recv=90&lost=0&retrans=4&sent_bytes=50860&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9154&x=0"
X-Firefox-Spdy: h2
GET 29047886-22554-3424.aceadynict.com/v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPn1k0HeIiGWJIqNfvaeANq5bVIEI3Bl73ZXbWXOxXsm31AIU_KxBNdtNCbph-SrVfz9BimBzlebT-MPJfGpSnZsRRpEHwYb-RrDPkGGVvmc1X9F7FguJZhS99p_qFXJZuotf6hM6CwgzUiJl0mFppJ5jW69DdRBCSFxCAraIiiZvidAh8e1m56IonsoeWjkwKoXuZ3dHeve1VaRIE4yf78jtFdjecXJObU9pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMlO3SqdviTrxbcP8v8tfWE7nWpaC
200 OK 68 B URL GET 29047886-22554-3424.aceadynict.com/v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPn1k0HeIiGWJIqNfvaeANq5bVIEI3Bl73ZXbWXOxXsm31AIU_KxBNdtNCbph-SrVfz9BimBzlebT-MPJfGpSnZsRRpEHwYb-RrDPkGGVvmc1X9F7FguJZhS99p_qFXJZuotf6hM6CwgzUiJl0mFppJ5jW69DdRBCSFxCAraIiiZvidAh8e1m56IonsoeWjkwKoXuZ3dHeve1VaRIE4yf78jtFdjecXJObU9pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMlO3SqdviTrxbcP8v8tfWE7nWpaC
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPn1k0HeIiGWJIqNfvaeANq5bVIEI3Bl73ZXbWXOxXsm31AIU_KxBNdtNCbph-SrVfz9BimBzlebT-MPJfGpSnZsRRpEHwYb-RrDPkGGVvmc1X9F7FguJZhS99p_qFXJZuotf6hM6CwgzUiJl0mFppJ5jW69DdRBCSFxCAraIiiZvidAh8e1m56IonsoeWjkwKoXuZ3dHeve1VaRIE4yf78jtFdjecXJObU9pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMlO3SqdviTrxbcP8v8tfWE7nWpaC HTTP/1.1
Host: 29047886-22554-3424.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET av.4freedom.click/v/s:/xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
200 OK 19 kB URL User Request GET av.4freedom.click/v/s:/xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
IP
Certificate IssuerGoogle Trust Services
Subject4freedom.click
FingerprintC0:8C:2B:C0:A2:B6:46:DB:1F:F5:72:2F:C7:01:3C:16:E5:8D:6C:63
ValidityMon, 03 Mar 2025 20:25:41 GMT - Sun, 01 Jun 2025 21:20:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s:/xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p] HTTP/1.1
Host: av.4freedom.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:16 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-av.4freedom.click4.194.8.20-myhost-av.4freedom.click38.220.248/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
phost: av.4freedom.click
pdojs-line355: notjp--myhost-av.4freedom.click-filteron-
pdojs-line963: notjp--myhost-av.4freedom.click-filteron-/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
pdo120: feedvid-, cachefileb-cacpdo4/41/f5/d93549, lfm-1-3901, lmd-3901, lud-7199714, xfvlen-741455, fsize-102127, played-1
pdo393: feedvid-, cachefileb-cacpdo4/41/f5/d93549, lfm-1-3901, lmd-3901, lud-7199714, xfvlen-741455, fsize-102127, played-1
pdophp-line426: -; cachetime- 249459.40248377; ctime- 20250101042753; lmd- 20250325111806
pdoline1574: method-1: ik-ok|||ul|||da||| y|||ep|||ye|||ni|||-s|||ek|||s,||| p|||or|||no|||-x|||ha|||ms|||te|||r |||[1|||1 |||:0|||1x|||36|||0p|||] ||| ||| |||okulda|||yepyeni|||seks|||porno|||xhamster|||x|||p|||ik====okulda yepyeni-seks, porno-xhamster [11 :01x360p] : vidlang-es-pt4818
pdoline1679: method-1: ik-ok|||ul|||da||| y|||ep|||ye|||ni|||-s|||ek|||s,||| p|||or|||no|||-x|||ha|||ms|||te|||r |||[1|||1 |||:0|||1x|||36|||0p|||] ||| ||| |||okulda|||yepyeni|||seks|||porno|||xhamster|||x|||p|||okulda yepyeni-seks, porno-xhamster [11 :01x360p] : vidlang-es-pt4818
pdoline1680: sarray-0es-pt
pdoline1743: notjp-: fvkwcnt-4818
pdoline1747: notjp-: fvkwcnt-4818
pdoline1765: notjp-: mblenik-53: khitTop-: sdeep-: scount-0: xfvcount-4818: icnt-1614: ikarraycnt-35ok|||ul|||da||| y|||ep|||ye|||ni|||-s|||ek|||s,||| p|||or|||no|||-x|||ha|||ms|||te|||r |||[1|||1 |||:0|||1x|||36|||0p|||] ||| ||| |||okulda|||yepyeni|||seks|||porno|||xhamster|||x|||p|||: yhkey-
pdoline2033: $i-6$load-1.198125
line2354: sitet-åç»
cache-control: public, max-age=69015
genre: genre=
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: av.4freedom.click/v/s:/xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]-B-av.4freedom.click-av.4freedom.click-myzone---yes
x-proxy-cache-g-sg1: MISS
xkey-g-sg1: av.4freedom.click/v/s:/xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]-B-av.4freedom.click--my_zone
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DbQeXyN5uFUt8zufXXWLuRZtpqw5Q%2BxeHzCBVZ%2BGMYQE7Jr1G0cmIyFZRhrLNggzCxllQ%2B8TDbrVQ2paVkep8tN8ighLIfM5ubqar9LDL5pb2cqXD5cwG%2F9dIgfvIftA62vicw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e41eda1712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6169&min_rtt=539&rtt_var=11151&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3282&recv_bytes=1359&delivery_rate=7912568&cwnd=254&unsent_bytes=0&cid=0c5d5e641fdb3d06&ts=800&x=0"
X-Firefox-Spdy: h2
GET xvideosrei.com/wp-cdn/uploads/video/flagra-novinha-na-escola.mp4
302 Found 0 B URL GET xvideosrei.com/wp-cdn/uploads/video/flagra-novinha-na-escola.mp4
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-cdn/uploads/video/flagra-novinha-na-escola.mp4 HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Cookie
location: https://cdn77-vid-mp4.xvideos-cdn.com/2kOQS8qVNOoW227-3v7BAA==,1742882437/videos/mp4/7/e/2/xvideos.com_7e21a217dcc03deca70f6caf8baee20a.mp4?ui=MTA0LjE2Ny4yNy43My0tL2VtYmVkZnJhbWUvdW1wdG9pYWUyZTE=
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-micro-cache: MISS
strict-transport-security: max-age=31536000;
X-Firefox-Spdy: h2
GET fixedjs.jtube.top/AV4.us.jpg
200 OK 8.7 kB URL GET fixedjs.jtube.top/AV4.us.jpg
IP
Requested by https://av.4freedom.click/v/s:/xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3
Hash edfe007a6e5b3d268b2528f564b60b43
1644c8ef97c871079e07e5079d613af5cb94052f
bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:16 GMT
content-type: image/jpeg
content-length: 8741
etag: "2225-614075c7eff6b"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 218703
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UnE8xwJEJMUuKYKFjPKkOlvzl0YBI%2BMAXQ9sD8mWrP5XywdW9V7nbkWc3%2BKnun9Z6%2B8%2B99jxcNOZe08q0yiambQUj0RhKyKWm2IX1FlOoVn5O1aX0CH86gIIVsfKsgJjqamvYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e4a5ead56a3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1696&min_rtt=423&rtt_var=1329&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3266&recv_bytes=1216&delivery_rate=7956043&cwnd=254&unsent_bytes=0&cid=ea09e21b02061954&ts=98&x=0"
X-Firefox-Spdy: h2
GET css.4jpg.top/mycss/av4.css?33
200 OK 4.2 kB URL GET css.4jpg.top/mycss/av4.css?33
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/tags/6
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
File type Unicode text, UTF-8 text, with very long lines (4483), with no line terminators
Hash d31c3010aac9eabd19d2e27abefa8b5d
5560417df04197d1fe2d136c7a2df55987f63609
c31786acbabc0d6035bcfc842c55984831c2ba650a7acbd8c1f7270a39c149c3
GET /mycss/av4.css?33 HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/tags/6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/css
etag: W/"103e-62edbddabc000"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 150258
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dAo%2FmJJZEijJ4hF5K0NM0OPhYCGBCZ4SYWi1T%2Fj43g5WfnWdv%2BFEmq4ctxjAL9%2FjespNwBL%2FyQSgWSotl%2B%2BJrvjU%2BmCP4Cy5nYmvKzeXsmkzTd8wNoWIqx7H61T%2B6n0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e6259e6568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4845&min_rtt=1254&rtt_var=2946&sent=179&recv=40&lost=0&retrans=0&sent_bytes=172343&recv_bytes=6889&delivery_rate=8251&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=3846&x=1", cfExtPri, cfHdrFlush;dur=0
GET www.porno16.com/favicon.ico
301 Moved Permanently 0 B URL GET www.porno16.com/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectporno16.com
FingerprintE8:B0:F0:17:4D:1D:BE:FC:4B:79:6D:B4:42:BB:2A:5B:79:65:54:5B
ValidityThu, 13 Mar 2025 03:22:06 GMT - Wed, 11 Jun 2025 04:20:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.porno16.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html
content-length: 167
location: https://www.porno26.com/favicon.ico
cache-control: max-age=3600
expires: Tue, 25 Mar 2025 04:26:27 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9u8%2FW4eyAtoN22GK3mGRk0NMVRnONUFBacOPv94Ykg5vg4Gp5cURNKCn5gOzH2zhkYtrplU2cfXrWNdhRJLjuvV8husD9%2F8LiHx6raiVO%2B7seyBEuJtzP7208jwiDeOIipY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e8d0ffa1c16-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=480&min_rtt=426&rtt_var=121&sent=6&recv=10&lost=0&retrans=0&sent_bytes=3272&recv_bytes=1160&delivery_rate=7729537&cwnd=253&unsent_bytes=0&cid=c2c95a2938e778f1&ts=464&x=0"
X-Firefox-Spdy: h2
GET 29047886-22554-ex.unrertivermalous.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A29%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%224%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.1 kB URL GET 29047886-22554-ex.unrertivermalous.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A29%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%224%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.unrertivermalous.com
Fingerprint79:20:B3:AF:0C:13:23:74:B6:04:49:94:51:E9:C0:A9:F8:C7:B5:CD
ValiditySat, 01 Mar 2025 14:29:48 GMT - Fri, 30 May 2025 14:29:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4171), with no line terminators
Hash 948e5dd7c62ae1bebd9c958a13ad5525
dc78a0ae347b04b13f7431084bc0683b80f8fcc5
c836013b95b286f029aff345dc916eb14b7b6d814a1cb7629265b28bb7497cb2
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A29%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%224%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.unrertivermalous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:29 UTC
expires: Tue, 25 Mar 2025 03:26:29 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET jsjs.4jpg.top/index.php?js=very
200 OK 0 B URL GET jsjs.4jpg.top/index.php?js=very
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/tags/6
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
imghost: 1729614248-h-jsjs4jpgtopmh--NO-rm162158222117/index.php?js=very
56nloadrate: 0.0615625
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eZM4V9yMYovJONSQ9YWMlep551YFITNrSr%2BNPn4%2BgUh7V9qdx8ILi8ZuGXEmbOoWC%2BesbfunvELqr7fwmXe3dqWl7PokTHz3MWPu1qxCr%2FQFZjLoPntCm70kM3UK%2BLoi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e5f1884568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5005&min_rtt=1254&rtt_var=3715&sent=169&recv=31&lost=0&retrans=0&sent_bytes=169507&recv_bytes=5082&delivery_rate=1816184&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=3702&x=1", cfExtPri, cfHdrFlush;dur=0
GET cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js
200 OK 11 kB URL GET cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/tags/6
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC
ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File type JavaScript source, ASCII text, with very long lines (10613)
Hash ea77f824de2ef57acb12e7cb6596365e
10bad0dbdf30a0471c2c786b349daeb1dd19180e
2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c
GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 3953
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ed16b69-29bf"
last-modified: Fri, 29 May 2020 20:07:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 301774
expires: Sun, 15 Mar 2026 03:26:20 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EnEEzsApWJujrajNQq%2FWt0BoA%2BYvOCg4WG2C0Xc7QymTlNtIJ8tRI%2BmTLa%2FmHlb%2B0hcMNRx%2BfSRdWRRJdeJWh%2FncPsd7jDegFKgBkIXBJN%2BDtTeJbB9nGevBJlN642wFsHSRLIEU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 925b4e625f12b50b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 29047886-22554-3424.wherdiapospir.com/v2/a/na/image?d=BQ5qQHPeUJSOqTlpFwgQ5dcqEhT6UY6e3kvWWEV4ZU1IEP_BnyFt9XyXDO3HaaTsPtehROJ8lwsfscq98igSLD0i9n2y8aOB3aa0Ipq1ICMIJeFRbg91iHmIhEy84SFzRZUr-Hy2vl_vSzGA8qgVnPmjZkwYf3A8zzp0fAoDMLzX1jdjlJEwWUxInPaGcMeqdEI8sHKD0nAirEXzeVUgsWKmSgJgoAs_EXX1no4COQjdFvP4OCTdorjD_nT385Zi-EzhjK-_FaEJcTjPAkHjUAMIhg4RhDkBAaiyXecNolErl5B7X8EnwLRN5L_GDvH-mFbX0p2t6TKA-fT_jhmaJ98t-2Op7CJXqJE5atMWx6RbVO65-USPaHBsobR5Fn20qJxGDXxZgTKALPBHwVDOnLFvYZhaYYozugHCkXZ2ZzNgdHaIlK4Y9ZO1rA39QhmXFAu8LgbU7pxxhTgiRTmHsW5DRBIncXH7OTMnwxAaiDBRPvGtYSXqqUoAja29ICyJxwF2IcFmdheXKe2kpaOi4KgfJKDgI7-VJ2bAk-uuPY3QVKBQvW7XWMHkfd-Dasykx2Z7FNvOnubfKzcMMGZGcXTjyGtxiYs4PFFarbp3t1xdqne3nT9abQRCyuwdzvXeWzZvMxsZB_ybWrZzpshkzPxgJitui2Kuw9XLvd0XnlNzts-XHwwiClfckQk1Cstach-5Bcvq9HYUITLlhuaBhBeY1472TSJhymM_8aGaJxHCu6XdpmwafpQoLOKxLky0eJ3Cyl7iKkwEhIH8wwmy9q4NprktMqDGcwPWE0X7aPCw-srReCQwnzU_EAoDUUvkD6DQEr5rAjKPLw3G9KOcaoh2_NVRU7iLrZp3k2KVUqg-u7fmjPA9nfHBxp5FxZtZyBu_7vIIv4HqW91m6x2fwKMggC3ERcjKVDPv6J1MuwF1BAZD0Yn9dEQKA6rZb6y13M1mLS6NzJ3y5h9k9jbNBKkuIRX8gZyTXrFGh3QX9dS1qJfO-tbQyqUISvZWJ-TAK5NCShZNNPb_fKaZ65tN1cl9esWnJn-Zwb7iCb0H6g1XIZPAKfD8COwoeeBkqU-3q016YPvyU6RKboRKETDDtqMUHcWii6U7GD5LxISI9cxhr9KX9msrO-MDmM5HglOSSH4VrbBTS4jFElnJLx8SIDIF_quIx3DxMfUncQfQqenPQuxRfepZMtU-ZbSbt2pgDZNM3ruU4NUGy1FH9b2HWNE-SBn-mA
200 OK 68 B URL GET 29047886-22554-3424.wherdiapospir.com/v2/a/na/image?d=BQ5qQHPeUJSOqTlpFwgQ5dcqEhT6UY6e3kvWWEV4ZU1IEP_BnyFt9XyXDO3HaaTsPtehROJ8lwsfscq98igSLD0i9n2y8aOB3aa0Ipq1ICMIJeFRbg91iHmIhEy84SFzRZUr-Hy2vl_vSzGA8qgVnPmjZkwYf3A8zzp0fAoDMLzX1jdjlJEwWUxInPaGcMeqdEI8sHKD0nAirEXzeVUgsWKmSgJgoAs_EXX1no4COQjdFvP4OCTdorjD_nT385Zi-EzhjK-_FaEJcTjPAkHjUAMIhg4RhDkBAaiyXecNolErl5B7X8EnwLRN5L_GDvH-mFbX0p2t6TKA-fT_jhmaJ98t-2Op7CJXqJE5atMWx6RbVO65-USPaHBsobR5Fn20qJxGDXxZgTKALPBHwVDOnLFvYZhaYYozugHCkXZ2ZzNgdHaIlK4Y9ZO1rA39QhmXFAu8LgbU7pxxhTgiRTmHsW5DRBIncXH7OTMnwxAaiDBRPvGtYSXqqUoAja29ICyJxwF2IcFmdheXKe2kpaOi4KgfJKDgI7-VJ2bAk-uuPY3QVKBQvW7XWMHkfd-Dasykx2Z7FNvOnubfKzcMMGZGcXTjyGtxiYs4PFFarbp3t1xdqne3nT9abQRCyuwdzvXeWzZvMxsZB_ybWrZzpshkzPxgJitui2Kuw9XLvd0XnlNzts-XHwwiClfckQk1Cstach-5Bcvq9HYUITLlhuaBhBeY1472TSJhymM_8aGaJxHCu6XdpmwafpQoLOKxLky0eJ3Cyl7iKkwEhIH8wwmy9q4NprktMqDGcwPWE0X7aPCw-srReCQwnzU_EAoDUUvkD6DQEr5rAjKPLw3G9KOcaoh2_NVRU7iLrZp3k2KVUqg-u7fmjPA9nfHBxp5FxZtZyBu_7vIIv4HqW91m6x2fwKMggC3ERcjKVDPv6J1MuwF1BAZD0Yn9dEQKA6rZb6y13M1mLS6NzJ3y5h9k9jbNBKkuIRX8gZyTXrFGh3QX9dS1qJfO-tbQyqUISvZWJ-TAK5NCShZNNPb_fKaZ65tN1cl9esWnJn-Zwb7iCb0H6g1XIZPAKfD8COwoeeBkqU-3q016YPvyU6RKboRKETDDtqMUHcWii6U7GD5LxISI9cxhr9KX9msrO-MDmM5HglOSSH4VrbBTS4jFElnJLx8SIDIF_quIx3DxMfUncQfQqenPQuxRfepZMtU-ZbSbt2pgDZNM3ruU4NUGy1FH9b2HWNE-SBn-mA
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.wherdiapospir.com
Fingerprint58:84:1A:43:51:F5:66:4D:F0:6E:BC:85:78:CA:67:EE:E4:AB:3A:90
ValidityFri, 28 Feb 2025 14:29:09 GMT - Thu, 29 May 2025 14:29:08 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPeUJSOqTlpFwgQ5dcqEhT6UY6e3kvWWEV4ZU1IEP_BnyFt9XyXDO3HaaTsPtehROJ8lwsfscq98igSLD0i9n2y8aOB3aa0Ipq1ICMIJeFRbg91iHmIhEy84SFzRZUr-Hy2vl_vSzGA8qgVnPmjZkwYf3A8zzp0fAoDMLzX1jdjlJEwWUxInPaGcMeqdEI8sHKD0nAirEXzeVUgsWKmSgJgoAs_EXX1no4COQjdFvP4OCTdorjD_nT385Zi-EzhjK-_FaEJcTjPAkHjUAMIhg4RhDkBAaiyXecNolErl5B7X8EnwLRN5L_GDvH-mFbX0p2t6TKA-fT_jhmaJ98t-2Op7CJXqJE5atMWx6RbVO65-USPaHBsobR5Fn20qJxGDXxZgTKALPBHwVDOnLFvYZhaYYozugHCkXZ2ZzNgdHaIlK4Y9ZO1rA39QhmXFAu8LgbU7pxxhTgiRTmHsW5DRBIncXH7OTMnwxAaiDBRPvGtYSXqqUoAja29ICyJxwF2IcFmdheXKe2kpaOi4KgfJKDgI7-VJ2bAk-uuPY3QVKBQvW7XWMHkfd-Dasykx2Z7FNvOnubfKzcMMGZGcXTjyGtxiYs4PFFarbp3t1xdqne3nT9abQRCyuwdzvXeWzZvMxsZB_ybWrZzpshkzPxgJitui2Kuw9XLvd0XnlNzts-XHwwiClfckQk1Cstach-5Bcvq9HYUITLlhuaBhBeY1472TSJhymM_8aGaJxHCu6XdpmwafpQoLOKxLky0eJ3Cyl7iKkwEhIH8wwmy9q4NprktMqDGcwPWE0X7aPCw-srReCQwnzU_EAoDUUvkD6DQEr5rAjKPLw3G9KOcaoh2_NVRU7iLrZp3k2KVUqg-u7fmjPA9nfHBxp5FxZtZyBu_7vIIv4HqW91m6x2fwKMggC3ERcjKVDPv6J1MuwF1BAZD0Yn9dEQKA6rZb6y13M1mLS6NzJ3y5h9k9jbNBKkuIRX8gZyTXrFGh3QX9dS1qJfO-tbQyqUISvZWJ-TAK5NCShZNNPb_fKaZ65tN1cl9esWnJn-Zwb7iCb0H6g1XIZPAKfD8COwoeeBkqU-3q016YPvyU6RKboRKETDDtqMUHcWii6U7GD5LxISI9cxhr9KX9msrO-MDmM5HglOSSH4VrbBTS4jFElnJLx8SIDIF_quIx3DxMfUncQfQqenPQuxRfepZMtU-ZbSbt2pgDZNM3ruU4NUGy1FH9b2HWNE-SBn-mA HTTP/1.1
Host: 29047886-22554-3424.wherdiapospir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET xvideosrei.com/wp-cdn/uploads/video/flagra-novinha-na-escola.mp4
302 Found 0 B URL GET xvideosrei.com/wp-cdn/uploads/video/flagra-novinha-na-escola.mp4
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-cdn/uploads/video/flagra-novinha-na-escola.mp4 HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 25 Mar 2025 03:26:19 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Cookie
location: https://cdn77-vid-mp4.xvideos-cdn.com/2kOQS8qVNOoW227-3v7BAA==,1742882437/videos/mp4/7/e/2/xvideos.com_7e21a217dcc03deca70f6caf8baee20a.mp4?ui=MTA0LjE2Ny4yNy43My0tL2VtYmVkZnJhbWUvdW1wdG9pYWUyZTE=
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-micro-cache: MISS
strict-transport-security: max-age=31536000;
X-Firefox-Spdy: h2
GET cnnamador.com/
200 OK 0 B IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectcnnamador.com
Fingerprint11:CA:AF:D8:F2:36:CD:DD:14:54:C3:75:7A:3D:D7:12:2C:86:E9:25
ValidityFri, 14 Feb 2025 14:43:04 GMT - Thu, 15 May 2025 15:40:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: cnnamador.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=5hudsqkgmn478r23fjrh37cm9q; path=/; domain=.cnnamador.com; SameSite=Lax
kt_ips=91.90.42.154; expires=Wed, 26-Mar-2025 03:26:28 GMT; Max-Age=86400; path=/; domain=.cnnamador.com; secure; SameSite=None
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v%2BN2iyFP9HAulQIphNbIHSwsWwXsoWUlXpp3t6y2t%2Be6rSPoDYYVwpngEHGDS5b6He1vBpEZLxGYl288JHN0TrAX2A%2B%2F99cWc6BdxxN5lyGfHPTj9VEswJl8nMEWjz66"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e93cd5e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12708&min_rtt=8268&rtt_var=9958&sent=40&recv=39&lost=0&retrans=0&sent_bytes=5622&recv_bytes=2786&delivery_rate=22539&cwnd=12000&unsent_bytes=0&cid=ba15ec0d42b23fa1&ts=1322&x=1", cfExtPri, cfHdrFlush;dur=0
GET cdn.bancychialk.com/20654/15bae35f-17d3-11ec-ba28-5f54dd64648d.png
200 OK 186 kB URL GET cdn.bancychialk.com/20654/15bae35f-17d3-11ec-ba28-5f54dd64648d.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.bancychialk.com
FingerprintFA:DA:33:40:79:54:B2:FD:B8:D7:FD:AD:E7:20:D9:56:9E:3D:DC:40
ValidityWed, 19 Feb 2025 08:49:49 GMT - Tue, 20 May 2025 08:49:48 GMT
File type PNG image data, 492 x 328, 8-bit/color RGB, non-interlaced
Size 186 kB (185815 bytes)
Hash 05155247091035489191b4ceb9a8691c
feb540e7abe0af5bb25e333002a3eecf7a7be566
2da7a7194a25f6f971daf7f12d5ce5446167bb9dba941dd3c28d4025fc15df73
GET /20654/15bae35f-17d3-11ec-ba28-5f54dd64648d.png HTTP/1.1
Host: cdn.bancychialk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 185815
traceparent: 00-9f24b1952115c68f757ec491cc688d2f-261e3a2538647c70-01
x-id-fe: osix-hw-edge-gc4
last-modified: Fri, 17 Sep 2021 16:19:51 GMT
etag: "6144c027-2d5d7"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149644
cache: HIT
x-cached-since: 2025-03-23T09:52:25+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 29047886-22554-ex.undeciliste.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%224%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.1 kB URL GET 29047886-22554-ex.undeciliste.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%224%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.undeciliste.com
FingerprintB2:B4:0B:3C:3C:3D:57:A1:33:77:D7:34:88:54:24:68:02:99:D5:B9
ValidityMon, 03 Feb 2025 14:34:59 GMT - Sun, 04 May 2025 14:34:58 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4177), with no line terminators
Hash a7bbd7b56e2738e3d1d199c6b300c0c3
10054ebd60364cc5d5d18e222225c150f5363ebe
fc23cab43f51cfffce44031fc1793704851e8294fe89f29782e2b1ea27d50783
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%224%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.undeciliste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:29 UTC
expires: Tue, 25 Mar 2025 03:26:29 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET cdn.puclepighicric.com/1833/8f043f44-1169-11ec-ba28-5f54dd64648d.png
200 OK 46 kB URL GET cdn.puclepighicric.com/1833/8f043f44-1169-11ec-ba28-5f54dd64648d.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.puclepighicric.com
Fingerprint79:CF:37:A3:55:04:83:1F:5B:DE:61:72:F9:02:1B:E6:FD:B4:86:B9
ValidityTue, 25 Feb 2025 13:30:24 GMT - Mon, 26 May 2025 13:30:23 GMT
File type PNG image data, 492 x 328, 8-bit colormap, non-interlaced
Hash c1e4ed7e516d4d7f84ed2e996d1199f3
2de6167a746f3ef0b6d2b43446ed7d5b61432c61
0f68dd5c8701d2f9e516392f80f758e37989df9d85e4bcaf5b6b9be6900f1361
GET /1833/8f043f44-1169-11ec-ba28-5f54dd64648d.png HTTP/1.1
Host: cdn.puclepighicric.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 45521
traceparent: 00-d0a79df7002dd368b5beac81dc6584f6-5942b016b64f9883-01
x-id-fe: osix-hw-edge-gc4
last-modified: Thu, 09 Sep 2021 12:29:21 GMT
etag: "6139fe21-b1d1"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 321789
cache: HIT
x-cached-since: 2025-03-21T10:03:20+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET vjs.zencdn.net/7.8.2/video.js
200 OK 1.9 MB URL GET vjs.zencdn.net/7.8.2/video.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
Fingerprint22:88:1F:07:1F:92:14:54:4B:E7:66:41:59:BF:5D:37:AF:C0:31:C7
ValidityTue, 07 Jan 2025 21:56:05 GMT - Sun, 08 Feb 2026 21:56:04 GMT
Size 1.9 MB (1863992 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /7.8.2/video.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 26 May 2020 21:39:10 GMT
etag: "52c53a33bb2cd149f293eb14fb22505d"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Tue, 25 Mar 2025 03:26:19 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 1308
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 419634
X-Firefox-Spdy: h2
GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1
200 OK 87 kB URL GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA
ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js?1 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 09:15:53 GMT
expires: Fri, 20 Mar 2026 09:15:53 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 411027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:23 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BHGFI%2FR65TOlk3gnsEhSBzbHYg2OSXX4IGwYKHqN3t0db7V6IpD0y7rRbq0%2B5NMShqep%2BRyC0QCAuTrb6s%2FDIZLKiXD%2BIrwzRyeIT%2BLkpmJPUvcjAiJ%2F8ybzwAwsEonaf6It%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81394
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e77190f0b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET css.4jpg.top/index.php?js=very
400 Bad Request 0 B URL GET css.4jpg.top/index.php?js=very
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 25 Mar 2025 03:26:25 GMT
content-type: text/html; charset=iso-8859-1
x-proxy-cache-192g-la: UPDATING
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t5TlOsYkaKqW3GcZlJ9QlevMyBaOTKGdg%2F%2FiFezY9pATOzwMDrkVdBHH9VIi2OIeSuI1yghHmRc6ujloLPfUfmN1IoMyZFNGklE56dRNizqXhwVxNNqG8XRbOShrX48%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e7c3d7b568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=44921&min_rtt=1254&rtt_var=56815&sent=295&recv=61&lost=0&retrans=2&sent_bytes=291107&recv_bytes=10159&delivery_rate=535352&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=8358&x=1", cfExtPri, cfHdrFlush;dur=0
GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 242 kB URL GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
Size 242 kB (242447 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 88616
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.366.0
x-jsd-version-type: version
etag: W/"3b30f-xasoqLlON+0SM11iGCxWGKe469U"
content-encoding: br
accept-ranges: bytes
date: Tue, 25 Mar 2025 03:26:35 GMT
age: 30640
x-served-by: cache-fra-eddf8230100-FRA, cache-hel1410021-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET xvideos.blog.br/wp-content/uploads/2023/03/porno.png
200 OK 508 B URL GET xvideos.blog.br/wp-content/uploads/2023/03/porno.png
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectxvideos.blog.br
Fingerprint49:07:C9:59:6E:92:2A:32:D5:97:87:74:0A:79:29:33:7A:7D:84:5B
ValidityThu, 06 Mar 2025 05:44:52 GMT - Wed, 04 Jun 2025 06:44:44 GMT
File type RIFF (little-endian) data, Web/P image
Hash dcd11787696bb1c637774750a70f0bfe
ba6deb406e9f44c682d30542e539f97367c4ee84
47f214633096e20d464a1323e5cfaa2f870d74675a2e1d820e2f0299ec7d7bb6
GET /wp-content/uploads/2023/03/porno.png HTTP/1.1
Host: xvideos.blog.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: image/webp
content-length: 508
cache-control: public, max-age=31557600
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1317
content-disposition: inline; filename="porno.webp"
vary: Accept
etag: "525-6425a8c9-a6d9cefea426b676;;;"
expires: Sun, 22 Mar 2026 15:28:42 GMT
last-modified: Thu, 30 Mar 2023 15:20:41 GMT
cf-cache-status: HIT
age: 236180
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7ONr%2F4RfpoFE9CRhCkOq6EqJa1%2BYlIx3HmaSgTxxSgO8nfPGO47WcFvhf9wxW%2FvK7YmYoBIqZiiDFs2mAyeu1mapvZL3Uxdv5QxlKfyNjMA1Gmjp4ABpmRhLQ0t3IO0dPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 925b4e8f6f0c712f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2654&min_rtt=401&rtt_var=4038&sent=9&recv=13&lost=0&retrans=0&sent_bytes=4137&recv_bytes=1283&delivery_rate=7425641&cwnd=256&unsent_bytes=0&cid=0888fecc6c7c6071&ts=902&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/://anybunny.com/itm/novinha_flagrada_fazendo_sexo_na_escola/title/myhash/3
200 OK 228 B URL GET pdocac.tube-dl.top/v/://anybunny.com/itm/novinha_flagrada_fazendo_sexo_na_escola/title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 33504e832e977b81ecb2ab0a7f2e29fa
e1593708f79fe22b0b5c62639fb18953c1789c8b
20e9fb6eda1264175d91e98a7ade51a0c4ac9e462c59eb2213998ca1a269a6e0
GET /v/://anybunny.com/itm/novinha_flagrada_fazendo_sexo_na_escola/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/://anybunny.com/itm/novinha_flagrada_fazendo_sexo_na_escola/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line358: notjp-nojp-myhost--filteron-
pdojs-line1434: notjp-nojp-myhost--filteron-/v/://anybunny.com/itm/novinha_flagrada_fazendo_sexo_na_escola/title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/66/6e/760759, lfm-1-710, lmd-710, lud-429744, xfvlen-535107, fsize-260326, played-169
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/://anybunny.com/itm/novinha_flagrada_fazendo_sexo_na_escola/title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: HIT
age: 83197
last-modified: Mon, 24 Mar 2025 04:19:52 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LFuhnJn%2F6xwtsyWwzBNJ1NiybJYtzQ4FOVTdahItI8%2FTHX8q5aZkOyG8slBXgPnckWufaslF3AQbk8Uqono7gHJd9zpoDvLky3%2F4vCEFnqpF01oITRNVvj934%2Fpm1WXu%2Bs9hwqE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9b7c4156b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2820&min_rtt=437&rtt_var=1860&sent=13&recv=14&lost=0&retrans=1&sent_bytes=4667&recv_bytes=1448&delivery_rate=3313501&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8619&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://filmesporno.xxx/xvideos/loirinhas-novinhas//title/myhash/3
200 OK 223 B URL GET pdocac.tube-dl.top/v/s://filmesporno.xxx/xvideos/loirinhas-novinhas//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 5f69ea16fe06f57754779a99683b522c
3152d5d63783ca02d3201aed39cc3bb881dbe0ed
6978694996bb42c9d09640918a3cb295bd5d06fb224c2b66429219868a179af6
GET /v/s://filmesporno.xxx/xvideos/loirinhas-novinhas//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://filmesporno.xxx/xvideos/loirinhas-novinhas//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-ru-myhost--filteron-
pdojs-line1431: notjp-ru-myhost--filteron-/v/s://filmesporno.xxx/xvideos/loirinhas-novinhas//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/51/30/413447, lfm-1-3766, lmd-3766, lud-1194916, xfvlen-432845, fsize-321658, played-185
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://filmesporno.xxx/xvideos/loirinhas-novinhas//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: HIT
age: 1050094
last-modified: Wed, 12 Mar 2025 23:44:55 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FFRPK%2FBYlnzR%2BOvTAda1%2Bbnn1cZ%2F6eZI8X5tUsmsVcDeBHzUNLrVrIduBq2%2FFFL7gyfupJ3GsONu2TMJKR6Uy3Jp74baFKzozuPR95NaR4kvVEF%2BelYkaWigEa6%2BJ89CUa1OVs4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc8456b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2674&min_rtt=437&rtt_var=2552&sent=46&recv=49&lost=0&retrans=1&sent_bytes=13468&recv_bytes=5264&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8677&x=0"
X-Firefox-Spdy: h2
GET xvideos10.blog.br/wp-content/uploads/2017/01/porno-doido-irma-novinha-estuprada-pelo-irmao.jpg
200 OK 7.5 kB URL GET xvideos10.blog.br/wp-content/uploads/2017/01/porno-doido-irma-novinha-estuprada-pelo-irmao.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectxvideos10.blog.br
Fingerprint67:54:67:C6:1D:AB:25:C6:13:86:8C:29:42:8B:1F:FD:D9:A5:75:B9
ValiditySat, 08 Feb 2025 00:36:37 GMT - Fri, 09 May 2025 01:35:06 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 294x165, components 3
Hash c016de8452273c934b5c41c040c8359f
52660d4c38b0dcf35c7d31b4796abb9d5e178373
726178f4de9dbe80bd6eeaa3989cc2fb419528b91cdda3a816565ed39321bb5a
GET /wp-content/uploads/2017/01/porno-doido-irma-novinha-estuprada-pelo-irmao.jpg HTTP/1.1
Host: xvideos10.blog.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 7517
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m9j87JLqnNs1FnulcOzX8H%2BCNnCxB4ABK6UXycrGdPmcMc7GdlSVIySIYqcE9ZEe5ZNmybzGNbxjPrrE8IBoxYrjNLvcwrHaqHejgqs1RYC%2Fwk04VXewBrRxCaYJpVNckKHsVw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 22 Dec 2023 19:26:14 GMT
etag: "6585e2d6-1d5d"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:32 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 925b4ea4695db517-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET www.xxxbr.bar/media/thumbs/2/6/1/6/0/416626/416626-1.jpg
200 OK 6.7 kB URL GET www.xxxbr.bar/media/thumbs/2/6/1/6/0/416626/416626-1.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectxxxbr.bar
Fingerprint5D:77:20:27:7F:98:8E:E5:12:E2:D9:9F:58:E2:16:B7:56:23:B1:CD
ValiditySun, 16 Feb 2025 00:16:27 GMT - Sat, 17 May 2025 00:16:26 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 542x609, segment length 16, comment: "Lavc56.26.100", baseline, precision 8, 270x180, components 3
Hash d004e4376bd1384a3644f55389b22490
9e525de61617df9090d132ac872b99b0d1a43002
69a9ec521af552e82a5973f89dc67d5bc614c422e0b033e2db60ee8ff5a59fc1
GET /media/thumbs/2/6/1/6/0/416626/416626-1.jpg HTTP/1.1
Host: www.xxxbr.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 6694
last-modified: Wed, 06 Dec 2017 01:31:58 GMT
etag: "1a26-55fa1eade9bfb"
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 25 Mar 2026 03:26:31 GMT
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 242 kB URL GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
Size 242 kB (242447 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 88616
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.366.0
x-jsd-version-type: version
etag: W/"3b30f-xasoqLlON+0SM11iGCxWGKe469U"
content-encoding: br
accept-ranges: bytes
date: Tue, 25 Mar 2025 03:26:20 GMT
age: 30625
x-served-by: cache-fra-eddf8230100-FRA, cache-hel1410021-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 242 kB URL GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
Size 242 kB (242447 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 88616
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.366.0
x-jsd-version-type: version
etag: W/"3b30f-xasoqLlON+0SM11iGCxWGKe469U"
content-encoding: br
accept-ranges: bytes
date: Tue, 25 Mar 2025 03:26:25 GMT
age: 30629
x-served-by: cache-fra-eddf8230100-FRA, cache-hel1410021-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET 29047886-22554-ex.metateress.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.2 kB URL GET 29047886-22554-ex.metateress.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.metateress.com
Fingerprint18:F8:1A:15:02:2F:17:58:8B:AA:F4:F1:0C:3D:A2:BB:CA:38:F5:CF
ValidityThu, 30 Jan 2025 14:19:13 GMT - Wed, 30 Apr 2025 14:19:12 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4202), with no line terminators
Hash 9d0c5f4a3026cef076de3003cc1e8470
4c440c50db7e02c89604bd9c18bef3fbce8ec646
05e5b81f15ba0944409745d48bd005821d9fb32d1495e05dda13ac044120cd7f
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.metateress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:28 UTC
expires: Tue, 25 Mar 2025 03:26:28 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 8995aa1cff82ab17cdf5d997a51519f8
1641428dfa547840b23d9e89126792c91e6f7a96
aecc179347fc12180f8c17577ef53af268d1344d6ef8f6ff228ebb3fee0c23fe
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19499
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.pornodoido.com/video/anal-com-novinha-tailandesa-sexy//title/myhash/3
200 OK 256 B URL GET pdocac.tube-dl.top/v/s://www.pornodoido.com/video/anal-com-novinha-tailandesa-sexy//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash f26042791a195e15a47779c4d284f3ee
24206937026278b99e23ad6488975cb3faccd96d
027170759eb7b12ffa757641701aa7f85e80532ec95dee286ead41cec20623d0
GET /v/s://www.pornodoido.com/video/anal-com-novinha-tailandesa-sexy//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.pornodoido.com/video/anal-com-novinha-tailandesa-sexy//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://www.pornodoido.com/video/anal-com-novinha-tailandesa-sexy//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo4/35/4a/3af162, lfm-1-1842, lmd-1842, lud-7214980, xfvlen-674614, fsize-106439, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.pornodoido.com/video/anal-com-novinha-tailandesa-sexy//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UUGH3wNl%2B%2FYHi23VBhQHrksKAhyp%2BEGEFYG4VGlTAFj%2BK%2ByoeTj%2BM%2BMj1RmN9DcJJdJbN10d%2BlWJfi8R541A9306POcebClj%2FU3BrrE36zC46XbLSyS8d%2BJcR9ScRiaEuvbkyCM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bbc6f56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1750&min_rtt=417&rtt_var=2148&sent=87&recv=75&lost=0&retrans=3&sent_bytes=30992&recv_bytes=6602&delivery_rate=6135593&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9013&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://analzoosexporn.website/es/videos/zoophile-stimulating-tight-animal-anus//title/myhash/3
200 OK 166 B URL GET pdocac.tube-dl.top/v/s://analzoosexporn.website/es/videos/zoophile-stimulating-tight-animal-anus//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 067eba8a80da5cc1f12ccba37983ca22
813b3616db5fb0983c40fa27b853555cf486fe04
342fce756018412b5e3030f40ad95fc7e9ccfdf40335eb8bde1485b106379651
GET /v/s://analzoosexporn.website/es/videos/zoophile-stimulating-tight-animal-anus//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://analzoosexporn.website/es/videos/zoophile-stimulating-tight-animal-anus//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-arb-myhost--filteron-
line1432: notjp-arb-myhost--filteron-/v/s://analzoosexporn.website/es/videos/zoophile-stimulating-tight-animal-anus//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo4/8e/86/0ceb76, lfm-1-9787, lmd-9787, lud-6269658, xfvlen-382638, fsize-149790, played-19
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://analzoosexporn.website/es/videos/zoophile-stimulating-tight-animal-anus//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: HIT
age: 3119294
last-modified: Mon, 17 Feb 2025 00:58:15 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=je08P%2B5ilfL9L3S%2FIWZ8Z%2Fm%2Ft5yHqrM35yqhSs5JIEITuq9L2UPuf8Y3guaXJNfPD376Bsjv3ggVo8UgZ5X%2BUwww36d8EOju3pPxd0Zw%2FwPqAFM5pz1N6H5H7h5QQviZI63zZZ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bac6056b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2106&min_rtt=437&rtt_var=1387&sent=25&recv=30&lost=0&retrans=1&sent_bytes=8046&recv_bytes=3126&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8651&x=0"
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 242 kB URL GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
Size 242 kB (242447 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 88616
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.366.0
x-jsd-version-type: version
etag: W/"3b30f-xasoqLlON+0SM11iGCxWGKe469U"
content-encoding: br
accept-ranges: bytes
date: Tue, 25 Mar 2025 03:26:35 GMT
age: 30640
x-served-by: cache-fra-eddf8230100-FRA, cache-hel1410021-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jwfxr5CkDTOcHt8LwMyWcdKw7VKntdGzDZd4VFd2tcZRzYII2WyjkahvhIyEHG83c6PBTrv00%2BztMRY%2FBXPR6Xu2AgAx5Ar2Dbr%2BcLIu89lJfOSf7UE0AKQCHY6amo8LeOBmJA%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81391
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e6078cc0b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET cdn.bancychialk.com/20654/5cc1a618-17d1-11ec-ba28-5f54dd64648d.png
200 OK 172 kB URL GET cdn.bancychialk.com/20654/5cc1a618-17d1-11ec-ba28-5f54dd64648d.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.bancychialk.com
FingerprintFA:DA:33:40:79:54:B2:FD:B8:D7:FD:AD:E7:20:D9:56:9E:3D:DC:40
ValidityWed, 19 Feb 2025 08:49:49 GMT - Tue, 20 May 2025 08:49:48 GMT
File type PNG image data, 492 x 328, 8-bit/color RGB, non-interlaced
Size 172 kB (171532 bytes)
Hash f9177ea2b63ce62e7b438a1e1e557d3f
ab0aff007c2c6f783ff1fff0f977923bf0586d7c
30430fe145e6ab61f77b69b20e9ce11db2d3316e6d3ed79582eba11f028e1c6e
GET /20654/5cc1a618-17d1-11ec-ba28-5f54dd64648d.png HTTP/1.1
Host: cdn.bancychialk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 171532
traceparent: 00-503218c53a02fa9f0ba6046b6a1e4501-3b2919a7183ce354-01
x-id-fe: osix-hw-edge-gc4
last-modified: Fri, 17 Sep 2021 16:07:31 GMT
etag: "6144bd43-29e0c"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149588
cache: HIT
x-cached-since: 2025-03-23T09:53:21+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 29047886-22554-ex.trachizentrating.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%224%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.1 kB URL GET 29047886-22554-ex.trachizentrating.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%224%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.trachizentrating.com
Fingerprint5F:76:92:F4:5D:52:89:E7:8C:11:FD:30:C1:B0:36:29:D2:33:49:AB
ValiditySun, 16 Feb 2025 14:52:19 GMT - Sat, 17 May 2025 14:52:18 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4175), with no line terminators
Hash dc24a39805dd9aea7d702b0ae2763984
1169a5721fbf9222d86e4f4d8af8e1f1dce58054
8b902b3c01f3cf7f4eb1f1371444787ba85db71fff85025f503b0a8cf22032ba
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%224%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.trachizentrating.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:28 UTC
expires: Tue, 25 Mar 2025 03:26:28 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET 29047886-22554-3424.unrertivermalous.com/v2/a/na/image?d=BQ5qQHPeUZSOqTnJ1gkQ9dfYEpT6h7xQXXKzoH0mID550AzUfd3ddeT6wDeojWjsxAEBCat6lQsRocq9whgOID0ixp2y8a2J2Ya8Ipq5oeMJpWFQHgOViHmM9FBc4SF3QpUr5Ly3rl8vQzGB8tSV31mBSfdNHAQf2Fyf4dl-tcYUBmq8Qr2u-XCD0FUxGIDlu4fbMsCzCZwscNMm_VmTBfRZGSF7ovQbTnEqh9dXr7T69ACOjmGI9FxoDeyvn21nXu6VEZlxquQngdYr9-HeY87fZXZkZuRzR_BnS1QotNzaV9Rx4VribLNN5LnGfvku3lsJWEtEhxGX1A4UZB7nWjR_SAkMbo58MAmXyW0EBJSPUm-5-YSPaHBsobx3Fm20uJx2CWclThphJN8zv0Zk46s2qcm_xlvi37ZSHBDhUwZ9D-yGBg-USWmM0svudjltQsOBOp59UDx0p3-9-laRb8mkHA55OaLbDAkBE6w5_9czw1k89BGVcTVEUdnOmjXsncRJr0mn-s13Kuqkpdt5zfrvkJP4uYJdetxYBSai7rTD1wHSJLL2smaLnTn1_C_F6xzXyW1iMpvTi6xx2KpsK6x6mmBjJSLcBFAv2NpSb8e_vDyRtCv-E5ScrBq7vhc2XQXXEHTzzEjpdu7lDCNAwH5imKv8A5bEhdcvn9TDPHzfVCQ8Gs6yUiTa3N0Jd873VmgkzY-7hNQLqfGYBDfhPkRnJO0fJMJedrBZRQ4uaiV6AJ7IG8CEhjfTl1yGML6gNcFfGKPA3VfxPyU-XV3xEqcwMdNed0lSlBDpWxmXr-5RozskOxVhIqjwjroLf3CJWfPXCbhxBhfzJqqU4bAl017pXsOadpHvNIFxQSq64jbfvQEzLyAW-2o2JTIZXF_JmdE5Q4zK6dAtZkeEPZ8Jw0FE7BHYYBv1aPSKvp0Qi5USDoSan3REANDYraY5W8WYT8OIBcBNoag2F7sr5r2WxfaFyfZK2DxFVrIWZScBzzj60L0rWJI2l9gyxfEs7bM2WJDKMSOpDmyMNpYuo8qBgLAOB7scrhRZXIk_CT3leg_jhDPrVBoc16RnBGRdHwlaooGIScfzUvZiE6hJ85A1uxmxpiaIIO0V6NH3PTXS-oJQBsJIuS4zU9OP7mcPdDgu6G8PufgFIj86IkLBQ8ju1gjShdHy57U5bCZxAYRwsxupcl8rks24N2uzgQ7Frao7JrsySgnnYTckkUR11KiNWcgaryQFHg
200 OK 68 B URL GET 29047886-22554-3424.unrertivermalous.com/v2/a/na/image?d=BQ5qQHPeUZSOqTnJ1gkQ9dfYEpT6h7xQXXKzoH0mID550AzUfd3ddeT6wDeojWjsxAEBCat6lQsRocq9whgOID0ixp2y8a2J2Ya8Ipq5oeMJpWFQHgOViHmM9FBc4SF3QpUr5Ly3rl8vQzGB8tSV31mBSfdNHAQf2Fyf4dl-tcYUBmq8Qr2u-XCD0FUxGIDlu4fbMsCzCZwscNMm_VmTBfRZGSF7ovQbTnEqh9dXr7T69ACOjmGI9FxoDeyvn21nXu6VEZlxquQngdYr9-HeY87fZXZkZuRzR_BnS1QotNzaV9Rx4VribLNN5LnGfvku3lsJWEtEhxGX1A4UZB7nWjR_SAkMbo58MAmXyW0EBJSPUm-5-YSPaHBsobx3Fm20uJx2CWclThphJN8zv0Zk46s2qcm_xlvi37ZSHBDhUwZ9D-yGBg-USWmM0svudjltQsOBOp59UDx0p3-9-laRb8mkHA55OaLbDAkBE6w5_9czw1k89BGVcTVEUdnOmjXsncRJr0mn-s13Kuqkpdt5zfrvkJP4uYJdetxYBSai7rTD1wHSJLL2smaLnTn1_C_F6xzXyW1iMpvTi6xx2KpsK6x6mmBjJSLcBFAv2NpSb8e_vDyRtCv-E5ScrBq7vhc2XQXXEHTzzEjpdu7lDCNAwH5imKv8A5bEhdcvn9TDPHzfVCQ8Gs6yUiTa3N0Jd873VmgkzY-7hNQLqfGYBDfhPkRnJO0fJMJedrBZRQ4uaiV6AJ7IG8CEhjfTl1yGML6gNcFfGKPA3VfxPyU-XV3xEqcwMdNed0lSlBDpWxmXr-5RozskOxVhIqjwjroLf3CJWfPXCbhxBhfzJqqU4bAl017pXsOadpHvNIFxQSq64jbfvQEzLyAW-2o2JTIZXF_JmdE5Q4zK6dAtZkeEPZ8Jw0FE7BHYYBv1aPSKvp0Qi5USDoSan3REANDYraY5W8WYT8OIBcBNoag2F7sr5r2WxfaFyfZK2DxFVrIWZScBzzj60L0rWJI2l9gyxfEs7bM2WJDKMSOpDmyMNpYuo8qBgLAOB7scrhRZXIk_CT3leg_jhDPrVBoc16RnBGRdHwlaooGIScfzUvZiE6hJ85A1uxmxpiaIIO0V6NH3PTXS-oJQBsJIuS4zU9OP7mcPdDgu6G8PufgFIj86IkLBQ8ju1gjShdHy57U5bCZxAYRwsxupcl8rks24N2uzgQ7Frao7JrsySgnnYTckkUR11KiNWcgaryQFHg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.unrertivermalous.com
Fingerprint79:20:B3:AF:0C:13:23:74:B6:04:49:94:51:E9:C0:A9:F8:C7:B5:CD
ValiditySat, 01 Mar 2025 14:29:48 GMT - Fri, 30 May 2025 14:29:47 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPeUZSOqTnJ1gkQ9dfYEpT6h7xQXXKzoH0mID550AzUfd3ddeT6wDeojWjsxAEBCat6lQsRocq9whgOID0ixp2y8a2J2Ya8Ipq5oeMJpWFQHgOViHmM9FBc4SF3QpUr5Ly3rl8vQzGB8tSV31mBSfdNHAQf2Fyf4dl-tcYUBmq8Qr2u-XCD0FUxGIDlu4fbMsCzCZwscNMm_VmTBfRZGSF7ovQbTnEqh9dXr7T69ACOjmGI9FxoDeyvn21nXu6VEZlxquQngdYr9-HeY87fZXZkZuRzR_BnS1QotNzaV9Rx4VribLNN5LnGfvku3lsJWEtEhxGX1A4UZB7nWjR_SAkMbo58MAmXyW0EBJSPUm-5-YSPaHBsobx3Fm20uJx2CWclThphJN8zv0Zk46s2qcm_xlvi37ZSHBDhUwZ9D-yGBg-USWmM0svudjltQsOBOp59UDx0p3-9-laRb8mkHA55OaLbDAkBE6w5_9czw1k89BGVcTVEUdnOmjXsncRJr0mn-s13Kuqkpdt5zfrvkJP4uYJdetxYBSai7rTD1wHSJLL2smaLnTn1_C_F6xzXyW1iMpvTi6xx2KpsK6x6mmBjJSLcBFAv2NpSb8e_vDyRtCv-E5ScrBq7vhc2XQXXEHTzzEjpdu7lDCNAwH5imKv8A5bEhdcvn9TDPHzfVCQ8Gs6yUiTa3N0Jd873VmgkzY-7hNQLqfGYBDfhPkRnJO0fJMJedrBZRQ4uaiV6AJ7IG8CEhjfTl1yGML6gNcFfGKPA3VfxPyU-XV3xEqcwMdNed0lSlBDpWxmXr-5RozskOxVhIqjwjroLf3CJWfPXCbhxBhfzJqqU4bAl017pXsOadpHvNIFxQSq64jbfvQEzLyAW-2o2JTIZXF_JmdE5Q4zK6dAtZkeEPZ8Jw0FE7BHYYBv1aPSKvp0Qi5USDoSan3REANDYraY5W8WYT8OIBcBNoag2F7sr5r2WxfaFyfZK2DxFVrIWZScBzzj60L0rWJI2l9gyxfEs7bM2WJDKMSOpDmyMNpYuo8qBgLAOB7scrhRZXIk_CT3leg_jhDPrVBoc16RnBGRdHwlaooGIScfzUvZiE6hJ85A1uxmxpiaIIO0V6NH3PTXS-oJQBsJIuS4zU9OP7mcPdDgu6G8PufgFIj86IkLBQ8ju1gjShdHy57U5bCZxAYRwsxupcl8rks24N2uzgQ7Frao7JrsySgnnYTckkUR11KiNWcgaryQFHg HTTP/1.1
Host: 29047886-22554-3424.unrertivermalous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET 29047886-22554-3424.tassymethosif.com/v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPn34vMJmS39XSCiBEhvP6fGGZyIBldFQsa4GjADQcQOxgWG2ph6pCPGi15PbnvC5LRIM3_cXT0S-du-zA6B1UZOX4S3vvLDiomNw5UQwcgM59TMPq7lWwlCUVdTOlJoNGB81XoDrYuh_gijvqRrlIleo0a5VxuW8xFvG2YruY4dbsNBOV791-TPlncseWjkwKoXuZ3dHeve1VaRIE4yf78jtFdjecXJObU9pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMqeN_h_VopyEAklSQly1nyXGEDbn
200 OK 68 B URL GET 29047886-22554-3424.tassymethosif.com/v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPn34vMJmS39XSCiBEhvP6fGGZyIBldFQsa4GjADQcQOxgWG2ph6pCPGi15PbnvC5LRIM3_cXT0S-du-zA6B1UZOX4S3vvLDiomNw5UQwcgM59TMPq7lWwlCUVdTOlJoNGB81XoDrYuh_gijvqRrlIleo0a5VxuW8xFvG2YruY4dbsNBOV791-TPlncseWjkwKoXuZ3dHeve1VaRIE4yf78jtFdjecXJObU9pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMqeN_h_VopyEAklSQly1nyXGEDbn
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.tassymethosif.com
Fingerprint31:D8:2E:41:85:B8:A2:D7:84:4E:2B:20:53:0E:7F:F7:26:A7:07:5A
ValidityMon, 24 Feb 2025 14:39:57 GMT - Sun, 25 May 2025 14:39:56 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPe-5WerjlZUQ0Q5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2Pca2SFMP90FYZ9v6oR4klfAvfbi4_5H90_DTU7BxsU2RIqz8KnnZQJVgc34KoqjiZZUH9kP5f903Izn-6YC3fLUzFPnpEfcTp-NDIw8Oi9TB0T2cfff56ze1gkyEPFbzTI_kQQ-MUu8w-yTmd0XoDgvivFOHs_cJLLQkqKuDJgfA8YLfNbcQaRwUf9ePWfnlRdXn4bcsFZYIb7hr9bTT99OPjblMQdLDv0iPd2xeSLHruFVC02ig_M5UCrL9kX5fle5OkQb_bjCCGW5nwul88vaaPn34vMJmS39XSCiBEhvP6fGGZyIBldFQsa4GjADQcQOxgWG2ph6pCPGi15PbnvC5LRIM3_cXT0S-du-zA6B1UZOX4S3vvLDiomNw5UQwcgM59TMPq7lWwlCUVdTOlJoNGB81XoDrYuh_gijvqRrlIleo0a5VxuW8xFvG2YruY4dbsNBOV791-TPlncseWjkwKoXuZ3dHeve1VaRIE4yf78jtFdjecXJObU9pFIDqN0l8UU0AKSOc6rusEeYjrpGrrWDNwouF-cdWSDG1nfzwJo-n0M8V2g-ZTzTNGrcCnfitIH_HZuKXOEK3PVqokqW-NcAydNXpmLqhcSAdKa6QWPjgMBftXn85B8IxSyO55qDL2Hf7vrtdbeFjgCmv18Tl_QVptURUvZGEPwtoEOWzr5UwnRxwy49VAir_T6M9xrmflTKs0P9gIizp0DFQgfT2oI3TA0o52TLAnJHU6pcRcd8VMqeN_h_VopyEAklSQly1nyXGEDbn HTTP/1.1
Host: 29047886-22554-3424.tassymethosif.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET xvideosrei.com/wp-content/uploads/2021/06/pagando-peitinho-na-escola.jpg
200 OK 16 kB URL GET xvideosrei.com/wp-content/uploads/2021/06/pagando-peitinho-na-escola.jpg
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 600x337, components 3
Hash 8d6af1458088266c0d0c88b583b42803
0def048cd715845293b6a4415972b2e066322ce6
43bc44532c8d474ba97f27ea9eb76a91792013dd23201d62572f2d1f3b1d546c
GET /wp-content/uploads/2021/06/pagando-peitinho-na-escola.jpg HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: image/jpeg
content-length: 16196
last-modified: Fri, 18 Jun 2021 13:15:27 GMT
etag: "60cc9c6f-3f44"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-620120-3
200 OK 240 kB URL GET www.googletagmanager.com/gtag/js?id=UA-620120-3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D
ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File type JavaScript source, ASCII text, with very long lines (2361)
Size 240 kB (239667 bytes)
Hash 2092730c22c0d52a699faff0a960dbec
4b14b1465e8a7197ba8948a84d8033f570c0a5ed
07fc676a0ece8a345c60ae8edb7504a83fd254b68ffd2b4ee0f51831fee895ee
GET /gtag/js?id=UA-620120-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 25 Mar 2025 03:26:19 GMT
expires: Tue, 25 Mar 2025 03:26:19 GMT
cache-control: private, max-age=900
last-modified: Tue, 25 Mar 2025 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 85910
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:23 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kL1y7D%2BSMsOPpQvNxARQrzM65clS6OFxVc8ZdtGa7L88Zm2UxCyoSvIt%2FOXH767uKpEyLzRCvUsSLcgSKpEr%2BWvW5Vc2nWCacPT6hAPqpjg2NCMVDNtGV7kGeC%2B79jdVoEd3Rw%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81394
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e77190c0b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
HEAD ads.google.com/
429 Too Many Requests 0 B IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subjectadwords.google.com
FingerprintD1:21:31:99:C9:E1:76:ED:96:CA:45:EC:64:A7:75:DC:7A:55:2C:6F
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: ads.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
content-length: 1103
content-type: text/html; charset=UTF-8
date: Tue, 25 Mar 2025 03:26:27 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A368884061%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A293547098%3Arqn%3A3%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1380%2C0%2C3767%2C3767%2C0%2C3076%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182277%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
200 OK 551 B URL GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A368884061%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A293547098%3Arqn%3A3%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1380%2C0%2C3767%2C3767%2C0%2C3076%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182277%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint4E:A6:D4:57:F5:B7:FB:C1:98:C0:40:D2:B8:FA:B4:10:43:09:41:94
ValiditySun, 09 Mar 2025 21:02:24 GMT - Sun, 31 Aug 2025 20:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (609), with no line terminators
Hash aa5065b471f724972d75f7fa5ba49ee9
847da877f5ac924b936e3092fc32caa074556d9a
8c59261fbae0e62e6735b235355c6b2d254cd513ee59c07eaecb178f06f9aa95
GET /watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A368884061%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A293547098%3Arqn%3A3%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1380%2C0%2C3767%2C3767%2C0%2C3076%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182277%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1796366081742873181; i=AG2CG3h7JX5D6uHkdu1fjbkaQFhf9AzeJaWXfXbd4fp05BYJ8B7Q9matfl4LqbJvP1MnCnsi8jHnkCQCa8X42KYmMEg=; yandexuid=1842795031742873181; yuidss=1842795031742873181; ymex=1774409181.yrts.1742873181#1774409181.yrtsi.1742873181; bh=YN3EiL8GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 551
content-type: application/json; charset=utf-8
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
expires: Tue, 25-Mar-2025 03:26:30 GMT
last-modified: Tue, 25-Mar-2025 03:26:30 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
pragma: no-cache
access-control-allow-origin: https://fixedjs.jtube.top
X-Firefox-Spdy: h2
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash b7090975c9f5c495ebd1ae02a99413c3
952cf0b60ee0ff761541476d942ddb07f61557b5
fe0e5379d8c0426d36041875f2681d413d7b31507f132aa0d14628131464eb82
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19505
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET filmesporno.xxx/favicon.ico
404 Not Found 0 B URL GET filmesporno.xxx/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectfilmesporno.xxx
Fingerprint21:88:4A:28:A1:02:E4:46:60:9E:3F:3B:D1:0F:D7:AA:19:BB:7C:CB
ValiditySat, 01 Feb 2025 09:05:19 GMT - Fri, 02 May 2025 10:02:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: filmesporno.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
age: 34196
cache-control: max-age=300
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zf9WDiGJOaocpOc5%2BVihL%2FDtlDYaxCqUT4iCAIcc3a9aUlBA4QegM0l7yTpsQf8QzPS4PFFx47kBZCW%2FPNOm%2BnF2q%2FcIla0nQ68DDN3lEub%2FZxJQ6XuzPtpK3e8kcZiLXy0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e8d5ca40b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=479&min_rtt=420&rtt_var=131&sent=6&recv=10&lost=0&retrans=0&sent_bytes=3207&recv_bytes=1032&delivery_rate=7350253&cwnd=253&unsent_bytes=0&cid=b9996de4fdbef56f&ts=483&x=0"
X-Firefox-Spdy: h2
GET cdn.maubifilian.com/24234/728a3c3a-617d-11ec-a1f6-a44922a49201.jpeg
200 OK 43 kB URL GET cdn.maubifilian.com/24234/728a3c3a-617d-11ec-a1f6-a44922a49201.jpeg
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.maubifilian.com
Fingerprint72:AC:9C:42:A6:23:1D:67:38:AA:B9:1B:8E:31:81:75:DD:D5:BA:3C
ValidityWed, 19 Feb 2025 08:49:48 GMT - Tue, 20 May 2025 08:49:47 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 637x360, components 3
Hash 0e6796e158cde86f69beb38815455f53
df127b323fa37c686d2ec6243ac1900a5edabe78
f92e0ab152e6714b6f0c960e51bbf4e1fcdaf56fdb1718e304d683c9cd422c76
GET /24234/728a3c3a-617d-11ec-a1f6-a44922a49201.jpeg HTTP/1.1
Host: cdn.maubifilian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/jpeg
content-length: 43329
traceparent: 00-304020a53ade815a39024b21d32d9b65-09028697fe7c1eff-01
x-id-fe: osix-hw-edge-gc4
last-modified: Mon, 20 Dec 2021 10:13:16 GMT
etag: "61c0573c-a941"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149530
cache: HIT
x-cached-since: 2025-03-23T09:54:19+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET xvideosrei.com/wp-content/uploads/2021/06/comendo-novinha-na-escola.jpg
200 OK 26 kB URL GET xvideosrei.com/wp-content/uploads/2021/06/comendo-novinha-na-escola.jpg
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 600x337, components 3
Hash c4bfbec0a992ec654cf76728dc3869a2
3f651255a7f226a1900742095ee270e22b360810
0db8e2557aaa2001b51756dc5a9e9a13c5d51d3798102116532a13f49f2ceea3
GET /wp-content/uploads/2021/06/comendo-novinha-na-escola.jpg HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: image/jpeg
content-length: 25991
last-modified: Fri, 18 Jun 2021 15:43:34 GMT
etag: "60ccbf26-6587"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 87 kB URL GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/tags/6
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA
ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 25 Mar 2025 02:09:47 GMT
expires: Wed, 25 Mar 2026 02:09:47 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 4593
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 242 kB URL GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
Size 242 kB (242447 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 88616
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.366.0
x-jsd-version-type: version
etag: W/"3b30f-xasoqLlON+0SM11iGCxWGKe469U"
content-encoding: br
accept-ranges: bytes
date: Tue, 25 Mar 2025 03:26:25 GMT
age: 30629
x-served-by: cache-fra-eddf8230100-FRA, cache-hel1410021-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET jsjs.4jpg.top/index.php?js=very
200 OK 0 B URL GET jsjs.4jpg.top/index.php?js=very
IP
Requested by https://av.4freedom.click/v/s:/xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:17 GMT
content-type: text/html; charset=UTF-8
imghost: 1729614248-h-jsjs4jpgtopmh--NO-rm162158222116/index.php?js=very
56nloadrate: 0.06125
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BPpXZtxH8vyTkxhB8VASV8FB8FHWGpZQLvJT24d9crzpEP4rJl2l0JW6EfrM%2BbDklyROSjOHjLQV9Qa27pY3mGMf7rCbzQVmHg1I8rrdhtNg1lmgChi8mXNLmyV1csIP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e4a0bc0b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4979&min_rtt=467&rtt_var=2782&sent=41&recv=16&lost=0&retrans=0&sent_bytes=48067&recv_bytes=1288&delivery_rate=12623589&cwnd=254&unsent_bytes=0&cid=ce5f66e1db51c431&ts=424&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/novinha-na-escola-xxx//title/myhash/3
200 OK 228 B URL GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/novinha-na-escola-xxx//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash d08a2b817386095bf0217ad5dfc27d10
a2812baa6237c289ac3f7c5b7c0897e0023cd608
127bf98266a0c075327de8f58f505aa4a8c5f019cc01a3ae7c17d60d438f0f42
GET /v/s://xvideosrei.com/porno/novinha-na-escola-xxx//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideosrei.com/porno/novinha-na-escola-xxx//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line1431: notjp-nojp-myhost--filteron-/v/s://xvideosrei.com/porno/novinha-na-escola-xxx//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo3/cf/bc/c55247, lfm-1-2533, lmd-2533, lud-19680, xfvlen-170705, fsize-21875, played-1
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideosrei.com/porno/novinha-na-escola-xxx//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: HIT
age: 1015265
last-modified: Thu, 13 Mar 2025 09:25:24 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9oNB%2FV4tLh%2BEr1rOmNJeo%2Fv%2FV1CwlGjfG3atzFv14GXXdLY%2FBMn3Wmd0aawNMDhjwO61g2d8BZPHhbq5eul0BPLX4I8X5I9jA%2B%2Bak3ozGv55ViOGnqDhJD1y1jTPhT56MiBQ9V4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9c6cbc56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2353&min_rtt=417&rtt_var=2862&sent=71&recv=67&lost=0&retrans=2&sent_bytes=23320&recv_bytes=6602&delivery_rate=6135593&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8768&x=0"
X-Firefox-Spdy: h2
GET filmesporno.xxx/wp-content/uploads/2021/08/novinha-pagando-boquete-na-escola.jpg
200 OK 28 kB URL GET filmesporno.xxx/wp-content/uploads/2021/08/novinha-pagando-boquete-na-escola.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectfilmesporno.xxx
Fingerprint21:88:4A:28:A1:02:E4:46:60:9E:3F:3B:D1:0F:D7:AA:19:BB:7C:CB
ValiditySat, 01 Feb 2025 09:05:19 GMT - Fri, 02 May 2025 10:02:17 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 600x337, components 3
Hash 7c51f08e69226e30226109717df27deb
63625a90e345f5c514cf2c415f7a4edf2b82d01b
11b4a2ddb2d236812d0409846b7382109f84587e3af2b498301bdba8c0584e5c
GET /wp-content/uploads/2021/08/novinha-pagando-boquete-na-escola.jpg HTTP/1.1
Host: filmesporno.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 27992
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t3fnNcUZvd4lhRfkqgicFvNPRGYjgLokqxoyt4VdCjqP1X17I5pnFl53SAun7UgfD0Tz35acQZPliTLPxvYRTYpTxpXESqBBKblgIGHuRy2%2FKxLrxZD4tC%2FwctHUGbKInaI%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 18 Aug 2021 02:39:11 GMT
etag: "611c72cf-6d58"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 11 Mar 2026 05:32:12 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
age: 11099
cf-cache-status: HIT
cf-ray: 925b4ea3c8970afa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET www.porno26.com/favicon.ico
404 Not Found 0 B URL GET www.porno26.com/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectporno26.com
FingerprintD7:7C:8C:4F:D7:6E:31:DA:76:87:B5:47:A9:2D:4C:93:4B:E7:49:BF
ValidityTue, 25 Feb 2025 23:46:23 GMT - Tue, 27 May 2025 00:44:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.porno26.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000;
age: 134
cache-control: max-age=300
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s8LpMwh0tPUdLVAxgkaGmydokS8yic57YHTHDf4c66eUa9q%2Fxgour8vklIuC1sy%2BftSE5DK3gLNJtSu4VSQsVHk4xRtZTLcHEHBYcAvHjh2tDEVrWVvWYgfodIt9%2FgRjlOc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e94e9c71c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=457&min_rtt=373&rtt_var=115&sent=7&recv=12&lost=0&retrans=0&sent_bytes=3199&recv_bytes=1063&delivery_rate=7621052&cwnd=254&unsent_bytes=0&cid=a038a157b2505b6f&ts=820&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://pornogramxxx.com/sexvideo5518768711/title/myhash/3
200 OK 77 B URL GET pdocac.tube-dl.top/v/s://pornogramxxx.com/sexvideo5518768711/title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 50ec5ce7d0c38d5371d06ad1ceedb523
d5ddc598c678f74e0aa624e013a659658127f022
95f239fb2555bd5ead4ad1e171cedddd8fe791a282eac5b75535ad478c7493c4
GET /v/s://pornogramxxx.com/sexvideo5518768711/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://pornogramxxx.com/sexvideo5518768711/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1431: notjp-es-pt-myhost--filteron-/v/s://pornogramxxx.com/sexvideo5518768711/title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/45/fa/5f2039, lfm-1-680006, lmd-680006, lud-29328694, xfvlen-663933, fsize-188360, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://pornogramxxx.com/sexvideo5518768711/title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x%2BrNFvW6N0HHYalRn44OAJ9ipVZCoqUBguVc%2FLB4uN8%2F9xtOYCf9rbXKn6QufOAl4RYd4A8oJc6Q77IIPho47rtn2Wv3I3r1veArWH%2BFsve6XEwXWND%2BpwA78zgboxWAqpg1lgg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc8656b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2159&min_rtt=381&rtt_var=2701&sent=119&recv=87&lost=0&retrans=3&sent_bytes=46725&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9061&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.filmesporno.blog/negra-novinha-lesbicas-em-transa-com-a-branca-melada//title/myhash/3
200 OK 0 B URL GET pdocac.tube-dl.top/v/s://www.filmesporno.blog/negra-novinha-lesbicas-em-transa-com-a-branca-melada//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://www.filmesporno.blog/negra-novinha-lesbicas-em-transa-com-a-branca-melada//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top.96.142.48-myhost-38.220.248/v/s://www.filmesporno.blog/negra-novinha-lesbicas-em-transa-com-a-branca-melada//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line1436: notjp-nojp-myhost--filteron-/v/s://www.filmesporno.blog/negra-novinha-lesbicas-em-transa-com-a-branca-melada//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/2e/f1/448878, lfm-1-320269, lmd-320269, lud-30388304, xfvlen-659401, fsize-81946, played-4
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.filmesporno.blog/negra-novinha-lesbicas-em-transa-com-a-branca-melada//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VpcQQoUQ7t6fSe9a61r7YSoPKJ84HBA7hyeDhP57Tc6mClX5tef7GVod02c4Ww3Y58nBSukiN1JuBaVAEDTjgmGIQRwpmM8MMOJvGzj19pKy4VpIKZtlj5k0klDtNXWUzBHFBhc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc8c56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2159&min_rtt=381&rtt_var=2701&sent=115&recv=87&lost=0&retrans=3&sent_bytes=44599&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9055&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.novinhas.tv/padrasto-sexo-com-enteada-safada-caiu-na-net//title/myhash/3
200 OK 0 B URL GET pdocac.tube-dl.top/v/s://www.novinhas.tv/padrasto-sexo-com-enteada-safada-caiu-na-net//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://www.novinhas.tv/padrasto-sexo-com-enteada-safada-caiu-na-net//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.novinhas.tv/padrasto-sexo-com-enteada-safada-caiu-na-net//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1432: notjp-es-pt-myhost--filteron-/v/s://www.novinhas.tv/padrasto-sexo-com-enteada-safada-caiu-na-net//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo3/d4/8c/fe9565, lfm-1-14184, lmd-14185, lud-29836950, xfvlen-642226, fsize-118185, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.novinhas.tv/padrasto-sexo-com-enteada-safada-caiu-na-net//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FmxFf%2F89O2WEpXD%2F6kSUPnUfL7WOONn8ucg%2F1S3kkmVjkdDsIsKZnjE32KIGvnsd69q5gIpHSgZqmGL9QoXFw2kJFuFdAzNHYiTXhpqawm%2FD6PM0mvKc%2BB3%2FL2sPPy0K7%2Fpm1k0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9c5cb656b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5019&min_rtt=381&rtt_var=6062&sent=126&recv=89&lost=0&retrans=3&sent_bytes=49895&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9139&x=0"
X-Firefox-Spdy: h2
GET www.xvideosincesto.com/favicon.ico
404 Not Found 0 B URL GET www.xvideosincesto.com/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectxvideosincesto.com
FingerprintA5:C7:BC:6A:D0:C6:A0:F1:F9:7A:F8:91:32:C8:FE:D8:DE:B4:79:81
ValiditySat, 22 Mar 2025 10:50:43 GMT - Fri, 20 Jun 2025 11:47:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.xvideosincesto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6USOw3fi4UqGu56dBCwTFfggTQ1kYGGqPTvnKXYFmtwF30fO5l6nYAeAed8ZVpPKbL%2BHI249S1S2J9zS9EKvXoXvrxwsjEprf%2FWsrk1niAP3qDa7INpAazihmVoM2fKPOu5wtTGWEWzg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e8bc9f9712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=3602&min_rtt=467&rtt_var=5495&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3218&recv_bytes=1068&delivery_rate=7941499&cwnd=254&unsent_bytes=0&cid=323b29e78c1eaead&ts=418&x=0"
X-Firefox-Spdy: h2
GET 29047886-22554-ex.trachizentrating.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.3 kB URL GET 29047886-22554-ex.trachizentrating.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.trachizentrating.com
Fingerprint5F:76:92:F4:5D:52:89:E7:8C:11:FD:30:C1:B0:36:29:D2:33:49:AB
ValiditySun, 16 Feb 2025 14:52:19 GMT - Sat, 17 May 2025 14:52:18 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4307), with no line terminators
Hash baa7a301a032d648885c624e68f56c0e
4f4ce0c5adc672a8e874138d2aacace577873740
964419fd5aaa75797e5d97410b5c553e4f7e60e720daaa205c6c4d654e8c568d
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.trachizentrating.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:28 UTC
expires: Tue, 25 Mar 2025 03:26:28 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET pics.serviporno.com/videos/d/3/4/d/4/d34d4e880904c0b4aa7b1d02d7e1283730720d19.mp4-preview-3.jpg
200 OK 33 kB URL GET pics.serviporno.com/videos/d/3/4/d/4/d34d4e880904c0b4aa7b1d02d7e1283730720d19.mp4-preview-3.jpg
IP
ASN #60068 Datacamp Limited
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subject1684115694.rsc.cdn77.org
Fingerprint98:6F:71:9A:47:9C:6D:22:3F:02:C4:44:95:36:09:CD:2F:E4:F8:D0
ValidityFri, 17 Jan 2025 08:54:33 GMT - Thu, 17 Apr 2025 08:54:32 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 35x32, segment length 16, comment: "Lavc55.12.100", baseline, precision 8, 640x480, components 3
Hash 33ba25ec6c406533e17672d8856be9a7
47c11a79bc2678419f3c2443e53a556b27473231
1976baf25d620844b899b26bcc8f32f12bfe2d1e5d1ff86665f083ca981c223a
GET /videos/d/3/4/d/4/d34d4e880904c0b4aa7b1d02d7e1283730720d19.mp4-preview-3.jpg HTTP/1.1
Host: pics.serviporno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 33327
last-modified: Thu, 09 Aug 2018 09:30:50 GMT
etag: "5b6c09ca-822f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
x-77-nzt: EwgBuUwJGwFBDAG5TAoTAdd54wgADAHUZjgRAbcnxnEC
x-77-nzt-ray: fdb541232d6f4bc66722e2671d690711
x-77-cache: HIT
x-77-age: 582521
server: CDN77-Turbo
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash be4733c7722d9c6322ff4ddb1ff3b2e0
923b01a91025b7511bd6242cd12dfc363890f46e
284e20f03d68b873aabb6cf20f2707cf081e5fe83ac14c5edac58545421684d1
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:26 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19508
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
HEAD ads.google.com/
429 Too Many Requests 0 B IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subjectadwords.google.com
FingerprintD1:21:31:99:C9:E1:76:ED:96:CA:45:EC:64:A7:75:DC:7A:55:2C:6F
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: ads.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
content-length: 1103
content-type: text/html; charset=UTF-8
date: Tue, 25 Mar 2025 03:26:27 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/://www.pornonacionais.com/meteu-na-novinha-e-encheu-buceta-dela-de-porra//title/myhash/3
200 OK 264 B URL GET pdocac.tube-dl.top/v/://www.pornonacionais.com/meteu-na-novinha-e-encheu-buceta-dela-de-porra//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash d68cad1deaaf93bb121bd9562cc0e7d3
5851e4a185517930e7696ba3748155ebe8e7a5f6
575e763591250c06f2926f418d05f4bb5e4967c1137707d3d2687bd03cfcf770
GET /v/://www.pornonacionais.com/meteu-na-novinha-e-encheu-buceta-dela-de-porra//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/://www.pornonacionais.com/meteu-na-novinha-e-encheu-buceta-dela-de-porra//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-ru-myhost--filteron-
line1432: notjp-ru-myhost--filteron-/v/://www.pornonacionais.com/meteu-na-novinha-e-encheu-buceta-dela-de-porra//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo4/47/07/c43873, lfm-1-4391, lmd-4391, lud-27492050, xfvlen-361972, fsize-83786, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/://www.pornonacionais.com/meteu-na-novinha-e-encheu-buceta-dela-de-porra//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Av13fIK0EDkI%2FUt8Rb6JdPDZ98teUQdaeX6nIuJDT%2BcFdBPhZ6URC0tBnEusxoVeZz00TGV1WVSPFDnUBQSFJtca%2BR%2FlhDdq83qcC2ql8U9ONdoDsPtmjx76y0yQZX1Edq3XrEM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bcc7c56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=850&min_rtt=381&rtt_var=734&sent=96&recv=85&lost=0&retrans=3&sent_bytes=35001&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9030&x=0"
X-Firefox-Spdy: h2
GET unpkg.com/videojs-flash/dist/videojs-flash.js
302 Found 39 kB URL GET unpkg.com/videojs-flash/dist/videojs-flash.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectunpkg.com
Fingerprint55:B8:93:96:94:5B:30:0F:AC:01:45:A6:47:14:7E:51:5A:BE:7B:F0
ValidityThu, 20 Mar 2025 17:47:13 GMT - Wed, 18 Jun 2025 18:47:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videojs-flash/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 25 Mar 2025 03:26:19 GMT
content-type: text/plain;charset=UTF-8
content-length: 74
location: https://unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 925b4e59aa151c06-OSL
X-Firefox-Spdy: h2
GET filmesporno.xxx/wp-content/uploads/2021/05/loirinhas-novinhas-jpg.jpg
200 OK 15 kB URL GET filmesporno.xxx/wp-content/uploads/2021/05/loirinhas-novinhas-jpg.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectfilmesporno.xxx
Fingerprint21:88:4A:28:A1:02:E4:46:60:9E:3F:3B:D1:0F:D7:AA:19:BB:7C:CB
ValiditySat, 01 Feb 2025 09:05:19 GMT - Fri, 02 May 2025 10:02:17 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 352x198, components 3
Hash a7ed24b7afd7cb311a43cc5e7598a981
83d1c319a739149ac9af57d3bb6d1011e8372c2f
306e2ddd629449263d69ea36cd27ab5e4d13cd233012b039617ab9aec4c8d443
GET /wp-content/uploads/2021/05/loirinhas-novinhas-jpg.jpg HTTP/1.1
Host: filmesporno.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 14910
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n3%2BOlRYgL0sx7Rd%2BybMSgythmxA%2FqJAcxX%2BM%2FOGowdLvWrYEx9Nm4Y9ALL17Mt2442WAkkrBtUjU%2FVUQ1UQFRXThODAPvbJH%2FboYHA%2B5D78%2FqokHJWHiTmzZR7riLAqWmrc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 24 May 2021 18:04:08 GMT
etag: "60abea98-3a3e"
version: MS25011201
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 14 Jan 2026 17:57:27 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 25587
accept-ranges: bytes
cf-ray: 925b4ea3d8980afa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET cinepornogratis.com/wp-content/uploads/2022/02/pornos-de-enana-virgen.jpg
200 OK 36 kB URL GET cinepornogratis.com/wp-content/uploads/2022/02/pornos-de-enana-virgen.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectcinepornogratis.com
FingerprintA1:25:E4:25:BC:40:6C:DB:90:76:1F:C2:4B:4C:2D:EF:63:6F:AC:8C
ValidityThu, 06 Feb 2025 23:06:53 GMT - Thu, 08 May 2025 00:06:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 600x337, components 3
Hash f723b39bad8602cc2580490a80741de8
c63d77e52fd7b7c67705145eb010148e627e850b
4e234506714b673c205ea19ac498cf3c3e75973835b579637f0b7c59a8cc5f93
GET /wp-content/uploads/2022/02/pornos-de-enana-virgen.jpg HTTP/1.1
Host: cinepornogratis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 36124
last-modified: Sat, 05 Feb 2022 08:14:09 GMT
etag: "61fe31d1-8d1c"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P5UFxYnMTia2Gtjn50bakJvJkCS5%2FVsGuxYEf3mvpV94Ib27nufvmhmARx9xfXWaEBhqZLx23iwL9%2FLU2RQ2OqYoUwF8gyIaTtkQW0a3zQ%2FMq6PFG93UjT6tVrENiiThleKPyio%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4ea4991bb503-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19665&min_rtt=19632&rtt_var=7429&sent=23&recv=20&lost=0&retrans=0&sent_bytes=4759&recv_bytes=1854&delivery_rate=32218&cwnd=12000&unsent_bytes=0&cid=4b25421e5ba1a981&ts=4086&x=1", cfExtPri, cfHdrFlush;dur=0
GET vjs.zencdn.net/7.8.2/video-js.css
200 OK 45 kB URL GET vjs.zencdn.net/7.8.2/video-js.css
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
Fingerprint22:88:1F:07:1F:92:14:54:4B:E7:66:41:59:BF:5D:37:AF:C0:31:C7
ValidityTue, 07 Jan 2025 21:56:05 GMT - Sun, 08 Feb 2026 21:56:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /7.8.2/video-js.css HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 26 May 2020 21:39:05 GMT
etag: "9d2c20f32d2509c50bdcb9239fb9b62e"
cache-control: public, max-age=31536000
content-type: text/css; charset=utf-8
content-encoding: gzip
date: Tue, 25 Mar 2025 03:26:19 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 1262
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 10723
X-Firefox-Spdy: h2
GET novinhafudendo.com/favicon.ico
302 Found 1.3 kB URL GET novinhafudendo.com/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectnovinhafudendo.com
Fingerprint22:18:97:06:51:5C:9C:B5:AE:36:1C:1F:F4:71:3C:0D:8D:DF:46:A4
ValidityTue, 25 Feb 2025 22:53:54 GMT - Mon, 26 May 2025 23:52:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: novinhafudendo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=UTF-8
location: https://novinhafudendo.com/wp-content/uploads/2016/09/cropped-media-md-32x32.png
x-dns-prefetch-control: on
link: <https://novinhafudendo.com/wp-json/>; rel="https://api.w.org/"
x-litespeed-tag: 852_HTTP.200,852_HTTP.302
x-redirect-by: WordPress
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5nPM9BqEzOE0WIAYVcbbSPCs4MCdSvPRZnNnocZJ4likNUcaFef4DJK2avvOxVNv1ncA39J%2BKq1%2F0LpViyGtpHcWtrWModpOt7etJVdmMFtKr5lunOO9yt6Gc%2FjBNLuQMA%2BtQsc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e8b0a1cb4f1-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1567&min_rtt=423&rtt_var=1451&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3290&recv_bytes=1196&delivery_rate=4292490&cwnd=254&unsent_bytes=0&cid=8c54d44e9ed63a83&ts=849&x=0"
X-Firefox-Spdy: h2
GET cdn.bancychialk.com/24011/ad3f379b-1551-11ec-ba28-5f54dd64648d.png
200 OK 258 kB URL GET cdn.bancychialk.com/24011/ad3f379b-1551-11ec-ba28-5f54dd64648d.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.bancychialk.com
FingerprintFA:DA:33:40:79:54:B2:FD:B8:D7:FD:AD:E7:20:D9:56:9E:3D:DC:40
ValidityWed, 19 Feb 2025 08:49:49 GMT - Tue, 20 May 2025 08:49:48 GMT
File type PNG image data, 492 x 328, 8-bit/color RGB, non-interlaced
Size 258 kB (257771 bytes)
Hash f3b1f8b77a0244926c66de4259358586
93106fe43ea91eb2ff6e9c93be3bce504985ed10
5ed221159f63de877ba8359eaf0e7bc846814cd23c9702f59cbd50254a4f6dac
GET /24011/ad3f379b-1551-11ec-ba28-5f54dd64648d.png HTTP/1.1
Host: cdn.bancychialk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 257771
traceparent: 00-fd744dc01987303aad6260065469430d-dd3968a277857c62-01
x-id-fe: osix-hw-edge-gc4
last-modified: Tue, 14 Sep 2021 11:48:28 GMT
etag: "61408c0c-3eeeb"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149592
cache: HIT
x-cached-since: 2025-03-23T09:53:17+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.xvideosincesto.com/novinha-escola//title/myhash/3
200 OK 206 B URL GET pdocac.tube-dl.top/v/s://www.xvideosincesto.com/novinha-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash f3ebc7527035dc89ccef7871b2f5951b
dc961c42b116f9ff46173a032c785101ed8bc60b
35cbb01f3231e6b837a9cd9db5f31143d12b6e28b948081b4025642917ea571f
GET /v/s://www.xvideosincesto.com/novinha-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.xvideosincesto.com/novinha-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://www.xvideosincesto.com/novinha-escola//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo3/c0/53/c8b842, lfm-1-45451, lmd-45451, lud-26790892, xfvlen-769785, fsize-98008, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.xvideosincesto.com/novinha-escola//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mdgvfZv3q7oAWfjNn5xziHYNzblG4yXyHe9Y3VaCnLL5fTo763YxRnKvMYlWBNYoPuru5Xqmilym6BYzKb0zZb94FoOCJLe4C6BDYuGI7S6rT2wZWeKbAEyfPZ1T2aScnq2Wmew%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bfc9f56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2159&min_rtt=381&rtt_var=2701&sent=111&recv=87&lost=0&retrans=3&sent_bytes=42478&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9049&x=0"
X-Firefox-Spdy: h2
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:23 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TFDotkbNhwuNQccZLry4rd05wBJJ89r1QByc7Icp3lII7dRhPuBhJLKh15CghZuQE%2FNJHj3W6gudds3%2FoiTZBu1I3p2MMDrymPV%2BsvXefEpJInjeuHuMFi0keod5rYuq%2FEUy9g%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81394
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e77190e0b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET www.porno26.com/wp-content/uploads/2022/02/rotina-de-novinhas-no-banho.jpg
200 OK 22 kB URL GET www.porno26.com/wp-content/uploads/2022/02/rotina-de-novinhas-no-banho.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectporno26.com
FingerprintD7:7C:8C:4F:D7:6E:31:DA:76:87:B5:47:A9:2D:4C:93:4B:E7:49:BF
ValidityTue, 25 Feb 2025 23:46:23 GMT - Tue, 27 May 2025 00:44:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 600x337, components 3
Hash cdd304a4cad3f0f0c8da1a3ed9a68ed0
5288a70f74a41bcc4d4cffb7b29014d0ec0adfa2
398f6cae58711ccf899971abebbfc25ebf73c47ce651203d0d59f8fc75387ff1
GET /wp-content/uploads/2022/02/rotina-de-novinhas-no-banho.jpg HTTP/1.1
Host: www.porno26.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 21545
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mznZWhyfsfWE%2BBNMRCuH2uk85xaZqHe3jqfLE0KHG%2FCt2L2AfCHr87qfURstBOVA%2BQ42K8x165wKaihvyZQ7BDSC4it%2B%2FdYHUmzj0ZsrxeV1vSbFxs4fRUG3kzVGyN5DbUc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 27 Feb 2022 14:52:19 GMT
etag: "621b9023-5429"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Fri, 13 Feb 2026 17:33:36 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1464120
accept-ranges: bytes
cf-ray: 925b4ea42edd569d-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET css.4jpg.top/index.php?js=very
400 Bad Request 0 B URL GET css.4jpg.top/index.php?js=very
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 25 Mar 2025 03:26:35 GMT
content-type: text/html; charset=iso-8859-1
x-proxy-cache-192g-la: UPDATING
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qpjuiqabfSR6DVOmvCBYLcLIH4zWcuJqkUcAcpq%2FWXX9Rss%2Fl0BNKuoi69A3Tc0V5CFk3ZVbwY5xhRPU8ej0jH5Qz0kIaCbtT3uaJxsxhMw9unidxnP0%2FmVq9p46weA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4ebdecea568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=49700&min_rtt=1254&rtt_var=52169&sent=302&recv=64&lost=0&retrans=2&sent_bytes=295732&recv_bytes=10667&delivery_rate=10613&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=18900&x=1", cfExtPri, cfHdrFlush;dur=0
GET fixedjs.jtube.top/AV4.us.jpg
200 OK 8.7 kB URL GET fixedjs.jtube.top/AV4.us.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3
Hash edfe007a6e5b3d268b2528f564b60b43
1644c8ef97c871079e07e5079d613af5cb94052f
bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:19 GMT
content-type: image/jpeg
content-length: 8741
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0bECvWnPqQuHB78CqsBxQlBzPHwyXMdoo1%2Fn3Pn454D6k2h4YiHUqzbsO21b2AnrZWA3rRdfKroaJvdUyq%2FrNRAJZ6xehL3RDfjRXS1NbCOglWKzur3CYGwZGd5zGbgwNRrIKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
etag: "2225-614075c7eff6b"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 218706
accept-ranges: bytes
cf-ray: 925b4e58f8bb0b31-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A647303434%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A945867475%3Arqn%3A5%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1401%2C1%2C3782%2C3782%2C1%2C3117%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182266%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
200 OK 551 B URL GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A647303434%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A945867475%3Arqn%3A5%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1401%2C1%2C3782%2C3782%2C1%2C3117%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182266%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint4E:A6:D4:57:F5:B7:FB:C1:98:C0:40:D2:B8:FA:B4:10:43:09:41:94
ValiditySun, 09 Mar 2025 21:02:24 GMT - Sun, 31 Aug 2025 20:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (609), with no line terminators
Hash f9d8ba7c9c54590e7cc444c40ce8984a
cc5408cce093bd327d81bb4f9bf363448f216fb3
d50716fd6e8dc9e5c089636c40dab845f7870eb52832e02847d95a8276ecefa9
GET /watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A647303434%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A945867475%3Arqn%3A5%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1401%2C1%2C3782%2C3782%2C1%2C3117%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182266%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1796366081742873181; i=AG2CG3h7JX5D6uHkdu1fjbkaQFhf9AzeJaWXfXbd4fp05BYJ8B7Q9matfl4LqbJvP1MnCnsi8jHnkCQCa8X42KYmMEg=; yandexuid=1842795031742873181; yuidss=1842795031742873181; ymex=1774409181.yrts.1742873181#1774409181.yrtsi.1742873181; bh=YN3EiL8GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 551
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
expires: Tue, 25-Mar-2025 03:26:30 GMT
last-modified: Tue, 25-Mar-2025 03:26:30 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
access-control-allow-credentials: true
pragma: no-cache
content-type: application/json; charset=utf-8
access-control-allow-origin: https://fixedjs.jtube.top
x-content-type-options: nosniff
X-Firefox-Spdy: h2
GET pict.ebenporno.com/imgr/b/e/o/s/g/suruba_no_mato_em_valadares_mg_-4_tmb.jpg
200 OK 7.1 kB URL GET pict.ebenporno.com/imgr/b/e/o/s/g/suruba_no_mato_em_valadares_mg_-4_tmb.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerZeroSSL
Subjectpict.ebenporno.com
Fingerprint10:32:2B:13:96:29:0C:C2:5F:E8:19:FC:A1:A8:4E:CD:59:79:B5:11
ValidityWed, 19 Mar 2025 00:00:00 GMT - Tue, 17 Jun 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x240, components 3
Hash 8d49582455596f2b78451fdd0836a715
7dc17739fe1a225ac1ee6b58afbd87e247a9d080
065d76de0226c014e049bdb38dcea4261897b0e0301e9b694e34f4d6b12e5cbe
GET /imgr/b/e/o/s/g/suruba_no_mato_em_valadares_mg_-4_tmb.jpg HTTP/1.1
Host: pict.ebenporno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 25 Mar 2025 03:26:31 GMT
Content-Type: image/jpeg
Content-Length: 7109
Last-Modified: Mon, 25 Sep 2017 18:30:42 GMT
Connection: keep-alive
ETag: "59c94b52-1bc5"
Expires: Thu, 24 Apr 2025 03:26:31 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
GET css.4jpg.top/tvjw/swfobject.js
200 OK 6.6 kB URL GET css.4jpg.top/tvjw/swfobject.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
File type ASCII text, with very long lines (6935), with no line terminators
Hash 82ae541f2b2cb6836dfbc304a98f576c
2fa076c54037c048ef8b19c437b6b50b68f6e045
c53de8121c9ab1f0c7a57378e24d31697afc437bf303767e3c3a1c8838c5fe53
GET /tvjw/swfobject.js HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:19 GMT
content-type: application/javascript
etag: W/"19f2-545fa156a93c0"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 317505
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hCtbWtespYg5bWzePvhddp8s6zy16IE14FYzUZlZGkhPlWKX9YsPcf%2FP7qEMsXgR4EtxshdMiJvRlyRdUGURNdKofga4l6%2Fhp%2B8TbCYffMw4um5DyAHOGQhRtmXAgAw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e591dbc568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7510&min_rtt=3029&rtt_var=5787&sent=60&recv=18&lost=0&retrans=0&sent_bytes=52987&recv_bytes=2934&delivery_rate=115321&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=2367&x=1", cfExtPri, cfHdrFlush;dur=0
GET www.filmesporno.blog/favicon.ico
404 Not Found 0 B URL GET www.filmesporno.blog/favicon.ico
IP
ASN #12876 Scaleway S.a.s.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectfilmesporno.blog
Fingerprint83:14:4B:59:00:F3:C1:66:51:83:5C:A4:95:FE:B4:F4:9D:33:0D:84
ValidityWed, 26 Feb 2025 07:44:22 GMT - Tue, 27 May 2025 07:44:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.filmesporno.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
etag: W/"67dd64ac-ce6"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000;
content-encoding: br
X-Firefox-Spdy: h2
GET 29047886-22554-ex.metateress.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.1 kB URL GET 29047886-22554-ex.metateress.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.metateress.com
Fingerprint18:F8:1A:15:02:2F:17:58:8B:AA:F4:F1:0C:3D:A2:BB:CA:38:F5:CF
ValidityThu, 30 Jan 2025 14:19:13 GMT - Wed, 30 Apr 2025 14:19:12 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4179), with no line terminators
Hash b277fc74080b7446327f592314056297
840e24b5d3c399e09fe02762814468a854a1adcc
1c5d0a5f9c35962beb7f0c1bf990bf29f80003cf27b354c26312f05fd510164a
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A28%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.metateress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:29 UTC
expires: Tue, 25 Mar 2025 03:26:29 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
HEAD ads.google.com/
429 Too Many Requests 0 B IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subjectadwords.google.com
FingerprintD1:21:31:99:C9:E1:76:ED:96:CA:45:EC:64:A7:75:DC:7A:55:2C:6F
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: ads.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
content-length: 1103
content-type: text/html; charset=UTF-8
date: Tue, 25 Mar 2025 03:26:27 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET css.4jpg.top/index.php?js=very
200 OK 0 B URL GET css.4jpg.top/index.php?js=very
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:25 GMT
content-type: text/html; charset=UTF-8
imghost: 104194820-h-css4jpgtopmh--NO-rm104238220248/index.php?js=very
56nloadrate: 1.214375
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: EXPIRED
xkey-192la: jcss./index.php?js=very-A-css.4jpg.top--myzone---no
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rYkjtwcPFvLKTe8jXP5Bl9eU%2BctPuBViVTgK4WjKj6F1n56vBV9gtC5ID0OooXZvz%2FiUYDidKAS5IY7PPjAYjuyQAmiJ%2FK1MFgPBLvTKOZ5U2t3NfV8oz1WAN7E7Qw8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e7cadb0568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=44921&min_rtt=1254&rtt_var=56815&sent=298&recv=61&lost=0&retrans=2&sent_bytes=293846&recv_bytes=10159&delivery_rate=535352&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=8410&x=1", cfExtPri, cfHdrFlush;dur=0
HEAD ads.google.com/
429 Too Many Requests 0 B IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subjectadwords.google.com
FingerprintD1:21:31:99:C9:E1:76:ED:96:CA:45:EC:64:A7:75:DC:7A:55:2C:6F
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: ads.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
content-length: 1103
content-type: text/html; charset=UTF-8
date: Tue, 25 Mar 2025 03:26:27 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET css.4jpg.top/index.php?js=very
200 OK 0 B URL GET css.4jpg.top/index.php?js=very
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:25 GMT
content-type: text/html; charset=UTF-8
imghost: 104194820-h-css4jpgtopmh--NO-rm104238220248/index.php?js=very
56nloadrate: 1.214375
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: EXPIRED
xkey-192la: jcss./index.php?js=very-A-css.4jpg.top--myzone---no
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e2f%2BFe4HxDLzIPq8DZw3bIjaqwF0mzh2tRctYEFFfDQIjrLfcBeBbHgWD5coik6qvIs%2BIR9roT4IunmdatB5xSH9Qmh7CKf93vr5sBR8rEVj7v1a1lCEuDG8fz6RFv8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e7c7d9b568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=44921&min_rtt=1254&rtt_var=56815&sent=297&recv=61&lost=0&retrans=2&sent_bytes=292938&recv_bytes=10159&delivery_rate=535352&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=8396&x=1", cfExtPri, cfHdrFlush;dur=0
GET pdocac.tube-dl.top/v/s://filmesporno.xxx/xvideos/novinha-pagando-boquete-na-escola//title/myhash/3
200 OK 247 B URL GET pdocac.tube-dl.top/v/s://filmesporno.xxx/xvideos/novinha-pagando-boquete-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 7da521d27eab372a0e9d37e455b83c2d
3fe2c724e47e6763a45b0ea6a620b7794369928a
f0b39aa344a6dbfa91e5814a2e1ea42526198c977e2aebcdb410de43e009547d
GET /v/s://filmesporno.xxx/xvideos/novinha-pagando-boquete-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://filmesporno.xxx/xvideos/novinha-pagando-boquete-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-ru-myhost--filteron-
pdojs-line1431: notjp-ru-myhost--filteron-/v/s://filmesporno.xxx/xvideos/novinha-pagando-boquete-na-escola//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/8f/8c/700d62, lfm-1-3132, lmd-3132, lud-249393, xfvlen-275219, fsize-30066, played-16
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://filmesporno.xxx/xvideos/novinha-pagando-boquete-na-escola//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: HIT
age: 524822
last-modified: Wed, 19 Mar 2025 01:39:27 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kna2QcGeJ7Qz039JbXhahP0RqxVwDFQc4nozrhcDP6le1z5sR%2FZJQMRrhl%2Fe2H4kcM3WcrrmxubInvq01KSd0Ti%2B7wssLTKygwmwU82RdA2memjMwHx4VImPwUJroyFafIwCDWM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc8156b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2674&min_rtt=437&rtt_var=2552&sent=44&recv=49&lost=0&retrans=1&sent_bytes=12454&recv_bytes=5264&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8677&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://pornotarado.com/video/novinha-na-suruba-na-escola-sexo-brasil//title/myhash/3
200 OK 435 B URL GET pdocac.tube-dl.top/v/s://pornotarado.com/video/novinha-na-suruba-na-escola-sexo-brasil//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with very long lines (435), with no line terminators
Hash 66e90618fea84124a9aedbc64ee7c600
c62b2beb5f913179266f1895f010d50b75bf40e7
e2b68e186b476c3e9c48b7a2493ebdf7896c8d239438a4a90f756006232c6036
GET /v/s://pornotarado.com/video/novinha-na-suruba-na-escola-sexo-brasil//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://pornotarado.com/video/novinha-na-suruba-na-escola-sexo-brasil//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line963: notjp-nojp-myhost--filteron-/v/s://pornotarado.com/video/novinha-na-suruba-na-escola-sexo-brasil//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo3/c5/7c/a6, lfm-15-349470, lmd-3239739, lud-30239883, xfvlen-236929, fsize-227567, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: MISS
xkey-192la: pdocac/v/s://pornotarado.com/video/novinha-na-suruba-na-escola-sexo-brasil//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LPTfIUPTCzZZiAmTJiOfdjGpe0E5kg60nEATL3%2FCsphgomA5NT58DIG6fPf27HN9Dm%2FhVzgaKeQSC8kQsbtv%2BUxrYih3xXYlnEPeKZBLPKr%2F8xSHluFrNlUSxtg66qL2zEp51po%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9b7c4256b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4513&min_rtt=381&rtt_var=6734&sent=121&recv=88&lost=0&retrans=3&sent_bytes=47663&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9083&x=0"
X-Firefox-Spdy: h2
GET www.flagrasamadores.net/wp-content/uploads/2024/07/cropped-flagras-amadores_ico1-1-32x32.png
200 OK 1.8 kB URL GET www.flagrasamadores.net/wp-content/uploads/2024/07/cropped-flagras-amadores_ico1-1-32x32.png
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectflagrasamadores.net
FingerprintB9:8B:46:DA:A3:12:DA:3F:92:17:49:91:C3:7E:E0:7F:EE:61:CF:09
ValiditySun, 16 Mar 2025 17:55:33 GMT - Sat, 14 Jun 2025 18:53:08 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash 9dcacbdcd5e937cba5021f24a97f3a04
52c17e8a09bf1764b600ff10162575863dec3959
728df5e2d98b0002951eefd3b4828b62e1e26df7df337ca7261b19ea309d428b
GET /wp-content/uploads/2024/07/cropped-flagras-amadores_ico1-1-32x32.png HTTP/1.1
Host: www.flagrasamadores.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: image/png
content-length: 1782
last-modified: Mon, 10 Feb 2025 16:35:41 GMT
etag: "67aa2add-6f6"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Fri, 06 Mar 2026 20:53:25 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 260434
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=acI5PvZFCjr6sqthEVcBe7H6V0TLs8kJDtx2lDENG5K1Hv6xC1Bk8zd%2FzDn2pPEZRhSRCHGzlb7PamdKODG%2FaYsb9KvxNWi2yU4BV248iuHGGrDhyGR7%2BTmnZETE7U98E5i%2Furix8a9kSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e8f4f6056cc-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=3081&min_rtt=441&rtt_var=3956&sent=9&recv=13&lost=0&retrans=0&sent_bytes=4177&recv_bytes=1183&delivery_rate=3283446&cwnd=256&unsent_bytes=0&cid=87dec0e0c80fca7f&ts=1014&x=0"
X-Firefox-Spdy: h2
GET cdn.phascregairks.com/24234/728a3c3a-617d-11ec-a1f6-a44922a49201.jpeg
200 OK 43 kB URL GET cdn.phascregairks.com/24234/728a3c3a-617d-11ec-a1f6-a44922a49201.jpeg
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.phascregairks.com
FingerprintF2:2B:B6:6D:A3:A6:55:4A:88:6B:2A:2F:EC:3C:F3:8D:03:95:45:94
ValidityWed, 19 Feb 2025 08:49:48 GMT - Tue, 20 May 2025 08:49:47 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 637x360, components 3
Hash 0e6796e158cde86f69beb38815455f53
df127b323fa37c686d2ec6243ac1900a5edabe78
f92e0ab152e6714b6f0c960e51bbf4e1fcdaf56fdb1718e304d683c9cd422c76
GET /24234/728a3c3a-617d-11ec-a1f6-a44922a49201.jpeg HTTP/1.1
Host: cdn.phascregairks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/jpeg
content-length: 43329
traceparent: 00-f53955326807b3913f499a93c6d60862-923a1aa664adde94-01
x-id-fe: osix-hw-edge-gc4
last-modified: Mon, 20 Dec 2021 10:13:16 GMT
etag: "61c0573c-a941"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149554
cache: HIT
x-cached-since: 2025-03-23T09:53:55+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
200 OK 4.6 kB URL GET cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectsc.gl
Fingerprint67:A4:7F:E0:42:30:CD:09:BF:D1:B3:6C:32:AC:32:FD:24:F3:0F:F4
ValidityFri, 14 Feb 2025 15:57:25 GMT - Thu, 15 May 2025 16:53:40 GMT
File type JavaScript source, ASCII text, with very long lines (4659), with no line terminators
Hash 16f6b2d7d05eb79ddd9417c9f1785c78
48b19fa48c68d03d10c2cd65004a96ebcfd348fa
b41db332c310ffe73221c423fff030c53e40e4a6cd827e78ec8e3330a86b2648
GET /videojs-hotkeys/latest/videojs.hotkeys.min.js HTTP/1.1
Host: cdn.sc.gl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:19 GMT
content-type: text/javascript
content-length: 1827
last-modified: Sat, 12 Oct 2024 06:22:16 GMT
etag: "11d9-624419ffee9fe-gzip"
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cache-control: public, max-age=7200
cf-cache-status: HIT
age: 2345
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JSXmoi%2FEiPmzYXQNu2oIHpYLg3hU%2BNOMvdueZxqgbDGpFAcezvTTsmWRuPC82xxTANR8%2F7SkmsOjwxk2znicBEZo8Ec%2Bvq4h9C5WBwj6RDSFJmJvEfOZ1atrBOo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e5ebfa556b4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4308&min_rtt=3775&rtt_var=1796&sent=12&recv=8&lost=0&retrans=0&sent_bytes=4074&recv_bytes=1191&delivery_rate=157346&cwnd=12000&unsent_bytes=0&cid=d3376fd24227791a&ts=719&x=1", cfExtPri, cfHdrFlush;dur=0
GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1
200 OK 87 kB URL GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/tags/6
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA
ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js?1 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 09:15:53 GMT
expires: Fri, 20 Mar 2026 09:15:53 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 411027
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET pdocac.tube-dl.top/v/s://www.pornodoido.com/video/novinha-fazendo-sexo-anal//title/myhash/3
200 OK 256 B URL GET pdocac.tube-dl.top/v/s://www.pornodoido.com/video/novinha-fazendo-sexo-anal//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash f00f61fde03bb5c10ac3d9dede4efc1b
ca8310ce05995da6c9201435e5e8c9f22a6573b4
42e36ab16a5687752e99b5ade72fd01c0faa845d7d549ef9fede54d9d36d8a1b
GET /v/s://www.pornodoido.com/video/novinha-fazendo-sexo-anal//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.pornodoido.com/video/novinha-fazendo-sexo-anal//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line358: notjp-es-pt-myhost--filteron-
pdojs-line1434: notjp-es-pt-myhost--filteron-/v/s://www.pornodoido.com/video/novinha-fazendo-sexo-anal//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo2/b8/5d/f48e55, lfm-1-122847, lmd-122847, lud-29524325, xfvlen-694448, fsize-117613, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.pornodoido.com/video/novinha-fazendo-sexo-anal//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B0FjPf7jmdCc1isIH0y9R8UHGlyMLpiFql0A3U1Ug%2BpsWOhS1t4FpK1T67%2BsttmXL7AwSiFbrx%2FhlodIFDB7CRKgKpoiBAdq%2BfPvU69%2Fat9YiCGNLobOL%2Ffm4jwwmr9GrlhCKVM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bec9556b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2159&min_rtt=381&rtt_var=2701&sent=106&recv=87&lost=0&retrans=3&sent_bytes=40372&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9047&x=0"
X-Firefox-Spdy: h2
GET xxxbunker.com/favicon.ico
200 OK 318 B URL GET xxxbunker.com/favicon.ico
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectxxxbunker.com
FingerprintD8:6A:6B:7A:3F:6B:AA:A6:30:22:B0:49:BB:3C:6C:59:20:24:B3:FE
ValidityFri, 28 Feb 2025 07:09:36 GMT - Thu, 29 May 2025 07:09:35 GMT
File type MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel
Hash 8ecd0598af4107d51e423656be9030fc
1ee216d19813daaed68836e32ccc5ce6a2237410
61ea2910a5912a36f0e7b95d437409ea5ac952a5f573e0e85576e3ca1f005bb2
GET /favicon.ico HTTP/1.1
Host: xxxbunker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: image/x-icon
content-length: 318
last-modified: Fri, 01 Nov 2024 21:48:30 GMT
etag: "67254cae-13e"
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 29047886-22554-3424.undeciliste.com/v2/a/na/image?d=BQ5qQHPeUJSOqTlpFwgQ9dfYEpT6h7xQXXKzoH0mID550AzUfd3ddeT6wDeojWjsxAEBCat6lQsRocq9whgOID0ixp2y8a2J2Ya8Ipq5oeMJpWFQHgOViHmM9FBc4SF3QpUr5Ly3rl8vQzGB8tSV31mBSfdNHAQf2Fyf4dl-tcYUBmq8Qr2u-XCD0FUxGIDlu4fbMsCzCZwscNMm_VmTBfRZGSF7ovQbTnEqh9dXr7T69ACOjmGI9FxoDeyvn21nXu6VEZlxquQngdYr9-HeY87fZXZkZuRzR_BnS1QotNzaV9Rx4VribLNN5LnGfvku3lsJWEtEhxGX1A4UZB7nWjR_SAkMbo58MAmXyW0EBJSPUm-5-YSPaHBsobx3Fm20uJx2CWclThphJN8zv0Zk46s2qcm_xlvi37ZSHBDhUwZ9D-yGBg-USWmM0svudjltQsOBOp59UDx0p3-9-laRb8mkHA55OaLbDAkBE6w5_9czw1k89BGVcTVEUdnOmjXsncRJr0mn-s13Kuqkpdt5zfrvkJP4uYJdetxYBSai7rTD1wHSJLL2smaLnTn1_C_F6xzXyW1iMpvTi6xx2KpsK6x6mmBjJSLcBFAv2NpSb8e_vDyRtCv-E5ScrBq7vhc2XQXXEHTzzEjpdu7lDCNAwH5imKv8A5bEhdcvn9TDPHzfVCQ8Gs6yUiTa3N0Jd-vC98C4O0_6VqhtnQo1gkVf0bAqGnEp4zzkcVQcItvlnAu1t-pccwY-mqPOWPr8NxPTwM2jIJ4OEnLAB0X8A6i8NHCs-UORp1ytv7cMjYvC9gK5CouAzRzXBzg46Tl8CGO9pSySRGMqBsy1tdh-9zWoTsJ1NmxRJuecfhvI3zTFnLmeJJ1fHvKCAdjpYTMpXPZw_6UXtZLgjCCBeTluTXfmr1FqUCtS9MEINCrKxklOjER444fQ1CCAthKByqrZb6y13M1mLS6NzJ3y5h9k9jbNBKkuIRX8gZyTXrFGh3QX9dS1qJfO-tbQyqUISvZWJ-TAK5NCShZNNPb_fKaZ65tN1cl9esWnJn-Zwb7iCb0H6g1XIZPAKfD8COwoeeBkqU-3q016YPvyU6RKboRKETDDtqMUHcWii6U7GD5LxISI9cxhr9KX9msrO-MDmM5HglOSSH4VrbBTS4jFElnJLx8SIDIF_quIx3DxMfUncQfQqenPQuxRfepZMtU-ZbSbt2pgDZN71cCf-UWy1ff5NZriPmT3FX0dlw
200 OK 68 B URL GET 29047886-22554-3424.undeciliste.com/v2/a/na/image?d=BQ5qQHPeUJSOqTlpFwgQ9dfYEpT6h7xQXXKzoH0mID550AzUfd3ddeT6wDeojWjsxAEBCat6lQsRocq9whgOID0ixp2y8a2J2Ya8Ipq5oeMJpWFQHgOViHmM9FBc4SF3QpUr5Ly3rl8vQzGB8tSV31mBSfdNHAQf2Fyf4dl-tcYUBmq8Qr2u-XCD0FUxGIDlu4fbMsCzCZwscNMm_VmTBfRZGSF7ovQbTnEqh9dXr7T69ACOjmGI9FxoDeyvn21nXu6VEZlxquQngdYr9-HeY87fZXZkZuRzR_BnS1QotNzaV9Rx4VribLNN5LnGfvku3lsJWEtEhxGX1A4UZB7nWjR_SAkMbo58MAmXyW0EBJSPUm-5-YSPaHBsobx3Fm20uJx2CWclThphJN8zv0Zk46s2qcm_xlvi37ZSHBDhUwZ9D-yGBg-USWmM0svudjltQsOBOp59UDx0p3-9-laRb8mkHA55OaLbDAkBE6w5_9czw1k89BGVcTVEUdnOmjXsncRJr0mn-s13Kuqkpdt5zfrvkJP4uYJdetxYBSai7rTD1wHSJLL2smaLnTn1_C_F6xzXyW1iMpvTi6xx2KpsK6x6mmBjJSLcBFAv2NpSb8e_vDyRtCv-E5ScrBq7vhc2XQXXEHTzzEjpdu7lDCNAwH5imKv8A5bEhdcvn9TDPHzfVCQ8Gs6yUiTa3N0Jd-vC98C4O0_6VqhtnQo1gkVf0bAqGnEp4zzkcVQcItvlnAu1t-pccwY-mqPOWPr8NxPTwM2jIJ4OEnLAB0X8A6i8NHCs-UORp1ytv7cMjYvC9gK5CouAzRzXBzg46Tl8CGO9pSySRGMqBsy1tdh-9zWoTsJ1NmxRJuecfhvI3zTFnLmeJJ1fHvKCAdjpYTMpXPZw_6UXtZLgjCCBeTluTXfmr1FqUCtS9MEINCrKxklOjER444fQ1CCAthKByqrZb6y13M1mLS6NzJ3y5h9k9jbNBKkuIRX8gZyTXrFGh3QX9dS1qJfO-tbQyqUISvZWJ-TAK5NCShZNNPb_fKaZ65tN1cl9esWnJn-Zwb7iCb0H6g1XIZPAKfD8COwoeeBkqU-3q016YPvyU6RKboRKETDDtqMUHcWii6U7GD5LxISI9cxhr9KX9msrO-MDmM5HglOSSH4VrbBTS4jFElnJLx8SIDIF_quIx3DxMfUncQfQqenPQuxRfepZMtU-ZbSbt2pgDZN71cCf-UWy1ff5NZriPmT3FX0dlw
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.undeciliste.com
FingerprintB2:B4:0B:3C:3C:3D:57:A1:33:77:D7:34:88:54:24:68:02:99:D5:B9
ValidityMon, 03 Feb 2025 14:34:59 GMT - Sun, 04 May 2025 14:34:58 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPeUJSOqTlpFwgQ9dfYEpT6h7xQXXKzoH0mID550AzUfd3ddeT6wDeojWjsxAEBCat6lQsRocq9whgOID0ixp2y8a2J2Ya8Ipq5oeMJpWFQHgOViHmM9FBc4SF3QpUr5Ly3rl8vQzGB8tSV31mBSfdNHAQf2Fyf4dl-tcYUBmq8Qr2u-XCD0FUxGIDlu4fbMsCzCZwscNMm_VmTBfRZGSF7ovQbTnEqh9dXr7T69ACOjmGI9FxoDeyvn21nXu6VEZlxquQngdYr9-HeY87fZXZkZuRzR_BnS1QotNzaV9Rx4VribLNN5LnGfvku3lsJWEtEhxGX1A4UZB7nWjR_SAkMbo58MAmXyW0EBJSPUm-5-YSPaHBsobx3Fm20uJx2CWclThphJN8zv0Zk46s2qcm_xlvi37ZSHBDhUwZ9D-yGBg-USWmM0svudjltQsOBOp59UDx0p3-9-laRb8mkHA55OaLbDAkBE6w5_9czw1k89BGVcTVEUdnOmjXsncRJr0mn-s13Kuqkpdt5zfrvkJP4uYJdetxYBSai7rTD1wHSJLL2smaLnTn1_C_F6xzXyW1iMpvTi6xx2KpsK6x6mmBjJSLcBFAv2NpSb8e_vDyRtCv-E5ScrBq7vhc2XQXXEHTzzEjpdu7lDCNAwH5imKv8A5bEhdcvn9TDPHzfVCQ8Gs6yUiTa3N0Jd-vC98C4O0_6VqhtnQo1gkVf0bAqGnEp4zzkcVQcItvlnAu1t-pccwY-mqPOWPr8NxPTwM2jIJ4OEnLAB0X8A6i8NHCs-UORp1ytv7cMjYvC9gK5CouAzRzXBzg46Tl8CGO9pSySRGMqBsy1tdh-9zWoTsJ1NmxRJuecfhvI3zTFnLmeJJ1fHvKCAdjpYTMpXPZw_6UXtZLgjCCBeTluTXfmr1FqUCtS9MEINCrKxklOjER444fQ1CCAthKByqrZb6y13M1mLS6NzJ3y5h9k9jbNBKkuIRX8gZyTXrFGh3QX9dS1qJfO-tbQyqUISvZWJ-TAK5NCShZNNPb_fKaZ65tN1cl9esWnJn-Zwb7iCb0H6g1XIZPAKfD8COwoeeBkqU-3q016YPvyU6RKboRKETDDtqMUHcWii6U7GD5LxISI9cxhr9KX9msrO-MDmM5HglOSSH4VrbBTS4jFElnJLx8SIDIF_quIx3DxMfUncQfQqenPQuxRfepZMtU-ZbSbt2pgDZN71cCf-UWy1ff5NZriPmT3FX0dlw HTTP/1.1
Host: 29047886-22554-3424.undeciliste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET cdn.maubifilian.com/24011/ad3f379b-1551-11ec-ba28-5f54dd64648d.png
200 OK 258 kB URL GET cdn.maubifilian.com/24011/ad3f379b-1551-11ec-ba28-5f54dd64648d.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.maubifilian.com
Fingerprint72:AC:9C:42:A6:23:1D:67:38:AA:B9:1B:8E:31:81:75:DD:D5:BA:3C
ValidityWed, 19 Feb 2025 08:49:48 GMT - Tue, 20 May 2025 08:49:47 GMT
File type PNG image data, 492 x 328, 8-bit/color RGB, non-interlaced
Size 258 kB (257771 bytes)
Hash f3b1f8b77a0244926c66de4259358586
93106fe43ea91eb2ff6e9c93be3bce504985ed10
5ed221159f63de877ba8359eaf0e7bc846814cd23c9702f59cbd50254a4f6dac
GET /24011/ad3f379b-1551-11ec-ba28-5f54dd64648d.png HTTP/1.1
Host: cdn.maubifilian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 257771
traceparent: 00-7c2616c3f370db4eddff3ab6ad14a283-78a7dcd8f3b306fb-01
x-id-fe: osix-hw-edge-gc4
last-modified: Tue, 14 Sep 2021 11:48:28 GMT
etag: "61408c0c-3eeeb"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149508
cache: HIT
x-cached-since: 2025-03-23T09:54:41+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET css.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/tags/6
200 OK 92 kB URL GET css.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/tags/6
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tagjpa.php?noself=1&url=av.4freedom.click/tags/6 HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:19 GMT
content-type: text/html; charset=UTF-8
8tagproxuri: /tagjpa.php?noself=1&url=av.4freedom.click/tags/6
x-frame-options: ALLOWALL
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=72000
597tagproxuri: /tagjpa.php?noself=1&url=av.4freedom.click/tags/6
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: jcss./tagjpa.php?noself=1&url=av.4freedom.click/tags/6-A-css.4jpg.top--myzone---no
age: 54605
cf-cache-status: HIT
last-modified: Mon, 24 Mar 2025 12:16:14 GMT
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EvfIELjjw%2FR16Oaf0eRNdfSHKZlc5JcuiXnM8SiFjhtCsa7pKjfy0aa5yP%2BaAHADXozha1dOv1mBnbthXoeIl1F2HTdZ5AA33jbbdOyKOB96rRThAM%2FzNEkuo%2Bc8dGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e5e4833568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5790&min_rtt=1254&rtt_var=4137&sent=111&recv=24&lost=0&retrans=0&sent_bytes=107225&recv_bytes=3785&delivery_rate=45235&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=3199&x=1", cfExtPri, cfHdrFlush;dur=0
GET 29047886-22554-ex.wherdiapospir.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A24%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.3 kB URL GET 29047886-22554-ex.wherdiapospir.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A24%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.wherdiapospir.com
Fingerprint58:84:1A:43:51:F5:66:4D:F0:6E:BC:85:78:CA:67:EE:E4:AB:3A:90
ValidityFri, 28 Feb 2025 14:29:09 GMT - Thu, 29 May 2025 14:29:08 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4293), with no line terminators
Hash e5815ca2184b863b47fa5a8c473aeac1
bbad3cac8eed2101f5152f2cd521d515734ad811
b35274cefdb37325be3914cc94cd09b5142a36522f41aa30f0cdf89931732e83
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A24%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.wherdiapospir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:28 UTC
expires: Tue, 25 Mar 2025 03:26:28 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/hls.js/latest/hls.min.js
200 OK 224 kB URL GET cdn.jsdelivr.net/hls.js/latest/hls.min.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
File type JavaScript source, ASCII text, with very long lines (31978)
Size 224 kB (223766 bytes)
Hash b55a12f998779f639f0b0dd6cc0f3be1
742ac86d0ce4833c4ebbfba944f84bd6021cd342
2c5c9f73e58c3fac08577552188e1cafba4d972e0a88d25f913915b9ac082a81
GET /hls.js/latest/hls.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"36a16-dCrIbQzkgzxOu/upRPhL1gIc00I"
content-encoding: br
accept-ranges: bytes
date: Tue, 25 Mar 2025 03:26:19 GMT
age: 512048
x-served-by: cache-fra-etou8220033-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 60268
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideos10.blog.br/menina-fazendo-sexo-na-escola-com-o-diretor//title/myhash/3
200 OK 0 B URL GET pdocac.tube-dl.top/v/s://xvideos10.blog.br/menina-fazendo-sexo-na-escola-com-o-diretor//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://xvideos10.blog.br/menina-fazendo-sexo-na-escola-com-o-diretor//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideos10.blog.br/menina-fazendo-sexo-na-escola-com-o-diretor//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1432: notjp-es-pt-myhost--filteron-/v/s://xvideos10.blog.br/menina-fazendo-sexo-na-escola-com-o-diretor//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/1b/8b/ff, lfm-9-3642312, lmd-1742409921, lud-1742409921, xfvlen-0, fsize-260427, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideos10.blog.br/menina-fazendo-sexo-na-escola-com-o-diretor//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8mxlF9rYXXeLsD8%2Fy%2F6CyX3z8gbK5wia3cfamEU%2ByQU4%2FiRSPKl38Ob14wb06skEITGh7OMDdTyeVNe8gD0ssJgyS%2FOqt4klPYDH2ce2yDMLqQKt8I3CO4w2dz0bAZj5Lqgp1%2Fs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bbc6956b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=957&min_rtt=381&rtt_var=976&sent=90&recv=83&lost=0&retrans=3&sent_bytes=32043&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9014&x=0"
X-Firefox-Spdy: h2
GET cdn77-vid-mp4.xvideos-cdn.com/2kOQS8qVNOoW227-3v7BAA==,1742882437/videos/mp4/7/e/2/xvideos.com_7e21a217dcc03deca70f6caf8baee20a.mp4?ui=MTA0LjE2Ny4yNy43My0tL2VtYmVkZnJhbWUvdW1wdG9pYWUyZTE=
206 Partial Content 4.4 MB URL GET cdn77-vid-mp4.xvideos-cdn.com/2kOQS8qVNOoW227-3v7BAA==,1742882437/videos/mp4/7/e/2/xvideos.com_7e21a217dcc03deca70f6caf8baee20a.mp4?ui=MTA0LjE2Ny4yNy43My0tL2VtYmVkZnJhbWUvdW1wdG9pYWUyZTE=
IP
ASN #60068 Datacamp Limited
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerSectigo Limited
Subjectxvideos.com
Fingerprint27:E9:05:C0:A5:FC:40:B1:D6:44:DC:D3:39:EE:11:78:2C:E2:F0:78
ValidityThu, 03 Oct 2024 00:00:00 GMT - Mon, 03 Nov 2025 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size 4.4 MB (4423680 bytes)
Hash 34cf910fd69ed5f04ce5268a4cc5e01b
23a6c39867fb5a64f9a8c0bbc32264a8b8b64c11
8763bafad1df6c8fa2b67174a6c3b6503aeae6f0d6b6580f9f5069c99b8dfa6e
GET /2kOQS8qVNOoW227-3v7BAA==,1742882437/videos/mp4/7/e/2/xvideos.com_7e21a217dcc03deca70f6caf8baee20a.mp4?ui=MTA0LjE2Ny4yNy43My0tL2VtYmVkZnJhbWUvdW1wdG9pYWUyZTE= HTTP/1.1
Host: cdn77-vid-mp4.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: video/mp4
content-length: 36317934
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Sat, 04 Feb 2023 14:19:59 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: EwwBw7WmDQH35HEhAAwBT3/TEgH3w4wWAAwBj/Q63QH3sygAAA
x-77-nzt-ray: b1f3ea1b02d82cc25c22e2676ee1c82f
x-accel-expires: @1749561090
x-accel-date: 1740681336
x-accel-date-max: 1739193090
x-77-cache: HIT
x-77-age: 2191844
server: CDN77-Turbo
content-range: bytes 0-36317933/36317934
X-Firefox-Spdy: h2
GET analzoosexporn.website/tmbs/119/531-stimulating.jpg
200 OK 24 kB URL GET analzoosexporn.website/tmbs/119/531-stimulating.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectanalzoosexporn.website
Fingerprint80:09:7D:F2:84:08:6B:23:EF:03:87:9E:E5:0B:08:AB:15:AE:97:A6
ValiditySat, 15 Feb 2025 00:43:08 GMT - Fri, 16 May 2025 01:41:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x230, components 3
Hash d6dd84b8ef313f296a2b8d418ca8ba4f
d0a1a488d5201258e2f7807fd4397c7256193e65
e6e52c273c31b8c6ac9e60f212766ff6066276b02d92002eb2ddc4fc88bac5e8
GET /tmbs/119/531-stimulating.jpg HTTP/1.1
Host: analzoosexporn.website
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: image/jpeg
content-length: 23675
last-modified: Mon, 27 Apr 2020 11:51:12 GMT
etag: "5ea6c730-5c7b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-request-id: e158524aa55fbf47e282c930eb139ab3
cf-cache-status: HIT
age: 5110418
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WY3RZs63KM%2FPkiTvfYd%2FwQ4V7oyHjjdjUGmr99FPWCkzdsbWEQZTFWE9MTOhYa9z4PLESwG1kTxQGNRz6Ep0wE28sJ36lHPaE8MD5qvV8fkhag2ijH2AE0f1lX0l7t9a9pBHp69aUcC1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4ea3a83ab505-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21681&min_rtt=19167&rtt_var=8983&sent=24&recv=20&lost=0&retrans=0&sent_bytes=4782&recv_bytes=1848&delivery_rate=30989&cwnd=12000&unsent_bytes=0&cid=c75c1c7d4bb63e46&ts=3796&x=1", cfExtPri, cfHdrFlush;dur=0
GET playboyshow.com/favicon.ico
404 Not Found 0 B URL GET playboyshow.com/favicon.ico
IP
ASN #63949 Akamai Connected Cloud
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectplayboyshow.com
Fingerprint31:B7:DE:E9:60:BA:DE:34:EF:C6:F4:49:CE:86:55:AE:DF:88:71:5D
ValidityWed, 26 Feb 2025 20:43:04 GMT - Tue, 27 May 2025 20:43:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: playboyshow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: openresty/1.27.1.1
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
GET videodesexo.blog/favicon.ico
404 Not Found 0 B URL GET videodesexo.blog/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectvideodesexo.blog
Fingerprint9A:96:2F:89:52:3E:B4:6D:5E:04:97:23:EC:D3:9B:18:C7:8C:ED:8A
ValidityTue, 04 Feb 2025 07:19:37 GMT - Mon, 05 May 2025 08:17:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: videodesexo.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=utf-8
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000;
cache-control: max-age=300
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rfv9HVE6TWDep5YLePQ3SM7P8vWz%2FOB7g5IuP%2FYrPtOreFKZZ5iPz6T%2B6pB9eChBBq7gqoZGiqTOJq%2FvhJxSpoETtEJJtnN2%2FD7UG8T0OV%2BEm8x9S7qDSBCjMDeUS8fNbCav"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e8bfb1656a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1872&min_rtt=436&rtt_var=2884&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3287&recv_bytes=1193&delivery_rate=7463917&cwnd=254&unsent_bytes=0&cid=4522cc87384af139&ts=394&x=0"
X-Firefox-Spdy: h2
GET cacrz.4jpg.top/AV4.us.jpg
200 OK 8.7 kB URL GET cacrz.4jpg.top/AV4.us.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3
Hash edfe007a6e5b3d268b2528f564b60b43
1644c8ef97c871079e07e5079d613af5cb94052f
bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: cacrz.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: image/jpeg
content-length: 8741
etag: "2225-5499bcea176c0"
access-control-allow-origin: *
access-control-allow-headers: Cake
ahost: RZ
cache-control: public, max-age=3600000
cf-cache-status: HIT
age: 1042210
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yV6BTRKVd9BQlnlTaiVbJSSijj4yfuVE84c84a55ZQYA16lmutQeqEmbJL91vTw7c1HUzftsv1PEHrINMwOH%2F8al2F72wdAhcrLancsk83Lp0SRTUcPqM%2Fiq06Vrh%2FniLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e635a4c568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4405&min_rtt=1254&rtt_var=3088&sent=182&recv=42&lost=0&retrans=0&sent_bytes=174463&recv_bytes=7215&delivery_rate=1267298&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=4012&x=1", cfExtPri, cfHdrFlush;dur=0
GET pornvideoq.com/thumbs/pqa77-cvp.kivqrbf-pqa.pbz/ivqrbf/guhzof169/q7/r1/49/q7r14967rqp64n5r4819s5rsr749q6q7/q7r14967rqp64n5r4819s5rsr749q6q7.11.wct.jpg
200 OK 13 kB URL GET pornvideoq.com/thumbs/pqa77-cvp.kivqrbf-pqa.pbz/ivqrbf/guhzof169/q7/r1/49/q7r14967rqp64n5r4819s5rsr749q6q7/q7r14967rqp64n5r4819s5rsr749q6q7.11.wct.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectpornvideoq.com
FingerprintB0:1A:4C:91:7C:76:D7:48:41:02:EC:32:73:DA:4C:D2:C2:8D:CA:AE
ValidityThu, 20 Mar 2025 22:55:32 GMT - Wed, 18 Jun 2025 23:53:20 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 352x198, components 3
Hash 762fe0c33edd3a6c009f273b5449290c
a1e9b277226ada8e9dc25033a587dfd1446ba062
e9292646206ec4c9bd9770bf17ca6add7883c05e381fd03b3cc333f6d513f33f
GET /thumbs/pqa77-cvp.kivqrbf-pqa.pbz/ivqrbf/guhzof169/q7/r1/49/q7r14967rqp64n5r4819s5rsr749q6q7/q7r14967rqp64n5r4819s5rsr749q6q7.11.wct.jpg HTTP/1.1
Host: pornvideoq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 13420
x-litespeed-cache-control: no-cache
cache-control: public, max-age=2073600
expires: Mon, 31 Mar 2025 01:33:53 GMT
last-modified: Mon, 24 Mar 2025 01:33:53 GMT
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1l8wsWsyc9UwrMTQUfK3TOu%2B5zscfDAioOu4P7I%2BVBaXdvczhF%2BzIy1XPOXmiwuTfFFmSpDkdnmy0uPh2U8SWEt0U9BAPHNxnkUuFMAlfPMH4LGAJPtTkS0dD4Z35U363g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4ea4487ebd6d-LHR
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=25102&min_rtt=24467&rtt_var=9628&sent=26&recv=24&lost=0&retrans=0&sent_bytes=4907&recv_bytes=2128&delivery_rate=26239&cwnd=12000&unsent_bytes=0&cid=8e43fb1389dbbff8&ts=3582&x=1", cfExtPri, cfHdrFlush;dur=0
GET cdn.phascregairks.com/24234/1831dfb4-617e-11ec-a1f6-a44922a49201.jpg
200 OK 48 kB URL GET cdn.phascregairks.com/24234/1831dfb4-617e-11ec-a1f6-a44922a49201.jpg
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.phascregairks.com
FingerprintF2:2B:B6:6D:A3:A6:55:4A:88:6B:2A:2F:EC:3C:F3:8D:03:95:45:94
ValidityWed, 19 Feb 2025 08:49:48 GMT - Tue, 20 May 2025 08:49:47 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x335, components 3
Hash 700e55212135f5d6851f82332eb8e394
8c4e6b01daf85e5bbf7f16ab97c18fa593344b5a
6abc227864949fe53d216033e51a99e7e723655cd9ed7a926128dd0d22a1a1d8
GET /24234/1831dfb4-617e-11ec-a1f6-a44922a49201.jpg HTTP/1.1
Host: cdn.phascregairks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/jpeg
content-length: 47605
traceparent: 00-055629c5526d7ff37e1d74432f284236-148dec89541ff063-01
x-id-fe: osix-hw-edge-gc4
last-modified: Mon, 20 Dec 2021 10:17:54 GMT
etag: "61c05852-b9f5"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149672
cache: HIT
x-cached-since: 2025-03-23T09:51:57+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.porno16.com/video/rotina-de-novinhas-no-banho//title/myhash/3
200 OK 210 B URL GET pdocac.tube-dl.top/v/s://www.porno16.com/video/rotina-de-novinhas-no-banho//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash b192b8cf8f0132e208a06d231849b2df
f6a01abb9e1e3752513a52b1f2292beec0e868e2
edb2c315115ae3cae8cf2369fa01e9149a9f3b9bbb90e28115ec730570f5bddd
GET /v/s://www.porno16.com/video/rotina-de-novinhas-no-banho//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.porno16.com/video/rotina-de-novinhas-no-banho//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-ru-myhost--filteron-
line1432: notjp-ru-myhost--filteron-/v/s://www.porno16.com/video/rotina-de-novinhas-no-banho//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo4/5b/e6/159f54, lfm-1-702, lmd-702, lud-3381818, xfvlen-518412, fsize-341851, played-23
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.porno16.com/video/rotina-de-novinhas-no-banho//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: HIT
age: 185023
last-modified: Sun, 23 Mar 2025 00:02:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=21ingLAIZpJLfgjG37Z7Rzrk5AXuDCr7Pp7H%2B1ZR71BpSWD186TaRh%2BRYIfi%2Fd3inFCs6i%2BFugIeV1nFemnZhoNvxRUmE9tp9OzDvlXwn6Pq7Cm5%2Fjz3M0NcTKiVqQoBMHYDlDs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9c6cbb56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2353&min_rtt=417&rtt_var=2862&sent=69&recv=67&lost=0&retrans=2&sent_bytes=22343&recv_bytes=6602&delivery_rate=6135593&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8768&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://pornogramxxx.com/sexvideo6065905111/title/myhash/3
200 OK 77 B URL GET pdocac.tube-dl.top/v/s://pornogramxxx.com/sexvideo6065905111/title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 9ee16250b91f21521dd506368ee87f4e
7f28f2862b0118a00862898d5d01dcf4efc94912
c2b0afa5ebad4660447fccae94739905bd7d094469da001deae5f7f6208a3b24
GET /v/s://pornogramxxx.com/sexvideo6065905111/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://pornogramxxx.com/sexvideo6065905111/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1431: notjp-es-pt-myhost--filteron-/v/s://pornogramxxx.com/sexvideo6065905111/title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/5a/2a/c77d39, lfm-1-265761, lmd-265761, lud-28941919, xfvlen-440086, fsize-63755, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://pornogramxxx.com/sexvideo6065905111/title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rID%2F3sHWz0GfKlvrp2xpfj2oB1t8EC05UN24DDWFOtHHa25eQckYHr8agUDKapt5Mkt7JqPx%2FcdOUnqeKCFUyy7VnJ9TOnFiSe74g2kY0TsC813wa%2Ba6iBZCcsRq9JwWN%2Fy23Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bbc6b56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2647&min_rtt=417&rtt_var=3066&sent=78&recv=71&lost=0&retrans=3&sent_bytes=26735&recv_bytes=6602&delivery_rate=6135593&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9007&x=0"
X-Firefox-Spdy: h2
GET cdn.maubifilian.com/1833/59e429ce-116c-11ec-ba28-5f54dd64648d.png
200 OK 192 kB URL GET cdn.maubifilian.com/1833/59e429ce-116c-11ec-ba28-5f54dd64648d.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.maubifilian.com
Fingerprint72:AC:9C:42:A6:23:1D:67:38:AA:B9:1B:8E:31:81:75:DD:D5:BA:3C
ValidityWed, 19 Feb 2025 08:49:48 GMT - Tue, 20 May 2025 08:49:47 GMT
File type PNG image data, 492 x 328, 8-bit/color RGB, non-interlaced
Size 192 kB (191686 bytes)
Hash b1ef2b9b25f9f8196011e943ff2d058f
d056b4ba151f0fd1767eb7e33cbbef9d3b5a39bd
09413422030d27124c6f196dc858f5217f86d66c87715f82ee3c0b083f84e017
GET /1833/59e429ce-116c-11ec-ba28-5f54dd64648d.png HTTP/1.1
Host: cdn.maubifilian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 191686
traceparent: 00-bc40d6acb842db2ac05791b9bfca8f19-c9cdb19b6c015607-01
x-id-fe: osix-hw-edge-gc4
last-modified: Thu, 09 Sep 2021 12:49:20 GMT
etag: "613a02d0-2ecc6"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149494
cache: HIT
x-cached-since: 2025-03-23T09:54:55+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://videodesexo.blog/novinha-transando//title/myhash/3
200 OK 227 B URL GET pdocac.tube-dl.top/v/s://videodesexo.blog/novinha-transando//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash faf1a07da82c81f77462c7afb44a1629
e1003bbf716fdd8763cea987e2fcb2963f6bb5c4
72917fc1c37612b34a4603abb522399bd68144ff343d94ac94ded21111895067
GET /v/s://videodesexo.blog/novinha-transando//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://videodesexo.blog/novinha-transando//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1432: notjp-es-pt-myhost--filteron-/v/s://videodesexo.blog/novinha-transando//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/20/5f/267139, lfm-1-151086, lmd-151086, lud-11206176, xfvlen-476942, fsize-96795, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://videodesexo.blog/novinha-transando//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f2mrJ%2FNxWLcBELJrb%2BZQxlBdK62AVSQUWiZHmGLbRQfxfgmn%2B%2FgV9lsev9sR%2Bm0MJUDdVAphG2ZO%2FJwE9%2FpnrZeBKEYgrvMLk2kHbNwgm4JH1BZAIkClVcdQ9dPz04r4gAKJL2k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc8256b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1510&min_rtt=381&rtt_var=1872&sent=98&recv=86&lost=0&retrans=3&sent_bytes=36108&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9037&x=0"
X-Firefox-Spdy: h2
GET www.xxxporno.mobi/media/videos/10000/9000/novinhas-transando-na-escola.jpg
404 Not Found 0 B URL GET www.xxxporno.mobi/media/videos/10000/9000/novinhas-transando-na-escola.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectxxxporno.mobi
Fingerprint06:99:06:84:56:1A:EF:5C:BB:11:23:5C:3C:D2:A0:69:DC:36:E2:11
ValidityTue, 25 Mar 2025 01:53:49 GMT - Mon, 23 Jun 2025 01:53:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /media/videos/10000/9000/novinhas-transando-na-escola.jpg HTTP/1.1
Host: www.xxxporno.mobi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: max-age=0, private, must-revalidate
content-length: 9
date: Tue, 25 Mar 2025 03:26:31 GMT
server: Cowboy
set-cookie: sid=f258da26-0928-11f0-9de1-a053c7031476; path=/; domain=.xxxporno.mobi; expires=Sun, 12 Apr 2093 06:40:38 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
GET en.cnnamador.com/favicon.ico
301 Moved Permanently 0 B URL GET en.cnnamador.com/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectcnnamador.com
Fingerprint11:CA:AF:D8:F2:36:CD:DD:14:54:C3:75:7A:3D:D7:12:2C:86:E9:25
ValidityFri, 14 Feb 2025 14:43:04 GMT - Thu, 15 May 2025 15:40:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: en.cnnamador.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=utf-8
location: https://www.cnnamador.com
x-frame-options: SAMEORIGIN
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: max-age=3600, must-revalidate
pragma: no-cache
cf-cache-status: HIT
age: 2560
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8XiFaUJeSpmswiCgH9XB2gUbuDUP8NZLK%2BP4sYSHUvE4SJbDwkz2aJPk4R18KZ6T%2BzSgiw6QSdpiqnLI3m%2FuvojKF%2B2DRl%2BM3fpiBSVlwxG6cT1bOi%2By4don%2BYKAVzjRD%2BVp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e8d8ec15699-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=482&min_rtt=401&rtt_var=132&sent=6&recv=10&lost=0&retrans=0&sent_bytes=3280&recv_bytes=1162&delivery_rate=7594405&cwnd=253&unsent_bytes=0&cid=5ac9f69b13232661&ts=489&x=0"
X-Firefox-Spdy: h2
GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A874499407%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A952598709%3Arqn%3A6%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1407%2C1%2C3768%2C3768%2C0%2C3102%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182281%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
200 OK 551 B URL GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A874499407%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A952598709%3Arqn%3A6%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1407%2C1%2C3768%2C3768%2C0%2C3102%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182281%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint4E:A6:D4:57:F5:B7:FB:C1:98:C0:40:D2:B8:FA:B4:10:43:09:41:94
ValiditySun, 09 Mar 2025 21:02:24 GMT - Sun, 31 Aug 2025 20:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (609), with no line terminators
Hash 4594d55c12744611a99602713ea61ff7
71915ae1b16d4649204cb5a09fc72f0c98b06d48
d4fff49a9dda119832a080af8ccb3bda702cbf6c79100bb7ab9aeed98f23de29
GET /watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A874499407%3Az%3A0%3Ai%3A20250325032629%3Aet%3A1742873189%3Ac%3A1%3Arn%3A952598709%3Arqn%3A6%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C1407%2C1%2C3768%2C3768%2C0%2C3102%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873182281%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873190%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)re(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1796366081742873181; i=AG2CG3h7JX5D6uHkdu1fjbkaQFhf9AzeJaWXfXbd4fp05BYJ8B7Q9matfl4LqbJvP1MnCnsi8jHnkCQCa8X42KYmMEg=; yandexuid=1842795031742873181; yuidss=1842795031742873181; ymex=1774409181.yrts.1742873181#1774409181.yrtsi.1742873181; bh=YN3EiL8GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 551
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
x-xss-protection: 1; mode=block
access-control-allow-credentials: true
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
expires: Tue, 25-Mar-2025 03:26:30 GMT
last-modified: Tue, 25-Mar-2025 03:26:30 GMT
pragma: no-cache
content-type: application/json; charset=utf-8
access-control-allow-origin: https://fixedjs.jtube.top
x-content-type-options: nosniff
X-Firefox-Spdy: h2
GET css.4jpg.top/index.php?js=very
400 Bad Request 0 B URL GET css.4jpg.top/index.php?js=very
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 25 Mar 2025 03:26:35 GMT
content-type: text/html; charset=iso-8859-1
x-proxy-cache-192g-la: UPDATING
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g7XMu8zJSrCYWNyewty5cYpJxgMwA3JVMqxtm%2Fao458ddm0%2F15ceLXUew0lQtzsIYwlQauqIarBxKi4ohqex0xr5hmV5dx8Q9ER3LUmLXcOzi4KpPBe%2FUJmTK6tiLYM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4ebe0cfe568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=49700&min_rtt=1254&rtt_var=52169&sent=301&recv=64&lost=0&retrans=2&sent_bytes=294811&recv_bytes=10667&delivery_rate=10613&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=18898&x=1", cfExtPri, cfHdrFlush;dur=0
GET js.4jpg.top/tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css
200 OK 25 kB URL GET js.4jpg.top/tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css HTTP/1.1
Host: js.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:19 GMT
content-type: text/css;charset=UTF-8
8tagproxuri: /tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css
x-frame-options: ALLOWALL
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=72000
597tagproxuri: /tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css
623httpcode: 200
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: jjs./tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css-A-js.4jpg.top-js.4jpg.top-cacpdo2---no
x-proxy-cache-g-la: MISS
xkey-g-la: js.4jpg.top/tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css--js.4jpg.top--my_zone
cf-cache-status: HIT
age: 40673
last-modified: Mon, 24 Mar 2025 16:08:26 GMT
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SLOJvMRVibre9dBEFW4EkyavoYlgWeIq767bqGWF0xeRYoBcL%2F5i3SJjc3j8g%2FGtI2z0eLjAvDArFWXAbGcjifPI8FV7GhFiC9iVlcLeR%2B8Y%2FcLijRHgW1byRmKRIw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e592dc7568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6366&min_rtt=1254&rtt_var=5335&sent=103&recv=21&lost=0&retrans=0&sent_bytes=99866&recv_bytes=3340&delivery_rate=3486739&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=2389&x=1", cfExtPri, cfHdrFlush;dur=0
GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/novinha-dos-peitinhos-lindos//title/myhash/3
200 OK 0 B URL GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/novinha-dos-peitinhos-lindos//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://xvideosrei.com/porno/novinha-dos-peitinhos-lindos//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideosrei.com/porno/novinha-dos-peitinhos-lindos//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line963: notjp-nojp-myhost--filteron-/v/s://xvideosrei.com/porno/novinha-dos-peitinhos-lindos//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo3/7d/d9/482f54, lfm-1-292877, lmd-292877, lud-9451358, xfvlen-967488, fsize-191431, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideosrei.com/porno/novinha-dos-peitinhos-lindos//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HLBn7lUXLd2kfUFc8KWTpy2VioOi6vF%2BC0D2iGyCr1k4CGBd6RXpT7n3sQoRCmKV7zWUL6jK%2FaftvDGWTQ1RrvJByyYtCllW3xlKP795qUPOIqL0qGtnWfr3%2Bf%2Fzz1LgQ7M9zWM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc8f56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=850&min_rtt=381&rtt_var=734&sent=92&recv=85&lost=0&retrans=3&sent_bytes=32968&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9025&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideos.blog.br/sexo-com-pai-safado-que-deixa-ninfeta-novinha-de-filha-chupar-sua-rola//title/myhash/3
200 OK 292 B URL GET pdocac.tube-dl.top/v/s://xvideos.blog.br/sexo-com-pai-safado-que-deixa-ninfeta-novinha-de-filha-chupar-sua-rola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash c097a9d0b6bbb1a7cd3fcd8e51afc716
808f785916658ffa2f0fb44027089c3a9a4fc14a
d6e57881bc69251dc7039af006106395339266ca4f249dc90a147aad2eed03b3
GET /v/s://xvideos.blog.br/sexo-com-pai-safado-que-deixa-ninfeta-novinha-de-filha-chupar-sua-rola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideos.blog.br/sexo-com-pai-safado-que-deixa-ninfeta-novinha-de-filha-chupar-sua-rola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line1431: notjp-nojp-myhost--filteron-/v/s://xvideos.blog.br/sexo-com-pai-safado-que-deixa-ninfeta-novinha-de-filha-chupar-sua-rola//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/09/2a/445791, lfm-1-4048, lmd-4048, lud-1692424, xfvlen-591324, fsize-132784, played-42
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideos.blog.br/sexo-com-pai-safado-que-deixa-ninfeta-novinha-de-filha-chupar-sua-rola//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: HIT
age: 1046102
last-modified: Thu, 13 Mar 2025 00:51:27 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I9cNwGekqpwUosrNx6bsnc9ZDQ2oGP2d8VWRF%2FIHo48nwYM7SlU%2BzewZNAWk%2FQdfg8etT0HmsoMsFvilEXgxbfTUT4B36D2wxTd4J2bQ%2F1bhhlkccnYJ%2BUuSm7to1chZYd5L1hM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bac6256b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2269&min_rtt=437&rtt_var=1413&sent=22&recv=28&lost=0&retrans=1&sent_bytes=6807&recv_bytes=2849&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8649&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://twitter.com/amadorasr2/status/1093173479703232513/title/myhash/3
200 OK 0 B URL GET pdocac.tube-dl.top/v/s://twitter.com/amadorasr2/status/1093173479703232513/title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://twitter.com/amadorasr2/status/1093173479703232513/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://twitter.com/amadorasr2/status/1093173479703232513/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1432: notjp-es-pt-myhost--filteron-/v/s://twitter.com/amadorasr2/status/1093173479703232513/title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo3/eb/ad/0b9653, lfm-1-71849, lmd-71849, lud-3246384, xfvlen-951679, fsize-494574, played-8
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://twitter.com/amadorasr2/status/1093173479703232513/title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ADCpUy4DcGAtmcSkoPSTf3dgM3MsisWILgxf2IxEeyWk%2B1ZoZs4qrPhkcptrCypd2vvTXz89u2ZNVW6uY2hDTISw8VguuATj%2BOMyr6dbTuoVfOO%2F5NVpH8DB4TCteMM6CPOX4gI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bac5856b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1750&min_rtt=417&rtt_var=2148&sent=83&recv=75&lost=0&retrans=3&sent_bytes=29814&recv_bytes=6602&delivery_rate=6135593&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9013&x=0"
X-Firefox-Spdy: h2
GET filmesporno.xxx/wp-content/uploads/2022/04/novinhas-fazendo-sexo-na-escola.jpg
200 OK 18 kB URL GET filmesporno.xxx/wp-content/uploads/2022/04/novinhas-fazendo-sexo-na-escola.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectfilmesporno.xxx
Fingerprint21:88:4A:28:A1:02:E4:46:60:9E:3F:3B:D1:0F:D7:AA:19:BB:7C:CB
ValiditySat, 01 Feb 2025 09:05:19 GMT - Fri, 02 May 2025 10:02:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 600x337, components 3
Hash 77b4a559679414ae2c266150f3334dc6
08ad69e8e7bd728f644aebc71320c7bad80aad6e
90e090989079f4b09fd71887396b46ab143e084559756e9973d054f27015fe64
GET /wp-content/uploads/2022/04/novinhas-fazendo-sexo-na-escola.jpg HTTP/1.1
Host: filmesporno.xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 18192
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oMs5dDsJ%2FpYFRtwnR4ZK29j%2BcgpeHp33Y%2F14ZmqEklATdseRzCl4vydQ%2BZ40rDS1pmijGwdxrKRWKoc4bTv1ihNqflof78mlzJgbk4cmFHCiFPskQE4r6H%2B9esc1R81xx0w%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 17 Apr 2022 15:56:27 GMT
etag: "625c38ab-4710"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 925b4ea458990afa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET cdn.bancychialk.com/24011/4cfd4d3c-1554-11ec-ba28-5f54dd64648d.png
200 OK 246 kB URL GET cdn.bancychialk.com/24011/4cfd4d3c-1554-11ec-ba28-5f54dd64648d.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.bancychialk.com
FingerprintFA:DA:33:40:79:54:B2:FD:B8:D7:FD:AD:E7:20:D9:56:9E:3D:DC:40
ValidityWed, 19 Feb 2025 08:49:49 GMT - Tue, 20 May 2025 08:49:48 GMT
File type PNG image data, 492 x 328, 8-bit/color RGB, non-interlaced
Size 246 kB (245736 bytes)
Hash 20387d00fd7d940f7a5989e67c7fe9e9
cce542f44fe853669650ddfeec0bf373794d516f
287eb34064be5e12f990f973502d415e2f113833ae55dc64213cc9a5f033c3ef
GET /24011/4cfd4d3c-1554-11ec-ba28-5f54dd64648d.png HTTP/1.1
Host: cdn.bancychialk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 245736
traceparent: 00-98607298b73f46661ca256cac7a84bba-dc0be9ea8f1c7b8c-01
x-id-fe: osix-hw-edge-gc4
last-modified: Tue, 14 Sep 2021 12:07:15 GMT
etag: "61409073-3bfe8"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149649
cache: HIT
x-cached-since: 2025-03-23T09:52:20+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET css.4jpg.top/jw6.1/jwplayer.js
200 OK 77 kB URL GET css.4jpg.top/jw6.1/jwplayer.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
File type JavaScript source, ASCII text, with very long lines (4039)
Hash 6358736fcd0426bb7ab26c2fe9dd17eb
43a6b88a415525a952448eb295659d1e32313d4c
018cb2c6383dcb6f723422e23909c4a5d238ffc5d5c084622a89579173f8967a
GET /jw6.1/jwplayer.js HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:19 GMT
content-type: application/javascript
etag: W/"12d8b-54eda8e40c600"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
age: 311913
cf-cache-status: HIT
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2FR%2B%2F5aAirvQ2qbMK3W7%2FraJk866879f34cmcpX6hCmiY3LoQ1fVoDWSbGq3pZj42ou8RyRvA%2FA3cFPThQ0u9qt6qf3AjFUzOEagFUIfYNqhGplUXnGlNdZy5j9vTm8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e591dbd568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7510&min_rtt=3029&rtt_var=5787&sent=59&recv=18&lost=0&retrans=0&sent_bytes=52295&recv_bytes=2934&delivery_rate=115321&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=2367&x=1", cfExtPri, cfHdrFlush;dur=0
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 321d5b04b8f15785dd007bc24c387e6f
27e1e99f57ad5bbf929f2b77680652e6fe970651
0e91ee5845e279ec1cba131af3615fa6a191b34c46731bc8184fab9d4e828806
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19508
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET www.w3schools.com/w3css/4/w3.css
200 OK 23 kB URL GET www.w3schools.com/w3css/4/w3.css
IP
ASN #20940 Akamai International B.V.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectcertification.w3schools.com
FingerprintA1:82:1A:58:B8:A7:60:34:68:8F:02:87:1A:9E:D1:D8:26:79:F6:E0
ValidityThu, 13 Mar 2025 11:17:26 GMT - Wed, 11 Jun 2025 11:17:25 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w3css/4/w3.css HTTP/1.1
Host: www.w3schools.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 21 Mar 2025 08:39:50 GMT
accept-ranges: bytes
etag: "0cfccf3c9adb1:0"
content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;
x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;
vary: Accept-Encoding
content-encoding: gzip
content-length: 5256
cache-control: public, max-age=31210672
expires: Sat, 21 Mar 2026 09:04:18 GMT
date: Tue, 25 Mar 2025 03:26:26 GMT
X-Firefox-Spdy: h2
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 8995aa1cff82ab17cdf5d997a51519f8
1641428dfa547840b23d9e89126792c91e6f7a96
aecc179347fc12180f8c17577ef53af268d1344d6ef8f6ff228ebb3fee0c23fe
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19499
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OK%2B50S5Fw9HtKZu69y%2FR%2B8aV%2Fovf1hAX0kN9Ql760%2Bc%2FST8uDC%2BNpU8nrmktEwFA2TGgAeNl1fKFNdHlaC9vhOLOrFpToADZy1rS%2FPqIIuomrSz5S6kJVsxSqtyK2FhPy200Pw%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81391
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e6098cf0b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET 29047886-22554-ex.metateress.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.1 kB URL GET 29047886-22554-ex.metateress.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.metateress.com
Fingerprint18:F8:1A:15:02:2F:17:58:8B:AA:F4:F1:0C:3D:A2:BB:CA:38:F5:CF
ValidityThu, 30 Jan 2025 14:19:13 GMT - Wed, 30 Apr 2025 14:19:12 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4170), with no line terminators
Hash ba05b7dffb1b4238f705ccea690d86e0
c2253d006f3e2d661efb1ecf89ca86f86a6c1e25
cc386db8ff861f3906e60e49c7fb9c66b71d121278facc23c3cf981e12dd6bc9
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A26%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.metateress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:28 UTC
expires: Tue, 25 Mar 2025 03:26:28 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET ae33d7ee85.029519cbdc.com/be2f9d0464c60036a91b4b2e8846869a.js
200 OK 122 kB URL GET ae33d7ee85.029519cbdc.com/be2f9d0464c60036a91b4b2e8846869a.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://av.4freedom.click/v/s:/xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectae33d7ee85.029519cbdc.com
Fingerprint56:04:E3:87:39:4F:BE:06:20:C3:22:AA:00:46:D9:EC:47:8C:F2:23
ValiditySat, 22 Mar 2025 02:33:42 GMT - Fri, 20 Jun 2025 02:33:41 GMT
Size 122 kB (122382 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /be2f9d0464c60036a91b4b2e8846869a.js HTTP/1.1
Host: ae33d7ee85.029519cbdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:17 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 05 Mar 2025 13:08:07 GMT
etag: W/"67c84cb7-1de0e"
content-encoding: gzip
expires: Tue, 25 Mar 2025 03:31:17 GMT
cache-control: max-age=300
x-cdn-host-id: ds8138
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 05c92a7f7c3c855a44cf61152f920933
39595e868e1ce6613d12f9bea91337fc07d1d116
6ebc7d51e5e2bd27ee2d25a9ae6bcd8f8461b6031aa2152d237c0b93e7393107
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:25 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19508
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET 29047886-22554-ex.aceadynict.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A25%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.1 kB URL GET 29047886-22554-ex.aceadynict.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A25%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4170), with no line terminators
Hash bcd0738461f300a1036c6939b396aea9
7e04971afe724fb360df6b49b071ec24dae5fd65
7d730a34ef6ce5c09bfe5e745ac9af95b0dcdabeb1f4ba578002ac61bd59c244
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A25%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:28 UTC
expires: Tue, 25 Mar 2025 03:26:28 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET css.4jpg.top/ckplayer/ckplayer.js
200 OK 50 kB URL GET css.4jpg.top/ckplayer/ckplayer.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ckplayer/ckplayer.js HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:19 GMT
content-type: application/javascript
etag: W/"c192-545fa14e13f80"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 150096
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xfTNvDwa%2FKYXHxhSW1dGWcZylSqSw7uuJSj4kXsbikZHzxSgWL2KBHwsLZqGDux1TobMJ6hR%2Bci8XISAvyoXaZOozRLXZ0egCSvs%2FwaQlWpWd4%2BknEHTOWFtKhLLGxI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e591dbf568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7510&min_rtt=3029&rtt_var=5787&sent=88&recv=18&lost=0&retrans=0&sent_bytes=83773&recv_bytes=2934&delivery_rate=115321&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=2373&x=1", cfExtPri, cfHdrFlush;dur=0
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:23 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i9Rx%2BQdmN4Gnmfj%2FXjqwhhZaWvu5mubp9mvri3gEmfKIcuA9D%2BOtu%2BLgylZVHx4r%2BPcPxV7GAMTaNyy%2F9eGbMpujPqgGYplQhmdwdN6%2BftQ6QxByHnpSGChNxQP5BMC7130skw%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81394
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e7719110b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
HEAD ads.google.com/
429 Too Many Requests 0 B IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subjectadwords.google.com
FingerprintD1:21:31:99:C9:E1:76:ED:96:CA:45:EC:64:A7:75:DC:7A:55:2C:6F
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: ads.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
content-length: 1103
content-type: text/html; charset=UTF-8
date: Tue, 25 Mar 2025 03:26:27 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.porno16.com/video/3-novinhas-na-escola-fudendo-com-goza//title/myhash/3
200 OK 230 B URL GET pdocac.tube-dl.top/v/s://www.porno16.com/video/3-novinhas-na-escola-fudendo-com-goza//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash ffd70abb4506035883851412c8220680
110d331985efe595894801d6ffae3b3304710c18
f0926d626cff165e185f0e6b405132a10c81af12f428dbc0e2ed5e018358b7e7
GET /v/s://www.porno16.com/video/3-novinhas-na-escola-fudendo-com-goza//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.porno16.com/video/3-novinhas-na-escola-fudendo-com-goza//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-es-pt-myhost--filteron-
line1432: notjp-es-pt-myhost--filteron-/v/s://www.porno16.com/video/3-novinhas-na-escola-fudendo-com-goza//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo4/09/05/c1b364, lfm-1-12562, lmd-12562, lud-1154406, xfvlen-656294, fsize-134995, played-1
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.porno16.com/video/3-novinhas-na-escola-fudendo-com-goza//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v0y78%2BLzzDotW8Y4CG%2BuxrVmn0l6KKu%2BLfgNQgMCk781D1inWnk9Xbe9TfcFoYvCA7DDwV3%2FomvOGNI%2FLLzuFpfoQCqG%2F%2BiDJ5%2BRhDaG%2Fk%2BsuZNSX5HNRbMulu6DcDsWUgO6Jcw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc8356b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2159&min_rtt=381&rtt_var=2701&sent=108&recv=87&lost=0&retrans=3&sent_bytes=41430&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9047&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.flagras.blog.br/favelada-novinha-caiu-na-net-bolinando-sua-bucetinha-raspadinha-no-video-porno-amador//title/myhash/3
200 OK 71 B URL GET pdocac.tube-dl.top/v/s://www.flagras.blog.br/favelada-novinha-caiu-na-net-bolinando-sua-bucetinha-raspadinha-no-video-porno-amador//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 87dde40ab84dde99f9d54d8bc8d0eabd
60822f8016322f19780380abd487374ca1d01d75
5114d8b1cb8d0a3b2e011fef02d30b713380de0e3a4a67e791d6316606ed762d
GET /v/s://www.flagras.blog.br/favelada-novinha-caiu-na-net-bolinando-sua-bucetinha-raspadinha-no-video-porno-amador//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.flagras.blog.br/favelada-novinha-caiu-na-net-bolinando-sua-bucetinha-raspadinha-no-video-porno-amador//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-es-pt-myhost--filteron-
line1432: notjp-es-pt-myhost--filteron-/v/s://www.flagras.blog.br/favelada-novinha-caiu-na-net-bolinando-sua-bucetinha-raspadinha-no-video-porno-amador//title/myhash/3
pdo118: feedvid-, cachefileb-cacpdo2/99/d1/d940110, lfm-1-1270, lmd-1270, lud-84873, xfvlen-424050, fsize-97783, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.flagras.blog.br/favelada-novinha-caiu-na-net-bolinando-sua-bucetinha-raspadinha-no-video-porno-amador//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: HIT
age: 712733
last-modified: Sun, 16 Mar 2025 21:27:36 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fFDURtw0kbgrEJAXCbrnrL1kr6YYTVDGP7U9VFfJumzdxkudTLUaFX5wAOuZWt%2FIHXAP2V63rILGZ3cHP4rnsaAraxrXFkomZabH5O783hArCdjo71uJiv0l%2FlIzj3xpWoeHS0U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9c5cb456b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=3290&min_rtt=437&rtt_var=3449&sent=64&recv=61&lost=0&retrans=2&sent_bytes=20070&recv_bytes=6126&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8759&x=0"
X-Firefox-Spdy: h2
GET videodesexo.blog/wp-content/uploads/2019/03/novinha-transando.jpg
200 OK 14 kB URL GET videodesexo.blog/wp-content/uploads/2019/03/novinha-transando.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectvideodesexo.blog
Fingerprint9A:96:2F:89:52:3E:B4:6D:5E:04:97:23:EC:D3:9B:18:C7:8C:ED:8A
ValidityTue, 04 Feb 2025 07:19:37 GMT - Mon, 05 May 2025 08:17:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 352x198, components 3
Hash ecd35e952d8992653907228b5a1f3381
b81cb358c053a3579bc2f9abe7a753c2d4fe4022
eaaf66d772b35d378a8e5efc9f63bbba531257703e0b9c5f548167d674e041f3
GET /wp-content/uploads/2019/03/novinha-transando.jpg HTTP/1.1
Host: videodesexo.blog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 14086
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=objs7g6xY12trBg5vCiTGeT7TqmP6u874zKC6WFGN3P8lu8OgyUNE7jcv%2FvoY1BdUVHwGNp8iWj%2B0cQIPKw8afPqPA%2FrJw2H1j9JGpW1BfnhT%2BcmqYWhjqLGVDQWPkDh05He"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 10 Nov 2020 14:19:50 GMT
etag: "5faaa186-3706"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Tue, 24 Mar 2026 20:58:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
accept-ranges: bytes
cf-ray: 925b4ea458465695-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
200 OK 4.6 kB URL GET cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectsc.gl
Fingerprint67:A4:7F:E0:42:30:CD:09:BF:D1:B3:6C:32:AC:32:FD:24:F3:0F:F4
ValidityFri, 14 Feb 2025 15:57:25 GMT - Thu, 15 May 2025 16:53:40 GMT
File type JavaScript source, ASCII text, with very long lines (4659), with no line terminators
Hash 16f6b2d7d05eb79ddd9417c9f1785c78
48b19fa48c68d03d10c2cd65004a96ebcfd348fa
b41db332c310ffe73221c423fff030c53e40e4a6cd827e78ec8e3330a86b2648
GET /videojs-hotkeys/latest/videojs.hotkeys.min.js HTTP/1.1
Host: cdn.sc.gl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET css.4jpg.top/index.php?js=very
200 OK 0 B URL GET css.4jpg.top/index.php?js=very
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:25 GMT
content-type: text/html; charset=UTF-8
imghost: 104194820-h-css4jpgtopmh--NO-rm104238220248/index.php?js=very
56nloadrate: 1.214375
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: EXPIRED
xkey-192la: jcss./index.php?js=very-A-css.4jpg.top--myzone---no
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XHXQOfU0G%2BnnXyDQ19XFt23Avg6Rit3%2FZTgkiChqA8TX9QSw9mqY0Ggas9u5u1ltDbHPcgLLHkyz9jsOEBodyZfdLQa1v%2FUkM%2B%2F%2BeHikIyV60fXIe3eaJ1vEYvIYM5I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e7c3d7a568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=44921&min_rtt=1254&rtt_var=56815&sent=293&recv=61&lost=0&retrans=2&sent_bytes=289273&recv_bytes=10159&delivery_rate=535352&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=8347&x=1", cfExtPri, cfHdrFlush;dur=0
GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&page-ref=https%3A%2F%2Fav.4freedom.click%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A613839250%3Az%3A0%3Ai%3A20250325032624%3Aet%3A1742873184%3Ac%3A1%3Arn%3A759989438%3Arqn%3A1%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C467%2C4%2C1159%2C1159%2C1%2C511%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873180039%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873185%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
200 OK 551 B URL GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&page-ref=https%3A%2F%2Fav.4freedom.click%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A613839250%3Az%3A0%3Ai%3A20250325032624%3Aet%3A1742873184%3Ac%3A1%3Arn%3A759989438%3Arqn%3A1%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C467%2C4%2C1159%2C1159%2C1%2C511%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873180039%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873185%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1)
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint4E:A6:D4:57:F5:B7:FB:C1:98:C0:40:D2:B8:FA:B4:10:43:09:41:94
ValiditySun, 09 Mar 2025 21:02:24 GMT - Sun, 31 Aug 2025 20:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (609), with no line terminators
Hash 5a9e2a5867ce80a3e8358805558ac3fc
d7c06d3d3b956e3567a4aac1123a696ecdc56c3c
88e0a38d39bfe4ff99d75e1679e4aa9a77ccddd1a44dab5ffc01ca47d03c6312
GET /watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&page-ref=https%3A%2F%2Fav.4freedom.click%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1175442063958%3Ahid%3A613839250%3Az%3A0%3Ai%3A20250325032624%3Aet%3A1742873184%3Ac%3A1%3Arn%3A759989438%3Arqn%3A1%3Au%3A1742873181753879689%3Aw%3A300x240%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C467%2C4%2C1159%2C1159%2C1%2C511%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873180039%3Afip%3A205aad48df20eb507a6002200bbc07b8-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873185%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009088)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1796366081742873181; i=AG2CG3h7JX5D6uHkdu1fjbkaQFhf9AzeJaWXfXbd4fp05BYJ8B7Q9matfl4LqbJvP1MnCnsi8jHnkCQCa8X42KYmMEg=; yandexuid=1842795031742873181; yuidss=1842795031742873181; ymex=1774409181.yrts.1742873181#1774409181.yrtsi.1742873181; bh=YN3EiL8GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 551
x-content-type-options: nosniff
expires: Tue, 25-Mar-2025 03:26:25 GMT
content-type: application/json; charset=utf-8
pragma: no-cache
access-control-allow-origin: https://fixedjs.jtube.top
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
x-xss-protection: 1; mode=block
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
access-control-allow-credentials: true
last-modified: Tue, 25-Mar-2025 03:26:25 GMT
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/pegando-novinha-na-escola//title/myhash/3
200 OK 240 B URL GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/pegando-novinha-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash c6a6242c194e71491a13d6eff10544b8
b6581100e2121e592c2c11e7fdfd6b7bd6c07a91
4c98c64ca92652404e2bbdf92de5303c761d7b7a6838a6f65473cf435ae1fa48
GET /v/s://xvideosrei.com/porno/pegando-novinha-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideosrei.com/porno/pegando-novinha-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1431: notjp-es-pt-myhost--filteron-/v/s://xvideosrei.com/porno/pegando-novinha-na-escola//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/72/e9/dda951, lfm-1-2336, lmd-2336, lud-31406, xfvlen-169960, fsize-21110, played-3
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideosrei.com/porno/pegando-novinha-na-escola//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
age: 848999
cf-cache-status: HIT
last-modified: Sat, 15 Mar 2025 07:36:29 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y7XSHmixFduvaLiVszXPKP904ktnx7%2BleYiNsXq903SU9FHyiCyzgqpLswHmcG8bwpLkdlN%2BQ2VvgfOBIOO4nauyZeEDoqZou2h0YuBmzd9I%2Bin4HfOhQoN8zK6Mcj%2FI7JTnWDE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9b9c4b56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2106&min_rtt=437&rtt_var=1387&sent=28&recv=30&lost=0&retrans=1&sent_bytes=9184&recv_bytes=3126&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8652&x=0"
X-Firefox-Spdy: h2
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Al3k%2FMVuGRab6zPg6p%2B8dRtfRgR6xKAqj%2F9DVJvCMnNa0S5qUgrHHY1jE0b8nA67Ecvl1fT75XFpW0TE%2FuzCRH9O7bYPrKRXxNjFvEUdcWI7SQ0YSkXIJqGXk%2B5zS%2BYF3JTXaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81391
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e60a8d00b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET 29047886-22554-3424.knamedurinds.com/v2/a/na/image?d=BQ5qQHPeF5Q-rjm5kQwQ5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2PcYBXV-eaAJ8Jd19WE9UJTcXky3IVNF52l5AZPVJKQdrJQUFb0K0B-RhCCgeiXX9bCS-5YwOivotg9GOBzYTUSoMEgP6qyz_RM-Ikoi3qUwcyn8FJPXbqdotAlzJ62Xj3-bkp2rsDFAiWl1jvzIRibbQ_YBojZ2QTTSIeTeTerANIW0tCt-ZDw2bCFQNNjuLPqvoqc1PNIopeafierb-Ul5IfCyQ5cwTKuVzjPRCgrx603BRS4JUlaE_5x4c_kx-p5IOkVzbvK7i6scXgvRWRpoHP8HhwFwQTnGPKkJ_I0aOQjz42pZaecDjzM26--nOXpoF6tpdllk-Do_xbGqWDJBRVmIGwD9YTkZThZJ_boqro2Dd0BM7rSrm-hcyeYWfOA8NVwoEVpMkH5n0NQw-h18t6pNf4mTr3jB61r1GF0WhQNLEzbJZFukur3zsIJGE-7jggv91A1QQw97ivgmuTrWz6tGE8kgGaAbPJtjvaePZ27B9i-xo5XOn6novP3xHWtwEQXjBUXiGMQGeiwdjCnEEwNyHXqABD8-TEkPrOEf7dCtL7wsG4VyDzhzyRE62bjMU7VzgD2W7ZVXUf_3eRuYgE10XGH1VeDUi_eyDkvlx0gklMRALu1dDvB9wjq1Un-hIZk9ujhaOZYoIl-luvPv0TmFedNzX_yFH_7773gZ8dgYPZCY5Mkf5B42ldR-gKsOM-a3DUK6X4a5hvMlo8-74h7Xyi86nWit4vmlHBXIp2I52wII9fWLa-80ry_E7QKTVM9HsCvlATyLyRRSkYhwK8vu8
200 OK 68 B URL GET 29047886-22554-3424.knamedurinds.com/v2/a/na/image?d=BQ5qQHPeF5Q-rjm5kQwQ5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2PcYBXV-eaAJ8Jd19WE9UJTcXky3IVNF52l5AZPVJKQdrJQUFb0K0B-RhCCgeiXX9bCS-5YwOivotg9GOBzYTUSoMEgP6qyz_RM-Ikoi3qUwcyn8FJPXbqdotAlzJ62Xj3-bkp2rsDFAiWl1jvzIRibbQ_YBojZ2QTTSIeTeTerANIW0tCt-ZDw2bCFQNNjuLPqvoqc1PNIopeafierb-Ul5IfCyQ5cwTKuVzjPRCgrx603BRS4JUlaE_5x4c_kx-p5IOkVzbvK7i6scXgvRWRpoHP8HhwFwQTnGPKkJ_I0aOQjz42pZaecDjzM26--nOXpoF6tpdllk-Do_xbGqWDJBRVmIGwD9YTkZThZJ_boqro2Dd0BM7rSrm-hcyeYWfOA8NVwoEVpMkH5n0NQw-h18t6pNf4mTr3jB61r1GF0WhQNLEzbJZFukur3zsIJGE-7jggv91A1QQw97ivgmuTrWz6tGE8kgGaAbPJtjvaePZ27B9i-xo5XOn6novP3xHWtwEQXjBUXiGMQGeiwdjCnEEwNyHXqABD8-TEkPrOEf7dCtL7wsG4VyDzhzyRE62bjMU7VzgD2W7ZVXUf_3eRuYgE10XGH1VeDUi_eyDkvlx0gklMRALu1dDvB9wjq1Un-hIZk9ujhaOZYoIl-luvPv0TmFedNzX_yFH_7773gZ8dgYPZCY5Mkf5B42ldR-gKsOM-a3DUK6X4a5hvMlo8-74h7Xyi86nWit4vmlHBXIp2I52wII9fWLa-80ry_E7QKTVM9HsCvlATyLyRRSkYhwK8vu8
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.knamedurinds.com
FingerprintD9:FF:A1:8E:CD:E9:82:C9:D0:4A:B1:4F:E3:8D:3A:8E:5B:F6:05:A5
ValidityFri, 28 Feb 2025 14:26:12 GMT - Thu, 29 May 2025 14:26:11 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPeF5Q-rjm5kQwQ5dcqEhD6UY6e3kvWWEV4ZU1IEP_BnyFttc4MLNVXCW0uKoL1lbB_E0B2dOdpBBvDYCXGx-7knUl0KSlTN7F5MV3hN017sw6KN4iTcLVQXtCaucjmbj1hLuyn9pyz9KgVnPmjZkwYf3A8zzp0fAoDMLzXFkcmTMpFw2UBDEjsqAWQz_6e2RRr2tHZ53dAKlExEPR5eSVUBwNxrX1LrRyoFXGS3ltOmNV1DmyVEQX285Zi2AgAtsIDaipVkeUa6QB41qGlQa6XbqT_2yfY6WzE_1Vuau1t55ugi5C3_skR9eYE50hT81K6yX_bTIT0myJPxEQMDSDr08REYiJLTFPX-M8krExS9e_sVtBOTf8zFKr3YgtUq5-GUtz7yec9DAW3vReFy78hAjVrOUH2PcYBXV-eaAJ8Jd19WE9UJTcXky3IVNF52l5AZPVJKQdrJQUFb0K0B-RhCCgeiXX9bCS-5YwOivotg9GOBzYTUSoMEgP6qyz_RM-Ikoi3qUwcyn8FJPXbqdotAlzJ62Xj3-bkp2rsDFAiWl1jvzIRibbQ_YBojZ2QTTSIeTeTerANIW0tCt-ZDw2bCFQNNjuLPqvoqc1PNIopeafierb-Ul5IfCyQ5cwTKuVzjPRCgrx603BRS4JUlaE_5x4c_kx-p5IOkVzbvK7i6scXgvRWRpoHP8HhwFwQTnGPKkJ_I0aOQjz42pZaecDjzM26--nOXpoF6tpdllk-Do_xbGqWDJBRVmIGwD9YTkZThZJ_boqro2Dd0BM7rSrm-hcyeYWfOA8NVwoEVpMkH5n0NQw-h18t6pNf4mTr3jB61r1GF0WhQNLEzbJZFukur3zsIJGE-7jggv91A1QQw97ivgmuTrWz6tGE8kgGaAbPJtjvaePZ27B9i-xo5XOn6novP3xHWtwEQXjBUXiGMQGeiwdjCnEEwNyHXqABD8-TEkPrOEf7dCtL7wsG4VyDzhzyRE62bjMU7VzgD2W7ZVXUf_3eRuYgE10XGH1VeDUi_eyDkvlx0gklMRALu1dDvB9wjq1Un-hIZk9ujhaOZYoIl-luvPv0TmFedNzX_yFH_7773gZ8dgYPZCY5Mkf5B42ldR-gKsOM-a3DUK6X4a5hvMlo8-74h7Xyi86nWit4vmlHBXIp2I52wII9fWLa-80ry_E7QKTVM9HsCvlATyLyRRSkYhwK8vu8 HTTP/1.1
Host: 29047886-22554-3424.knamedurinds.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
HEAD ads.google.com/
429 Too Many Requests 0 B IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subjectadwords.google.com
FingerprintD1:21:31:99:C9:E1:76:ED:96:CA:45:EC:64:A7:75:DC:7A:55:2C:6F
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: ads.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
content-length: 1103
content-type: text/html; charset=UTF-8
date: Tue, 25 Mar 2025 03:26:27 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideos10.blog.br/porno-doido-irma-novinha-estuprada-pelo-irmao//title/myhash/3
200 OK 312 B URL GET pdocac.tube-dl.top/v/s://xvideos10.blog.br/porno-doido-irma-novinha-estuprada-pelo-irmao//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with very long lines (312), with no line terminators
Hash 42267c2d5a6bde863cbb8b3fe6ac9b0f
70df640bae3fd99c0e77f0c4ef1bd89fd261cebe
c415c812b52f63afe40c533d75b0800a5fc5b9278689fa386046dcff743fc06c
GET /v/s://xvideos10.blog.br/porno-doido-irma-novinha-estuprada-pelo-irmao//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideos10.blog.br/porno-doido-irma-novinha-estuprada-pelo-irmao//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1431: notjp-es-pt-myhost--filteron-/v/s://xvideos10.blog.br/porno-doido-irma-novinha-estuprada-pelo-irmao//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/2d/5e/270168, lfm-1-123639, lmd-123639, lud-28706447, xfvlen-721682, fsize-112495, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideos10.blog.br/porno-doido-irma-novinha-estuprada-pelo-irmao//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FyBjJzV%2B6uIu9CIC1ckbW96l2igLeY0hVZkdO4Au7t4tMMEMBEHbh8MdqIAnwl%2Fy2Yxsy32VS3mMDA5VzSsEtDtzyrb4jhKpLmCYZIjX1hXODMJrsZ96iwCHKlMCo1woThw9Th8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc8856b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1510&min_rtt=381&rtt_var=1872&sent=102&recv=86&lost=0&retrans=3&sent_bytes=38241&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9042&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/novinha-chupando-na-escola//title/myhash/3
200 OK 243 B URL GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/novinha-chupando-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 4c3b97920d1b5fdd605fa51977aabef3
0ea70003dad59216a5124a96b63a0d01d0953935
e8e62077945b8bc233005e85a3e0a4b7a9e7776283cbd95d51231850552b41c6
GET /v/s://xvideosrei.com/porno/novinha-chupando-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideosrei.com/porno/novinha-chupando-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1431: notjp-es-pt-myhost--filteron-/v/s://xvideosrei.com/porno/novinha-chupando-na-escola//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/3d/bf/a59152, lfm-1-2025, lmd-2025, lud-126181, xfvlen-192496, fsize-23398, played-11
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideosrei.com/porno/novinha-chupando-na-escola//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
age: 1239026
cf-cache-status: HIT
last-modified: Mon, 10 Mar 2025 19:16:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d9vLs%2Bij2EyLqTSrxWo%2BxZvPsG1nfh00RbtOODVRiXQ%2FKZDVGJDnKPbaD4EP16vQZXjd8P%2Byvs0BrqzfI43C8m%2FbsiSHNrFuXGHR3NOBG9lOg%2F4x2em4iIpiVI4M1wWWXwg9slk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bfca156b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=3318&min_rtt=437&rtt_var=2462&sent=57&recv=53&lost=0&retrans=1&sent_bytes=17800&recv_bytes=5489&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8701&x=0"
X-Firefox-Spdy: h2
GET mc.webvisor.org/watch/48140495/1?wmode=7&page-url=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&page-ref=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Af9t8efumbe4l8kadlsqxea7gs67%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1156218247728%3Ahid%3A11855179%3Az%3A0%3Ai%3A20250325032619%3Aet%3A1742873180%3Ac%3A1%3Arn%3A213153312%3Arqn%3A1%3Au%3A1742873180760117592%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1909%3Awv%3A2%3Ads%3A0%2C0%2C989%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873177098%3Afip%3A1394e1c173a4866d31f6f1da471bacd3-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873181%3At%3AOkulda%20yepyeni-Seks%2C%20Porno-Xhamster%20%5B11%20%3A01x360p%5D&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2821562884%29fip%281%29ti%281%29&redirnss=1
200 OK 540 B URL GET mc.webvisor.org/watch/48140495/1?wmode=7&page-url=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&page-ref=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Af9t8efumbe4l8kadlsqxea7gs67%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1156218247728%3Ahid%3A11855179%3Az%3A0%3Ai%3A20250325032619%3Aet%3A1742873180%3Ac%3A1%3Arn%3A213153312%3Arqn%3A1%3Au%3A1742873180760117592%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1909%3Awv%3A2%3Ads%3A0%2C0%2C989%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873177098%3Afip%3A1394e1c173a4866d31f6f1da471bacd3-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873181%3At%3AOkulda%20yepyeni-Seks%2C%20Porno-Xhamster%20%5B11%20%3A01x360p%5D&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2821562884%29fip%281%29ti%281%29&redirnss=1
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint4E:A6:D4:57:F5:B7:FB:C1:98:C0:40:D2:B8:FA:B4:10:43:09:41:94
ValiditySun, 09 Mar 2025 21:02:24 GMT - Sun, 31 Aug 2025 20:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (596), with no line terminators
Hash e4ce43746b3be4e0979e6a7c53be9693
5272227e92256c37070d876d91eec7bd429aa2e5
70eb07506b3f31b28caec968a95109a4dfb6b23680dc8ac55b19a7baa45abb08
GET /watch/48140495/1?wmode=7&page-url=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2F%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&page-ref=https%3A%2F%2Fav.4freedom.click%2Fv%2Fs%3A%2Fxvideosrei.com%2Fporno%2Fflagra-novinha-na-escola%2Ftitle%2FOkulda%2520yepyeni-Seks%2C%2520Porno-Xhamster%2520%5B11%2520%3A01x360p%5D%2520%2520%2520%2520%5B11%3A01x360p%5D&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Af9t8efumbe4l8kadlsqxea7gs67%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1156218247728%3Ahid%3A11855179%3Az%3A0%3Ai%3A20250325032619%3Aet%3A1742873180%3Ac%3A1%3Arn%3A213153312%3Arqn%3A1%3Au%3A1742873180760117592%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1909%3Awv%3A2%3Ads%3A0%2C0%2C989%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1742873177098%3Afip%3A1394e1c173a4866d31f6f1da471bacd3-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1742873181%3At%3AOkulda%20yepyeni-Seks%2C%20Porno-Xhamster%20%5B11%20%3A01x360p%5D&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2821562884%29fip%281%29ti%281%29&redirnss=1 HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1796366081742873181; i=AG2CG3h7JX5D6uHkdu1fjbkaQFhf9AzeJaWXfXbd4fp05BYJ8B7Q9matfl4LqbJvP1MnCnsi8jHnkCQCa8X42KYmMEg=; yandexuid=1842795031742873181; yuidss=1842795031742873181; ymex=1774409181.yrts.1742873181#1774409181.yrtsi.1742873181; bh=YN3EiL8GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 540
expires: Tue, 25-Mar-2025 03:26:22 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
access-control-allow-origin: https://av.4freedom.click
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-xss-protection: 1; mode=block
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
last-modified: Tue, 25-Mar-2025 03:26:22 GMT
X-Firefox-Spdy: h2
GET 29047886-22554-3424.metateress.com/v2/a/na/image?d=BQ5qQHPe-5WGrjlZEQ0Q5dcqEhD6UY6e3kvWWENwb9hMFAM43AMNjar1bft9WVV04oH6KZptE6D2dOtRFRvDYCUIx-7sn0lkJS9TtcF5MV9mJ017swaIFwSIcLVMflyZucnmHiVhLpyh1oSRuR0OvEmPsm2-FTPUskihrVCykjDX4sVR4xNanhCXlQ-TfYguj1784XJZNyiucROmjUXTdamgHmNjQazy3WyzBXAW_nczb9U5m9HnkDzVzG4qeLYQbrdR31l5FUu6UtYqcpUDgFL_lzk5Y6L3o1cev68pni7atMeaYVg84OSH5vwLpIg4bNXerWThZVPHpHfe__OBQ-QeOopYuBfMqnRIXE7bachQ3R6yY2hgF5ETFgblkPBkLyqYsaeElqTw6uiR6Jq3AdvZ5AZkxXHMrB4k433Yy1Js_pYgBeBHMniXrVPiCfUxtx3MEQ-QAZjrDzyhUp9wcrs0IXKIiviCRCP2wIX0DCWJy9uF_yrOfR4wThrxC74t8flMV2QAIw-wKsDoqdaCcjrn1UOKgkyE3FZ3FCgrAeuCU88weyX2d12YDgPiuGuHszb4LzScftmPEgKji8aKC1BeqjpuSgfszpwOQ2Y-wj_G7kJ-Q6k3eYPI8wyIDcC04t10mPkYR-o11HfvBPqdzT239bMGZRVXvABMle69t2i8Ezsz5XHIl0vMRm-j1uLrqjDluhkvqwpeu71QKqrnlLhYaqftcesk6s1UuA3blkQcUn5YWURRONserZ8OhIyoVbwlIOYLTPrMc_YjncQBwqEnPTe2JltLrXp1sxsmX7EL8LzRQkx7D9NQxHYyl2xdPWZjm_DWTgTOCpZWiSriYJd2h5q5EzFRC7RziKd63unReORNXmKOpASDTaRytk6Is_xndsvBs7cFhP2TUiA5TmYgxPNICwQANMJo4-78Uki2MnCU64dVD4aBVseMHQz7cOzmpFhCu31WoFh-Vo9mBY-K64LQVjVYXWtVQPvdfiUdx6sbibQrwBQ6PEiPrBgTCr9St8c8ff4l5R50oL9MxaJczkPokv8UcHbkFrprv1c-ZvZNTkvDOw7LbbNhiR8dJ6c4-BftSOytIY0Z0Kh7nOzgW8C8QKcpYQEt0fEdxJPcEdOG6nifgsV_wEJvwju_RuIF0qL-hWXtYUV-Wo5IH1WbClwI2jE2jojNAaX20v3wA5ZCZg
200 OK 68 B URL GET 29047886-22554-3424.metateress.com/v2/a/na/image?d=BQ5qQHPe-5WGrjlZEQ0Q5dcqEhD6UY6e3kvWWENwb9hMFAM43AMNjar1bft9WVV04oH6KZptE6D2dOtRFRvDYCUIx-7sn0lkJS9TtcF5MV9mJ017swaIFwSIcLVMflyZucnmHiVhLpyh1oSRuR0OvEmPsm2-FTPUskihrVCykjDX4sVR4xNanhCXlQ-TfYguj1784XJZNyiucROmjUXTdamgHmNjQazy3WyzBXAW_nczb9U5m9HnkDzVzG4qeLYQbrdR31l5FUu6UtYqcpUDgFL_lzk5Y6L3o1cev68pni7atMeaYVg84OSH5vwLpIg4bNXerWThZVPHpHfe__OBQ-QeOopYuBfMqnRIXE7bachQ3R6yY2hgF5ETFgblkPBkLyqYsaeElqTw6uiR6Jq3AdvZ5AZkxXHMrB4k433Yy1Js_pYgBeBHMniXrVPiCfUxtx3MEQ-QAZjrDzyhUp9wcrs0IXKIiviCRCP2wIX0DCWJy9uF_yrOfR4wThrxC74t8flMV2QAIw-wKsDoqdaCcjrn1UOKgkyE3FZ3FCgrAeuCU88weyX2d12YDgPiuGuHszb4LzScftmPEgKji8aKC1BeqjpuSgfszpwOQ2Y-wj_G7kJ-Q6k3eYPI8wyIDcC04t10mPkYR-o11HfvBPqdzT239bMGZRVXvABMle69t2i8Ezsz5XHIl0vMRm-j1uLrqjDluhkvqwpeu71QKqrnlLhYaqftcesk6s1UuA3blkQcUn5YWURRONserZ8OhIyoVbwlIOYLTPrMc_YjncQBwqEnPTe2JltLrXp1sxsmX7EL8LzRQkx7D9NQxHYyl2xdPWZjm_DWTgTOCpZWiSriYJd2h5q5EzFRC7RziKd63unReORNXmKOpASDTaRytk6Is_xndsvBs7cFhP2TUiA5TmYgxPNICwQANMJo4-78Uki2MnCU64dVD4aBVseMHQz7cOzmpFhCu31WoFh-Vo9mBY-K64LQVjVYXWtVQPvdfiUdx6sbibQrwBQ6PEiPrBgTCr9St8c8ff4l5R50oL9MxaJczkPokv8UcHbkFrprv1c-ZvZNTkvDOw7LbbNhiR8dJ6c4-BftSOytIY0Z0Kh7nOzgW8C8QKcpYQEt0fEdxJPcEdOG6nifgsV_wEJvwju_RuIF0qL-hWXtYUV-Wo5IH1WbClwI2jE2jojNAaX20v3wA5ZCZg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.metateress.com
Fingerprint18:F8:1A:15:02:2F:17:58:8B:AA:F4:F1:0C:3D:A2:BB:CA:38:F5:CF
ValidityThu, 30 Jan 2025 14:19:13 GMT - Wed, 30 Apr 2025 14:19:12 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPe-5WGrjlZEQ0Q5dcqEhD6UY6e3kvWWENwb9hMFAM43AMNjar1bft9WVV04oH6KZptE6D2dOtRFRvDYCUIx-7sn0lkJS9TtcF5MV9mJ017swaIFwSIcLVMflyZucnmHiVhLpyh1oSRuR0OvEmPsm2-FTPUskihrVCykjDX4sVR4xNanhCXlQ-TfYguj1784XJZNyiucROmjUXTdamgHmNjQazy3WyzBXAW_nczb9U5m9HnkDzVzG4qeLYQbrdR31l5FUu6UtYqcpUDgFL_lzk5Y6L3o1cev68pni7atMeaYVg84OSH5vwLpIg4bNXerWThZVPHpHfe__OBQ-QeOopYuBfMqnRIXE7bachQ3R6yY2hgF5ETFgblkPBkLyqYsaeElqTw6uiR6Jq3AdvZ5AZkxXHMrB4k433Yy1Js_pYgBeBHMniXrVPiCfUxtx3MEQ-QAZjrDzyhUp9wcrs0IXKIiviCRCP2wIX0DCWJy9uF_yrOfR4wThrxC74t8flMV2QAIw-wKsDoqdaCcjrn1UOKgkyE3FZ3FCgrAeuCU88weyX2d12YDgPiuGuHszb4LzScftmPEgKji8aKC1BeqjpuSgfszpwOQ2Y-wj_G7kJ-Q6k3eYPI8wyIDcC04t10mPkYR-o11HfvBPqdzT239bMGZRVXvABMle69t2i8Ezsz5XHIl0vMRm-j1uLrqjDluhkvqwpeu71QKqrnlLhYaqftcesk6s1UuA3blkQcUn5YWURRONserZ8OhIyoVbwlIOYLTPrMc_YjncQBwqEnPTe2JltLrXp1sxsmX7EL8LzRQkx7D9NQxHYyl2xdPWZjm_DWTgTOCpZWiSriYJd2h5q5EzFRC7RziKd63unReORNXmKOpASDTaRytk6Is_xndsvBs7cFhP2TUiA5TmYgxPNICwQANMJo4-78Uki2MnCU64dVD4aBVseMHQz7cOzmpFhCu31WoFh-Vo9mBY-K64LQVjVYXWtVQPvdfiUdx6sbibQrwBQ6PEiPrBgTCr9St8c8ff4l5R50oL9MxaJczkPokv8UcHbkFrprv1c-ZvZNTkvDOw7LbbNhiR8dJ6c4-BftSOytIY0Z0Kh7nOzgW8C8QKcpYQEt0fEdxJPcEdOG6nifgsV_wEJvwju_RuIF0qL-hWXtYUV-Wo5IH1WbClwI2jE2jojNAaX20v3wA5ZCZg HTTP/1.1
Host: 29047886-22554-3424.metateress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET 29047886-22554-ex.unrertivermalous.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A25%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
200 OK 4.3 kB URL GET 29047886-22554-ex.unrertivermalous.com/v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A25%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.unrertivermalous.com
Fingerprint79:20:B3:AF:0C:13:23:74:B6:04:49:94:51:E9:C0:A9:F8:C7:B5:CD
ValiditySat, 01 Mar 2025 14:29:48 GMT - Fri, 30 May 2025 14:29:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4294), with no line terminators
Hash 777766e49cf19dec5ea0daeb47be86e7
a1fe9c69173810342b1e80f2c256c1eea843d2ee
06451ca6cc7c7df2550502474f7e7cb734321de5a5ba0798474849ea50ad5785
GET /v2/a/na/239377?subId=&pageUri=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%2621xa&referer=https%3A%2F%2Fav.4freedom.click%2F&av=1&abl=1&kws=&rtg=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22300%22%2C%22240%22%2C%22300%22%2C%2216%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Tue%20Mar%2025%202025%2003%3A26%3A25%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 29047886-22554-ex.unrertivermalous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://fixedjs.jtube.top
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Tue, 25 Mar 2025 03:26:28 UTC
expires: Tue, 25 Mar 2025 03:26:28 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ixZ1HuaxOsp3ui0%2Fzo1DscFJDrRRamBkkxNCnASl%2BKRSlNTmjeWgiugE6d6bUKPW%2B5txtU%2F2Y55J6iiXim8EvqKMV47Q2dW6f2aw2gwJhmGcBHzDq2nlGBTCSxPp00%2FFTnB9Sg%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81391
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e5f58c80b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET xvideosrei.com/wp-content/uploads/2021/07/novinha-mostrando-os-peitos-na-escola.jpg
200 OK 19 kB URL GET xvideosrei.com/wp-content/uploads/2021/07/novinha-mostrando-os-peitos-na-escola.jpg
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 600x337, components 3
Hash da9931cfa001fff2cb1dc46d3966e859
85178050a6b368c996e6e5ab68346a93d0065646
4ca97e99bf9d19e3a731129a627365e27ff2b2239ab146eeb9d7e4ccc867bf59
GET /wp-content/uploads/2021/07/novinha-mostrando-os-peitos-na-escola.jpg HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: image/jpeg
content-length: 19398
last-modified: Tue, 06 Jul 2021 13:28:00 GMT
etag: "60e45a60-4bc6"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://pt.extremesexchannels.tv/maxlistvid/xvideos-de-desenhos-porno-dos-simpsons-de-hemer-e-lisa-transano-search/title/myhash/3
200 OK 0 B URL GET pdocac.tube-dl.top/v/s://pt.extremesexchannels.tv/maxlistvid/xvideos-de-desenhos-porno-dos-simpsons-de-hemer-e-lisa-transano-search/title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://pt.extremesexchannels.tv/maxlistvid/xvideos-de-desenhos-porno-dos-simpsons-de-hemer-e-lisa-transano-search/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://pt.extremesexchannels.tv/maxlistvid/xvideos-de-desenhos-porno-dos-simpsons-de-hemer-e-lisa-transano-search/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line1432: notjp-nojp-myhost--filteron-/v/s://pt.extremesexchannels.tv/maxlistvid/xvideos-de-desenhos-porno-dos-simpsons-de-hemer-e-lisa-transano-search/title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/2d/02/8366110, lfm-1-70876, lmd-70876, lud-5712068, xfvlen-411610, fsize-99174, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://pt.extremesexchannels.tv/maxlistvid/xvideos-de-desenhos-porno-dos-simpsons-de-hemer-e-lisa-transano-search/title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SngIBOc6flTf5VT5KeIJGVGxuXJ%2B5y3eNy97JUxWQR0C7%2BvzUt7EEZIqh2OGixLxEnFOjLrt%2B98e2VhGN0wfBZnvfq18gOTRheq6eSXFP1bMV5gKWLn2ihmdMsXXC82AM%2BjVjAo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bbc6a56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=850&min_rtt=381&rtt_var=734&sent=94&recv=85&lost=0&retrans=3&sent_bytes=33999&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9028&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/novinha-chupando-pau-na-escola//title/myhash/3
200 OK 255 B URL GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/novinha-chupando-pau-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 090123a15f4052f0f6c7f0fa80170281
bd2d3f06a5aa1ff7170aac33e85cb5de258c1de9
b139acca9e6b8bfbba4f51c709b6cd80f1a2a274f38e6c98905fbbdee37a75dd
GET /v/s://xvideosrei.com/porno/novinha-chupando-pau-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideosrei.com/porno/novinha-chupando-pau-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line1431: notjp-nojp-myhost--filteron-/v/s://xvideosrei.com/porno/novinha-chupando-pau-na-escola//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo6/f6/d4/b3a156, lfm-1-2212, lmd-2212, lud-12459347, xfvlen-309690, fsize-148751, played-141
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideosrei.com/porno/novinha-chupando-pau-na-escola//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: HIT
age: 19896
last-modified: Mon, 24 Mar 2025 21:54:53 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lkGAjQj346CrcRqwmP0KlYPrYF%2B7Eg8dX7FL5q2u%2BkRM9ijyxOobTzH7mbNQK3p0M4Plj5pEPdUBoDDLUaXKzR8bM%2FVgnGGfptzZPma3kvT7LG9yOMe5nN13pd3b8WEpONyrMJ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9c5cb056b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4153&min_rtt=437&rtt_var=3517&sent=62&recv=59&lost=0&retrans=2&sent_bytes=19077&recv_bytes=6126&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8756&x=0"
X-Firefox-Spdy: h2
GET xvideosrei.com/wp-content/uploads/2021/07/flagra-novinha-na-escola.jpg
200 OK 16 kB URL GET xvideosrei.com/wp-content/uploads/2021/07/flagra-novinha-na-escola.jpg
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s:/xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 600x337, components 3
Hash b7fb5c783aea2cc8e9b4a9e6894577c1
d6229fcc0dd1e7b7f377fc356bf5d4288408c89d
93218cb3d7f3ee8f7bcb0879657559ce65d57e6db1bf9490c1c208fa52c56aa9
GET /wp-content/uploads/2021/07/flagra-novinha-na-escola.jpg HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:10 GMT
content-type: image/jpeg
content-length: 16519
last-modified: Wed, 07 Jul 2021 02:48:19 GMT
etag: "60e515f3-4087"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:10 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/videojs-contrib-hls/5.10.1/videojs-contrib-hls.js
200 OK 678 kB URL GET cdnjs.cloudflare.com/ajax/libs/videojs-contrib-hls/5.10.1/videojs-contrib-hls.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC
ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
Size 678 kB (678324 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ajax/libs/videojs-contrib-hls/5.10.1/videojs-contrib-hls.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 118643
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04020-a59b4"
last-modified: Mon, 04 May 2020 16:17:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 299741
expires: Sun, 15 Mar 2026 03:26:19 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v2uPs6doAzHWnb%2BwPr0zK1T%2BztihJ%2BXFQHd%2Fizd2rCmzxQUIaTebEsGmShGWG1vS2MWx%2Fl%2FWAFuAUiglknEZlk4EXC3Myd7B0BlIjBTVS4z0fQqhPxglwiB5YCICSTJXgj%2BxgQYB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 925b4e590b3eb50b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET www.xvideosincesto.com/wp-content/uploads/2017/01/novinha-escola-1.jpg
200 OK 13 kB URL GET www.xvideosincesto.com/wp-content/uploads/2017/01/novinha-escola-1.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectxvideosincesto.com
FingerprintA5:C7:BC:6A:D0:C6:A0:F1:F9:7A:F8:91:32:C8:FE:D8:DE:B4:79:81
ValiditySat, 22 Mar 2025 10:50:43 GMT - Fri, 20 Jun 2025 11:47:20 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", progressive, precision 8, 352x198, components 3
Hash 63814c48440d3bcc16cf79a109014ab7
23ca3f2aa8af8bda903e61c97fe5123059bec144
9410cf944fa2f4bb57565e0c393c24629107f13b748cda271183493abf8a5154
GET /wp-content/uploads/2017/01/novinha-escola-1.jpg HTTP/1.1
Host: www.xvideosincesto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 12569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r7B10uA4WYYQ7Ta%2Bl9gvCE4IdlgVW3QiqIVZcbJyzkcGkmWe9fRnY3vKa11v4SFkgVOCmil4coeUtfCIASrShBrnyAKuWWjJn%2Bqw12UW5IfXGLMGdIKC2%2F9CgGvcBQi34CyvME4oxDVf"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=31557600
expires: Thu, 19 Mar 2026 05:44:20 GMT
last-modified: Thu, 15 Sep 2022 05:21:28 GMT
etag: "3119-6322b658-4c402172cdcf8e9f;;;"
cf-cache-status: HIT
accept-ranges: bytes
cf-ray: 925b4ea49c0e56ba-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET xvideos10.blog.br/favicon.ico
404 Not Found 0 B URL GET xvideos10.blog.br/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectxvideos10.blog.br
Fingerprint67:54:67:C6:1D:AB:25:C6:13:86:8C:29:42:8B:1F:FD:D9:A5:75:B9
ValiditySat, 08 Feb 2025 00:36:37 GMT - Fri, 09 May 2025 01:35:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: xvideos10.blog.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000;
cache-control: max-age=300
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2b3um5R7BRd8dg7sUK1hbNq3OLfIE5PufMx7tv1KB%2FOZzAmlJi70F%2BBNYxAwJBhjszAbFP18BbZ7Q8tUBFFqsjl2XQP29Qh%2F2yNKD57RcB2swXGK4zVOqzI3HDC4qTYn8vJClQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e8b2875b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2765&min_rtt=387&rtt_var=4327&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3217&recv_bytes=1065&delivery_rate=3741602&cwnd=252&unsent_bytes=0&cid=6acc597529be4448&ts=457&x=0"
X-Firefox-Spdy: h2
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:35 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M2RkL4chVOFdcpiggd41IeLprJ8L25DkxN8yDJksBFwlJmMssqH2BACrzR%2BFKlZ5NHlj60jrFn1to0NFaV7HlslDPL4azU6uS4oRxDz%2BJHQEB6QuIglCIywpd0k9znqaAF4wTw%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81406
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4ebd79a60b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET xvideosrei.com/wp-content/uploads/2021/06/novinha-na-escola-xxx.jpg
200 OK 20 kB URL GET xvideosrei.com/wp-content/uploads/2021/06/novinha-na-escola-xxx.jpg
IP
ASN #208046 ColocationX Ltd.
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectwww.xvideosrei.com
Fingerprint44:0B:33:98:6C:4F:46:A5:7B:A8:23:E2:59:D1:04:01:95:F1:AB:8A
ValidityThu, 27 Feb 2025 00:16:29 GMT - Wed, 28 May 2025 00:16:28 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 600x337, components 3
Hash 3d1ab1366dd3b0893d0204d7ba7667e2
4343dcbcfa19574575a1ef4f5d34fbd55b4375bd
7a7b30d872bf2b6ef1f1d1de4d5c2493e755e282d032b693da866d248476ea1d
GET /wp-content/uploads/2021/06/novinha-na-escola-xxx.jpg HTTP/1.1
Host: xvideosrei.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:24 GMT
content-type: image/jpeg
content-length: 20368
last-modified: Fri, 18 Jun 2021 02:12:42 GMT
etag: "60cc011a-4f90"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 03:26:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET jsjs.4jpg.top/index.php?js=very
200 OK 0 B URL GET jsjs.4jpg.top/index.php?js=very
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:18 GMT
content-type: text/html; charset=UTF-8
imghost: 1729614248-h-jsjs4jpgtopmh--NO-rm162158222116/index.php?js=very
56nloadrate: 0.06125
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: BYPASS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gSsUvl8XJ6ygFhkP2krDmd%2BqeOYCfBZlE9mo%2F4MEreRjz5CaQcZXrp1puRQ9Cc4QFS%2FEa4MxQkjdeU9b64Id9kKwy5GNok%2Bg8UJ90epEGdjtpkXnQICU1k%2BmHlA9j%2BKv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e544be8568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6132&min_rtt=3029&rtt_var=2930&sent=52&recv=12&lost=0&retrans=0&sent_bytes=49270&recv_bytes=1596&delivery_rate=2300269&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=2032&x=1", cfExtPri, cfHdrFlush;dur=0
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c9LY%2FA7kLPCBwl8hO%2Fl0FRPCO1vB6gA9fAYXmfo7A6LybJ7tLCUgiIOdFhU0SpjcKDhPqh1lZxC%2FHOg0hqQhwt0L7Fb3jM09gKhwXH%2BkOOkjR0TC7hI89dkO35lZ6AY9OcV1NQ%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81391
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e5f78c90b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET www.musasporno.com/favicon.ico
404 Not Found 0 B URL GET www.musasporno.com/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectmusasporno.com
Fingerprint35:DE:9A:11:6A:DA:56:8A:42:0E:6D:71:6B:61:FC:69:80:FA:07:1A
ValidityMon, 10 Feb 2025 00:14:45 GMT - Sun, 11 May 2025 01:12:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.musasporno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000;
cache-control: max-age=300
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nEsYckd4gycCRJwJJjyX%2B07uAPmjVyDPXxChSSTPXVQt%2BPtl%2BLO8Lozd7zRkXjOK%2F6yXna942BQ9mkhL3YGJW3i9oILIdPlHTv6LB8iGZ5jH2CFUHq0IIVyMRXA3bxle64YlBhw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e8c1b3e56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2905&min_rtt=391&rtt_var=4950&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3282&recv_bytes=1196&delivery_rate=8104477&cwnd=254&unsent_bytes=0&cid=6ef60e3d276261f2&ts=409&x=0"
X-Firefox-Spdy: h2
GET cdn5-static.motherlessmedia.com/images/no_image.jpg
200 OK 20 kB URL GET cdn5-static.motherlessmedia.com/images/no_image.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectmotherlessmedia.com
FingerprintB4:93:1D:72:9E:B3:B8:3B:D4:37:1E:F0:BA:9A:CA:5C:75:D1:84:B4
ValidityTue, 11 Feb 2025 08:55:41 GMT - Mon, 12 May 2025 09:53:18 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 150x150, components 3
Hash 138da7bd71a4ac24cb796615b49907b8
097a9d62b8774383e2a34ea2894be5ec35a74c20
7b06941157e843ea2e2b80f132110af09f72b143d65a78c44c36556174d91b89
GET /images/no_image.jpg HTTP/1.1
Host: cdn5-static.motherlessmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: image/jpeg
content-length: 20198
last-modified: Thu, 20 Apr 2023 06:59:04 GMT
etag: "6440e2b8-4ee6"
expires: Wed, 26 Mar 2025 03:12:22 GMT
cache-control: max-age=1209600
x-server-w: web804
x-server-l: lb01
cf-cache-status: HIT
age: 1124046
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5zqT3uRzViDpnFbdr0aPnKisxT8poi%2F9p4l%2BOby6YJC59yy%2FG9bkSEA%2FDYl9SE6MX5blrsGUnhADpD2PLwv7Nlu6XOC5uchimUCRwkp82eq6l6cfaxoXH1mifkrcXf10%2BFIDetHdIUFQuvg6FOn1lSQY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4e94de02569f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1277&min_rtt=415&rtt_var=1741&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3299&recv_bytes=1223&delivery_rate=7855334&cwnd=234&unsent_bytes=0&cid=c43bbfd39d78a1d7&ts=747&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.videosdesexo.mobi/video/9553/novinhas-gostosas-na-escola//title/myhash/3
200 OK 0 B URL GET pdocac.tube-dl.top/v/s://www.videosdesexo.mobi/video/9553/novinhas-gostosas-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://www.videosdesexo.mobi/video/9553/novinhas-gostosas-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://www.videosdesexo.mobi/video/9553/novinhas-gostosas-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line1432: notjp-nojp-myhost--filteron-/v/s://www.videosdesexo.mobi/video/9553/novinhas-gostosas-na-escola//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo6/f9/c5/430c65, lfm-1-66481, lmd-66481, lud-2201905, xfvlen-566335, fsize-110947, played-2
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://www.videosdesexo.mobi/video/9553/novinhas-gostosas-na-escola//title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
age: 16584
cf-cache-status: HIT
last-modified: Mon, 24 Mar 2025 22:50:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QQ9D2kY1hDJxUihO2YIp8o35ZBSmEsexr3e9Ep%2FmOZoEQhC9yX25%2FTXdv%2FdYSqNNvdVwScz9%2BziQC9JOYjy5%2BfTt5LFf2TZgocR5WMoM9G9yuHffjD5V9Hzm2AOTd4UFSvpgCZI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bec9456b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2674&min_rtt=437&rtt_var=2552&sent=51&recv=49&lost=0&retrans=1&sent_bytes=15657&recv_bytes=5264&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8685&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://filmesporno.xxx/video-com-uma-novinha-fazendo-sexo-na-escola//title/myhash/3
200 OK 265 B URL GET pdocac.tube-dl.top/v/s://filmesporno.xxx/video-com-uma-novinha-fazendo-sexo-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 81d07224b5427062733935a88d519fc4
c1377b71a0fd50a6c5a91abe63ff166e1a472b62
e05028cc80e90172b26b6306a363fe18d9bba9e1d9babab16b27bc738b64f610
GET /v/s://filmesporno.xxx/video-com-uma-novinha-fazendo-sexo-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://filmesporno.xxx/video-com-uma-novinha-fazendo-sexo-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line1431: notjp-nojp-myhost--filteron-/v/s://filmesporno.xxx/video-com-uma-novinha-fazendo-sexo-na-escola//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo6/f3/bb/0fcf65, lfm-1-2688, lmd-2688, lud-1084986, xfvlen-405656, fsize-124517, played-88
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://filmesporno.xxx/video-com-uma-novinha-fazendo-sexo-na-escola//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: HIT
age: 256373
last-modified: Sat, 22 Mar 2025 04:13:36 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p61zjPNPh6aLWubqgg%2BOFnVtvKwU6kVDySAVaC1i5TY1lEoiCKbzx7Zm9QYNS5IO%2F1kBmwgK%2F4q8%2FLqTfNGHssYaqnj3J5kkfvbsTDrNX7J%2BMtEVBlrXYLN8I4%2BAf%2FB9M4Tn78o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bac6556b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2106&min_rtt=437&rtt_var=1387&sent=31&recv=30&lost=0&retrans=1&sent_bytes=10158&recv_bytes=3126&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8653&x=0"
X-Firefox-Spdy: h2
HEAD ads.google.com/
429 Too Many Requests 0 B IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subjectadwords.google.com
FingerprintD1:21:31:99:C9:E1:76:ED:96:CA:45:EC:64:A7:75:DC:7A:55:2C:6F
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: ads.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
content-length: 1103
content-type: text/html; charset=UTF-8
date: Tue, 25 Mar 2025 03:26:27 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/://ebenporno.com/itm/novinha_favela/title/myhash/3
200 OK 552 B URL GET pdocac.tube-dl.top/v/://ebenporno.com/itm/novinha_favela/title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with very long lines (552), with no line terminators
Hash 95d4b64d3b21f78c3c71a855de1b5075
da1894f85d712177bdaccf46dbe43b1aa13cdd0f
a35354a5a9e81b6f1bbf5fa048e2c362861cd0fffb16cd803756f6a7630f2a01
GET /v/://ebenporno.com/itm/novinha_favela/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/://ebenporno.com/itm/novinha_favela/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line358: notjp-es-pt-myhost--filteron-
pdojs-line1434: notjp-es-pt-myhost--filteron-/v/://ebenporno.com/itm/novinha_favela/title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo3/db/fc/0b1035, lfm-1-2581, lmd-2581, lud-504572, xfvlen-932296, fsize-137525, played-6
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/://ebenporno.com/itm/novinha_favela/title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: HIT
age: 94005
last-modified: Mon, 24 Mar 2025 01:19:44 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IFbeS%2FtMj8FZGWLM9ioS%2FTo0t6hitDFZjusF2JLExE3kR%2FIwTbHfT5%2ByIsgn1ATwzAP7uhmECjReV8FTTaTFfh6ChKdzpzUOXiN%2Fh6HAQqGy6IOcAv5BLxBku%2FWvAjvtL82XoAM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc9056b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=3335&min_rtt=437&rtt_var=3237&sent=54&recv=50&lost=0&retrans=1&sent_bytes=16607&recv_bytes=5264&delivery_rate=5612403&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8685&x=0"
X-Firefox-Spdy: h2
GET fixedjs.jtube.top/?vidjs=getad&21xa
200 OK 2.9 kB URL GET fixedjs.jtube.top/?vidjs=getad&21xa
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectjtube.top
Fingerprint9C:B0:33:C1:83:77:9C:B7:49:95:CF:8A:E4:A9:8D:86:8F:87:31:3F
ValidityMon, 03 Mar 2025 13:50:49 GMT - Sun, 01 Jun 2025 14:49:30 GMT
File type JavaScript source, ASCII text, with very long lines (3174), with no line terminators
Hash 3616823e563b92603d40cc7fc49aa03a
6efe0a030fdfd05857c4206e37ac01b5262ba00a
7013885a1da7f028ddd1d117e611e4bf696b9843e5c5011f750d0a496470c246
GET /?vidjs=getad&21xa HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sQJ95QFStnkmCRflXobS6aFCsdEg2HCqYlirKwQ%2BjKIsRLPoryeVKbAMSR059o3C6tuulXKZ0XjMuM%2Fgu5PB4zESxns7BZ40YRowSd9UPp%2FO5rKnD7QmcMg1%2B%2FPIjWYF352pWA%3D%3D"}],"group":"cf-nel","max_age":604800}
pdo-line12: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
phost:
pdo-line55: host-fixedjs.jtube.top4.194.8.20-myhost-158.222.62/?vidjs=getad&21xa
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 81391
last-modified: Mon, 24 Mar 2025 04:49:49 GMT
content-encoding: br
cf-ray: 925b4e6068cb0b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 242 kB URL GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
Size 242 kB (242447 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 88616
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.366.0
x-jsd-version-type: version
etag: W/"3b30f-xasoqLlON+0SM11iGCxWGKe469U"
content-encoding: br
accept-ranges: bytes
date: Tue, 25 Mar 2025 03:26:20 GMT
age: 30625
x-served-by: cache-fra-eddf8230100-FRA, cache-hel1410021-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET www.musasporno.com/wp-content/uploads/2021/04/Xvudeos-foda-com-duas-novinhas-peladas.jpg
200 OK 24 kB URL GET www.musasporno.com/wp-content/uploads/2021/04/Xvudeos-foda-com-duas-novinhas-peladas.jpg
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectmusasporno.com
Fingerprint35:DE:9A:11:6A:DA:56:8A:42:0E:6D:71:6B:61:FC:69:80:FA:07:1A
ValidityMon, 10 Feb 2025 00:14:45 GMT - Sun, 11 May 2025 01:12:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 600x337, components 3
Hash bc5508d71b34446e3771a850b10fe5c1
d263290fc4712e00543c033e41466323ff97b44b
dfcb2388ebe480f6fb81b317d676cc53387a2384b5e8614185178f9cff1d4787
GET /wp-content/uploads/2021/04/Xvudeos-foda-com-duas-novinhas-peladas.jpg HTTP/1.1
Host: www.musasporno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:31 GMT
content-type: image/jpeg
content-length: 24217
last-modified: Thu, 22 Jul 2021 07:16:51 GMT
etag: "60f91b63-5e99"
version: MS25011501
x-dns-prefetch-control: on
x-download-options: noopen
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Wed, 25 Mar 2026 02:14:06 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 3269
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jxFbfnpDaJjiRbSsrY8EvebBHLSUiRLTLeOezXVDo%2Fyza3k8kN0dkTMUQ2sEnOQQDUPmb7pbdjuYQT0NMeklJiKNwQUN5RQoExeUCGQK%2F9x7K9Xk38hL68Jyny45Wxu0WAJ%2Bu18%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 925b4ea41d69b4f7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=25114&min_rtt=20775&rtt_var=16468&sent=25&recv=22&lost=0&retrans=0&sent_bytes=4858&recv_bytes=1983&delivery_rate=11558&cwnd=12000&unsent_bytes=0&cid=d55c30adc5224b4d&ts=3742&x=1", cfExtPri, cfHdrFlush;dur=0
GET page.phic4.top/myda.php
200 OK 0 B IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.4freedom.click/tags/6
Certificate IssuerGoogle Trust Services
Subjectphic4.top
FingerprintA1:CF:F4:32:94:8A:80:92:CC:2C:15:DC:BB:2B:D6:E2:5C:3F:79:6C
ValidityMon, 03 Mar 2025 22:00:39 GMT - Sun, 01 Jun 2025 22:58:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /myda.php HTTP/1.1
Host: page.phic4.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:20 GMT
content-type: text/html; charset=utf-8
myda: myda2a02:2121:6a9:d1ea::509e:5859
vary: User-Agent, Accept-Encoding
age: 3972
cache-control: max-age=14400
cf-cache-status: HIT
last-modified: Tue, 25 Mar 2025 02:20:08 GMT
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eBhURJXPX01otfgX%2BraJ%2Bgb2JhrZGETVY8X%2BX7%2B7AanR%2FBDqvhS0W17AR02AHFLj%2Fbhq1xH5gOz2B39y7Mkdk9IypeFIYwCHt25jm6JRoMYuDelvgfrD885s%2Fe8BXte5gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e630b24b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7083&min_rtt=3631&rtt_var=3827&sent=12&recv=7&lost=0&retrans=0&sent_bytes=4057&recv_bytes=1300&delivery_rate=163553&cwnd=12000&unsent_bytes=0&cid=a1e0f4a40766de7e&ts=250&x=1", cfExtPri, cfHdrFlush;dur=0
GET pornogramxxx.com/favicon.ico
404 Not Found 0 B URL GET pornogramxxx.com/favicon.ico
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectpornogramxxx.com
FingerprintDE:18:3A:6F:AB:A9:97:DD:80:1B:27:28:A5:A4:5E:BC:F4:1D:DC:72
ValiditySun, 02 Mar 2025 17:25:30 GMT - Sat, 31 May 2025 18:24:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: pornogramxxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 25 Mar 2025 03:26:27 GMT
content-type: text/html; charset=utf-8
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t11EJIqELPCEc0xs3htvd2Q%2FLtUisr3iBtEVnk16fqbwTugQ%2Fv3s29rT%2BdVtk4x9pZVrjqwyGFZ8XwWZxgfS5NUbVS2SHFvUFzONp02BcWOm1fcy1dCH9XoN8PkaDe%2BSmByz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e8acb9d56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1440&min_rtt=450&rtt_var=1517&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3211&recv_bytes=1064&delivery_rate=5336609&cwnd=254&unsent_bytes=0&cid=6b24490e6f16d4aa&ts=453&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/novinha-mostrando-os-peitos-na-escola//title/myhash/3
200 OK 276 B URL GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/novinha-mostrando-os-peitos-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash afcd46c2d20d7ada8eab0d5b16358aea
c9ba37dbbaf3c7bc16f04c07d066e7b56aa4b189
4045debb2b00bf6ff5ada54c06ef6f9d365f1f28934b03e717cd903bfb2b28af
GET /v/s://xvideosrei.com/porno/novinha-mostrando-os-peitos-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideosrei.com/porno/novinha-mostrando-os-peitos-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-de-myhost--filteron-
pdojs-line1431: notjp-de-myhost--filteron-/v/s://xvideosrei.com/porno/novinha-mostrando-os-peitos-na-escola//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/42/32/a5cf63, lfm-1-23557, lmd-23557, lud-474567, xfvlen-208579, fsize-35871, played-3
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideosrei.com/porno/novinha-mostrando-os-peitos-na-escola//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4pw1c92IzZIwDk7txGrKtemmkhhSAnXR2Auk76QkgjqS2O6whgTec7v72JTL%2FM3piEp%2BLdICrg1%2FjclZ4Gez8LZ0pQpNufS%2Fhvw5EQNPG27Q%2FGmGk07OnDwKcnQUShwgVwgJf4c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc8556b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2159&min_rtt=381&rtt_var=2701&sent=113&recv=87&lost=0&retrans=3&sent_bytes=43545&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9050&x=0"
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://filmesporno.xxx/xvideos/novinhas-fazendo-sexo-na-escola//title/myhash/3
200 OK 241 B URL GET pdocac.tube-dl.top/v/s://filmesporno.xxx/xvideos/novinhas-fazendo-sexo-na-escola//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash 07c530c1800f23bd752967810a2569e4
592cba0db5575fc473eee9ab0994918c5c529bdc
353cfd2f8bdd81d4b7dcf980d5cee39868980f78d0321274066cfc844d742415
GET /v/s://filmesporno.xxx/xvideos/novinhas-fazendo-sexo-na-escola//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://filmesporno.xxx/xvideos/novinhas-fazendo-sexo-na-escola//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-ru-myhost--filteron-
pdojs-line1431: notjp-ru-myhost--filteron-/v/s://filmesporno.xxx/xvideos/novinhas-fazendo-sexo-na-escola//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo3/9b/a7/40b760, lfm-1-33842, lmd-33842, lud-2374803, xfvlen-570115, fsize-357253, played-265
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://filmesporno.xxx/xvideos/novinhas-fazendo-sexo-na-escola//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cQPh73Taty7Yt07ElJ5hD0A6SRl7M2KHKsh9HtXsDEQ%2FqGOPuhOr97RVtmtaEct%2FsjVNWSvkEfrDd6PoD9DMujz3B6SgxJ0EZdLILXzQRUi3OrHh6eZgN7JGU3aXh%2FOd%2FwAq1ss%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc8a56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1510&min_rtt=381&rtt_var=1872&sent=100&recv=86&lost=0&retrans=3&sent_bytes=37193&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9038&x=0"
X-Firefox-Spdy: h2
GET ae33d7ee85.029519cbdc.com/efa8597e96c5a7e91d57e14f5098a072/23782?version_name=a&domain=av.4freedom.click
200 OK 248 B URL GET ae33d7ee85.029519cbdc.com/efa8597e96c5a7e91d57e14f5098a072/23782?version_name=a&domain=av.4freedom.click
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://av.4freedom.click/v/s:/xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerLet's Encrypt
Subjectae33d7ee85.029519cbdc.com
Fingerprint56:04:E3:87:39:4F:BE:06:20:C3:22:AA:00:46:D9:EC:47:8C:F2:23
ValiditySat, 22 Mar 2025 02:33:42 GMT - Fri, 20 Jun 2025 02:33:41 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 474da269e63bc1ff555ac4026105d26f
b7ba8a50ab0a4bfb26d2497a036e9ceee33972ed
e4a5143805f57373061024d8573e82968df3f9cbbeac39a0084947a96dc0f6ab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /efa8597e96c5a7e91d57e14f5098a072/23782?version_name=a&domain=av.4freedom.click HTTP/1.1
Host: ae33d7ee85.029519cbdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Referer: https://av.4freedom.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:17 GMT
content-type: application/json
content-length: 248
server: nginx/1.18.0
cache-control: max-age=300
expires: Tue, 25 Mar 2025 03:31:17 GMT
x-cdn-host-id: ds8138
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 8995aa1cff82ab17cdf5d997a51519f8
1641428dfa547840b23d9e89126792c91e6f7a96
aecc179347fc12180f8c17577ef53af268d1344d6ef8f6ff228ebb3fee0c23fe
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:26 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19499
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/sofia-felix-mc-bionica-novinha//title/myhash/3
200 OK 271 B URL GET pdocac.tube-dl.top/v/s://xvideosrei.com/porno/sofia-felix-mc-bionica-novinha//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash b8a81c85c2b20884822dfc68d329c09d
e921e0312a4474372eacc5a0dce64a2f6002b03d
71ffb41920ff06e97e05ba9f38674005c44112fb748fa2190f2e356ac7f231c9
GET /v/s://xvideosrei.com/porno/sofia-felix-mc-bionica-novinha//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://xvideosrei.com/porno/sofia-felix-mc-bionica-novinha//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line1431: notjp-nojp-myhost--filteron-/v/s://xvideosrei.com/porno/sofia-felix-mc-bionica-novinha//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo4/54/bc/26fd56, lfm-1-6646, lmd-6646, lud-864275, xfvlen-541034, fsize-70128, played-14
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://xvideosrei.com/porno/sofia-felix-mc-bionica-novinha//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
age: 523684
cf-cache-status: HIT
last-modified: Wed, 19 Mar 2025 01:58:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IbxVnFkQ6%2B5X98va8Ri5somHd3PD5EyVczQdxMXhBZxGhqoUo4AI1yQU2RLkpVV8AufXEzkqJZIlNGD0z6w6eRB6Wrk3bb2Jj%2F5YBK21J02BI%2BSVO5%2BL6oXpZMHvjkfSSz8nkB4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9c6cc056b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2353&min_rtt=417&rtt_var=2862&sent=73&recv=67&lost=0&retrans=2&sent_bytes=24448&recv_bytes=6602&delivery_rate=6135593&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8771&x=0"
X-Firefox-Spdy: h2
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 321d5b04b8f15785dd007bc24c387e6f
27e1e99f57ad5bbf929f2b77680652e6fe970651
0e91ee5845e279ec1cba131af3615fa6a191b34c46731bc8184fab9d4e828806
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:28 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19508
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://es.luxuretv.com/videos/animales-porno-teniendo-sexo-con-una-flaquita-amante-de-la-zoofilia-77559.html/title/myhash/3
200 OK 0 B URL GET pdocac.tube-dl.top/v/s://es.luxuretv.com/videos/animales-porno-teniendo-sexo-con-una-flaquita-amante-de-la-zoofilia-77559.html/title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://es.luxuretv.com/videos/animales-porno-teniendo-sexo-con-una-flaquita-amante-de-la-zoofilia-77559.html/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://es.luxuretv.com/videos/animales-porno-teniendo-sexo-con-una-flaquita-amante-de-la-zoofilia-77559.html/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-nojp-myhost--filteron-
pdojs-line963: notjp-nojp-myhost--filteron-/v/s://es.luxuretv.com/videos/animales-porno-teniendo-sexo-con-una-flaquita-amante-de-la-zoofilia-77559.html/title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo3/e3/fc/7f88105, lfm-1-538188, lmd-538188, lud-29947360, xfvlen-972080, fsize-224691, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://es.luxuretv.com/videos/animales-porno-teniendo-sexo-con-una-flaquita-amante-de-la-zoofilia-77559.html/title/myhash/3-A-pdocac.tube-dl.top--cacpdo2---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vNbPfZd5ObDCgNRuTHKKEewzJ5pc0NIelWCvniuNhOtO3vZQXFcETE%2Fw1g06TrGHmlAv5xuUvda4DVVl1R4xHXXI8HrcJQP%2FQVabjT%2FCQ2F4lKlo8A5g1%2BV3e9BTfJcfDgaAi8U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bbc6c56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=3300&min_rtt=417&rtt_var=3437&sent=76&recv=69&lost=0&retrans=3&sent_bytes=25709&recv_bytes=6602&delivery_rate=6135593&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=8996&x=0"
X-Firefox-Spdy: h2
GET unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js
200 OK 39 kB URL GET unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjectunpkg.com
Fingerprint55:B8:93:96:94:5B:30:0F:AC:01:45:A6:47:14:7E:51:5A:BE:7B:F0
ValidityThu, 20 Mar 2025 17:47:13 GMT - Wed, 18 Jun 2025 18:47:11 GMT
File type JavaScript source, ASCII text
Hash b671db9a73a06770313c1a05bcdc0b58
12280acce4192448e93e3b2ef9e1adf6c6eba94a
9162832cc3ed9507d8f869dd0d4fd0dacde05a078172d82a98b05e0aef1f1a34
GET /videojs-flash@2.2.1/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://av.4freedom.click/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:19 GMT
content-type: text/javascript
cf-ray: 925b4e5d8b421c06-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 458776
cache-control: public, max-age=31536000
last-modified: Wed, 19 Mar 2025 20:00:03 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
content-digest: sha256=:kWKDLMPtlQfY+GndDU/Q2s3gWgeBctgqmLBeCu8fGjQ=:
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
GET css.4jpg.top/index.php?js=very
200 OK 0 B URL GET css.4jpg.top/index.php?js=very
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerGoogle Trust Services
Subject4jpg.top
FingerprintCE:68:EE:E1:A9:B4:04:8A:19:E9:A5:4B:99:6C:FF:D1:6C:A9:8B:EC
ValidityMon, 24 Feb 2025 19:01:46 GMT - Sun, 25 May 2025 20:00:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 03:26:25 GMT
content-type: text/html; charset=UTF-8
imghost: 104194820-h-css4jpgtopmh--NO-rm104238220248/index.php?js=very
56nloadrate: 1.214375
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-192g-la: EXPIRED
xkey-192la: jcss./index.php?js=very-A-css.4jpg.top--myzone---no
cf-cache-status: BYPASS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2Bp3TUZ8%2B0ntA%2Bhug%2FEPQKxfGOVN%2B5s%2FTwpy5BOzE47C6pPJc2wu9SCQ1kn8ar4EIOEnlavaRhEXLwPhSY7kOxKvR64OIe9%2FqFxgxUn%2F1SDz8CIHrFFx7FNvD8XULEU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e7c5d8c568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=44921&min_rtt=1254&rtt_var=56815&sent=294&recv=61&lost=0&retrans=2&sent_bytes=290188&recv_bytes=10159&delivery_rate=535352&cwnd=48000&unsent_bytes=0&cid=83f0fceff472d49f&ts=8354&x=1", cfExtPri, cfHdrFlush;dur=0
GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
200 OK 82 kB URL GET 22554.aceadynict.com/v2/a/na/js/239377?container=clck_ntv1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subject*.aceadynict.com
Fingerprint10:3F:23:0A:1D:33:D7:75:AF:C3:3B:72:C7:3B:B2:02:C6:F4:A9:BE
ValiditySat, 01 Feb 2025 14:23:20 GMT - Fri, 02 May 2025 14:23:19 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash b1230c4711fbdf326243e9397df5537d
24b59cb0b270bfa53c1bb5d5d8d5353b1a619233
83d09142c7aa3ddd4ed153e8235f2434402726bedf304f27f416c72bc4a9c0cf
GET /v2/a/na/js/239377?container=clck_ntv1 HTTP/1.1
Host: 22554.aceadynict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:26 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19505
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
GET cdn.maubifilian.com/3424/35eaa0f6-53d6-11ee-92a5-15be44bed8ee.jpg
200 OK 46 kB URL GET cdn.maubifilian.com/3424/35eaa0f6-53d6-11ee-92a5-15be44bed8ee.jpg
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.maubifilian.com
Fingerprint72:AC:9C:42:A6:23:1D:67:38:AA:B9:1B:8E:31:81:75:DD:D5:BA:3C
ValidityWed, 19 Feb 2025 08:49:48 GMT - Tue, 20 May 2025 08:49:47 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x270, components 3
Hash 3d90c6535def0e4f233fe3e78c7c1189
ce39b241989a2392583ec2bee45073105eb72d94
c6818519f260055f01552f1de24434f0c6171a2fc806abcdf3101480db535f91
GET /3424/35eaa0f6-53d6-11ee-92a5-15be44bed8ee.jpg HTTP/1.1
Host: cdn.maubifilian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/jpeg
content-length: 45966
traceparent: 00-372ba3fedbc63442fb1c5b0b773b63e6-fa672caf4e8fc530-01
x-id-fe: osix-hw-edge-gc4
last-modified: Fri, 15 Sep 2023 14:43:18 GMT
etag: "65046d86-b38e"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149616
cache: HIT
x-cached-since: 2025-03-23T09:52:53+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://cinepornogratis.com/video/pornos-de-enana-virgen//title/myhash/3
200 OK 230 B URL GET pdocac.tube-dl.top/v/s://cinepornogratis.com/video/pornos-de-enana-virgen//title/myhash/3
IP
Requested by https://av.4freedom.click/v/s://xvideosrei.com/porno/flagra-novinha-na-escola/title/Okulda%20yepyeni-Seks,%20Porno-Xhamster%20[11%20:01x360p]%20%20%20%20[11:01x360p]
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint90:23:55:56:9F:36:01:C2:8F:E6:14:3A:52:77:C6:0B:2A:66:31:F7
ValiditySun, 02 Mar 2025 19:49:19 GMT - Sat, 31 May 2025 20:47:43 GMT
File type ASCII text, with no line terminators
Hash d19bc684c5a30c877318d64f4284d783
72eb337e4aea276ce6a4dc37949e22dd6e39e49c
5ff3202b89c6401c3616c172b79b502d7c719ddadc8fa6d014c95ea9488d3b34
GET /v/s://cinepornogratis.com/video/pornos-de-enana-virgen//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.4freedom.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 03:26:30 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top4.194.8.20-myhost-38.220.248/v/s://cinepornogratis.com/video/pornos-de-enana-virgen//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line355: notjp-es-pt-myhost--filteron-
pdojs-line1432: notjp-es-pt-myhost--filteron-/v/s://cinepornogratis.com/video/pornos-de-enana-virgen//title/myhash/3
pdo120: feedvid-, cachefileb-cacpdo6/fe/82/0e, lfm-9-1135444, lmd-3173314, lud-17658125, xfvlen-178976, fsize-156689, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
x-proxy-cache-192g-la: HIT
xkey-192la: pdocac/v/s://cinepornogratis.com/video/pornos-de-enana-virgen//title/myhash/3-A-pdocac.tube-dl.top--myzone---yes
cf-cache-status: MISS
last-modified: Tue, 25 Mar 2025 03:26:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H4mXfhjyHyePQF9Q%2BY8B%2Ftl0uyPiOJoFyrUQrFzZEWqsLLVoG03CwCNjAOEuMe9TBPxagUVoYJ%2FYUkjVgfK3eRB6YGaFkP0x6qL9mvIVVsa%2BJ92mTCrik0FkVn38K3MGyAOPAEo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 925b4e9bdc8056b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2159&min_rtt=381&rtt_var=2701&sent=117&recv=87&lost=0&retrans=3&sent_bytes=45594&recv_bytes=6602&delivery_rate=12679509&cwnd=257&unsent_bytes=0&cid=7ccc1d4569873dd6&ts=9057&x=0"
X-Firefox-Spdy: h2
GET cdn.berculogive.com/2040/436f7830-1303-11eb-afd0-a94a242ee61d.jpg
200 OK 84 kB URL GET cdn.berculogive.com/2040/436f7830-1303-11eb-afd0-a94a242ee61d.jpg
IP
ASN #199524 G-Core Labs S.A.
Requested by https://fixedjs.jtube.top/?vidjs=getad&21xa
Certificate IssuerLet's Encrypt
Subjectcdn.berculogive.com
Fingerprint63:56:66:18:31:CE:16:01:7C:0D:BC:3C:0F:94:E1:8A:9D:B4:D6:8C
ValidityWed, 19 Feb 2025 08:49:49 GMT - Tue, 20 May 2025 08:49:48 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3
Hash 9f651ff46ed5cf307a165f8ef1d6c19b
856f8eaa07c847ae74703b7c5b78cfd2fcca98e8
99573f31236dd60acec9192165de49329910dc39b92f6508ce86176fec0294cd
GET /2040/436f7830-1303-11eb-afd0-a94a242ee61d.jpg HTTP/1.1
Host: cdn.berculogive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 03:26:29 GMT
content-type: image/jpeg
content-length: 83709
traceparent: 00-540d784119f378d17214abd54bae16c1-9e3eda1f6bac127c-01
x-id-fe: osix-hw-edge-gc4
last-modified: Tue, 20 Oct 2020 18:37:10 GMT
etag: "5f8f2e56-146fd"
x-id: osix-hw-edge-gc4
expires: Thu, 24 Apr 2025 03:26:29 GMT
cache-control: max-age=2592000
age: 149672
cache: HIT
x-cached-since: 2025-03-23T09:51:57+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
104.21.46.165
172.217.21.170
117.55.203.143
87.250.250.119
94.154.172.126
185.244.209.62
91.121.219.34
185.76.9.27
139.162.181.76
0.0.0.0