r11.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-14
Last Seen 2024-08-19
Times Seen 48873
Size 504 B (504 bytes)
MD5 686480d25645ac2aca7a99974693a82f
SHA1 55ca9d53bd758d2afc75e8a9b59c656ff26a3f70
SHA256 8902058e383c2f43751417e1af1d582f7a16ce0b6fc180ab20cbc76c4b00f914
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8902058E383C2F43751417E1AF1D582F7A16CE0B6FC180AB20CBC76C4B00F914"
Last-Modified: Wed, 14 Aug 2024 12:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4452
Expires: Fri, 16 Aug 2024 19:32:18 GMT
Date: Fri, 16 Aug 2024 18:18:06 GMT
Connection: keep-alive
r10.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-16
Last Seen 2024-08-19
Times Seen 24530
Size 504 B (504 bytes)
MD5 9fca859eba50e585d7c1550a61d33bc3
SHA1 a33940f9c83807660f212e5ff511fe28e0413c0d
SHA256 08afcf8f1ad63cfd72b781cf4c69900e3fd266ee46389de3918570cf5d682f30
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "08AFCF8F1AD63CFD72B781CF4C69900E3FD266EE46389DE3918570CF5D682F30"
Last-Modified: Fri, 16 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14933
Expires: Fri, 16 Aug 2024 22:26:59 GMT
Date: Fri, 16 Aug 2024 18:18:06 GMT
Connection: keep-alive
r10.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-15
Last Seen 2024-08-19
Times Seen 49254
Size 504 B (504 bytes)
MD5 4d209e16679910b467c26590a0073236
SHA1 ddd59fa6902b498e9c0cfb22e342757f954789d0
SHA256 9ef3dab56215a67804db0e12d33772a1902f5914b788530717712902a294bcb5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9EF3DAB56215A67804DB0E12D33772A1902F5914B788530717712902A294BCB5"
Last-Modified: Wed, 14 Aug 2024 21:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17560
Expires: Fri, 16 Aug 2024 23:10:47 GMT
Date: Fri, 16 Aug 2024 18:18:07 GMT
Connection: keep-alive
r10.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-16
Last Seen 2024-08-19
Times Seen 26129
Size 504 B (504 bytes)
MD5 75f615f839dbf8cd2f4a3d58e44455f2
SHA1 362b7a7d5cbe41d8a42cecec4ee755af0e07ddaf
SHA256 2c4833330979b96ed12b3480367f00be397e9f9ccb35a088e7c79e92eb26cae4
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2C4833330979B96ED12B3480367F00BE397E9F9CCB35A088E7C79E92EB26CAE4"
Last-Modified: Fri, 16 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14478
Expires: Fri, 16 Aug 2024 22:19:25 GMT
Date: Fri, 16 Aug 2024 18:18:07 GMT
Connection: keep-alive
GET kit.fontawesome.com/1e1169734c.js
104.18.19.62200 OK 5.3 kB URL
kit.fontawesome.com/1e1169734c.js
IP / ASN
104.18.19.62
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type gzip compressed data, from Unix
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 5.3 kB (5334 bytes)
MD5 28d9b2766fcf5f319df1acdadedf6049
SHA1 da2e57dd35b8b82a31e4f5b99d0491a513ab8fe1
SHA256 a04df793aab0ffa6bf7cf6f5ad9ad9acf955d06bdd36fefcbd9e3b6637881f52
Certificate Info
Issuer DigiCert Inc
Subject *.fontawesome.com
Fingerprint B1:69:23:88:5E:EA:EA:76:BC:90:A2:CE:D9:3B:3F:5D:FE:5F:13:09
Validity Tue, 30 Jul 2024 00:00:00 GMT - Mon, 27 Jan 2025 23:59:59 GMT
GET /1e1169734c.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F-xIOnjkjAt7eLJLA6RC
cf-cache-status: HIT
age: 31
server: cloudflare
cf-ray: 8b436cd87de056c0-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
r11.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 504 B (504 bytes)
MD5 bebf35f9fc8d5a632eae8314b1fa7c95
SHA1 7ee9e5f110f1fdb74c5221533436e463ae345bbc
SHA256 bedf5955f878cce2c05e760407397266a41d7ae96410a9946987ccfa1ad0487d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BEDF5955F878CCE2C05E760407397266A41D7AE96410A9946987CCFA1AD0487D"
Last-Modified: Thu, 15 Aug 2024 04:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13231
Expires: Fri, 16 Aug 2024 21:58:39 GMT
Date: Fri, 16 Aug 2024 18:18:08 GMT
Connection: keep-alive
r11.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 504 B (504 bytes)
MD5 bebf35f9fc8d5a632eae8314b1fa7c95
SHA1 7ee9e5f110f1fdb74c5221533436e463ae345bbc
SHA256 bedf5955f878cce2c05e760407397266a41d7ae96410a9946987ccfa1ad0487d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BEDF5955F878CCE2C05E760407397266A41D7AE96410A9946987CCFA1AD0487D"
Last-Modified: Thu, 15 Aug 2024 04:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13231
Expires: Fri, 16 Aug 2024 21:58:39 GMT
Date: Fri, 16 Aug 2024 18:18:08 GMT
Connection: keep-alive
GET waust.at/d.js
104.26.4.7200 OK 8.1 kB IP / ASN
104.26.4.7
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type gzip compressed data, max speed, from Unix
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 8.1 kB (8107 bytes)
MD5 fb251bc70c8609f3f378a729340b0102
SHA1 cbd9de449eec25aedc812eabede2ac55ed7e8d15
SHA256 623db3a8d31d47b79b39bdc57e333ef9f4653a7300943c781140548fe7a27a64
Certificate Info
Issuer Google Trust Services
Subject waust.at
Fingerprint 23:97:A9:BF:8A:3F:8F:7E:DD:39:FB:28:55:22:37:0A:6E:8E:9F:1B
Validity Tue, 02 Jul 2024 02:16:40 GMT - Mon, 30 Sep 2024 02:16:39 GMT
GET /d.js HTTP/1.1
Host: waust.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: application/x-javascript
last-modified: Thu, 12 Jan 2023 17:19:44 GMT
etag: W/"63c04130-3972"
expires: Sat, 17 Aug 2024 17:31:52 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2776
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lYs6Yi4ioAkW22%2FOrzwZgA6a06fdJcXDHYPA6s5MT3tKaJVANGMXEjt9eFIkQtE8LRCR13IxeFeJWPVNMSCD5p1HTOaPoGDMC9nVRZ%2Bf24cdv%2FBhse3iBvfa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b436cd8afa9b4fd-OSL
X-Firefox-Spdy: h2
o.pki.goog/wr2
142.250.74.131 472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2024-08-16
Last Seen 2024-08-19
Times Seen 1739
Size 472 B (472 bytes)
MD5 a5365af808a9fa27a9e738affb85cab1
SHA1 43b48fae8eca894f94f101abea0b189e9f8fd018
SHA256 b72058e8b4466a98e594b03460df3095e819aed95b059c97c9b950f3ff7f300f
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Aug 2024 18:18:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET wh.cdntrex.com/contents/videos_screenshots/15000/15083/290x163/8.jpg
194.242.11.186200 OK 9.2 kB URL
wh.cdntrex.com/contents/videos_screenshots/15000/15083/290x163/8.jpg
IP / ASN
194.242.11.186
#34989 ServeTheWorld AS
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 290x163, components 3
First Seen 2024-06-01
Last Seen 2025-07-24
Times Seen 27
Size 9.2 kB (9244 bytes)
MD5 ab9d0280254f9e5d9bc94c0b9773a74b
SHA1 d18160e4a7b95f5fe10d6fb6d4da8e2dda25a5e5
SHA256 558366f9d95c0792874187ca8e8f1f2b8acd4e1e24726e5081483a14e1023f78
Certificate Info
Issuer Let's Encrypt
Subject wh.cdntrex.com
Fingerprint 37:50:9C:3C:74:CF:3D:87:E2:6C:5F:8F:D3:7E:3E:27:23:4F:EB:3E
Validity Sat, 10 Aug 2024 03:14:10 GMT - Fri, 08 Nov 2024 03:14:09 GMT
GET /contents/videos_screenshots/15000/15083/290x163/8.jpg HTTP/1.1
Host: wh.cdntrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: image/jpeg
content-length: 9244
server: BunnyCDN-NO1-830
cdn-pullzone: 1799186
cdn-uid: b7cd2495-dc22-4681-953c-5c2643001875
cdn-requestcountrycode: NO
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: "60a874a7-241c"
last-modified: Sat, 22 May 2021 03:04:07 GMT
cdn-cachedat: 07/03/2024 22:07:28
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: f3f37ca4c155f09cd68728d024b1984b
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET wh.cdntrex.com/contents/videos_screenshots/194000/194065/290x163/1.jpg
194.242.11.186200 OK 10 kB URL
wh.cdntrex.com/contents/videos_screenshots/194000/194065/290x163/1.jpg
IP / ASN
194.242.11.186
#34989 ServeTheWorld AS
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 290x163, components 3
First Seen 2024-06-01
Last Seen 2024-09-28
Times Seen 22
Size 10 kB (10000 bytes)
MD5 c972be0e1447e8c34a3ee2aa0d1be030
SHA1 0650d9c84af955e2112e4433dde2427028a8474d
SHA256 65aebc2ddce7c41fe2536e4bbf08cc1878936a463d191d9f38cce9b15964feee
Certificate Info
Issuer Let's Encrypt
Subject wh.cdntrex.com
Fingerprint 37:50:9C:3C:74:CF:3D:87:E2:6C:5F:8F:D3:7E:3E:27:23:4F:EB:3E
Validity Sat, 10 Aug 2024 03:14:10 GMT - Fri, 08 Nov 2024 03:14:09 GMT
GET /contents/videos_screenshots/194000/194065/290x163/1.jpg HTTP/1.1
Host: wh.cdntrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: image/jpeg
content-length: 10000
server: BunnyCDN-NO1-830
cdn-pullzone: 1799186
cdn-uid: b7cd2495-dc22-4681-953c-5c2643001875
cdn-requestcountrycode: NO
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: "64c8412e-2710"
last-modified: Mon, 31 Jul 2023 23:18:06 GMT
cdn-cachedat: 07/03/2024 19:59:38
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 2c4baba60394bcf75d3168d77f62b73f
cdn-cache: STALE
accept-ranges: bytes
X-Firefox-Spdy: h2
GET wh.cdntrex.com/contents/videos_screenshots/25000/25576/290x163/7.jpg
194.242.11.186200 OK 10 kB URL
wh.cdntrex.com/contents/videos_screenshots/25000/25576/290x163/7.jpg
IP / ASN
194.242.11.186
#34989 ServeTheWorld AS
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 290x163, components 3
First Seen 2024-06-01
Last Seen 2025-07-24
Times Seen 29
Size 10 kB (10433 bytes)
MD5 7a22555300faf058f1e2954d15e62579
SHA1 2c3bdf9bc325ce5d651357c33a0da37c28dd9d82
SHA256 881979b90a5ffe53717f47199887f8b03dd3626cbffe35e8b3bdffac43f8901e
Certificate Info
Issuer Let's Encrypt
Subject wh.cdntrex.com
Fingerprint 37:50:9C:3C:74:CF:3D:87:E2:6C:5F:8F:D3:7E:3E:27:23:4F:EB:3E
Validity Sat, 10 Aug 2024 03:14:10 GMT - Fri, 08 Nov 2024 03:14:09 GMT
GET /contents/videos_screenshots/25000/25576/290x163/7.jpg HTTP/1.1
Host: wh.cdntrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: image/jpeg
content-length: 10433
server: BunnyCDN-NO1-830
cdn-pullzone: 1799186
cdn-uid: b7cd2495-dc22-4681-953c-5c2643001875
cdn-requestcountrycode: NO
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: "61093b7c-28c1"
last-modified: Tue, 03 Aug 2021 12:50:04 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 05/04/2024 19:20:00
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 3d5df86f5bcc37b100c6d723233b3459
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET xamateur.net/wp-includes/css/dist/block-library/style.min.css?ver=6.6.1
38.62.224.71200 OK 14 kB URL
xamateur.net/wp-includes/css/dist/block-library/style.min.css?ver=6.6.1
IP / ASN
38.62.224.71
#55286 SERVER-MANIA
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with very long lines (57765)
First Seen 2024-07-23
Last Seen 2025-08-01
Times Seen 3025
Size 14 kB (13898 bytes)
MD5 6c5989e44633f1e3f08ad845f9d9ce0b
SHA1 2b24009fd37e79d4a601e6d53d615fd2cd0a606b
SHA256 885c89e82436cfa3d0a0a5a9b2f6be6e1503457c810cc88ed2c09b4570ae9fd6
Certificate Info
Issuer Let's Encrypt
Subject *.xamateur.net
Fingerprint B7:01:1F:D0:9A:68:F7:E9:85:73:6D:7E:26:91:51:DA:D7:9A:BF:B2
Validity Tue, 18 Jun 2024 14:20:11 GMT - Mon, 16 Sep 2024 14:20:10 GMT
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.1 HTTP/1.1
Host: xamateur.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 23 Aug 2024 18:18:08 GMT
content-type: text/css
last-modified: Tue, 23 Jul 2024 17:14:09 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13898
date: Fri, 16 Aug 2024 18:18:08 GMT
X-Firefox-Spdy: h2
GET wh.cdntrex.com/contents/videos_screenshots/180000/180154/290x163/1.jpg
194.242.11.186200 OK 9.1 kB URL
wh.cdntrex.com/contents/videos_screenshots/180000/180154/290x163/1.jpg
IP / ASN
194.242.11.186
#34989 ServeTheWorld AS
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 290x163, components 3
First Seen 2024-06-01
Last Seen 2025-03-11
Times Seen 23
Size 9.1 kB (9061 bytes)
MD5 a18d5b577980e78be8c323a669abb012
SHA1 2a887f5d95801a8a30afbfff7104a882a29a84a2
SHA256 9521464daf927be676a56b5d81e0c68e00d31d178560721e0bfc32711c63eaaf
Certificate Info
Issuer Let's Encrypt
Subject wh.cdntrex.com
Fingerprint 37:50:9C:3C:74:CF:3D:87:E2:6C:5F:8F:D3:7E:3E:27:23:4F:EB:3E
Validity Sat, 10 Aug 2024 03:14:10 GMT - Fri, 08 Nov 2024 03:14:09 GMT
GET /contents/videos_screenshots/180000/180154/290x163/1.jpg HTTP/1.1
Host: wh.cdntrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: image/jpeg
content-length: 9061
server: BunnyCDN-NO1-830
cdn-pullzone: 1799186
cdn-uid: b7cd2495-dc22-4681-953c-5c2643001875
cdn-requestcountrycode: NO
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: "648ed52d-2365"
last-modified: Sun, 18 Jun 2023 09:58:05 GMT
cdn-cachedat: 06/24/2024 18:33:03
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 7956f48cee3e3f1778d8c7597e80e2c9
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET xamateur.net/wp-content/themes/xamateur/style.css?ver=6.6.1
38.62.224.71200 OK 2.2 kB URL
xamateur.net/wp-content/themes/xamateur/style.css?ver=6.6.1
IP / ASN
38.62.224.71
#55286 SERVER-MANIA
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with very long lines (554)
First Seen 2024-07-01
Last Seen 2025-01-21
Times Seen 32
Size 2.2 kB (2217 bytes)
MD5 bc9cc6fa15d5493a5ab7c05b3b81255b
SHA1 674165c5ce66d406a662a4bdfb2061811b114c5e
SHA256 cfd247b85b454bb4a4c342d8309c086483c5a1e226cec1b12d45ffbfbcd8c17d
Certificate Info
Issuer Let's Encrypt
Subject *.xamateur.net
Fingerprint B7:01:1F:D0:9A:68:F7:E9:85:73:6D:7E:26:91:51:DA:D7:9A:BF:B2
Validity Tue, 18 Jun 2024 14:20:11 GMT - Mon, 16 Sep 2024 14:20:10 GMT
GET /wp-content/themes/xamateur/style.css?ver=6.6.1 HTTP/1.1
Host: xamateur.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 23 Aug 2024 18:18:08 GMT
content-type: text/css
last-modified: Wed, 19 Jun 2024 01:47:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2217
date: Fri, 16 Aug 2024 18:18:08 GMT
X-Firefox-Spdy: h2
GET wh.cdntrex.com/contents/videos_screenshots/113000/113804/290x163/3.jpg
194.242.11.186200 OK 13 kB URL
wh.cdntrex.com/contents/videos_screenshots/113000/113804/290x163/3.jpg
IP / ASN
194.242.11.186
#34989 ServeTheWorld AS
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 290x163, components 3
First Seen 2024-06-01
Last Seen 2025-07-24
Times Seen 24
Size 13 kB (12573 bytes)
MD5 1159361ca5a9e5a19e437f7c2259a113
SHA1 a1cef49311cffd501523be3404f2ad687cba2350
SHA256 29c2bc80337b83b769a8bbdc6873820c54ccce8f28bcdbeb17cb659c796f8072
Certificate Info
Issuer Let's Encrypt
Subject wh.cdntrex.com
Fingerprint 37:50:9C:3C:74:CF:3D:87:E2:6C:5F:8F:D3:7E:3E:27:23:4F:EB:3E
Validity Sat, 10 Aug 2024 03:14:10 GMT - Fri, 08 Nov 2024 03:14:09 GMT
GET /contents/videos_screenshots/113000/113804/290x163/3.jpg HTTP/1.1
Host: wh.cdntrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: image/jpeg
content-length: 12573
server: BunnyCDN-NO1-830
cdn-pullzone: 1799186
cdn-uid: b7cd2495-dc22-4681-953c-5c2643001875
cdn-requestcountrycode: NO
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: "6386f8b9-311d"
last-modified: Wed, 30 Nov 2022 06:31:21 GMT
cdn-cachedat: 06/27/2024 20:28:02
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 4db358e6853351d91f01be185ecd24d8
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET wh.cdntrex.com/contents/videos_screenshots/10000/10286/290x163/6.jpg
194.242.11.186200 OK 12 kB URL
wh.cdntrex.com/contents/videos_screenshots/10000/10286/290x163/6.jpg
IP / ASN
194.242.11.186
#34989 ServeTheWorld AS
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 290x163, components 3
First Seen 2024-06-01
Last Seen 2025-07-24
Times Seen 29
Size 12 kB (12455 bytes)
MD5 a9ab5d5b6ed6d69a3c1778a46188a047
SHA1 f87ea2bf74297ec56b1646318b4b17b23c4032a9
SHA256 c530edb1712816d9f31abd4882a8a4f4375c05bfe835723c4400084bec430ab2
Certificate Info
Issuer Let's Encrypt
Subject wh.cdntrex.com
Fingerprint 37:50:9C:3C:74:CF:3D:87:E2:6C:5F:8F:D3:7E:3E:27:23:4F:EB:3E
Validity Sat, 10 Aug 2024 03:14:10 GMT - Fri, 08 Nov 2024 03:14:09 GMT
GET /contents/videos_screenshots/10000/10286/290x163/6.jpg HTTP/1.1
Host: wh.cdntrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: image/jpeg
content-length: 12455
server: BunnyCDN-NO1-830
cdn-pullzone: 1799186
cdn-uid: b7cd2495-dc22-4681-953c-5c2643001875
cdn-requestcountrycode: NO
cache-control: public, max-age=86400
etag: "60a7bb59-30a7"
last-modified: Fri, 21 May 2021 13:53:29 GMT
cdn-cachedat: 07/23/2024 21:29:47
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: a2a80e9bf9e36f85322ac8364c3b5b9f
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET wh.cdntrex.com/contents/videos_screenshots/292000/292693/290x163/10.jpg
194.242.11.186200 OK 13 kB URL
wh.cdntrex.com/contents/videos_screenshots/292000/292693/290x163/10.jpg
IP / ASN
194.242.11.186
#34989 ServeTheWorld AS
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 290x163, components 3
First Seen 2024-06-01
Last Seen 2025-05-23
Times Seen 52
Size 13 kB (12796 bytes)
MD5 5780e18a1a2e756d5caa9d75adbc3d66
SHA1 7da8b9bf252459e2e1e9f813fae3bdd03af9fd73
SHA256 98f51969f4be44a25af87199eda791b610c65f53c296c72a0b7b00a05e19a8a1
Certificate Info
Issuer Let's Encrypt
Subject wh.cdntrex.com
Fingerprint 37:50:9C:3C:74:CF:3D:87:E2:6C:5F:8F:D3:7E:3E:27:23:4F:EB:3E
Validity Sat, 10 Aug 2024 03:14:10 GMT - Fri, 08 Nov 2024 03:14:09 GMT
GET /contents/videos_screenshots/292000/292693/290x163/10.jpg HTTP/1.1
Host: wh.cdntrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: image/jpeg
content-length: 12796
server: BunnyCDN-NO1-830
cdn-pullzone: 1799186
cdn-uid: b7cd2495-dc22-4681-953c-5c2643001875
cdn-requestcountrycode: NO
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: "663682e9-31fc"
last-modified: Sat, 04 May 2024 18:48:09 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 05/04/2024 19:20:00
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 1f547121b8e75afebcd0b2fa5ccea7ef
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET wh.cdntrex.com/contents/videos_screenshots/184000/184178/290x163/10.jpg
194.242.11.186200 OK 10 kB URL
wh.cdntrex.com/contents/videos_screenshots/184000/184178/290x163/10.jpg
IP / ASN
194.242.11.186
#34989 ServeTheWorld AS
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 290x163, components 3
First Seen 2024-06-01
Last Seen 2024-09-28
Times Seen 21
Size 10 kB (10047 bytes)
MD5 1f67219ae8ef2d046ea872e8e11f7a46
SHA1 49732bfe1c2c5b4b3345df742e26417d57b379e3
SHA256 7921c6d3883e3b785f98e4ea19d7e0344cfc5783a9da0dbca4b5df3e73b049aa
Certificate Info
Issuer Let's Encrypt
Subject wh.cdntrex.com
Fingerprint 37:50:9C:3C:74:CF:3D:87:E2:6C:5F:8F:D3:7E:3E:27:23:4F:EB:3E
Validity Sat, 10 Aug 2024 03:14:10 GMT - Fri, 08 Nov 2024 03:14:09 GMT
GET /contents/videos_screenshots/184000/184178/290x163/10.jpg HTTP/1.1
Host: wh.cdntrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: image/jpeg
content-length: 10047
server: BunnyCDN-NO1-830
cdn-pullzone: 1799186
cdn-uid: b7cd2495-dc22-4681-953c-5c2643001875
cdn-requestcountrycode: NO
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: "649f5b6a-273f"
last-modified: Fri, 30 Jun 2023 22:47:06 GMT
cdn-cachedat: 07/14/2024 01:30:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 6efdd0b9332b988cf606b918f5aa3284
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET xamateur.net/wp-content/themes/xamateur/logo.png
38.62.224.71200 OK 2.1 kB URL
xamateur.net/wp-content/themes/xamateur/logo.png
IP / ASN
38.62.224.71
#55286 SERVER-MANIA
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type PNG image data, 164 x 30, 8-bit/color RGBA, non-interlaced
First Seen 2024-07-01
Last Seen 2025-07-24
Times Seen 45
Size 2.1 kB (2129 bytes)
MD5 18d0e1ba88030c0d71d90db233a12345
SHA1 fe9813da8e24b5556403ba270915d60286b1e426
SHA256 198f67a6936b2e960cfb2315aa2e36f12302537937e3c5cb7a62cbdcfb04d9c7
Certificate Info
Issuer Let's Encrypt
Subject *.xamateur.net
Fingerprint B7:01:1F:D0:9A:68:F7:E9:85:73:6D:7E:26:91:51:DA:D7:9A:BF:B2
Validity Tue, 18 Jun 2024 14:20:11 GMT - Mon, 16 Sep 2024 14:20:10 GMT
GET /wp-content/themes/xamateur/logo.png HTTP/1.1
Host: xamateur.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 23 Aug 2024 18:18:08 GMT
content-type: image/png
last-modified: Tue, 18 Jun 2024 17:16:05 GMT
accept-ranges: bytes
content-length: 2129
date: Fri, 16 Aug 2024 18:18:08 GMT
X-Firefox-Spdy: h2
r11.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 504 B (504 bytes)
MD5 6e5e37da911062d25a99f00a5b32cd6c
SHA1 3920281d7b397bba0af3c22f789db58ff73f6048
SHA256 ad8903ac56442274ce665f4b6b164fbed590cb88019733503e31504bae5d1ade
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "AD8903AC56442274CE665F4B6B164FBED590CB88019733503E31504BAE5D1ADE"
Last-Modified: Fri, 16 Aug 2024 08:51:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16884
Expires: Fri, 16 Aug 2024 22:59:32 GMT
Date: Fri, 16 Aug 2024 18:18:08 GMT
Connection: keep-alive
r11.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 504 B (504 bytes)
MD5 6e5e37da911062d25a99f00a5b32cd6c
SHA1 3920281d7b397bba0af3c22f789db58ff73f6048
SHA256 ad8903ac56442274ce665f4b6b164fbed590cb88019733503e31504bae5d1ade
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "AD8903AC56442274CE665F4B6B164FBED590CB88019733503E31504BAE5D1ADE"
Last-Modified: Fri, 16 Aug 2024 08:51:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16796
Expires: Fri, 16 Aug 2024 22:58:04 GMT
Date: Fri, 16 Aug 2024 18:18:08 GMT
Connection: keep-alive
o.pki.goog/wr2
142.250.74.131 472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2024-08-16
Last Seen 2024-08-19
Times Seen 1739
Size 472 B (472 bytes)
MD5 a5365af808a9fa27a9e738affb85cab1
SHA1 43b48fae8eca894f94f101abea0b189e9f8fd018
SHA256 b72058e8b4466a98e594b03460df3095e819aed95b059c97c9b950f3ff7f300f
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Aug 2024 18:18:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET ka-f.fontawesome.com/releases/v6.6.0/webfonts/free-fa-regular-400.woff2
172.67.139.119200 OK 26 kB URL
ka-f.fontawesome.com/releases/v6.6.0/webfonts/free-fa-regular-400.woff2
IP / ASN
172.67.139.119
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 25464, version 774.256
First Seen 2024-07-16
Last Seen 2025-07-05
Times Seen 144
Size 26 kB (25464 bytes)
MD5 f5e38eecd547d3ef0dd9e2666140c0c1
SHA1 75b072611d8b8c93ca061aa0147d6f909b95c1b2
SHA256 b6032fd81027dc0aff1a894802261e493ed3b041f625a27630e6bcfba0ea4ec6
Certificate Info
Issuer Google Trust Services
Subject ka-f.fontawesome.com
Fingerprint 6D:72:F5:B4:68:5B:A6:B0:2B:E9:FE:83:27:B3:F4:90:E8:F3:E9:0A
Validity Mon, 01 Jul 2024 12:54:00 GMT - Sun, 29 Sep 2024 12:53:59 GMT
GET /releases/v6.6.0/webfonts/free-fa-regular-400.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: font/woff2
content-length: 25464
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:44:07 GMT
etag: "f5e38eecd547d3ef0dd9e2666140c0c1"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KO71V4SUwVw0tuwG4DY7M9oCluQ9Y2zBcMl3NgNODz4hrm5HavB00g==
age: 2686558
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vdNH4rO16alzuAT2gjYbcVndMVqSZkFYvYooOfHwoRadQ2geiZcyOV3ijELsPIQRCO4Dlvy9SzhwVBcM%2BRPNhxFRrhsseMDTHvkmRLl2sxY1q7ksKpfHcZjHvTkGq3Q1G0Voo0QMUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b436cdb5eeb5694-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ka-f.fontawesome.com/releases/v6.6.0/webfonts/free-fa-solid-900.woff2
172.67.139.119200 OK 157 kB URL
ka-f.fontawesome.com/releases/v6.6.0/webfonts/free-fa-solid-900.woff2
IP / ASN
172.67.139.119
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 157192, version 774.256
First Seen 2024-07-16
Last Seen 2025-07-05
Times Seen 1282
Size 157 kB (157192 bytes)
MD5 76cf3ff0dbd23dd4504e2089f0df4acb
SHA1 bd2958cf51cc0a7b5c11a0b5c84101f35c2799a0
SHA256 340e6d7f301471e307e50c2ed43fe45debc8ebbf24febef17b24f0b06f8883f2
Certificate Info
Issuer Google Trust Services
Subject ka-f.fontawesome.com
Fingerprint 6D:72:F5:B4:68:5B:A6:B0:2B:E9:FE:83:27:B3:F4:90:E8:F3:E9:0A
Validity Mon, 01 Jul 2024 12:54:00 GMT - Sun, 29 Sep 2024 12:53:59 GMT
GET /releases/v6.6.0/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: font/woff2
content-length: 157192
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:44:08 GMT
etag: "76cf3ff0dbd23dd4504e2089f0df4acb"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: x6tC9VieGikHmPtUx4q575SYoAMO77ByVEAidHW4V1Yx2ybJVf27oQ==
age: 2686518
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=taXN1kPC%2BLOGRBbaUYCgwm1NfjcWfoTYf8l5UjJzI3vinqq32DM6%2FLX%2BR39Aj2p276c%2BL6bmLeeOpeRoh2Nqd1L0sexCwbWAjs%2FW%2Bz%2B8ERSJvIlQrVu2SdJex5yk2AldAsjWS1SisQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b436cdb5ee65694-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET allergicloaded.com/5cf462a734451347fbc73b8a22db6ba5/invoke.js
192.243.61.225200 OK 12 kB URL
allergicloaded.com/5cf462a734451347fbc73b8a22db6ba5/invoke.js
IP / ASN
192.243.61.225
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JavaScript source, ASCII text, with very long lines (30752), with no line terminators
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 12 kB (11891 bytes)
MD5 3418afa3b3e9825284a90518165978cd
SHA1 3632207ef2e85268ed42908da855c4669aa7a945
SHA256 7190d2ea24b01ec90cebd819ce006ebb9ae64b9a1657b55610bab6469262efd2
Certificate Info
Issuer Let's Encrypt
Subject allergicloaded.com
Fingerprint AC:2C:2E:01:5F:87:85:93:D5:86:52:1C:FC:26:3F:24:EC:6A:CE:F3
Validity Mon, 17 Jun 2024 14:24:18 GMT - Sun, 15 Sep 2024 14:24:17 GMT
GET /5cf462a734451347fbc73b8a22db6ba5/invoke.js HTTP/1.1
Host: allergicloaded.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 492bbbf82915abad18a457808cb37d80
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
o.pki.goog/wr2
142.250.74.131 472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2024-08-16
Last Seen 2024-08-19
Times Seen 1735
Size 472 B (472 bytes)
MD5 57748c830496d9d9e895a00c79663a28
SHA1 f3f24f86207313fcb8008c82bb3a553f85526da1
SHA256 82f2f03a686a7fec97033172589796ebea140ad872075fef832cd12b4bb5b1e4
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Aug 2024 18:18:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
142.250.74.131 472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2024-08-15
Last Seen 2024-08-19
Times Seen 1771
Size 472 B (472 bytes)
MD5 16f02f2d747fdaa09ab6f29214c606c2
SHA1 1629c911428c38c844d28a64f2d1c780d471b847
SHA256 bc140937cc2b96ca0d6170683ccb64a2bd9cb6f123296be4f5666aa890ba1bc6
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Aug 2024 18:18:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
142.250.74.131 472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2024-08-15
Last Seen 2024-08-19
Times Seen 1771
Size 472 B (472 bytes)
MD5 16f02f2d747fdaa09ab6f29214c606c2
SHA1 1629c911428c38c844d28a64f2d1c780d471b847
SHA256 bc140937cc2b96ca0d6170683ccb64a2bd9cb6f123296be4f5666aa890ba1bc6
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Aug 2024 18:18:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
o.pki.goog/wr2
142.250.74.131 472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2024-08-15
Last Seen 2024-08-19
Times Seen 1771
Size 472 B (472 bytes)
MD5 16f02f2d747fdaa09ab6f29214c606c2
SHA1 1629c911428c38c844d28a64f2d1c780d471b847
SHA256 bc140937cc2b96ca0d6170683ccb64a2bd9cb6f123296be4f5666aa890ba1bc6
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Aug 2024 18:18:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
216.58.207.227200 OK 28 kB URL
fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 28064, version 1.0
First Seen 2023-09-15
Last Seen 2025-07-16
Times Seen 2886
Size 28 kB (28064 bytes)
MD5 314d6364bbee6681d0b2364ee3555e2e
SHA1 c5aab803abe36bf664d7b7e2a3731cd849337006
SHA256 5a42c91e1ecc9b09346a1520d9a6f98074c13eebfb1cc87c4e82e5992beb685b
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint F2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
Validity Tue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
GET /s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28064
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Aug 2024 03:05:41 GMT
expires: Sun, 10 Aug 2025 03:05:41 GMT
cache-control: public, max-age=31536000
age: 573147
last-modified: Wed, 13 Sep 2023 23:22:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
216.58.207.227200 OK 28 kB URL
fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 28064, version 1.0
First Seen 2023-09-15
Last Seen 2025-07-16
Times Seen 2886
Size 28 kB (28064 bytes)
MD5 314d6364bbee6681d0b2364ee3555e2e
SHA1 c5aab803abe36bf664d7b7e2a3731cd849337006
SHA256 5a42c91e1ecc9b09346a1520d9a6f98074c13eebfb1cc87c4e82e5992beb685b
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint F2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
Validity Tue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
GET /s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28064
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Aug 2024 03:05:41 GMT
expires: Sun, 10 Aug 2025 03:05:41 GMT
cache-control: public, max-age=31536000
age: 573147
last-modified: Wed, 13 Sep 2023 23:22:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
216.58.207.227200 OK 28 kB URL
fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 28064, version 1.0
First Seen 2023-09-15
Last Seen 2025-07-16
Times Seen 2886
Size 28 kB (28064 bytes)
MD5 314d6364bbee6681d0b2364ee3555e2e
SHA1 c5aab803abe36bf664d7b7e2a3731cd849337006
SHA256 5a42c91e1ecc9b09346a1520d9a6f98074c13eebfb1cc87c4e82e5992beb685b
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint F2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
Validity Tue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
GET /s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28064
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Aug 2024 03:05:41 GMT
expires: Sun, 10 Aug 2025 03:05:41 GMT
cache-control: public, max-age=31536000
age: 573147
last-modified: Wed, 13 Sep 2023 23:22:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET allergicloaded.com/2f/f3/b1/2ff3b16c479ce8e4779f88ef6417fc33.js
192.243.61.225200 OK 16 kB URL
allergicloaded.com/2f/f3/b1/2ff3b16c479ce8e4779f88ef6417fc33.js
IP / ASN
192.243.61.225
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JavaScript source, ASCII text, with very long lines (44820), with no line terminators
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 16 kB (16192 bytes)
MD5 eaf583108e3ac46b34cb843dcf352ecc
SHA1 2a07585ec649684fd27ded85f82e1336b97e47fc
SHA256 b1e5e9208b98199bf9cdf7eb4d887109849bfe1cad7ac1e7e2758d60b7f6569e
Certificate Info
Issuer Let's Encrypt
Subject allergicloaded.com
Fingerprint AC:2C:2E:01:5F:87:85:93:D5:86:52:1C:FC:26:3F:24:EC:6A:CE:F3
Validity Mon, 17 Jun 2024 14:24:18 GMT - Sun, 15 Sep 2024 14:24:17 GMT
GET /2f/f3/b1/2ff3b16c479ce8e4779f88ef6417fc33.js HTTP/1.1
Host: allergicloaded.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 0ab9a7ea7cd6b51491caf03203fcee67
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
216.58.207.227200 OK 28 kB URL
fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 28064, version 1.0
First Seen 2023-09-15
Last Seen 2025-07-16
Times Seen 2886
Size 28 kB (28064 bytes)
MD5 314d6364bbee6681d0b2364ee3555e2e
SHA1 c5aab803abe36bf664d7b7e2a3731cd849337006
SHA256 5a42c91e1ecc9b09346a1520d9a6f98074c13eebfb1cc87c4e82e5992beb685b
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint F2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
Validity Tue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
GET /s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28064
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Aug 2024 03:05:41 GMT
expires: Sun, 10 Aug 2025 03:05:41 GMT
cache-control: public, max-age=31536000
age: 573147
last-modified: Wed, 13 Sep 2023 23:22:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
o.pki.goog/wr2
142.250.74.131 472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2024-08-15
Last Seen 2024-08-19
Times Seen 1771
Size 472 B (472 bytes)
MD5 16f02f2d747fdaa09ab6f29214c606c2
SHA1 1629c911428c38c844d28a64f2d1c780d471b847
SHA256 bc140937cc2b96ca0d6170683ccb64a2bd9cb6f123296be4f5666aa890ba1bc6
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Aug 2024 18:18:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m03.amazontrust.com/
54.230.218.11 471 B URL
ocsp.r2m03.amazontrust.com/
IP / ASN
54.230.218.11
#16509 AMAZON-02
Resource Info
File type data
First Seen 2024-08-16
Last Seen 2024-08-19
Times Seen 75
Size 471 B (471 bytes)
MD5 78779700491f06b9bd16853002a6d348
SHA1 ca0d2f857602a5dedef2b775e0614dab6db5ca25
SHA256 8d543f541355a80381314d76b890c6a3f43ded3b3bdf7472207d6a9ecc5b48be
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 16 Aug 2024 18:18:08 GMT
Last-Modified: Fri, 16 Aug 2024 17:14:43 GMT
Server: ECAcc (ska/F756)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nPm7Q9dX6fN9I8SlXiAXkfYrW6mEbExrUTTqYbPS4BYFufAntpHx1A==
Age: 3805
GET allergicloaded.com/5cf462a734451347fbc73b8a22db6ba5/invoke.js
192.243.61.225200 OK 12 kB URL
allergicloaded.com/5cf462a734451347fbc73b8a22db6ba5/invoke.js
IP / ASN
192.243.61.225
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JavaScript source, ASCII text, with very long lines (30731), with no line terminators
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 12 kB (11883 bytes)
MD5 0faa20f4cae9d7ce66639413eadb8224
SHA1 5264f3d8b5847c57a71f1e58ef4d833f0d42e1de
SHA256 72b4efa7105664a0434f6e7f9e26462f78d04a94ce08e2349c587f80aae44571
Certificate Info
Issuer Let's Encrypt
Subject allergicloaded.com
Fingerprint AC:2C:2E:01:5F:87:85:93:D5:86:52:1C:FC:26:3F:24:EC:6A:CE:F3
Validity Mon, 17 Jun 2024 14:24:18 GMT - Sun, 15 Sep 2024 14:24:17 GMT
GET /5cf462a734451347fbc73b8a22db6ba5/invoke.js HTTP/1.1
Host: allergicloaded.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: bd0c49d31929aff0f57ca31df6495993
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET proftrafficcounter.com/stats
3.123.210.174200 OK 40 B URL
proftrafficcounter.com/stats
IP / ASN
3.123.210.174
#16509 AMAZON-02
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with no line terminators
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 40 B (40 bytes)
MD5 51c87287ff61cb9e55a58f72fe62d7db
SHA1 d86597dca5f6faa9112b5dfe3dde0122ba1f1cac
SHA256 f446a8e3d308dde676709c70a98437a73fc88f5310987d4e77eae961c0f7448e
Certificate Info
Issuer Amazon
Subject proftrafficcounter.com
Fingerprint E3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
Validity Tue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://xamateur.net
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1; expires=Mon, 14 Aug 2034 18:18:08 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
o.pki.goog/wr2
142.250.74.131 471 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2024-08-15
Last Seen 2024-08-19
Times Seen 1308
Size 471 B (471 bytes)
MD5 3364db6f735ed6d26ae1954e70020cc6
SHA1 56f996818100b5e5c55f01feec8192a2eee7c76a
SHA256 f1bd1e795055d63851f4d59895911666ebfa8f89cc593bc182a599c5bc4cc5f6
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Aug 2024 18:18:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET ka-f.fontawesome.com/releases/v6.6.0/css/free.min.css?token=1e1169734c
172.67.139.119200 OK 192 kB URL
ka-f.fontawesome.com/releases/v6.6.0/css/free.min.css?token=1e1169734c
IP / ASN
172.67.139.119
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type gzip compressed data, from Unix
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 192 kB (191835 bytes)
MD5 db124522cc942ef9cc2ac96f4da9236b
SHA1 5e683e72c0cb7908b4f9466b46323f32daa491a5
SHA256 ff9a54db4bb6d3bc0c46fe4ec04eeb504fd7043d17dc038a618a55e87b90f6dc
Certificate Info
Issuer Google Trust Services
Subject ka-f.fontawesome.com
Fingerprint 6D:72:F5:B4:68:5B:A6:B0:2B:E9:FE:83:27:B3:F4:90:E8:F3:E9:0A
Validity Mon, 01 Jul 2024 12:54:00 GMT - Sun, 29 Sep 2024 12:53:59 GMT
GET /releases/v6.6.0/css/free.min.css?token=1e1169734c HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xamateur.net/
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:20:40 GMT
etag: W/"4ca760f49cd8a14911c81e6c14328874"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4SPwtMI1DeRyZ9eyLHGkHOiMWLDHV8CExeS2Q0uIzDX1ZGZe-NcRBw==
age: 2686518
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UJEwLmTEwNyVb%2FsP2C634coLK%2BjIcFRyP1hQW0FQs6yNI7fJKOqlolD31rgV4lHZnCoKzNpaaXRFF649tH2Gq6N5A%2FGYHAbXMutdxtImnpHluoNb5hovS2aOtGmxw5d4bk2pxPXn8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b436cd9cc885694-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ka-f.fontawesome.com/releases/v6.6.0/css/free-v4-font-face.min.css?token=1e1169734c
172.67.139.119200 OK 681 B URL
ka-f.fontawesome.com/releases/v6.6.0/css/free-v4-font-face.min.css?token=1e1169734c
IP / ASN
172.67.139.119
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type gzip compressed data, from Unix
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 681 B (681 bytes)
MD5 03a34eaf904054754338af1302e94095
SHA1 948729ac7304b9fed6cb66a0bfd82f3c6fcb24bd
SHA256 14c6cfa66d2aeab2ea2c26e372b864d13addb01cbff2652d668d384e607ba558
Certificate Info
Issuer Google Trust Services
Subject ka-f.fontawesome.com
Fingerprint 6D:72:F5:B4:68:5B:A6:B0:2B:E9:FE:83:27:B3:F4:90:E8:F3:E9:0A
Validity Mon, 01 Jul 2024 12:54:00 GMT - Sun, 29 Sep 2024 12:53:59 GMT
GET /releases/v6.6.0/css/free-v4-font-face.min.css?token=1e1169734c HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xamateur.net/
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:20:39 GMT
etag: W/"a5a0c9048efb7cb5df90023064d09ba4"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jNzwtErXrt4mnSG2ohur5qAOlifPiwrZGZKe1ESn6DXb_2k9OznggA==
age: 1267565
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K18djH8pC6wiF6wApIKJIOKkIdQxAVjlgDovOtp6NoOiGUumNodmGh2w%2F9q0UFnyet8AlNqZMLAIxKkewRS3r6PcU%2BKicL8J7B%2F3qrS%2FPGC0u3UKYgkzGn34h%2BlJt4CvIDr0sGI8Ew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b436cd9bc795694-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-8NJL4NZ93J
142.250.74.168200 OK 102 kB URL
www.googletagmanager.com/gtag/js?id=G-8NJL4NZ93J
IP / ASN
142.250.74.168
#15169 GOOGLE
Requested by https://www.whoreshub.com/embed/277574
Resource Info
File type JavaScript source, ASCII text, with very long lines (5945)
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 102 kB (101710 bytes)
MD5 eba43ca209747edb7a5f79bb77ef30ce
SHA1 5bd5b686b4a0d914bb37918080a151f4626bbc47
SHA256 f35bdcff19bf919c5b2c492fe2cb608291edc54ec5ff0bf369fa503aa4cc4b2b
Certificate Info
Issuer Google Trust Services
Subject *.google-analytics.com
Fingerprint 27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
Validity Tue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
GET /gtag/js?id=G-8NJL4NZ93J HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whoreshub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 16 Aug 2024 18:18:09 GMT
expires: Fri, 16 Aug 2024 18:18:09 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101710
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET proftrafficcounter.com/stats
3.123.210.174200 OK 40 B URL
proftrafficcounter.com/stats
IP / ASN
3.123.210.174
#16509 AMAZON-02
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with no line terminators
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 40 B (40 bytes)
MD5 51c87287ff61cb9e55a58f72fe62d7db
SHA1 d86597dca5f6faa9112b5dfe3dde0122ba1f1cac
SHA256 f446a8e3d308dde676709c70a98437a73fc88f5310987d4e77eae961c0f7448e
Certificate Info
Issuer Amazon
Subject proftrafficcounter.com
Fingerprint E3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
Validity Tue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Cookie: uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://xamateur.net
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
r11.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-15
Last Seen 2024-08-19
Times Seen 45417
Size 504 B (504 bytes)
MD5 3c14cfb85dc9ceb923d7d3c3648719d2
SHA1 10ea83f83398870f50ca771216ad77bd95aa66cc
SHA256 bc868b2a34fe0c66d7a2dc1754676cc4031891c797fdd23e82d135559bd82c1b
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BC868B2A34FE0C66D7A2DC1754676CC4031891C797FDD23E82D135559BD82C1B"
Last-Modified: Thu, 15 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17055
Expires: Fri, 16 Aug 2024 23:02:24 GMT
Date: Fri, 16 Aug 2024 18:18:09 GMT
Connection: keep-alive
r11.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-15
Last Seen 2024-08-19
Times Seen 45417
Size 504 B (504 bytes)
MD5 3c14cfb85dc9ceb923d7d3c3648719d2
SHA1 10ea83f83398870f50ca771216ad77bd95aa66cc
SHA256 bc868b2a34fe0c66d7a2dc1754676cc4031891c797fdd23e82d135559bd82c1b
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BC868B2A34FE0C66D7A2DC1754676CC4031891C797FDD23E82D135559BD82C1B"
Last-Modified: Thu, 15 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17055
Expires: Fri, 16 Aug 2024 23:02:24 GMT
Date: Fri, 16 Aug 2024 18:18:09 GMT
Connection: keep-alive
r11.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-15
Last Seen 2024-08-19
Times Seen 45417
Size 504 B (504 bytes)
MD5 3c14cfb85dc9ceb923d7d3c3648719d2
SHA1 10ea83f83398870f50ca771216ad77bd95aa66cc
SHA256 bc868b2a34fe0c66d7a2dc1754676cc4031891c797fdd23e82d135559bd82c1b
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BC868B2A34FE0C66D7A2DC1754676CC4031891C797FDD23E82D135559BD82C1B"
Last-Modified: Thu, 15 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17055
Expires: Fri, 16 Aug 2024 23:02:24 GMT
Date: Fri, 16 Aug 2024 18:18:09 GMT
Connection: keep-alive
GET xamateur.net/wp-includes/js/wp-emoji-release.min.js?ver=6.6.1
38.62.224.71200 OK 4.7 kB URL
xamateur.net/wp-includes/js/wp-emoji-release.min.js?ver=6.6.1
IP / ASN
38.62.224.71
#55286 SERVER-MANIA
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JavaScript source, ASCII text, with very long lines (15752)
First Seen 2024-03-13
Last Seen 2025-08-02
Times Seen 55133
Size 4.7 kB (4676 bytes)
MD5 b976b651932bfd25b9ddb5b7693d88a7
SHA1 7fcb7cb5c11227f9213b1e08a07d0212209e1432
SHA256 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
Certificate Info
Issuer Let's Encrypt
Subject *.xamateur.net
Fingerprint B7:01:1F:D0:9A:68:F7:E9:85:73:6D:7E:26:91:51:DA:D7:9A:BF:B2
Validity Tue, 18 Jun 2024 14:20:11 GMT - Mon, 16 Sep 2024 14:20:10 GMT
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.6.1 HTTP/1.1
Host: xamateur.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 23 Aug 2024 18:18:09 GMT
content-type: application/javascript
last-modified: Wed, 14 Feb 2024 00:06:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4676
date: Fri, 16 Aug 2024 18:18:09 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
GET fonts.googleapis.com/css2?family=Quicksand:wght@300;400;500;600;700&display=swap
142.250.74.106200 OK 1.0 kB URL
fonts.googleapis.com/css2?family=Quicksand:wght@300;400;500;600;700&display=swap
IP / ASN
142.250.74.106
#15169 GOOGLE
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type gzip compressed data, max compression
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 1.0 kB (1028 bytes)
MD5 172e24b38adcb6f21a03708b97b47ebf
SHA1 ac38d8cd684572fa66c1ef9c07cf8fe2ba52e117
SHA256 1bee090d65c9414a71641754c632f6f513cf17d540a81603812a51574573e75b
Certificate Info
Issuer Google Trust Services
Subject upload.video.google.com
Fingerprint C4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
Validity Tue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
GET /css2?family=Quicksand:wght@300;400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 16 Aug 2024 18:18:08 GMT
date: Fri, 16 Aug 2024 18:18:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
o.pki.goog/wr2
142.250.74.131 471 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2024-08-15
Last Seen 2024-08-19
Times Seen 1308
Size 471 B (471 bytes)
MD5 3364db6f735ed6d26ae1954e70020cc6
SHA1 56f996818100b5e5c55f01feec8192a2eee7c76a
SHA256 f1bd1e795055d63851f4d59895911666ebfa8f89cc593bc182a599c5bc4cc5f6
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Aug 2024 18:18:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET ka-f.fontawesome.com/releases/v6.6.0/css/free-v5-font-face.min.css?token=1e1169734c
172.67.139.119200 OK 32 kB URL
ka-f.fontawesome.com/releases/v6.6.0/css/free-v5-font-face.min.css?token=1e1169734c
IP / ASN
172.67.139.119
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with very long lines (608)
First Seen 2024-07-16
Last Seen 2025-07-19
Times Seen 510
Size 32 kB (32449 bytes)
MD5 8972ae5004bc634ffa6641be3960e78a
SHA1 235aecdfe4a45217d75fe7abfbb5b12e3b28cc6e
SHA256 7f264c31cdb355f351235359240c30acae2bbe0a43c73fa6a035123e6d953a01
Certificate Info
Issuer Google Trust Services
Subject ka-f.fontawesome.com
Fingerprint 6D:72:F5:B4:68:5B:A6:B0:2B:E9:FE:83:27:B3:F4:90:E8:F3:E9:0A
Validity Mon, 01 Jul 2024 12:54:00 GMT - Sun, 29 Sep 2024 12:53:59 GMT
GET /releases/v6.6.0/css/free-v5-font-face.min.css?token=1e1169734c HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xamateur.net/
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:20:39 GMT
etag: W/"8972ae5004bc634ffa6641be3960e78a"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kAHku7i2GG88k-I9cVF-SSTvCbBPH_7xz_dft9hgH48wjIl3aYSB5w==
age: 2686518
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tvXW7URKsS20hmxK7XD9E7apnTN2uR9%2Bni%2BdiMB7OmBRMw5dTYY%2FjUvkpOCh6htJVWOiRRVhFOqaP73KN4Azad71DCf0cg9rrCYR8g5MK7c8QdvirHyoyPEWGdptQWcLHXxpffvqLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b436cd9bc6e5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.whoreshub.com/player/skin/fonts/ktplayeryt.ttf?wqseia
45.150.66.8200 OK 2.3 kB URL
www.whoreshub.com/player/skin/fonts/ktplayeryt.ttf?wqseia
IP / ASN
45.150.66.8
#200195 Verasel, Inc.
Requested by https://www.whoreshub.com/embed/277574
Resource Info
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, ktplayeryt
First Seen 2023-04-07
Last Seen 2025-08-01
Times Seen 1222
Size 2.3 kB (2264 bytes)
MD5 c89ca428be45c3c212c5658a05823a10
SHA1 74916a018bea5b27c223f164e2355ddb78422b4f
SHA256 bf86d8eb9277b69e2c6202ca711c3b19c64a2a9a8cf4ba7bc33bdecacfb8a0b2
Certificate Info
Issuer Let's Encrypt
Subject whoreshub.com
Fingerprint 54:AF:6A:A1:1A:44:C4:1B:5B:42:FA:A6:05:CA:98:90:00:E1:9A:C7
Validity Sun, 11 Aug 2024 10:46:00 GMT - Sat, 09 Nov 2024 10:45:59 GMT
GET /player/skin/fonts/ktplayeryt.ttf?wqseia HTTP/1.1
Host: www.whoreshub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whoreshub.com/player/skin/youtube.css
Cookie: PHPSESSID=meukosofa07os41b6klr0mtn1d; kt_ips=91.90.42.154
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: application/octet-stream
content-length: 2264
last-modified: Wed, 25 Mar 2020 08:56:14 GMT
etag: "5e7b1cae-8d8"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r11.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-16
Last Seen 2024-08-19
Times Seen 41
Size 504 B (504 bytes)
MD5 7832b592ce516e8e3afffdeaa5f3fdd4
SHA1 690162de91ce60606e0ec4f419f871d0b69a7714
SHA256 fe32dec4f9bf71d612c86285de1baa007ab167447ec33586eed92567da04b310
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "FE32DEC4F9BF71D612C86285DE1BAA007AB167447EC33586EED92567DA04B310"
Last-Modified: Fri, 16 Aug 2024 10:51:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17014
Expires: Fri, 16 Aug 2024 23:01:43 GMT
Date: Fri, 16 Aug 2024 18:18:09 GMT
Connection: keep-alive
r10.o.lencr.org/
23.33.119.27 504 B IP / ASN
23.33.119.27
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-15
Last Seen 2024-08-19
Times Seen 18
Size 504 B (504 bytes)
MD5 47652e8b8859f70c735b8ddd6245fa70
SHA1 e03592b61a674321e7c09fed21e200b7cbf202ec
SHA256 daa8048669282095af07259ea6c2bbf3ee799d2447fc795ebcdb09c129a787ae
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DAA8048669282095AF07259EA6C2BBF3EE799D2447FC795EBCDB09C129A787AE"
Last-Modified: Wed, 14 Aug 2024 05:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17672
Expires: Fri, 16 Aug 2024 23:12:41 GMT
Date: Fri, 16 Aug 2024 18:18:09 GMT
Connection: keep-alive
GET corneredsedatetedious.com/watch.1536932714890.js?key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&tz=0&dev=e&res=14.2071&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
192.243.61.227307 Temporary Redirect 0 B URL
corneredsedatetedious.com/watch.1536932714890.js?key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&tz=0&dev=e&res=14.2071&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
IP / ASN
192.243.61.227
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject corneredsedatetedious.com
Fingerprint FC:09:C7:E4:D6:50:99:11:44:52:1F:E0:2A:25:86:F6:DC:CB:1D:B8
Validity Thu, 27 Jun 2024 14:04:06 GMT - Wed, 25 Sep 2024 14:04:05 GMT
GET /watch.1536932714890.js?key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&tz=0&dev=e&res=14.2071&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1 HTTP/1.1
Host: corneredsedatetedious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:09 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xamateur.net
Access-Control-Allow-Origin: https://xamateur.net
Access-Control-Allow-Credentials: true
Location: https://corneredsedatetedious.com/watch.1536932714890.js?dev=e&key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&pst=1723832349&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&res=14.2071&rmtc=t&shu=b22ca6135d9b8e7a1d30bdc2276d83f04d9699436e22047283060fb8febb2c84087b5ecfeed598189af63597964ac5a3f8768d446c2f80d453ca4ebb18a67b14217993af244759aa15eadee1ede9d31729733f1bcdb2490f25f8e54615026a&tz=0&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
Set-Cookie: u_pl=23515790; expires=Sat, 17 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.BxNqYvy5Plz0KJmeVhzQw7Xjj_cJSywLjjlbtYsv5Rw; expires=Fri, 16 Aug 2024 18:19:09 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: cadc3fa0bb28bd0fc221df8a30c02764
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET softenedcollar.com/watch.715715250560.js?key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&tz=0&dev=e&res=14.2071&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
192.243.59.20307 Temporary Redirect 0 B URL
softenedcollar.com/watch.715715250560.js?key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&tz=0&dev=e&res=14.2071&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
IP / ASN
192.243.59.20
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject softenedcollar.com
Fingerprint 78:F9:34:B9:DC:C5:CA:E3:77:61:C8:FC:4E:DF:55:AD:DD:ED:F5:81
Validity Thu, 01 Aug 2024 14:39:08 GMT - Wed, 30 Oct 2024 14:39:07 GMT
GET /watch.715715250560.js?key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&tz=0&dev=e&res=14.2071&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1 HTTP/1.1
Host: softenedcollar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Fri, 16 Aug 2024 18:18:09 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xamateur.net
Access-Control-Allow-Origin: https://xamateur.net
Access-Control-Allow-Credentials: true
Location: https://softenedcollar.com/watch.715715250560.js?dev=e&key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&pst=1723832349&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&res=14.2071&rmtc=t&shu=3e70714c925c8d2d8f5b0a88ce54549f37db685a6b560f54a9e38bdb306c7b2c682a099042c4543bf206fa9466b49b607b3a32493129d5d23486e725b5c6008d02e7426efb90efce5452c89c03456a7cf51a430e9c06483c4252535c99&tz=0&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
Set-Cookie: u_pl=23515790; expires=Sat, 17 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.BxNqYvy5Plz0KJmeVhzQw7Xjj_cJSywLjjlbtYsv5Rw; expires=Fri, 16 Aug 2024 18:19:09 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 47e46efe6c453177ca5b384c24e11e08
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET corneredsedatetedious.com/watch.1536932714890.js?dev=e&key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&pst=1723832349&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&res=14.2071&rmtc=t&shu=b22ca6135d9b8e7a1d30bdc2276d83f04d9699436e22047283060fb8febb2c84087b5ecfeed598189af63597964ac5a3f8768d446c2f80d453ca4ebb18a67b14217993af244759aa15eadee1ede9d31729733f1bcdb2490f25f8e54615026a&tz=0&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
192.243.61.227200 OK 2.4 kB URL
corneredsedatetedious.com/watch.1536932714890.js?dev=e&key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&pst=1723832349&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&res=14.2071&rmtc=t&shu=b22ca6135d9b8e7a1d30bdc2276d83f04d9699436e22047283060fb8febb2c84087b5ecfeed598189af63597964ac5a3f8768d446c2f80d453ca4ebb18a67b14217993af244759aa15eadee1ede9d31729733f1bcdb2490f25f8e54615026a&tz=0&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
IP / ASN
192.243.61.227
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JavaScript source, ASCII text, with very long lines (2935)
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 2.4 kB (2352 bytes)
MD5 9457e35668e9f86dc988aafec10fd423
SHA1 021b4fdb3d020e2b7ae3d269e8f27360b658413e
SHA256 9aa2a4a832179d90749b5d87a0db2631d934caaed2f522c9642b6472eca88525
Certificate Info
Issuer Let's Encrypt
Subject corneredsedatetedious.com
Fingerprint FC:09:C7:E4:D6:50:99:11:44:52:1F:E0:2A:25:86:F6:DC:CB:1D:B8
Validity Thu, 27 Jun 2024 14:04:06 GMT - Wed, 25 Sep 2024 14:04:05 GMT
GET /watch.1536932714890.js?dev=e&key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&pst=1723832349&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&res=14.2071&rmtc=t&shu=b22ca6135d9b8e7a1d30bdc2276d83f04d9699436e22047283060fb8febb2c84087b5ecfeed598189af63597964ac5a3f8768d446c2f80d453ca4ebb18a67b14217993af244759aa15eadee1ede9d31729733f1bcdb2490f25f8e54615026a&tz=0&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1 HTTP/1.1
Host: corneredsedatetedious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
Referer: https://xamateur.net/
DNT: 1
Connection: keep-alive
Cookie: u_pl=23515790; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMzUxNTc5MCwiayI6IjVjZjQ2MmE3MzQ0NTEzNDdmYmM3M2I4YTIyZGI2YmE1Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozOTQyMDY1LCJwaWQiOjE3MjQ5NjEsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MTYsImFpZCI6NSwicHQiOjQsInBrIjoiZjNkaTN3ZTkiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly94YW1hdGV1ci5uZXQvZHlrZS1zdHVkZW50LXRha2VzLXJldmVuZ2Utb24tdGVhY2hlci1hbmQtaGVyLWJpZy1hc3MvP3JlZj02NmJmOTI1NjdiNzc0IiwiYXIiOltdfX0.BxNqYvy5Plz0KJmeVhzQw7Xjj_cJSywLjjlbtYsv5Rw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xamateur.net
Access-Control-Allow-Origin: https://xamateur.net
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1; expires=Fri, 23 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sat, 17 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sat, 17 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
pdhtkv5=true; expires=Sat, 17 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
uncs5=1; expires=Sat, 17 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 9ef52ea81f18e02ee297242f3c08274c
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r10.o.lencr.org/
23.33.119.27 504 B IP / ASN
23.33.119.27
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-14
Last Seen 2024-08-19
Times Seen 17
Size 504 B (504 bytes)
MD5 171af251ac0369e124ef5376c5f36fbb
SHA1 787a133e95eb6d017200fab5c51ef34090f3ba40
SHA256 f788da122ed294b96ed625ba279ece16b2825e940889cedc5d8120ce5df2b6b6
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F788DA122ED294B96ED625BA279ECE16B2825E940889CEDC5D8120CE5DF2B6B6"
Last-Modified: Wed, 14 Aug 2024 04:25:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6282
Expires: Fri, 16 Aug 2024 20:02:51 GMT
Date: Fri, 16 Aug 2024 18:18:09 GMT
Connection: keep-alive
r10.o.lencr.org/
23.33.119.27 504 B IP / ASN
23.33.119.27
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-16
Last Seen 2024-08-19
Times Seen 97
Size 504 B (504 bytes)
MD5 b5074487cd11a325fda4624ac1051c52
SHA1 0b60ad983d366aa2b5ebd98b19513536d861b8b6
SHA256 7b86ad7070910367715ac9194dc175109438e1c4fa5d8c49493af298b0799dfb
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "7B86AD7070910367715AC9194DC175109438E1C4FA5D8C49493AF298B0799DFB"
Last-Modified: Fri, 16 Aug 2024 06:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15926
Expires: Fri, 16 Aug 2024 22:43:35 GMT
Date: Fri, 16 Aug 2024 18:18:09 GMT
Connection: keep-alive
GET www.whoreshub.com/player/skin/youtube.css
45.150.66.8200 OK 7.6 kB URL
www.whoreshub.com/player/skin/youtube.css
IP / ASN
45.150.66.8
#200195 Verasel, Inc.
Requested by https://www.whoreshub.com/embed/277574
Resource Info
File type ASCII text, with very long lines (2944), with CRLF, LF line terminators
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 7.6 kB (7604 bytes)
MD5 f27f145c7c3957be7ee8c3c1381e7ef2
SHA1 ade1556c810768862e48b00a7d3fbd75ea5b7a62
SHA256 ba06f178ab6683b210ca642f5fdbd3d3ac40291b7c1c6ff26e065abc83132b0f
Certificate Info
Issuer Let's Encrypt
Subject whoreshub.com
Fingerprint 54:AF:6A:A1:1A:44:C4:1B:5B:42:FA:A6:05:CA:98:90:00:E1:9A:C7
Validity Sun, 11 Aug 2024 10:46:00 GMT - Sat, 09 Nov 2024 10:45:59 GMT
GET /player/skin/youtube.css HTTP/1.1
Host: www.whoreshub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whoreshub.com/embed/277574
Cookie: PHPSESSID=meukosofa07os41b6klr0mtn1d; kt_ips=91.90.42.154
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: text/css
last-modified: Mon, 08 Apr 2024 18:51:10 GMT
vary: Accept-Encoding
etag: W/"66143c9e-81a5"
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET tuckedmajor.com/sbar.json?key=2ff3b16c479ce8e4779f88ef6417fc33&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
172.240.108.84200 OK 8.4 kB URL
tuckedmajor.com/sbar.json?key=2ff3b16c479ce8e4779f88ef6417fc33&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
IP / ASN
172.240.108.84
#7979 SERVERS-COM
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JSON text data
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 8.4 kB (8439 bytes)
MD5 531673923cb0f37e9812246c82b9e291
SHA1 4494fd1640f3b3d74873d5dab1cef597d27f2aa4
SHA256 9b45b33d4466df7268cbb19e5d09bfc0336e9a0ba35ac00203ff0fd323ce9d51
Certificate Info
Issuer Let's Encrypt
Subject tuckedmajor.com
Fingerprint AC:8F:6E:82:AE:4A:37:71:9B:F3:5F:F4:26:C1:31:A6:91:96:8A:D9
Validity Thu, 01 Aug 2024 15:02:22 GMT - Wed, 30 Oct 2024 15:02:21 GMT
GET /sbar.json?key=2ff3b16c479ce8e4779f88ef6417fc33&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1 HTTP/1.1
Host: tuckedmajor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:10 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xamateur.net
Access-Control-Allow-Origin: https://xamateur.net
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=23515696; expires=Sat, 17 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1; expires=Fri, 23 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sat, 17 Aug 2024 18:18:10 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sat, 17 Aug 2024 18:18:10 GMT; path=/; secure; SameSite=None
pdhtkv29=true; expires=Sat, 17 Aug 2024 18:18:10 GMT; path=/; secure; SameSite=None
uncs29=1; expires=Sat, 17 Aug 2024 18:18:10 GMT; path=/; secure; SameSite=None
slec2ff3b16c479ce8e4779f88ef6417fc33=[4243974,4243976]; expires=Fri, 16 Aug 2024 18:18:15 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c3115aeeacc3d40906d0acf8c95642d2
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET cdn.cloudimagesb.com/cti/79/07/d3/7907d3ed952513392cee300bc6f8ad4f/1627979066.png
45.133.44.9200 OK 166 kB URL
cdn.cloudimagesb.com/cti/79/07/d3/7907d3ed952513392cee300bc6f8ad4f/1627979066.png
IP / ASN
45.133.44.9
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
First Seen 2023-04-07
Last Seen 2025-07-16
Times Seen 97
Size 166 kB (165898 bytes)
MD5 2e39c81ce4ae6b75e778515ee4fb89cf
SHA1 103bdca2ed274a7561c28234f1f7e339af7687e5
SHA256 288b3a857f9cff99b1425cfc54346aeee3af567185b0001c2acf414897d8b059
Certificate Info
Issuer Let's Encrypt
Subject cdn.cloudimagesb.com
Fingerprint C4:E5:6E:E8:15:37:9B:58:9E:AA:84:E9:B0:65:53:C9:88:43:C1:59
Validity Sat, 20 Jul 2024 04:00:43 GMT - Fri, 18 Oct 2024 04:00:42 GMT
GET /cti/79/07/d3/7907d3ed952513392cee300bc6f8ad4f/1627979066.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: image/png
content-length: 165898
server: nginx/1.21.6
last-modified: Tue, 03 Aug 2021 08:24:35 GMT
etag: "6108fd43-2880a"
expires: Sun, 18 Aug 2024 18:18:09 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ds5859
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn.cloudimagesb.com/cti/96/64/f2/9664f226fa61ddbdd7ebea02d8e43bbf/1627979045.png
45.133.44.9200 OK 150 kB URL
cdn.cloudimagesb.com/cti/96/64/f2/9664f226fa61ddbdd7ebea02d8e43bbf/1627979045.png
IP / ASN
45.133.44.9
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
First Seen 2023-05-05
Last Seen 2025-07-22
Times Seen 99
Size 150 kB (149685 bytes)
MD5 e7d35967d5b4bada68ebcfd8adf31493
SHA1 e03ab93358befd526f05f2fa8197b98e07a50bea
SHA256 6ba59bc77806df1b35b248a8f1315cf2fc0d8def3282e6d2f6246594e0608730
Certificate Info
Issuer Let's Encrypt
Subject cdn.cloudimagesb.com
Fingerprint C4:E5:6E:E8:15:37:9B:58:9E:AA:84:E9:B0:65:53:C9:88:43:C1:59
Validity Sat, 20 Jul 2024 04:00:43 GMT - Fri, 18 Oct 2024 04:00:42 GMT
GET /cti/96/64/f2/9664f226fa61ddbdd7ebea02d8e43bbf/1627979045.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:10 GMT
content-type: image/png
content-length: 149685
server: nginx/1.21.6
last-modified: Tue, 03 Aug 2021 08:24:14 GMT
etag: "6108fd2e-248b5"
expires: Sun, 18 Aug 2024 18:18:10 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ds5859
accept-ranges: bytes
X-Firefox-Spdy: h2
r10.o.lencr.org/
23.33.119.27 504 B IP / ASN
23.33.119.27
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-16
Last Seen 2024-08-19
Times Seen 40
Size 504 B (504 bytes)
MD5 21c576ac4ed3c9959fcd0db04ffe58c6
SHA1 a05617bb287795275111af05f3324905f38686fa
SHA256 b07c33e8cac5b0372cb4c0edbfc2be5fa97cc14b2e1d3601335dfe1cdaaf0061
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B07C33E8CAC5B0372CB4C0EDBFC2BE5FA97CC14B2E1D3601335DFE1CDAAF0061"
Last-Modified: Fri, 16 Aug 2024 07:11:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11369
Expires: Fri, 16 Aug 2024 21:27:39 GMT
Date: Fri, 16 Aug 2024 18:18:10 GMT
Connection: keep-alive
GET tuckedmajor.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitng0i7EVlQVGEEUUUzKR7fnTPuMJqjNFg3F2zit6kuqp6Uk71D6v6xySn4ILscfDitfMm2aAbxL15cZWeBQ%2BBxR1POZiD%2F4LgTZAZg6Pfob%2Fv9XsFr95XX%2BxnZ6SJjJ6uvRfvSqXoSqdh11%2F62HEu1zdllA3rw677idu%2BXNf5qz23Yb9cf1uwQbzStB3bdmynvi61COLhyoyETI57TqNnN9rNhtNpY6j%2Fj01mwVALPD8jT0Dy6dJ96xIkqxCF360JM0jj5JW3wkzRNNbI%2BdGH0SCKiwjhYgy0hSA6OlcjNg%2FX7yGODud2Eef%2FCn05JdbP9%2BBHR%2Bcm4ecHc5%2B%2Bgojg84so8gpCVZC0AotvQvKHBGAcV68hCm9fjXVBd%2F5h6YydkqU%2F%2F4AspmTpt0uIwm9XlRzWb8QqS2UcGQyDEnJYQfYrJNkE6W4NspiApZ9D8gfEfvIiovDOO5Pvczmo50IPIPnpC9zr9pxOQJd95onldiD8Zep02DJrBb2O53e6HSbmOUlZQQYVlBiBmgvIjIVMWsgCC1liIeSndeY4jmdzRu1uj7EW94TvctuhXuBQx3a7yNjsKiOkyQhMjcD0HhK9h4EcQWc%2FwWyXMLwGk06J9f4ecl6iEASFISgoQSEJipSgyMtDrkzTlLe5MpnvnPfmeW%2BV4zjt79PDOO2L6ClQPYLm5X5yRh6fZWkFUxsDcVpvBkHLd1zW9npMdEXb83pBtysCt%2B14AWu1YGQJaWqgxsKunJLXXryLRE7J01vPwacTGDUBk4%2BBZs%2BCFiXodond6HhIQ5qKTDcikYLHJZJ0CemOta%2FOyDPzbb5ePQLBTq78QuYFpkskusSn8j5BX90ab8UFOdiKC0PuXktSGcpdOtv0jZSm4sI374qdItZ8Y82Mvn6DzYjZePyBMOkmjbiM%2BobcWZWcC70eaybIDxvmI%2BFfz8z2aqajLNm8%2Fub6RphoYYyMowpUTgmpPgOTU3LxrwfzR%2Fy8VpC6gs5KhNkJOS%2FIeAKW7MEkC%2F8mJtBqofETC0VWjnXTX%2FxUkkCJBaZ%2BCfMf7C%2Fmsaaz01SW%2B%2BYW%2BroGmt5EFJbIdYlclaBqBJNdGKeJPrnya2te8FVt7CtdO%2FCVVl%2FOY559HoWRp3Wv1bKp2%2Bs4nkeF57eb3cB1OKXNttt0XdpCaqbBj1%2F9%2FncAAAD%2F%2F1MuQDmeBAAA
172.240.108.84200 OK 7 B URL
tuckedmajor.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitng0i7EVlQVGEEUUUzKR7fnTPuMJqjNFg3F2zit6kuqp6Uk71D6v6xySn4ILscfDitfMm2aAbxL15cZWeBQ%2BBxR1POZiD%2F4LgTZAZg6Pfob%2Fv9XsFr95XX%2BxnZ6SJjJ6uvRfvSqXoSqdh11%2F62HEu1zdllA3rw677idu%2BXNf5qz23Yb9cf1uwQbzStB3bdmynvi61COLhyoyETI57TqNnN9rNhtNpY6j%2Fj01mwVALPD8jT0Dy6dJ96xIkqxCF360JM0jj5JW3wkzRNNbI%2BdGH0SCKiwjhYgy0hSA6OlcjNg%2FX7yGODud2Eef%2FCn05JdbP9%2BBHR%2Bcm4ecHc5%2B%2Bgojg84so8gpCVZC0AotvQvKHBGAcV68hCm9fjXVBd%2F5h6YydkqU%2F%2F4AspmTpt0uIwm9XlRzWb8QqS2UcGQyDEnJYQfYrJNkE6W4NspiApZ9D8gfEfvIiovDOO5Pvczmo50IPIPnpC9zr9pxOQJd95onldiD8Zep02DJrBb2O53e6HSbmOUlZQQYVlBiBmgvIjIVMWsgCC1liIeSndeY4jmdzRu1uj7EW94TvctuhXuBQx3a7yNjsKiOkyQhMjcD0HhK9h4EcQWc%2FwWyXMLwGk06J9f4ecl6iEASFISgoQSEJipSgyMtDrkzTlLe5MpnvnPfmeW%2BV4zjt79PDOO2L6ClQPYLm5X5yRh6fZWkFUxsDcVpvBkHLd1zW9npMdEXb83pBtysCt%2B14AWu1YGQJaWqgxsKunJLXXryLRE7J01vPwacTGDUBk4%2BBZs%2BCFiXodond6HhIQ5qKTDcikYLHJZJ0CemOta%2FOyDPzbb5ePQLBTq78QuYFpkskusSn8j5BX90ab8UFOdiKC0PuXktSGcpdOtv0jZSm4sI374qdItZ8Y82Mvn6DzYjZePyBMOkmjbiM%2BobcWZWcC70eaybIDxvmI%2BFfz8z2aqajLNm8%2Fub6RphoYYyMowpUTgmpPgOTU3LxrwfzR%2Fy8VpC6gs5KhNkJOS%2FIeAKW7MEkC%2F8mJtBqofETC0VWjnXTX%2FxUkkCJBaZ%2BCfMf7C%2Fmsaaz01SW%2B%2BYW%2BroGmt5EFJbIdYlclaBqBJNdGKeJPrnya2te8FVt7CtdO%2FCVVl%2FOY559HoWRp3Wv1bKp2%2Bs4nkeF57eb3cB1OKXNttt0XdpCaqbBj1%2F9%2FncAAAD%2F%2F1MuQDmeBAAA
IP / ASN
172.240.108.84
#7979 SERVERS-COM
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with no line terminators
First Seen 2023-04-05
Last Seen 2025-08-01
Times Seen 19106
Size 7 B (7 bytes)
MD5 132d6af1b46048b45cf86cdee7991d31
SHA1 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
SHA256 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Certificate Info
Issuer Let's Encrypt
Subject tuckedmajor.com
Fingerprint AC:8F:6E:82:AE:4A:37:71:9B:F3:5F:F4:26:C1:31:A6:91:96:8A:D9
Validity Thu, 01 Aug 2024 15:02:22 GMT - Wed, 30 Oct 2024 15:02:21 GMT
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitng0i7EVlQVGEEUUUzKR7fnTPuMJqjNFg3F2zit6kuqp6Uk71D6v6xySn4ILscfDitfMm2aAbxL15cZWeBQ%2BBxR1POZiD%2F4LgTZAZg6Pfob%2Fv9XsFr95XX%2BxnZ6SJjJ6uvRfvSqXoSqdh11%2F62HEu1zdllA3rw677idu%2BXNf5qz23Yb9cf1uwQbzStB3bdmynvi61COLhyoyETI57TqNnN9rNhtNpY6j%2Fj01mwVALPD8jT0Dy6dJ96xIkqxCF360JM0jj5JW3wkzRNNbI%2BdGH0SCKiwjhYgy0hSA6OlcjNg%2FX7yGODud2Eef%2FCn05JdbP9%2BBHR%2Bcm4ecHc5%2B%2Bgojg84so8gpCVZC0AotvQvKHBGAcV68hCm9fjXVBd%2F5h6YydkqU%2F%2F4AspmTpt0uIwm9XlRzWb8QqS2UcGQyDEnJYQfYrJNkE6W4NspiApZ9D8gfEfvIiovDOO5Pvczmo50IPIPnpC9zr9pxOQJd95onldiD8Zep02DJrBb2O53e6HSbmOUlZQQYVlBiBmgvIjIVMWsgCC1liIeSndeY4jmdzRu1uj7EW94TvctuhXuBQx3a7yNjsKiOkyQhMjcD0HhK9h4EcQWc%2FwWyXMLwGk06J9f4ecl6iEASFISgoQSEJipSgyMtDrkzTlLe5MpnvnPfmeW%2BV4zjt79PDOO2L6ClQPYLm5X5yRh6fZWkFUxsDcVpvBkHLd1zW9npMdEXb83pBtysCt%2B14AWu1YGQJaWqgxsKunJLXXryLRE7J01vPwacTGDUBk4%2BBZs%2BCFiXodond6HhIQ5qKTDcikYLHJZJ0CemOta%2FOyDPzbb5ePQLBTq78QuYFpkskusSn8j5BX90ab8UFOdiKC0PuXktSGcpdOtv0jZSm4sI374qdItZ8Y82Mvn6DzYjZePyBMOkmjbiM%2BobcWZWcC70eaybIDxvmI%2BFfz8z2aqajLNm8%2Fub6RphoYYyMowpUTgmpPgOTU3LxrwfzR%2Fy8VpC6gs5KhNkJOS%2FIeAKW7MEkC%2F8mJtBqofETC0VWjnXTX%2FxUkkCJBaZ%2BCfMf7C%2Fmsaaz01SW%2B%2BYW%2BroGmt5EFJbIdYlclaBqBJNdGKeJPrnya2te8FVt7CtdO%2FCVVl%2FOY559HoWRp3Wv1bKp2%2Bs4nkeF57eb3cB1OKXNttt0XdpCaqbBj1%2F9%2FncAAAD%2F%2F1MuQDmeBAAA HTTP/1.1
Host: tuckedmajor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Cookie: u_pl=23515696; uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ff3b16c479ce8e4779f88ef6417fc33=[4243974,4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:10 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: bf3948f7ccfe02fbceaae871786de67f
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET tuckedmajor.com/pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html&l=1274&fd=110
172.240.108.84200 OK 0 B URL
tuckedmajor.com/pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html&l=1274&fd=110
IP / ASN
172.240.108.84
#7979 SERVERS-COM
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject tuckedmajor.com
Fingerprint AC:8F:6E:82:AE:4A:37:71:9B:F3:5F:F4:26:C1:31:A6:91:96:8A:D9
Validity Thu, 01 Aug 2024 15:02:22 GMT - Wed, 30 Oct 2024 15:02:21 GMT
GET /pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html&l=1274&fd=110 HTTP/1.1
Host: tuckedmajor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Cookie: u_pl=23515696; uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ff3b16c479ce8e4779f88ef6417fc33=[4243974,4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:10 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
r11.o.lencr.org/
23.33.119.10 504 B IP / ASN
23.33.119.10
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2024-08-16
Last Seen 2024-08-19
Times Seen 34
Size 504 B (504 bytes)
MD5 d1802d8e4ac931590844937626e9a27b
SHA1 4a26f296cd4af56739286b86a51d6c87de9c1a14
SHA256 b0f12479348fda72be76fc54fc0ec6600bbfec0bdea9f9dd1f655a4e0553cb3e
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B0F12479348FDA72BE76FC54FC0EC6600BBFEC0BDEA9F9DD1F655A4E0553CB3E"
Last-Modified: Fri, 16 Aug 2024 06:35:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11943
Expires: Fri, 16 Aug 2024 21:37:13 GMT
Date: Fri, 16 Aug 2024 18:18:10 GMT
Connection: keep-alive
GET www.whoreshub.com/player/stats.php?embed=1&event=VideoError,&rnd=1723832289654
45.150.66.8200 OK 4.1 kB URL
www.whoreshub.com/player/stats.php?embed=1&event=VideoError,&rnd=1723832289654
IP / ASN
45.150.66.8
#200195 Verasel, Inc.
Requested by https://www.whoreshub.com/embed/277574
Resource Info
File type GIF image data, version 89a, 1 x 1
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 4.1 kB (4065 bytes)
MD5 64b4a8ca6be51537ccbac42054977a0f
SHA1 3a6861c0ab4aad460562f68f2d3e0e097256c58c
SHA256 cdeb3c98202686f630c9f5299ee932173ff86e30887d367d54eba869a6aa8c61
Certificate Info
Issuer Let's Encrypt
Subject whoreshub.com
Fingerprint 54:AF:6A:A1:1A:44:C4:1B:5B:42:FA:A6:05:CA:98:90:00:E1:9A:C7
Validity Sun, 11 Aug 2024 10:46:00 GMT - Sat, 09 Nov 2024 10:45:59 GMT
GET /player/stats.php?embed=1&event=VideoError,&rnd=1723832289654 HTTP/1.1
Host: www.whoreshub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whoreshub.com/embed/277574
Cookie: PHPSESSID=meukosofa07os41b6klr0mtn1d; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: image/gif
X-Firefox-Spdy: h2
GET cdn.cloudimagesb.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png
45.133.44.9200 OK 39 kB URL
cdn.cloudimagesb.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png
IP / ASN
45.133.44.9
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
First Seen 2023-05-05
Last Seen 2025-05-19
Times Seen 1941
Size 39 kB (39220 bytes)
MD5 6451b63b68b5068db02571051f6f6a30
SHA1 32badef5d69090b4d2ea7b300bb5264938e198ef
SHA256 b1b0a314a2d4924b2849fec48b7863ccc68413e58330d99f6ad901bfa6282819
Certificate Info
Issuer Let's Encrypt
Subject cdn.cloudimagesb.com
Fingerprint C4:E5:6E:E8:15:37:9B:58:9E:AA:84:E9:B0:65:53:C9:88:43:C1:59
Validity Sat, 20 Jul 2024 04:00:43 GMT - Fri, 18 Oct 2024 04:00:42 GMT
GET /si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:10 GMT
content-type: image/png
content-length: 39220
server: nginx/1.21.6
last-modified: Thu, 04 May 2023 20:11:29 GMT
etag: "64541171-9934"
expires: Sun, 18 Aug 2024 18:18:10 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ds5859
accept-ranges: bytes
X-Firefox-Spdy: h2
GET t.dtscout.com/pv/?_a=v&_h=xamateur.net&_ss=1kdp9188fi&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=2k5l&_cb=_dtspv.c
141.101.120.11200 OK 65 kB URL
t.dtscout.com/pv/?_a=v&_h=xamateur.net&_ss=1kdp9188fi&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=2k5l&_cb=_dtspv.c
IP / ASN
141.101.120.11
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with no line terminators
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 65 kB (64653 bytes)
MD5 d58b08e477c2c017b00a7b8d76f9ed09
SHA1 255865c8911220dda83479e9cd0cf17605cf70d6
SHA256 080c9430376009abfb5646c3cebe97b798b62a962f3b6a6506ca24ea7a57ae6f
Certificate Info
Issuer Google Trust Services
Subject dtscout.com
Fingerprint E6:C9:A5:22:FF:46:D1:F8:B1:13:DA:0F:16:FD:0A:D0:73:4F:DA:40
Validity Sat, 13 Jul 2024 19:12:24 GMT - Fri, 11 Oct 2024 19:12:23 GMT
GET /pv/?_a=v&_h=xamateur.net&_ss=1kdp9188fi&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=2k5l&_cb=_dtspv.c HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Cookie: m=1; df=1723832289
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: application/javascript
x-t: 0.161
x-c: 0
expires: Fri, 16 Aug 2024 18:18:08 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r0T8swaP31%2FGzdOS0%2FZJJYvuCC2dFKCzO6ONLMkp%2FI3LeN4jDF5IfenKY4kzcLrxZq2AsXR5LrJqtjJNjZXWdnOBRIE6e02m31%2Blga7yNXlzfeuVa%2F%2BE%2Ffu9sGH8pCg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b436ce18bc4d947-HEL
content-encoding: br
X-Firefox-Spdy: h2
GET tuckedmajor.com/pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css&l=78689&fd=76
172.240.108.84200 OK 0 B URL
tuckedmajor.com/pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css&l=78689&fd=76
IP / ASN
172.240.108.84
#7979 SERVERS-COM
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject tuckedmajor.com
Fingerprint AC:8F:6E:82:AE:4A:37:71:9B:F3:5F:F4:26:C1:31:A6:91:96:8A:D9
Validity Thu, 01 Aug 2024 15:02:22 GMT - Wed, 30 Oct 2024 15:02:21 GMT
GET /pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css&l=78689&fd=76 HTTP/1.1
Host: tuckedmajor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Cookie: u_pl=23515696; uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ff3b16c479ce8e4779f88ef6417fc33=[4243974,4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:10 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET unseenreport.com/pxf.gif?uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=2ff3b16c479ce8e4779f88ef6417fc33&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18
192.243.59.12200 OK 1 B URL
unseenreport.com/pxf.gif?uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=2ff3b16c479ce8e4779f88ef6417fc33&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18
IP / ASN
192.243.59.12
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type very short file (no magic)
First Seen 2023-04-05
Last Seen 2025-07-31
Times Seen 25187
Size 1 B (1 bytes)
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Certificate Info
Issuer Let's Encrypt
Subject *.unseenreport.com
Fingerprint D9:3D:28:C1:14:1B:2B:53:0E:E4:3E:FC:88:7A:FF:9C:45:4B:63:C7
Validity Sat, 20 Jul 2024 14:59:20 GMT - Fri, 18 Oct 2024 14:59:19 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=2ff3b16c479ce8e4779f88ef6417fc33&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Aug 2024 18:18:10 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: b6f29471f8e8fa4e41a5e9fec0fd10cc
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET tuckedmajor.com/pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fjs%2Fscript.js&l=386&fd=68
172.240.108.84200 OK 0 B URL
tuckedmajor.com/pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fjs%2Fscript.js&l=386&fd=68
IP / ASN
172.240.108.84
#7979 SERVERS-COM
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject tuckedmajor.com
Fingerprint AC:8F:6E:82:AE:4A:37:71:9B:F3:5F:F4:26:C1:31:A6:91:96:8A:D9
Validity Thu, 01 Aug 2024 15:02:22 GMT - Wed, 30 Oct 2024 15:02:21 GMT
GET /pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fjs%2Fscript.js&l=386&fd=68 HTTP/1.1
Host: tuckedmajor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Cookie: u_pl=23515696; uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ff3b16c479ce8e4779f88ef6417fc33=[4243974,4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:10 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET cdn.barscreative1.com/sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html
45.133.44.3200 OK 20 kB URL
cdn.barscreative1.com/sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html
IP / ASN
45.133.44.3
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type gzip compressed data, from Unix
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 20 kB (19802 bytes)
MD5 b6ffb59d8c5ef236f7ec19cf8e9cf850
SHA1 f371ee60c0eb29ff5455df78de7f6a50fa9e3f53
SHA256 2df935a168c530ebafaa1e65c499d26cc2df8eec5ac251c400dc0aae61bfc067
Certificate Info
Issuer Let's Encrypt
Subject cdn.barscreative1.com
Fingerprint A2:3E:46:AA:B1:90:A8:AE:3D:15:ED:7F:CA:0F:EF:AF:53:4A:20:65
Validity Mon, 08 Jul 2024 03:01:17 GMT - Sun, 06 Oct 2024 03:01:16 GMT
GET /sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:10 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Sat, 07 May 2022 03:21:27 GMT
etag: W/"6275e5b7-4fa"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Fri, 16 Aug 2024 19:18:10 GMT
x-proxy-cache: HIT
x-cdn-host-id: ah0543
X-Firefox-Spdy: h2
GET xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
38.62.224.71200 OK 26 kB URL
xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
IP / ASN
38.62.224.71
#55286 SERVER-MANIA
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 26 kB (25548 bytes)
MD5 44215094f802ef18f9e9bd0799303015
SHA1 6016dbb040cc492c4c120acd1b85258ac7e756f6
SHA256 e5d37e04c739ff958af878650ce103e5d321814080292d3ba758f4332f8f6c47
Certificate Info
Issuer Let's Encrypt
Subject *.xamateur.net
Fingerprint B7:01:1F:D0:9A:68:F7:E9:85:73:6D:7E:26:91:51:DA:D7:9A:BF:B2
Validity Tue, 18 Jun 2024 14:20:11 GMT - Mon, 16 Sep 2024 14:20:10 GMT
GET /dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774 HTTP/1.1
Host: xamateur.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
x-pingback: https://xamateur.net/xmlrpc.php
link: <https://xamateur.net/wp-json/>; rel="https://api.w.org/", <https://xamateur.net/wp-json/wp/v2/posts/7>; rel="alternate"; title="JSON"; type="application/json", <https://xamateur.net/?p=7>; rel=shortlink
content-encoding: br
vary: Accept-Encoding
date: Fri, 16 Aug 2024 18:18:07 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
GET tuckedmajor.com/pixel/sbs?c=1
172.240.253.132200 OK 0 B URL
tuckedmajor.com/pixel/sbs?c=1
IP / ASN
172.240.253.132
#7979 SERVERS-COM
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject tuckedmajor.com
Fingerprint AC:8F:6E:82:AE:4A:37:71:9B:F3:5F:F4:26:C1:31:A6:91:96:8A:D9
Validity Thu, 01 Aug 2024 15:02:22 GMT - Wed, 30 Oct 2024 15:02:21 GMT
GET /pixel/sbs?c=1 HTTP/1.1
Host: tuckedmajor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Cookie: u_pl=23515696; uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ff3b16c479ce8e4779f88ef6417fc33=[4243974,4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:10 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET tuckedmajor.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzYscRRytniwi5KISUBRhRBEFd9I9Xz1jhGiMq8E1iRtFb1JfPVtO9YdV%2FTG7p8WA5Dh48dr7ZjeLZhFz82KUnoCHhWDG0x7cg%2F%2BC4E2QGRdHf4f%2B%2FV6%2FV%2FDq%2FeqL3eyENJHR48vvxdtKa3q%2B03DrL33seRfq6yrKRvVRr%2FtJt32hbvJX%2B92G%2B3L9bcmH8fmm67mu53r1NWVkEI%2FOz0mo5LDvNfpuo91seJ02Rub%2F2GYOLHUg8hPyBJSYrdx3zkHxClH43WVph2mcvPJWmGmaxga5OPgwGkZxESFcjoFxEEQHp2rE9uHaPcTR%2FsIu4vxfIVMz4vx8Dyw6ODUJlu8tfDINGYGJsyjyClJXULQCj29CiYcE4AJXryEKb1%2BNTUG3%2FmHpnJ2RlT%2F%2FgCpmZOW3c4jCby9pNarfiHWWqjiyGAUl1KiCGlRIsinS7RpUMQVPP4cSD4j75FlE4Z13pt%2FnaljPpRlCieMXhN%2Fre52ArjLuy9V2INkq9Tp8lbeCfsdnnV6Hy0VOSlVQQQUtx6D2DDLrIFMOssBBljgIxXGde57nu4JTt9fnvCV8ybrC9agfeNRzuz1kfH6VMdJkDK7H4GYHidnBUI1hsp9gN0tYUYNNZ8R5fwe5KFFIgsISFJSgUARFSlDk5b7QtmnL20LbjHmnvXnaW%2BUkTge7dD9OBzJ6CtSMYUS5m5yQx%2BdZOsHMxVAe15tB0GJel7f9Ppc92fb9ftDryaDb9vyAt1qwqoSyNVDrYFvNyGsv3kWiZuTpjefA6BRWT8HVY6DZs6BFCbpZYjs6HNGQpjIzjUimEHGJJF1BuuXs6hPyzGKbr1ePQPKji7%2BQRYGbEokp8am6TzDQtyYbcUH2NuLCkrvXklSFapvON30jpak88827cquIjbhy2Y6%2FfoPPifl4%2BIG06TqNhIoGlty5pISQZi02XJIfrtiPJLue2c1LmYmyZP36m2tXwsRIa1UcVaBqRkj1GbiakbN%2FPVg84ueNhjIVTFYizI7IaUHFU%2FBkBzZZ%2BrcxgdFLDUscFFk5MU22%2FKkVgZZLTFkJ%2Bx%2FMlvPE0PlpqspdewsDUwNNbyIKS%2BSmRK5LUD2Gzc5M0sQcXfy1tSgwXZswbWp7TBv95SLm%2BedRWHVcb7nCZzKQPpPtTjuQXLBOh7k84Kwlej2O1M6CH7%2F6%2Fe8AAAD%2F%2F9P6ldGeBAAA
172.240.108.84200 OK 7 B URL
tuckedmajor.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzYscRRytniwi5KISUBRhRBEFd9I9Xz1jhGiMq8E1iRtFb1JfPVtO9YdV%2FTG7p8WA5Dh48dr7ZjeLZhFz82KUnoCHhWDG0x7cg%2F%2BC4E2QGRdHf4f%2B%2FV6%2FV%2FDq%2FeqL3eyENJHR48vvxdtKa3q%2B03DrL33seRfq6yrKRvVRr%2FtJt32hbvJX%2B92G%2B3L9bcmH8fmm67mu53r1NWVkEI%2FOz0mo5LDvNfpuo91seJ02Rub%2F2GYOLHUg8hPyBJSYrdx3zkHxClH43WVph2mcvPJWmGmaxga5OPgwGkZxESFcjoFxEEQHp2rE9uHaPcTR%2FsIu4vxfIVMz4vx8Dyw6ODUJlu8tfDINGYGJsyjyClJXULQCj29CiYcE4AJXryEKb1%2BNTUG3%2FmHpnJ2RlT%2F%2FgCpmZOW3c4jCby9pNarfiHWWqjiyGAUl1KiCGlRIsinS7RpUMQVPP4cSD4j75FlE4Z13pt%2FnaljPpRlCieMXhN%2Fre52ArjLuy9V2INkq9Tp8lbeCfsdnnV6Hy0VOSlVQQQUtx6D2DDLrIFMOssBBljgIxXGde57nu4JTt9fnvCV8ybrC9agfeNRzuz1kfH6VMdJkDK7H4GYHidnBUI1hsp9gN0tYUYNNZ8R5fwe5KFFIgsISFJSgUARFSlDk5b7QtmnL20LbjHmnvXnaW%2BUkTge7dD9OBzJ6CtSMYUS5m5yQx%2BdZOsHMxVAe15tB0GJel7f9Ppc92fb9ftDryaDb9vyAt1qwqoSyNVDrYFvNyGsv3kWiZuTpjefA6BRWT8HVY6DZs6BFCbpZYjs6HNGQpjIzjUimEHGJJF1BuuXs6hPyzGKbr1ePQPKji7%2BQRYGbEokp8am6TzDQtyYbcUH2NuLCkrvXklSFapvON30jpak88827cquIjbhy2Y6%2FfoPPifl4%2BIG06TqNhIoGlty5pISQZi02XJIfrtiPJLue2c1LmYmyZP36m2tXwsRIa1UcVaBqRkj1GbiakbN%2FPVg84ueNhjIVTFYizI7IaUHFU%2FBkBzZZ%2BrcxgdFLDUscFFk5MU22%2FKkVgZZLTFkJ%2Bx%2FMlvPE0PlpqspdewsDUwNNbyIKS%2BSmRK5LUD2Gzc5M0sQcXfy1tSgwXZswbWp7TBv95SLm%2BedRWHVcb7nCZzKQPpPtTjuQXLBOh7k84Kwlej2O1M6CH7%2F6%2Fe8AAAD%2F%2F9P6ldGeBAAA
IP / ASN
172.240.108.84
#7979 SERVERS-COM
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with no line terminators
First Seen 2023-04-05
Last Seen 2025-08-01
Times Seen 19106
Size 7 B (7 bytes)
MD5 132d6af1b46048b45cf86cdee7991d31
SHA1 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
SHA256 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Certificate Info
Issuer Let's Encrypt
Subject tuckedmajor.com
Fingerprint AC:8F:6E:82:AE:4A:37:71:9B:F3:5F:F4:26:C1:31:A6:91:96:8A:D9
Validity Thu, 01 Aug 2024 15:02:22 GMT - Wed, 30 Oct 2024 15:02:21 GMT
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzYscRRytniwi5KISUBRhRBEFd9I9Xz1jhGiMq8E1iRtFb1JfPVtO9YdV%2FTG7p8WA5Dh48dr7ZjeLZhFz82KUnoCHhWDG0x7cg%2F%2BC4E2QGRdHf4f%2B%2FV6%2FV%2FDq%2FeqL3eyENJHR48vvxdtKa3q%2B03DrL33seRfq6yrKRvVRr%2FtJt32hbvJX%2B92G%2B3L9bcmH8fmm67mu53r1NWVkEI%2FOz0mo5LDvNfpuo91seJ02Rub%2F2GYOLHUg8hPyBJSYrdx3zkHxClH43WVph2mcvPJWmGmaxga5OPgwGkZxESFcjoFxEEQHp2rE9uHaPcTR%2FsIu4vxfIVMz4vx8Dyw6ODUJlu8tfDINGYGJsyjyClJXULQCj29CiYcE4AJXryEKb1%2BNTUG3%2FmHpnJ2RlT%2F%2FgCpmZOW3c4jCby9pNarfiHWWqjiyGAUl1KiCGlRIsinS7RpUMQVPP4cSD4j75FlE4Z13pt%2FnaljPpRlCieMXhN%2Fre52ArjLuy9V2INkq9Tp8lbeCfsdnnV6Hy0VOSlVQQQUtx6D2DDLrIFMOssBBljgIxXGde57nu4JTt9fnvCV8ybrC9agfeNRzuz1kfH6VMdJkDK7H4GYHidnBUI1hsp9gN0tYUYNNZ8R5fwe5KFFIgsISFJSgUARFSlDk5b7QtmnL20LbjHmnvXnaW%2BUkTge7dD9OBzJ6CtSMYUS5m5yQx%2BdZOsHMxVAe15tB0GJel7f9Ppc92fb9ftDryaDb9vyAt1qwqoSyNVDrYFvNyGsv3kWiZuTpjefA6BRWT8HVY6DZs6BFCbpZYjs6HNGQpjIzjUimEHGJJF1BuuXs6hPyzGKbr1ePQPKji7%2BQRYGbEokp8am6TzDQtyYbcUH2NuLCkrvXklSFapvON30jpak88827cquIjbhy2Y6%2FfoPPifl4%2BIG06TqNhIoGlty5pISQZi02XJIfrtiPJLue2c1LmYmyZP36m2tXwsRIa1UcVaBqRkj1GbiakbN%2FPVg84ueNhjIVTFYizI7IaUHFU%2FBkBzZZ%2BrcxgdFLDUscFFk5MU22%2FKkVgZZLTFkJ%2Bx%2FMlvPE0PlpqspdewsDUwNNbyIKS%2BSmRK5LUD2Gzc5M0sQcXfy1tSgwXZswbWp7TBv95SLm%2BedRWHVcb7nCZzKQPpPtTjuQXLBOh7k84Kwlej2O1M6CH7%2F6%2Fe8AAAD%2F%2F9P6ldGeBAAA HTTP/1.1
Host: tuckedmajor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Cookie: u_pl=23515696; uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ff3b16c479ce8e4779f88ef6417fc33=[4243974,4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:10 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: b42eb31c2bcee182d1e05770a2ab064d
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/style.css
172.67.141.24200 OK 1.5 kB URL
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/style.css
IP / ASN
172.67.141.24
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text
First Seen 2024-01-21
Last Seen 2025-05-19
Times Seen 248
Size 1.5 kB (1482 bytes)
MD5 2648ad78701bb00949b244fe3f1a8bf5
SHA1 22d324dcf9f1f838e39963096d60becd2c539372
SHA256 77e68f8d0c801a8ac9e6446ecd0f742d039290c6e7e6023b2f88a78c06ba390e
Certificate Info
Issuer Google Trust Services
Subject creative-bars1.com
Fingerprint EB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46
Validity Sun, 11 Aug 2024 15:14:55 GMT - Sat, 09 Nov 2024 15:14:54 GMT
GET /sb/notifications/dating/default/us/desk-all/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:10 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:23:50 GMT
etag: W/"65aa85f6-1676"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: HIT
age: 4655865
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ovx9vYYHTBC4TytH4xy9g3k%2FyuxpYp27b9Lqog80FDeecSxnyfprqP2BqkuWcvFHSzVOP4GSRgkucfFXjvEzEcJ4aUh%2FY0Tq%2BDTBgz6RY37x4FLmEuNWKoo5xkaL%2B9dq2G08psW0BxU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b436ce68dd6b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227200 OK 19 kB URL
fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
First Seen 2024-08-01
Last Seen 2025-08-01
Times Seen 26935
Size 19 kB (18596 bytes)
MD5 c83e4437a53d7f849f9d32df3d6b68f3
SHA1 fabea5ad92ed3e2431659b02e7624df30d0c6bbc
SHA256 d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint F2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
Validity Tue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
GET /s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Aug 2024 20:57:23 GMT
expires: Fri, 15 Aug 2025 20:57:23 GMT
cache-control: public, max-age=31536000
age: 76847
last-modified: Thu, 01 Aug 2024 20:41:21 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET wh.cdntrex.com/contents/videos_screenshots/277000/277574/preview_720p.mp4.jpg
194.242.11.186200 OK 32 kB URL
wh.cdntrex.com/contents/videos_screenshots/277000/277574/preview_720p.mp4.jpg
IP / ASN
194.242.11.186
#34989 ServeTheWorld AS
Requested by https://www.whoreshub.com/embed/277574
Resource Info
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp
First Seen 2024-07-26
Last Seen 2024-08-19
Times Seen 3
Size 32 kB (32110 bytes)
MD5 03fc35034a96c1643a264055d161395e
SHA1 aa74284aedc1651d8c76ef7c91af77426a2d6bc1
SHA256 60b9620e680fe3805310f198a99d61c6424046bfcc51f3157dda3f186085d689
Certificate Info
Issuer Let's Encrypt
Subject wh.cdntrex.com
Fingerprint 37:50:9C:3C:74:CF:3D:87:E2:6C:5F:8F:D3:7E:3E:27:23:4F:EB:3E
Validity Sat, 10 Aug 2024 03:14:10 GMT - Fri, 08 Nov 2024 03:14:09 GMT
GET /contents/videos_screenshots/277000/277574/preview_720p.mp4.jpg HTTP/1.1
Host: wh.cdntrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whoreshub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: image/jpeg
content-length: 32110
server: BunnyCDN-NO1-830
cdn-pullzone: 1799186
cdn-uid: b7cd2495-dc22-4681-953c-5c2643001875
cdn-requestcountrycode: NO
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: "660286a0-7d6e"
last-modified: Tue, 26 Mar 2024 08:26:08 GMT
cdn-cachedat: 08/15/2024 01:33:16
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 2e816b1af46c14761d5a41e32bfb1825
cdn-cache: STALE
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.whoreshub.com/player/stats.php?embed=1&event=PlayerLoad,&rnd=1723832289215
45.150.66.8200 OK 43 B URL
www.whoreshub.com/player/stats.php?embed=1&event=PlayerLoad,&rnd=1723832289215
IP / ASN
45.150.66.8
#200195 Verasel, Inc.
Requested by https://www.whoreshub.com/embed/277574
Resource Info
File type GIF image data, version 89a, 1 x 1
First Seen 2023-04-07
Last Seen 2025-08-02
Times Seen 22668
Size 43 B (43 bytes)
MD5 57f187c7a868faeac558007a8eb6cb2e
SHA1 11ab10ab109fdb53d91d444ac781101f5a6360c6
SHA256 aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
Certificate Info
Issuer Let's Encrypt
Subject whoreshub.com
Fingerprint 54:AF:6A:A1:1A:44:C4:1B:5B:42:FA:A6:05:CA:98:90:00:E1:9A:C7
Validity Sun, 11 Aug 2024 10:46:00 GMT - Sat, 09 Nov 2024 10:45:59 GMT
GET /player/stats.php?embed=1&event=PlayerLoad,&rnd=1723832289215 HTTP/1.1
Host: www.whoreshub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whoreshub.com/embed/277574
Cookie: PHPSESSID=meukosofa07os41b6klr0mtn1d; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: image/gif
X-Firefox-Spdy: h2
GET xamateur.net/favicon.ico
38.62.224.71404 Not Found 10 kB URL
xamateur.net/favicon.ico
IP / ASN
38.62.224.71
#55286 SERVER-MANIA
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 10 kB (10344 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject *.xamateur.net
Fingerprint B7:01:1F:D0:9A:68:F7:E9:85:73:6D:7E:26:91:51:DA:D7:9A:BF:B2
Validity Tue, 18 Jun 2024 14:20:11 GMT - Mon, 16 Sep 2024 14:20:10 GMT
GET /favicon.ico HTTP/1.1
Host: xamateur.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1; sb_main_2ff3b16c479ce8e4779f88ef6417fc33=1; sb_count_2ff3b16c479ce8e4779f88ef6417fc33=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=tuckedmajor.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 16 Aug 2024 18:18:10 GMT
GET fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 18 kB URL
fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
First Seen 2024-08-01
Last Seen 2025-08-02
Times Seen 43519
Size 18 kB (18536 bytes)
MD5 8eff0b8045fd1959e117f85654ae7770
SHA1 227fee13ceb7c410b5c0bb8000258b6643cb6255
SHA256 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint F2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
Validity Tue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Aug 2024 03:11:10 GMT
expires: Sun, 10 Aug 2025 03:11:10 GMT
cache-control: public, max-age=31536000
age: 572820
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET softenedcollar.com/watch.715715250560.js?dev=e&key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&pst=1723832349&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&res=14.2071&rmtc=t&shu=3e70714c925c8d2d8f5b0a88ce54549f37db685a6b560f54a9e38bdb306c7b2c682a099042c4543bf206fa9466b49b607b3a32493129d5d23486e725b5c6008d02e7426efb90efce5452c89c03456a7cf51a430e9c06483c4252535c99&tz=0&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
192.243.59.20200 OK 3.8 kB URL
softenedcollar.com/watch.715715250560.js?dev=e&key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&pst=1723832349&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&res=14.2071&rmtc=t&shu=3e70714c925c8d2d8f5b0a88ce54549f37db685a6b560f54a9e38bdb306c7b2c682a099042c4543bf206fa9466b49b607b3a32493129d5d23486e725b5c6008d02e7426efb90efce5452c89c03456a7cf51a430e9c06483c4252535c99&tz=0&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1
IP / ASN
192.243.59.20
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type JavaScript source, ASCII text, with very long lines (3848), with no line terminators
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 3.8 kB (3820 bytes)
MD5 59f33fbf2d313de7d1d86fc2eb60c10f
SHA1 37912e694845b21c0fcf94930ea549f01d3dad0c
SHA256 9d90f8dd1e91cd9fc90c24d7449af5c1fed3536bf26e6c8fafe9f993653f4461
Certificate Info
Issuer Let's Encrypt
Subject softenedcollar.com
Fingerprint 78:F9:34:B9:DC:C5:CA:E3:77:61:C8:FC:4E:DF:55:AD:DD:ED:F5:81
Validity Thu, 01 Aug 2024 14:39:08 GMT - Wed, 30 Oct 2024 14:39:07 GMT
GET /watch.715715250560.js?dev=e&key=5cf462a734451347fbc73b8a22db6ba5&kw=%5B%22xamateur%22%5D&pst=1723832349&refer=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&res=14.2071&rmtc=t&shu=3e70714c925c8d2d8f5b0a88ce54549f37db685a6b560f54a9e38bdb306c7b2c682a099042c4543bf206fa9466b49b607b3a32493129d5d23486e725b5c6008d02e7426efb90efce5452c89c03456a7cf51a430e9c06483c4252535c99&tz=0&uuid=d78915fa-bc7e-4feb-a15c-c3f957b585ce%3A3%3A1 HTTP/1.1
Host: softenedcollar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
Referer: https://xamateur.net/
DNT: 1
Connection: keep-alive
Cookie: u_pl=23515790; ain=eyJhbGciOiJIUzI1NiJ9.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.BxNqYvy5Plz0KJmeVhzQw7Xjj_cJSywLjjlbtYsv5Rw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 16 Aug 2024 18:18:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://xamateur.net
Access-Control-Allow-Origin: https://xamateur.net
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1; expires=Fri, 23 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sat, 17 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sat, 17 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
pdhtkv5=true; expires=Sat, 17 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
uncs5=1; expires=Sat, 17 Aug 2024 18:18:09 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 169a7a2a448781ce1d8cd81a5c8c3e90
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET ka-f.fontawesome.com/releases/v6.6.0/css/free-v4-shims.min.css?token=1e1169734c
172.67.139.119200 OK 28 kB URL
ka-f.fontawesome.com/releases/v6.6.0/css/free-v4-shims.min.css?token=1e1169734c
IP / ASN
172.67.139.119
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with very long lines (27377)
First Seen 2024-07-16
Last Seen 2025-07-19
Times Seen 1146
Size 28 kB (27592 bytes)
MD5 5e5b0d8c7be5919570a305b6bc229a36
SHA1 e4ab3a85d3ab0a8654a278d954fb310906526db3
SHA256 1ae3c19265723696f50e3226dcd43fbc7ea617697e0d7169a8e52c854ae3826c
Certificate Info
Issuer Google Trust Services
Subject ka-f.fontawesome.com
Fingerprint 6D:72:F5:B4:68:5B:A6:B0:2B:E9:FE:83:27:B3:F4:90:E8:F3:E9:0A
Validity Mon, 01 Jul 2024 12:54:00 GMT - Sun, 29 Sep 2024 12:53:59 GMT
GET /releases/v6.6.0/css/free-v4-shims.min.css?token=1e1169734c HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xamateur.net/
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 15 Jul 2024 22:20:39 GMT
etag: W/"5e5b0d8c7be5919570a305b6bc229a36"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qFWzjld1eDwS3En4pNQm5qHvB4aWL6imzI-nzf5KtFwIEX2f3sy5gw==
age: 2686518
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zp1ikBUuv%2BcngmPfV6xj%2BNRQlFe9lsCP%2BS7pNftj0XqmPS%2FjFJiLHMyWAjoCbLwvmO%2BC%2Fhh5gmYZt7o%2F5kLEtZHj997U1Py9uGRz6YzFQcF3UqbFZo8zh79JVBlpxvSKxKqsKeW8Uw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b436cd9bc745694-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.whoreshub.com/embed/277574
45.150.66.8200 OK 8.1 kB URL
www.whoreshub.com/embed/277574
IP / ASN
45.150.66.8
#200195 Verasel, Inc.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type HTML document, ASCII text, with very long lines (9050), with no line terminators
First Seen 2024-08-19
Last Seen 2024-08-19
Times Seen 1
Size 8.1 kB (8095 bytes)
MD5 a6961f29547fe8595f23cf08bc3401b8
SHA1 22901e062f2f76e0e18dee5e1822c4893873307a
SHA256 1e6585efb937e05f7cded844efcc825af91539e53575685d5dec88a2ec280eb6
Certificate Info
Issuer Let's Encrypt
Subject whoreshub.com
Fingerprint 54:AF:6A:A1:1A:44:C4:1B:5B:42:FA:A6:05:CA:98:90:00:E1:9A:C7
Validity Sun, 11 Aug 2024 10:46:00 GMT - Sat, 09 Nov 2024 10:45:59 GMT
GET /embed/277574 HTTP/1.1
Host: www.whoreshub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=meukosofa07os41b6klr0mtn1d; path=/; domain=.whoreshub.com; secure; SameSite=None
kt_ips=91.90.42.154; expires=Sat, 17-Aug-2024 18:18:08 GMT; Max-Age=86400; path=/; domain=.whoreshub.com; secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
GET t.dtscout.com/i/?l=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&j=
141.101.120.11200 OK 2.1 kB URL
t.dtscout.com/i/?l=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&j=
IP / ASN
141.101.120.11
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with very long lines (2163), with no line terminators
First Seen 2023-04-05
Last Seen 2025-04-06
Times Seen 2410
Size 2.1 kB (2079 bytes)
MD5 8811c1da7d7cd9a89cf1c9d88cf153c1
SHA1 5dd7a95e6eee435a18d261757a4aa4aeea7ae472
SHA256 0c72ec693d21a33e6c802f2648030af0433badc9a020325a82550115cf5044cc
Certificate Info
Issuer Google Trust Services
Subject dtscout.com
Fingerprint E6:C9:A5:22:FF:46:D1:F8:B1:13:DA:0F:16:FD:0A:D0:73:4F:DA:40
Validity Sat, 13 Jul 2024 19:12:24 GMT - Fri, 11 Oct 2024 19:12:23 GMT
GET /i/?l=https%3A%2F%2Fxamateur.net%2Fdyke-student-takes-revenge-on-teacher-and-her-big-ass%2F%3Fref%3D66bf92567b774&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: application/javascript
x-s: mtl1
set-cookie: m=1; Domain=dtscout.com; Expires=Fri, 16-Aug-2024 19:41:29 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
df=1723832289; Domain=dtscout.com; Expires=Sun, 24-Nov-2024 18:18:09 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
x-t: 0.342
expires: Fri, 16 Aug 2024 18:18:08 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fuOIfdKGw4giSE4%2Fd%2FkHxMM4ZP%2BjVY7qqxH3rw7x8m7M41wsQk%2B96bISJ%2BM72VnZ13tNAXyvO9zKcq8TdIbgjILH6z0WZKPcoG6g%2Bigo5FSCn8LMUeXZAs%2B9%2Fi72m3k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b436cdf898ed947-HEL
content-encoding: br
X-Firefox-Spdy: h2
GET www.whoreshub.com/get_file/1/61ddabeafa1981af09ae0d884776dde193ea995b77/277000/277574/277574.mp4/?rnd=1723832289158
45.150.66.8200 OK 43 B URL
www.whoreshub.com/get_file/1/61ddabeafa1981af09ae0d884776dde193ea995b77/277000/277574/277574.mp4/?rnd=1723832289158
IP / ASN
45.150.66.8
#200195 Verasel, Inc.
Requested by https://www.whoreshub.com/embed/277574
Resource Info
File type GIF image data, version 89a, 1 x 1
First Seen 2023-04-07
Last Seen 2025-08-02
Times Seen 22668
Size 43 B (43 bytes)
MD5 57f187c7a868faeac558007a8eb6cb2e
SHA1 11ab10ab109fdb53d91d444ac781101f5a6360c6
SHA256 aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
Certificate Info
Issuer Let's Encrypt
Subject whoreshub.com
Fingerprint 54:AF:6A:A1:1A:44:C4:1B:5B:42:FA:A6:05:CA:98:90:00:E1:9A:C7
Validity Sun, 11 Aug 2024 10:46:00 GMT - Sat, 09 Nov 2024 10:45:59 GMT
GET /get_file/1/61ddabeafa1981af09ae0d884776dde193ea995b77/277000/277574/277574.mp4/?rnd=1723832289158 HTTP/1.1
Host: www.whoreshub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whoreshub.com/embed/277574
Cookie: PHPSESSID=meukosofa07os41b6klr0mtn1d; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: image/gif
X-Firefox-Spdy: h2
GET cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/img/close.png
172.67.141.24200 OK 4.0 kB URL
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/img/close.png
IP / ASN
172.67.141.24
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type PNG image data, 500 x 500, 8-bit gray+alpha, non-interlaced
First Seen 2023-04-05
Last Seen 2025-07-27
Times Seen 2279
Size 4.0 kB (4022 bytes)
MD5 23e9690b0e7ac26868363a6248f44467
SHA1 d7ad0eae64e0c1e65b12eda0aa9d2b91996dd64f
SHA256 f362c67320d739ccf3bea21f857b9620075bd20ceacda8c51261b9612fe28395
Certificate Info
Issuer Google Trust Services
Subject creative-bars1.com
Fingerprint EB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46
Validity Sun, 11 Aug 2024 15:14:55 GMT - Sat, 09 Nov 2024 15:14:54 GMT
GET /sb/notifications/dating/default/us/desk-all/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 16 Aug 2024 18:18:10 GMT
content-type: image/png
content-length: 4022
last-modified: Fri, 19 Jan 2024 14:23:50 GMT
etag: "65aa85f6-fb6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5555845
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zpPTTUTxv0LGmYirboAnTYDh2j1gftrBMnqJfla%2Fx5h3803vaRxBIBybYGnp96wY82bSBpMeenu3zQzWGL7bAMVacFDg0JZFHkIoz02gpq7IsF5Y5Y8ObUjnjCr2pujtP%2FWsBbAc0mxB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b436ce72d8c56c6-OSL
alt-svc: h3=":443"; ma=86400
GET www.whoreshub.com/get_file/7/35b18fee67ab739c0206d25fc373c6b97601eb2c04/277000/277574/277574.mp4/?embed=true&rnd=1723832289094
0.0.0.0 0 B URL
www.whoreshub.com/get_file/7/35b18fee67ab739c0206d25fc373c6b97601eb2c04/277000/277574/277574.mp4/?embed=true&rnd=1723832289094
IP / ASN
0.0.0.0
#0
Requested by https://www.whoreshub.com/embed/277574
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject whoreshub.com
Fingerprint 54:AF:6A:A1:1A:44:C4:1B:5B:42:FA:A6:05:CA:98:90:00:E1:9A:C7
Validity Sun, 11 Aug 2024 10:46:00 GMT - Sat, 09 Nov 2024 10:45:59 GMT
GET /get_file/7/35b18fee67ab739c0206d25fc373c6b97601eb2c04/277000/277574/277574.mp4/?embed=true&rnd=1723832289094 HTTP/1.1
Host: www.whoreshub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.whoreshub.com/embed/277574
Cookie: PHPSESSID=meukosofa07os41b6klr0mtn1d; kt_ips=91.90.42.154
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: text/html; charset=UTF-8
location: https://wh008.ptx.li/remote_control.php?file=B64YTo0OntzOjQ6InRpbWUiO2k6MTcyMzgzMjI4OTtzOjU6ImxpbWl0IjtpOjA7czo0OiJmaWxlIjtzOjI1OiIvMjc3MDAwLzI3NzU3NC8yNzc1NzQubXA0IjtzOjI6ImN2IjtzOjMyOiJhODA4Yzk5Y2Q0ZTlmYmRlYmRlYTc3ZGI5N2RmNzEyZSI7fQ%3D%3D
set-cookie: kt_remote_ips=%2C91.90.42.154%7C%7Cc6cebcb9a480107819ecdd2c5706b878; expires=Fri, 16-Aug-2024 19:18:09 GMT; Max-Age=3600; path=/; domain=.whoreshub.com; SameSite=Lax
X-Firefox-Spdy: h2
GET cdn.cloudimagesb.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png
45.133.44.9200 OK 65 kB URL
cdn.cloudimagesb.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png
IP / ASN
45.133.44.9
#39572 DataWeb Global Group B.V.
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
First Seen 2023-05-05
Last Seen 2025-05-19
Times Seen 1946
Size 65 kB (64601 bytes)
MD5 887812a53b8ea2dbad33f6ae105b8c2d
SHA1 f83d97ef46827200fa62093ed09b4b6fa25b26d8
SHA256 9443edf293511b0732211234002c799508a2bfc63a3e28a57d7b12ee30f277e9
Certificate Info
Issuer Let's Encrypt
Subject cdn.cloudimagesb.com
Fingerprint C4:E5:6E:E8:15:37:9B:58:9E:AA:84:E9:B0:65:53:C9:88:43:C1:59
Validity Sat, 20 Jul 2024 04:00:43 GMT - Fri, 18 Oct 2024 04:00:42 GMT
GET /si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:10 GMT
content-type: image/png
content-length: 64601
server: nginx/1.21.6
last-modified: Thu, 04 May 2023 20:12:45 GMT
etag: "645411bd-fc59"
expires: Sun, 18 Aug 2024 18:18:10 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ds5859
accept-ranges: bytes
X-Firefox-Spdy: h2
GET tuckedmajor.com/pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fstyle.css&l=5750&fd=77
172.240.253.132200 OK 0 B URL
tuckedmajor.com/pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fstyle.css&l=5750&fd=77
IP / ASN
172.240.253.132
#7979 SERVERS-COM
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject tuckedmajor.com
Fingerprint AC:8F:6E:82:AE:4A:37:71:9B:F3:5F:F4:26:C1:31:A6:91:96:8A:D9
Validity Thu, 01 Aug 2024 15:02:22 GMT - Wed, 30 Oct 2024 15:02:21 GMT
GET /pixel/sbls?bv=24.33.8024&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fstyle.css&l=5750&fd=77 HTTP/1.1
Host: tuckedmajor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Cookie: u_pl=23515696; uid_id2=d78915fa-bc7e-4feb-a15c-c3f957b585ce:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ff3b16c479ce8e4779f88ef6417fc33=[4243974,4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 16 Aug 2024 18:18:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET www.whoreshub.com/player/kt_player.js?v=6.2.1
45.150.66.8200 OK 170 kB URL
www.whoreshub.com/player/kt_player.js?v=6.2.1
IP / ASN
45.150.66.8
#200195 Verasel, Inc.
Requested by https://www.whoreshub.com/embed/277574
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 170 kB (169615 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject whoreshub.com
Fingerprint 54:AF:6A:A1:1A:44:C4:1B:5B:42:FA:A6:05:CA:98:90:00:E1:9A:C7
Validity Sun, 11 Aug 2024 10:46:00 GMT - Sat, 09 Nov 2024 10:45:59 GMT
GET /player/kt_player.js?v=6.2.1 HTTP/1.1
Host: www.whoreshub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whoreshub.com/embed/277574
Cookie: PHPSESSID=meukosofa07os41b6klr0mtn1d; kt_ips=91.90.42.154
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 169615
last-modified: Mon, 08 Apr 2024 18:51:10 GMT
etag: "66143c9e-2968f"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/animate.css
172.67.141.24200 OK 79 kB URL
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/animate.css
IP / ASN
172.67.141.24
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text
First Seen 2024-01-20
Last Seen 2025-08-02
Times Seen 4042
Size 79 kB (78689 bytes)
MD5 3d4123dbfb33d27a5cfdfcfa91df6783
SHA1 e7d0eeeec54b848f0bc3da8685fa3bc88429d660
SHA256 cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887
Certificate Info
Issuer Google Trust Services
Subject creative-bars1.com
Fingerprint EB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46
Validity Sun, 11 Aug 2024 15:14:55 GMT - Sat, 09 Nov 2024 15:14:54 GMT
GET /sb/notifications/dating/default/us/desk-all/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:10 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:23:50 GMT
etag: W/"65aa85f6-13361"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: HIT
age: 3644093
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T8FUKGavE6ZX8NMRfmqt4bIJpXajQuk%2BhqhmT0iXYDH%2BkTL1CtzkpiytUSR0NGyF52c53W3UjE6%2Bi4VNqJx2lnJb65oHJi6Rd6q6JNScJ1CbrB9tenMXk8W6nu1wTK1SUpa1AetVueyI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b436ce67db5b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET wh.cdntrex.com/contents/videos_screenshots/244000/244456/290x163/1.jpg
194.242.11.186404 Not Found 0 B URL
wh.cdntrex.com/contents/videos_screenshots/244000/244456/290x163/1.jpg
IP / ASN
194.242.11.186
#34989 ServeTheWorld AS
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject wh.cdntrex.com
Fingerprint 37:50:9C:3C:74:CF:3D:87:E2:6C:5F:8F:D3:7E:3E:27:23:4F:EB:3E
Validity Sat, 10 Aug 2024 03:14:10 GMT - Fri, 08 Nov 2024 03:14:09 GMT
GET /contents/videos_screenshots/244000/244456/290x163/1.jpg HTTP/1.1
Host: wh.cdntrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 16 Aug 2024 18:18:08 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
server: BunnyCDN-NO1-830
cdn-pullzone: 1799186
cdn-uid: b7cd2495-dc22-4681-953c-5c2643001875
cdn-requestcountrycode: NO
cache-control: no-cache
etag: W/"5e7b1ca6-18b"
cdn-cachedat: 08/16/2024 18:18:08
cdn-proxyver: 1.04
cdn-requestpullcode: 404
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 404
cdn-requestid: 142c4ff3b02f4df346684d37f29822fa
cdn-cache: MISS
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
142.250.74.106200 OK 7.0 kB URL
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP / ASN
142.250.74.106
#15169 GOOGLE
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with very long lines (7193), with no line terminators
First Seen 2024-08-02
Last Seen 2024-10-15
Times Seen 1074
Size 7.0 kB (7004 bytes)
MD5 1b9a5aaa00577f3b515cd8bdb5902734
SHA1 ac084682592bdc2893faced3b83a36599817add0
SHA256 19507720081a42c4fcac9da0e5a874af98db546cd9f4aa9aaf271cfb442b9030
Certificate Info
Issuer Google Trust Services
Subject upload.video.google.com
Fingerprint C4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
Validity Tue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 16 Aug 2024 18:18:10 GMT
date: Fri, 16 Aug 2024 18:18:10 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET recordedthereby.com/sfp.js
172.67.208.217200 OK 85 kB URL
recordedthereby.com/sfp.js
IP / ASN
172.67.208.217
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 85 kB (85378 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject recordedthereby.com
Fingerprint A1:CB:3E:AF:CE:F5:E9:D2:26:FB:E2:D4:FE:4B:29:D2:B3:C9:AD:3B
Validity Sat, 06 Jul 2024 15:25:15 GMT - Fri, 04 Oct 2024 15:25:14 GMT
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:09 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, max-age=0, private, no-cache
x-request-id: 5d7e9bbe173d0c163fae99f426980c07
pragma: no-cache
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jy7mcIyXqjcjyaZWz5%2FZ8BH8dsoFTlbChwL6abr290t37F3PZdtxk7pVFt2%2FgIDr9DcJyY2a3u0s0dD5966Y7JG%2FU%2Be0%2BINZAoYaApXvuPdoKa1EDEHSo3K4%2Bomg7sf8SHPDaLGs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b436cdeaf10b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET wh008.ptx.li/remote_control.php?file=B64YTo0OntzOjQ6InRpbWUiO2k6MTcyMzgzMjI4OTtzOjU6ImxpbWl0IjtpOjA7czo0OiJmaWxlIjtzOjI1OiIvMjc3MDAwLzI3NzU3NC8yNzc1NzQubXA0IjtzOjI6ImN2IjtzOjMyOiJhODA4Yzk5Y2Q0ZTlmYmRlYmRlYTc3ZGI5N2RmNzEyZSI7fQ%3D%3D
0.0.0.0 0 B URL
wh008.ptx.li/remote_control.php?file=B64YTo0OntzOjQ6InRpbWUiO2k6MTcyMzgzMjI4OTtzOjU6ImxpbWl0IjtpOjA7czo0OiJmaWxlIjtzOjI1OiIvMjc3MDAwLzI3NzU3NC8yNzc1NzQubXA0IjtzOjI6ImN2IjtzOjMyOiJhODA4Yzk5Y2Q0ZTlmYmRlYmRlYTc3ZGI5N2RmNzEyZSI7fQ%3D%3D
IP / ASN
0.0.0.0
#0
Requested by https://www.whoreshub.com/embed/277574
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605971
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject wh008.ptx.li
Fingerprint FE:1F:5A:09:AE:A6:43:E2:F5:6C:3C:6D:70:5F:EB:CD:82:78:F2:C9
Validity Thu, 01 Aug 2024 20:37:41 GMT - Wed, 30 Oct 2024 20:37:40 GMT
GET /remote_control.php?file=B64YTo0OntzOjQ6InRpbWUiO2k6MTcyMzgzMjI4OTtzOjU6ImxpbWl0IjtpOjA7czo0OiJmaWxlIjtzOjI1OiIvMjc3MDAwLzI3NzU3NC8yNzc1NzQubXA0IjtzOjI6ImN2IjtzOjMyOiJhODA4Yzk5Y2Q0ZTlmYmRlYmRlYTc3ZGI5N2RmNzEyZSI7fQ%3D%3D HTTP/1.1
Host: wh008.ptx.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://www.whoreshub.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Server: nginx
Date: Fri, 16 Aug 2024 18:18:09 GMT
Content-Type: video/mp4
Content-Length: 27275960
Last-Modified: Tue, 26 Mar 2024 08:24:03 GMT
Connection: keep-alive
Set-Cookie: kt_remote_ips=%2C91.90.42.154%7C%7Cc6cebcb9a480107819ecdd2c5706b878; expires=Fri, 16-Aug-2024 19:18:09 GMT; Max-Age=3600; path=/; SameSite=Lax
Content-Disposition: inline; filename="277574.mp4"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, POST, GET, OPTIONS
Access-Control-Expose-Headers: Content-Range, Date, Etag, Cache-Control, Last-Modified
Access-Control-Allow-Headers: Content-Type, Origin, Accept, Range, Cache-Control
Access-Control-Max-Age: 600
Timing-Allow-Origin: *
Cache-Control: max-age=3600
Content-Range: bytes 0-27275959/27275960
GET cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/js/script.js
172.67.141.24200 OK 386 B URL
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/js/script.js
IP / ASN
172.67.141.24
#13335 CLOUDFLARENET
Requested by https://xamateur.net/dyke-student-takes-revenge-on-teacher-and-her-big-ass/?ref=66bf92567b774
Resource Info
File type ASCII text, with very long lines (399), with no line terminators
First Seen 2023-04-05
Last Seen 2025-03-14
Times Seen 2316
Size 386 B (386 bytes)
MD5 022602a468da44628060800173771da2
SHA1 9be813fbfebbcb2aa46d8c6b8abec68b3d16c89c
SHA256 6742c376e658c34d09b2dc5772bd798e3cd52bb265758bac5bce184f8ee7b5cc
Certificate Info
Issuer Google Trust Services
Subject creative-bars1.com
Fingerprint EB:E3:F6:A0:02:C0:06:0B:03:19:9C:E4:96:53:32:2F:22:2E:29:46
Validity Sun, 11 Aug 2024 15:14:55 GMT - Sat, 09 Nov 2024 15:14:54 GMT
GET /sb/notifications/dating/default/us/desk-all/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xamateur.net
DNT: 1
Connection: keep-alive
Referer: https://xamateur.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 16 Aug 2024 18:18:10 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:23:50 GMT
etag: W/"65aa85f6-182"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 3145269
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YBpxf6mabMWp2vAdqZxbDuceHuB5gBVWLLAC0EugQe6AMUcU9A61amQ8EO25RYtyIOP%2F7DpLKGq7CIVdgoqL%2BweRswzoQwBFs%2BtmdobeTWxpPWpwl2r1LmhaBoaOrT79K%2FbLbAcfqWQT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b436ce68dd1b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2