evweinviw.com/WPMM8BgZ
188.114.97.1301 Moved Permanently 0 B IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WPMM8BgZ HTTP/1.1
Host: evweinviw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 28 Jan 2023 19:34:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 28 Jan 2023 20:34:28 GMT
Location: https://evweinviw.com/WPMM8BgZ
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3ZK7QhfOliAu52pyi5S%2Fab%2FkOaNNTaz6D0yRyigE9MbLCWZxnMRM5Ha%2FAC6yFcPqXpYfQxyoKxid9boe4DvM%2F9Xk2a1SEEg9hv0U5Rh3bOYgwtGbJiFpX1Xqiy1fS%2BVz"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790c2a6ae972b51d-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9748
Expires: Sat, 28 Jan 2023 22:16:56 GMT
Date: Sat, 28 Jan 2023 19:34:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12206
Expires: Sat, 28 Jan 2023 22:57:54 GMT
Date: Sat, 28 Jan 2023 19:34:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6297
Expires: Sat, 28 Jan 2023 21:19:25 GMT
Date: Sat, 28 Jan 2023 19:34:28 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 18:43:06 GMT
content-type: application/json
age: 3082
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: bFFv+1BVQ6Snet7sbQ4EoxtE7tzSiF5iL4pHh1GE4VlENSlHEO/p6tFKykuSqLhY5EzDYcnQapk=
x-amz-request-id: 0GFD5GD38D0YGTZQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 18:50:01 GMT
age: 2667
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:28 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c381fbb142fc798911cdf4f8b0ed02c8
9bb3829067e6d2241f1d258072f3b94ec69a90e9
caf0e37abcf6617eaa3ef8f4a57a5f8eb4066e91ea3c3587e4488f68efd0654e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "CAF0E37ABCF6617EAA3EF8F4A57A5F8EB4066E91EA3C3587E4488F68EFD0654E"
Last-Modified: Thu, 26 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 29 Jan 2023 01:34:28 GMT
Date: Sat, 28 Jan 2023 19:34:28 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c381fbb142fc798911cdf4f8b0ed02c8
9bb3829067e6d2241f1d258072f3b94ec69a90e9
caf0e37abcf6617eaa3ef8f4a57a5f8eb4066e91ea3c3587e4488f68efd0654e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "CAF0E37ABCF6617EAA3EF8F4A57A5F8EB4066E91EA3C3587E4488F68EFD0654E"
Last-Modified: Thu, 26 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 29 Jan 2023 01:34:28 GMT
Date: Sat, 28 Jan 2023 19:34:28 GMT
Connection: keep-alive
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 317 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash a346dabeedc86cc9e00dac0df3d05de6
069bf66785d8a3a816e68e21897dfce714ad1717
43966eabfb574ebe9f02bde674c8b8f26af62dc0c20ee353762b3033b0af32d6
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:34:28 GMT
Content-Type: application/ocsp-response
Content-Length: 317
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 03:45:50 GMT
Expires: Thu, 02 Feb 2023 03:45:49 GMT
Etag: "069bf66785d8a3a816e68e21897dfce714ad1717"
Cache-Control: max-age=374480,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790c2a6e8f8cb505-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 18:41:40 GMT
age: 3169
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
news-civuse.com/lands/38/lp.js
193.108.118.121200 OK 1.4 kB URL HTTP/2 news-civuse.com/lands/38/lp.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 8441b469fa0c093bd106a66a4068d944
c3698e755cd1ef7b5d29e233ef615219559a96f3
befe8e9f55c6e3fe10fd398534acb713129764b05d852089ac34bfa535a53902
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/lp.js HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/javascript
content-length: 1418
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-58a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/revopush.js?v=4
193.108.118.121200 OK 10 kB URL HTTP/2 news-civuse.com/revopush.js?v=4
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (9954), with no line terminators
Hash fc284a0e5d580856ae4863715ad6733e
eb69f303c80ff8e44abc9601b8616c0cf92faafa
2240a1d10744494668058ba210d0d87203609def9fd69d2ac82092ebc79583c0
Analyzer Verdict Alert fortinet Phishing
GET /revopush.js?v=4 HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/javascript
content-length: 9954
last-modified: Thu, 15 Dec 2022 09:31:10 GMT
etag: "639ae95e-26e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
193.108.118.121200 OK 4.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4028), with no line terminators
Hash 64f6d7d923f18e5d25a4506b45fcd51d
0e636e489bba7af08cb17f8a72c5dc5685774057
18818b4b5458636324d294a8dee67dbde4808ae542e6cefa18ca6d90c1fc4479
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: text/css
content-length: 4028
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-fbc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
193.108.118.121200 OK 6.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (5955), with no line terminators
Hash 0fe9d8c60b2c31a97fa966d14be642ef
eb4f94b637c54906ae38eb350b6310d552c75e6d
191ae0d72198f51609589e26c7d837d2978382861f60b360148e0af13c8583e1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: text/css
content-length: 5955
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1743"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
193.108.118.121200 OK 8.3 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8327), with no line terminators
Hash 8cd6ca47d55ffed774fde852523940e0
49e1e837355b3de08055c650488d0a3382bff9c0
17528d5914a702bb12ac6b36c8e3bbbfbcd3d52b54dd613acbacf8f4bb17ae33
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: text/css
content-length: 8327
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-2087"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
193.108.118.121200 OK 1.4 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (1391), with no line terminators
Hash 677a255a4a9dc3411b8013e8afb09c42
ec9f1a722b028da2eceb06cdc8c26fc6490a4e70
cc4494353809adb8bdfbbdea2ad72a1a0fc9c84816dc23c7ee1f9466e620eb5e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: text/css
content-length: 1391
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-56f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
193.108.118.121200 OK 12 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 833a12d372440b20017502d3c72e0b20
5fb9301142e3c53f65cd16502b35d7d1d5f82b98
1531ac56322b89715a35b1cdb5ca1f79f453614f368455b2cc8ef650a992f8cd
GET /lands/38/landings/Ihyam_7H2-fd/18.png HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/png
content-length: 12136
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
193.108.118.121200 OK 22 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 19b197d779dd9ee78737a456dbd5c1a6
a3f0b1d0659e5a76bdfaa52bb8f68096d1ab1359
806a8a4abe09c02f4e4b3ed4d6514bfcf1a93a941e838aadf56afaef858d8e37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/png
content-length: 21724
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-54dc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
193.108.118.121200 OK 28 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:03:16 09:26:15], baseline, precision 8, 118x88, components 3\012- data
Hash c1a5819d50b9125f0c46ded86fd5b4b6
3926c15be79cb7522cefdbf5066d39623e36a283
374f0cede3c1f91ad174b97554017b74cbd29424d7467d039beab541f6deb873
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 27900
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6cfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
193.108.118.121200 OK 17 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x88, components 3\012- data
Hash 215029a9775d1e9a56c93912ab03f4c6
6a3dbd676e2ea61850d2a20086b9ec84127da0ae
e071c52839ef37679439165349ffdd98cf19aa7e35d0293a1bec69743db70b16
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 17350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash ea52ae32ae4319fb03da1672b0c20ed3
4efd8189179b260a4b51fd4b28d729b6143ef00a
43a4ca83560d5720ffeccf17478d6a1741f86639f35744fb61fcb139dc3020a6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 12525
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-30ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
193.108.118.121200 OK 11 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 2f03fbd61721fdf46883333595050c77
8361f15c906a9457340fc21febd22b5ede56ac61
9f6c76cf695bc0785f4e4f8bb3abe93255af3ea1597307d567dc0fc93fa70560
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 11238
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2be6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
193.108.118.121200 OK 14 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 9903db279cf9714141daac34523f39b6
ac412f9ce9b8c50155e9adb9f5095d82519ccd24
f562892c60fef407c954fd73d6908003c42f832c4ae86f8264438a576ce2c1cd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 13505
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-34c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
193.108.118.121200 OK 13 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash 99a404d25bcdd47a141dafdbe046d0cf
04de642c5cbc865c29ab3599c1c4fa19f2a6ba8e
fbe779bcef340ba0b148f84b50a8323a2bbb493674e130bf877d87c6d163ed36
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 13106
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3332"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
193.108.118.121200 OK 16 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 5a34545daf4bc481bcbc3573062aa426
132d09d36ede8f32c3168ecaaa631e5959ce38ef
c044a81b14812c50f3142ad20d0ca862923daba2483eb164b0348ba98d3b7855
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 15481
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3c79"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
193.108.118.121200 OK 18 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 10e8794e65f20d32932985bf814b8965
0627b8648373340d2ba949fd7fe50611d11b033b
43b9f39f94acb50efb3b6981a6c931dcf25eefcc7b7734a927036255263eee39
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 17978
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-463a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
193.108.118.121200 OK 2.4 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 116 x 86\012- data
Hash ec706a0634f1e5e06ad775b2b2ebdcf2
5a18c424f7b84b40709a6b78b2d632639bb3ff2b
9613f59211bd2194336c666d11a0d2e1daa4dd96d543e661f5835e0a621c2f5d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/gif
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xae3bf698", progressive, precision 8, 258x145, components 3\012- data
Hash 58357cada0f0171d2a84540391219649
57123e69e055b4d818faedec09884135c5d4a31e
742c68ecf3dcc1096143a0a5d00f4a15a3edb13fd497ea2931e67e66826addd0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 9007
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-232f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10596
Expires: Sat, 28 Jan 2023 22:31:05 GMT
Date: Sat, 28 Jan 2023 19:34:29 GMT
Connection: keep-alive
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
193.108.118.121200 OK 9.6 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x70755b56", progressive, precision 8, 258x145, components 3\012- data
Hash 8fcd27f0bcc790f75f46d275a19a6300
556d3ca4dec168c77ae4a73c0c6e8291ef1291c0
78410be719ee73e00845d44e100e280d3989fc3d0fa4d3dcfcd888f13ded1843
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 9565
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-255d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
193.108.118.121200 OK 15 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 258x145, components 3\012- data
Hash bb05342bd1f87ae7624aba323af77dca
4b7c875644d0b6a424abf06cda89ad135bd53d81
828e2c12259274e1eb1c212f3498fb31503462023c4b2642da4f795209b755de
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 14653
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-393d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
193.108.118.121200 OK 10 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1d6d8e5e", progressive, precision 8, 258x145, components 3\012- data
Hash 1541881a313c963dc754657aefd89ef0
fb41198c81ac17da4f9a34e4b4bf21c8c7fe6001
75e1629d9fad2e22b9d9983c65874a19a3f639db43c11db713a7f972b8f72117
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 10352
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2870"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 6c17c634ebd856cc85bedd931ac01680
d1e1b9358749b9fd4ff851bb4cbdce54a6223ce8
c1ced3a91bde391f64c6cef03b164cd89ffd499fa5d75a3f797bc57b1fc3c191
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 9032
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2348"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
193.108.118.121200 OK 8.3 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 258x145, components 3\012- data
Hash bc1cdeea817d887b981f26bc84236b93
4528ed7010e2e0c774890d6041a60cbeb3c69c92
d737ffd9379d8f2734c1dc6304e4ff75f1c946de29371a1ec9ddc01f423076dd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 8266
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-204a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
193.108.118.121200 OK 9.3 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7cd1fc83", progressive, precision 8, 258x145, components 3\012- data
Hash 5ec2461279f77afe0c6fbb935bd0b94a
95c6e9171db79ea69ce718b02484e36816d1a1cd
ac60e5738d3cf6d32004e1ddfcf4368e256f1928ea923f9369869b8e9af665ba
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 9338
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-247a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
193.108.118.121200 OK 9.9 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x50dba82c", progressive, precision 8, 258x145, components 3\012- data
Hash eed80bba1e2813e70d57a5f3a6bbdf09
3965668a7340d071731a89abf73cc4b3efe4dac3
9ef4f06c23420fae9b1fd163d0719be1b2b258d74d27f7933c810ad64c93ac93
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 9914
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-26ba"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
193.108.118.121200 OK 8.9 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 258x145, components 3\012- data
Hash 77df6b7e2677b46a053508a92026cb8a
decad70c5281062495250250fdf985b6073a8a91
6143cd3687b480264dad4e3d3a237c30c26c859ef7fe1c2a7b32472fb65710c0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 8885
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-22b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 081a01df58865529d3edcbc765c4dcb5
a7fe3ca35fe5e244926a80addda994218806f613
edebf400c8f60c306491e7b2f8a695b7dde10cf49eed66125423571a1cd60d05
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 12127
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f5f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
193.108.118.121200 OK 20 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 107 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash e2aadceedde9aef1bf42c176b31c585c
76c14eae7537160a304aa458bf11a985d5a57375
2b1ff8c49202306d33deac4cf49841f59c1a49d15c80a77c1e001369578cef3f
GET /lands/38/landings/Ihyam_7H2-fd/button.png HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/png
content-length: 19948
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4dec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
193.108.118.121200 OK 15 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 64 x 64\012- data
Hash 571dfe045d66b88d2d5c82151a1bf579
8966eb7cd27754263bd2861737b695386273f423
7c7cd7a7155d3d38bb49fc82c83aa14ed24d56f6886623299b13b6a81486a871
GET /lands/38/landings/Ihyam_7H2-fd/load.gif HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/gif
content-length: 14574
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-38ee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash d660b4b574161fdee86ae57edc8ed0ab
0b947dc39c7ba7415dd78683e06366ff3848b2d5
7483a49fc67a21c7a295b03880aa6c37425f3e96d60dff1ac36eff743ecf6078
GET /lands/38/landings/Ihyam_7H2-fd/flash.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 3829
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-ef5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
193.108.118.121200 OK 24 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:05:13 17:11:55], baseline, precision 8, 990x36, components 3\012- data
Hash ab6b76c0cc6683324bd7fe5923b24d17
559b8b1e50f80b7a218e25ce443e523401882577
a923ea85ee73e53db73038b2ea8712e7e40b067cde25b05ffa999608b17a304d
GET /lands/38/landings/Ihyam_7H2-fd/panel.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 23598
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-5c2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
193.108.118.121200 OK 887 B URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash ddf58dd1f8745a81264b21bcf1f9cc77
73a35df521dc648af06e2e490cac929bc681a06c
a2315bfaefeae19a449f38fe4131531c7603f5c7e75e956c240074da66123134
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1889
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-761"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash 609e06417314a6476bc6d0f3c1900e20
0e2b0d425bd9e5cc0ebb386b093adf64d464ac1e
9450244a77e354c177c18a691c0e5f0c2fc5d0ddf921f40178cbb8bfe4a076ac
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1394
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-572"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 677577d8c6ffb0107ee5c9fbabaa4af7
0bfcbbafee19eeeae113103080c41cd95b4083e5
3a215afa0d15ae2985cfb88e51e90b727f0ba03fe10f8e0b0980ef55af91bdb0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 2646
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-a56"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
193.108.118.121200 OK 1.2 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 1226a24c469c0fba3970548aab13650f
a6d371e4acc2a9181d1d6bf13b5d51f82c49a943
6a1513dacd3fcffe47245068fe9fa6a49cdc9c352b8d9cbf8f72005c4cf5cafc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1191
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
193.108.118.121200 OK 1.7 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 3db490cc8f824e29d6fb07ba75a97a20
84c2c26447f7b49c76999f31c0ed526bde13c6c4
5c13ca439c63d5f3e5d638ba055f399058117d3b554ae3fb751d4a39043a14fd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1729
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xb7d2e3cb", progressive, precision 8, 60x60, components 3\012- data
Hash 47e765dc1abef2d79edafb5fce1c64b5
93d3e7f1e11dd2d98ca3ffb3b49a0211ed76f273
185540f06acc82b2dc4bdfa6d2deb4ce7454bb1e28783acdde67f8a9a90597b1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1441
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-5a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash f042aa7a438ca85be0afeba44a3ac116
183c8b20394fdaf6ba757ff76d3f25e33092369e
05b76ed86b70990f4307223391e1c9abfff59ec545d75d94683c0f69713eed79
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1809
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-711"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 16b2fab44ddad0b620d0eaec2fc1e425
24fa279de6ceb2c0434ff4e750639e15eb22ed29
58076ed17c6377d23375ec949c6cb2eade75010dcf82ba0e64dbdcbd67583912
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1902
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-76e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
193.108.118.121200 OK 1.1 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x0bb5b909", progressive, precision 8, 60x60, components 3\012- data
Hash 01ed303509acb0c822fa3c55976d4b96
7ed250f181498962ebafd21f1bde4ca15e6953c6
fba198ced4795895d1f6d0bc2247d315eb8cc6dda60ad119c99846d68d0ce445
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1085
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
193.108.118.121200 OK 2.4 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash ec2823c426475d6766008dabf85a4bc2
f0681ce27ba96a1b4f6547a42495ebb5b0ca514a
2316f8554d54e907f9992475ced3bf03fc95412e98b2bc29aa6e5407260bcddd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
193.108.118.121200 OK 2.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash 3f809b94b5e5607da5b5c6506a8729c1
26f4376095902a56db86ea2c76689f15ba3cf9c2
7b84461772bad27e431676a53efae81d8584a102f3f6f407ae0a54469a938ff6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-7bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
193.108.118.121200 OK 3.1 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash cbff1c490bcdcad2989c2549f278eae5
56e1b4489cfc0d54f9f72e15777788beba396c95
6d96d3de01207ab505c62b2da624ba787cabe4fee767c181b175186e50c23af4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 3063
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 52eba434e5411806cd92add275d164ea
0cc9df3c52de111a307dc3d8d22254cf51b0c77f
a4c2a01f64274d0ede23e233e2be19225c68e5e5a6206b338fb8bc6410f7005f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1758
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6de"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash c840b43a0575b0a1742c50f186a67c22
d1ac0da47b4394a9dbea90eee26a260b5268c4d9
6a8ef9be89e89c23d6d96c50e2fa62bd25473e9cc7a79e2cd1ef64e2647cb38a
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/png
content-length: 1045
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-415"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash a08c2c5266f9701e422f042b4a3809c5
9884cf987f84b282f920634b2ab811077dfef7a3
054df6bf8ee2bcb904269745cd2c0830918d9e1a6ff1f965673af5f2946a3c37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1373
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-55d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
193.108.118.121200 OK 1.6 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash bfa11442f9457a03384ecf8128a586a2
a30e6f6a18be085197605b6463f840cb249d0510
941411042624c554a5828ee596c1e3ade4a787ae2fad6e5b6d585ab6a6e1e3c6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 1563
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-61b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 96f46fad8cda5895b895f6ec3f95cda4
3bd79ef305bfa4b7c1a3f328828c63f89a818878
8e48576faf920cae224c669d61831d0ad5fc23f6220e83955275a3115bb568fc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/png
content-length: 1046
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-416"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
193.108.118.121200 OK 887 B URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
193.108.118.121200 OK 841 B URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 9cf522c306866742c2806e0c14c8bca7
7a3ff28af2c6f7cfd036ec4fc162651eaf634f7e
fa09bef7875241c06a9e2505bc698a189d3b3ce012af29c65817fd476627ec87
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 841
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 950ff8ae916df997fea302859ca2ccb4
42232e28878f65aaf4120d9435784ad46c2be71c
c0b01da5a48a7ddd619a2dee26bec77300b68bb1b028716320719f9c1a5f769e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 2553
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-9f9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
193.108.118.121200 OK 4.6 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 150x84, components 3\012- data
Hash 0fa4a903a2adc9da58b52661ebc8d38c
061c6359c2951da7509f6ae4039c2f0bc1ce6b62
79d6da7e0398c3f607c4bbc93562cf6ab96bb800cdab4ef6df82718cf0a0d3e5
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 4644
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1224"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 58477c52a9d639b91b16f022d4676bcf
51a85ef703617e996c50cd76b38f2507517a9f25
a0653cc819b252702f55439d6f8763d212fca2f9f604d67224a2a9891e8eadbe
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 4397
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-112d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
193.108.118.121200 OK 7.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7ab4f024", progressive, precision 8, 233x131, components 3\012- data
Hash 2a4d527ed65de8e2e0a69dc9d50442d2
8ec4547a38c9e3d37469acfe21ea755531776f09
275876bbb5190da100ae4f9aca976ec15cea0de20d42e167f522a0a50ba8ca02
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 6972
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1b3c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
193.108.118.121200 OK 4.3 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 365e215442256548316a73bc7c79edf1
13078402132cb89939a39edf11181fb88ebe390f
f8c35c02ff055694af23c83b1e3019a8c29965ab57ed7db8173a23a38494ff58
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 4315
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-10db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
193.108.118.121200 OK 4.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 150x84, components 3\012- data
Hash 416ec3af020687541765d48acb81fc08
48b80345ffb951535d4d6ca811d19bd9dd726998
75c30d77f900b2f4c91f502f45f00606b57a47bb84e6b700fb18482389d88f3c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 4035
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-fc3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
193.108.118.121200 OK 8.6 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 233x131, components 3\012- data
Hash 55778c73ba99a9477464e5c90cdd7e02
bc49e8058f1dafe10e817441de952ba6aa3b7b58
c362fc3a2aafd1b0d8069fb1fae83b5f0abb06443d3e00b21b37be13aeb75bfa
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 8615
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-21a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
193.108.118.121200 OK 5.1 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 72e270f7041c2fe2f326d11e162fb249
3f918a2023f10a01a2ed74713d292df415d14e05
b17ce663fab4421f728ea0dd218d2a8a6a10a4314759fdf139b9388fa26e37f6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 5080
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-13d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6359dcbc", progressive, precision 8, 150x84, components 3\012- data
Hash 447470b34b66b570c8fc0dbc11c06609
863180b376242e256189888eb99282e597d894c9
dd57f5a80517b8109279b57d702278f31a9878295045c6766931a0453244d749
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 4417
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1141"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
193.108.118.121200 OK 7.9 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 233x131, components 3\012- data
Hash 5df975e7a8c0b2610069610c54c5ce6c
ab6390fbb7be1be9a0f4477b4439e34d5175b6fc
bbfb6830dabc55fd598cc0948049f2367d17c80f286e0821e660ba7f5a6b360c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 7904
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1ee0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 150x84, components 3\012- data
Hash 6ed4eca1ed776930746531005fcf22aa
11e8643932e35a8ef65be8ef585afee241c8eddc
28849006b773d85fb8fb2295a86bcee5d2cdabb9a23d854ffebbd8dfd203588c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 3835
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-efb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
193.108.118.121200 OK 4.7 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 12f0c14e5943fd57577ce11155107bdb
a484cb296770fe6cb55d25cba19f831cf1aaf7d1
9eb468f7688a901a3626fdde8d0b07dc490a830718c2938d32f70f0ec122a344
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 4664
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1238"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
193.108.118.121200 OK 6.8 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 233x131, components 3\012- data
Hash 2ad4260dc1204ad8f3c0c29bd919830a
fd2ddfca32f55ba5d180af812a787e61ce136480
acc8f76a570c0833d34835f5694409e082b4af09783366596c2e151e0b0ed128
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 6827
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1aab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
193.108.118.121200 OK 1.9 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 88 x 31\012- data
Hash 2bcf55138cde4a65770426a67ea247fc
13d8c808a4276dc88937817d7df7720182c093f6
348fd1e58aec8d99001aca1dd12b72eafef534c2d11725b2280a173d03b5fa6b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/gif
content-length: 1882
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-75a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7f75e99d8c5cc9856b1753db586ba98d
de82cafe8696fc2e6a51f9f3f30ec1497ff16b8a
20a072d37f9df6c48dc8523ca86acd2b2ac7e09aa9d4121c45c30c3246a8ff5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "20A072D37F9DF6C48DC8523CA86ACD2B2AC7E09AA9D4121C45C30C3246A8FF5E"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16370
Expires: Sun, 29 Jan 2023 00:07:19 GMT
Date: Sat, 28 Jan 2023 19:34:29 GMT
Connection: keep-alive
errors.house/js-sdk-loader/f1c7cfc107e94764b41b7a2b50de5ae0.min.js
144.76.158.184200 OK 1.9 kB URL HTTP/1.1 errors.house/js-sdk-loader/f1c7cfc107e94764b41b7a2b50de5ae0.min.js
IP 144.76.158.184:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash 80932f4dcde89b05c9a4e8f491d1137a
790824b7aee301fa9a3794fa34b7cef37a88f730
9a0262ebf8e5fcb4028b6ea0876c9e06270170be66a752a08dd4acdfa6ca7b93
GET /js-sdk-loader/f1c7cfc107e94764b41b7a2b50de5ae0.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-civuse.com
Connection: keep-alive
Referer: https://news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 28 Jan 2023 19:34:29 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/3 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 7da8f9a23d8c05f64f248e4e3427c76e
e2d001c2909cd9403173cbb0e288d55fbc8e4d0a
db8790004124a0eeb0676860170ad9c37250b2ba697a27dee62c99b64c67b4b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:34:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
news-civuse.com/sw.js
193.108.118.121200 OK 4.2 kB IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4168)
Hash 569090f90a522f4c62af3b9e40635957
4e6f57da49920f30777f3fe71f83f6183aeb4f3f
ee8c6af307c8d085753adb810c69c8379d1e8d01211b491409c43e9edc9f6fb5
Analyzer Verdict Alert fortinet Phishing
GET /sw.js HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/javascript
content-length: 4199
last-modified: Thu, 01 Dec 2022 08:31:02 GMT
etag: "63886646-1067"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.163.49.154101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.163.49.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gU9s5N76MYPahXEgVzLbbg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9ZpxxM6zzm2fmXBCdRGwmCJNb8s=
news-civuse.com/lands/38/index.php_files/pu.swf
193.108.118.121200 OK 2.0 kB URL HTTP/2 news-civuse.com/lands/38/index.php_files/pu.swf
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 6d40122b8a5b7fd31b5aef2749f519fd
518d585dd26c947344ddea5403324850d1b2f7cd
1da7814acd0d6913438bf701d8a2d2cf29814174b5eff0e6ff129ee74f68a7cf
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/index.php_files/pu.swf HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/x-shockwave-flash
content-length: 1953
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 7da8f9a23d8c05f64f248e4e3427c76e
e2d001c2909cd9403173cbb0e288d55fbc8e4d0a
db8790004124a0eeb0676860170ad9c37250b2ba697a27dee62c99b64c67b4b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:34:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250 HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 1b6ee6a5fdcf3c781a0b768964797646
f0bf83f6368d7c31471ad258ce8cfb4848109192
511ad4ad0f3db18490c9b7876d44c887f60d78dd8d06a585367c0ab4ddbbe92f
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250 HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
193.108.118.121200 OK 234 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:06:21 11:55:20], baseline, precision 8, 990x513, components 3\012- data
Size 234 kB (234218 bytes)
Hash 60f67e63f85561c6f95fd573252d2311
6fc6d41b27131074786778522b86077f477dbd51
0e80e9257f1dd0149894bf37342cb082ef2410263de490e851111fa9531e15c6
GET /lands/38/landings/Ihyam_7H2-fd/fon2.jpg HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/jpeg
content-length: 234218
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-392ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250 HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250 HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:29 GMT
cache-control: max-age=67525
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934469.dop068.sk1.t,1674934469.cds243.sk1.hn,1674934469.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:29 GMT
cache-control: max-age=61111
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934469.dop068.sk1.t,1674934469.cds243.sk1.hn,1674934469.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201504/13/47540711/original/3.jpg
205.185.208.60200 OK 13 kB URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201504/13/47540711/original/3.jpg
IP 205.185.208.60:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 258x145, components 3\012- data
Hash dce82d44b4b11da45323c7fb3d48f2e8
1f89ba9a7c5f9bb914f4d9a8546119f68f7ddcfc
71035bfb92d2af8dd1b035d0b27b853e08adfc90b0c248d1ce3a131cf7631601
GET /m=ecuK8daaaa/videos/201504/13/47540711/original/3.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:34:29 GMT
etag: "1576646962"
content-length: 13332
content-type: image/jpeg
last-modified: Wed, 18 Dec 2019 05:29:22 GMT
accept-ranges: bytes
cache-control: max-age=10377942
x-hw: 1674934469.dop068.sk1.t,1674934469.cds243.sk1.hn,1674934469.cds240.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:29 GMT
cache-control: max-age=56939
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934469.dop068.sk1.t,1674934469.cds243.sk1.hn,1674934469.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:29 GMT
cache-control: max-age=63957
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934469.dop068.sk1.t,1674934469.cds243.sk1.hn,1674934469.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:29 GMT
cache-control: max-age=56375
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934469.dop068.sk1.t,1674934469.cds243.sk1.hn,1674934469.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:29 GMT
cache-control: max-age=45280
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934469.dop068.sk1.t,1674934469.cds243.sk1.hn,1674934469.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:29 GMT
cache-control: max-age=49158
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934469.dop068.sk1.t,1674934469.cds243.sk1.hn,1674934469.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
151.101.66.217200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
IP 151.101.66.217:0
File type ASCII text, with very long lines (62031)
Hash 1c6083f7ae34ed2fa3236569eec9ff56
0c1be1b5468042e65e02c8b886c50d26427c9ce7
2b1d69121eb9dc0629126ff02cf7acef2f1924b32b0bb654792ecd9101e10c44
GET /7.19.0/bundle.es5.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 11 Nov 2023 17:34:32 GMT
last-modified: Thu, 10 Nov 2022 15:50:35 GMT
etag: "1c6083f7ae34ed2fa3236569eec9ff56"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 19:34:29 GMT
age: 6746398
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20174
X-Firefox-Spdy: h2
news-civuse.com/lands/38/favicon.png
193.108.118.121200 OK 1.2 kB URL HTTP/2 news-civuse.com/lands/38/favicon.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash e7ffe9c659d8c729e12e20dfe05509be
2c413e09ebd14dd3020209fe9c9183e0335fc250
880c000a3ca23bb89262d9c2ccf9d48bab37dcec09f3b3bf55c8385f58745f50
GET /lands/38/favicon.png HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: image/png
content-length: 1233
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-4d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/lp.js
193.108.118.121200 OK 1.4 kB URL HTTP/2 1.news-civuse.com/lands/38/lp.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 8441b469fa0c093bd106a66a4068d944
c3698e755cd1ef7b5d29e233ef615219559a96f3
befe8e9f55c6e3fe10fd398534acb713129764b05d852089ac34bfa535a53902
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/lp.js HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: application/javascript
content-length: 1418
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-58a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/revopush.js?v=4
193.108.118.121200 OK 10 kB URL HTTP/2 1.news-civuse.com/revopush.js?v=4
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (9954), with no line terminators
Hash fc284a0e5d580856ae4863715ad6733e
eb69f303c80ff8e44abc9601b8616c0cf92faafa
2240a1d10744494668058ba210d0d87203609def9fd69d2ac82092ebc79583c0
GET /revopush.js?v=4 HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: application/javascript
content-length: 9954
last-modified: Thu, 15 Dec 2022 09:31:10 GMT
etag: "639ae95e-26e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
193.108.118.121200 OK 4.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4028), with no line terminators
Hash 64f6d7d923f18e5d25a4506b45fcd51d
0e636e489bba7af08cb17f8a72c5dc5685774057
18818b4b5458636324d294a8dee67dbde4808ae542e6cefa18ca6d90c1fc4479
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: text/css
content-length: 4028
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-fbc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
193.108.118.121200 OK 6.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (5955), with no line terminators
Hash 0fe9d8c60b2c31a97fa966d14be642ef
eb4f94b637c54906ae38eb350b6310d552c75e6d
191ae0d72198f51609589e26c7d837d2978382861f60b360148e0af13c8583e1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: text/css
content-length: 5955
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1743"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
193.108.118.121200 OK 8.3 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8327), with no line terminators
Hash 8cd6ca47d55ffed774fde852523940e0
49e1e837355b3de08055c650488d0a3382bff9c0
17528d5914a702bb12ac6b36c8e3bbbfbcd3d52b54dd613acbacf8f4bb17ae33
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: text/css
content-length: 8327
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-2087"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
193.108.118.121200 OK 1.4 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (1391), with no line terminators
Hash 677a255a4a9dc3411b8013e8afb09c42
ec9f1a722b028da2eceb06cdc8c26fc6490a4e70
cc4494353809adb8bdfbbdea2ad72a1a0fc9c84816dc23c7ee1f9466e620eb5e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: text/css
content-length: 1391
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-56f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
193.108.118.121200 OK 12 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 833a12d372440b20017502d3c72e0b20
5fb9301142e3c53f65cd16502b35d7d1d5f82b98
1531ac56322b89715a35b1cdb5ca1f79f453614f368455b2cc8ef650a992f8cd
GET /lands/38/landings/Ihyam_7H2-fd/18.png HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/png
content-length: 12136
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
193.108.118.121200 OK 22 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 19b197d779dd9ee78737a456dbd5c1a6
a3f0b1d0659e5a76bdfaa52bb8f68096d1ab1359
806a8a4abe09c02f4e4b3ed4d6514bfcf1a93a941e838aadf56afaef858d8e37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/png
content-length: 21724
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-54dc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
193.108.118.121200 OK 28 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:03:16 09:26:15], baseline, precision 8, 118x88, components 3\012- data
Hash c1a5819d50b9125f0c46ded86fd5b4b6
3926c15be79cb7522cefdbf5066d39623e36a283
374f0cede3c1f91ad174b97554017b74cbd29424d7467d039beab541f6deb873
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 27900
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6cfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
193.108.118.121200 OK 17 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x88, components 3\012- data
Hash 215029a9775d1e9a56c93912ab03f4c6
6a3dbd676e2ea61850d2a20086b9ec84127da0ae
e071c52839ef37679439165349ffdd98cf19aa7e35d0293a1bec69743db70b16
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 17350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash ea52ae32ae4319fb03da1672b0c20ed3
4efd8189179b260a4b51fd4b28d729b6143ef00a
43a4ca83560d5720ffeccf17478d6a1741f86639f35744fb61fcb139dc3020a6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 12525
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-30ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
193.108.118.121200 OK 11 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 2f03fbd61721fdf46883333595050c77
8361f15c906a9457340fc21febd22b5ede56ac61
9f6c76cf695bc0785f4e4f8bb3abe93255af3ea1597307d567dc0fc93fa70560
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 11238
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2be6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
193.108.118.121200 OK 14 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 9903db279cf9714141daac34523f39b6
ac412f9ce9b8c50155e9adb9f5095d82519ccd24
f562892c60fef407c954fd73d6908003c42f832c4ae86f8264438a576ce2c1cd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 13505
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-34c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
193.108.118.121200 OK 13 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash 99a404d25bcdd47a141dafdbe046d0cf
04de642c5cbc865c29ab3599c1c4fa19f2a6ba8e
fbe779bcef340ba0b148f84b50a8323a2bbb493674e130bf877d87c6d163ed36
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 13106
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3332"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
193.108.118.121200 OK 16 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 5a34545daf4bc481bcbc3573062aa426
132d09d36ede8f32c3168ecaaa631e5959ce38ef
c044a81b14812c50f3142ad20d0ca862923daba2483eb164b0348ba98d3b7855
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 15481
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3c79"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
193.108.118.121200 OK 18 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 10e8794e65f20d32932985bf814b8965
0627b8648373340d2ba949fd7fe50611d11b033b
43b9f39f94acb50efb3b6981a6c931dcf25eefcc7b7734a927036255263eee39
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 17978
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-463a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
193.108.118.121200 OK 2.4 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 116 x 86\012- data
Hash ec706a0634f1e5e06ad775b2b2ebdcf2
5a18c424f7b84b40709a6b78b2d632639bb3ff2b
9613f59211bd2194336c666d11a0d2e1daa4dd96d543e661f5835e0a621c2f5d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/gif
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xae3bf698", progressive, precision 8, 258x145, components 3\012- data
Hash 58357cada0f0171d2a84540391219649
57123e69e055b4d818faedec09884135c5d4a31e
742c68ecf3dcc1096143a0a5d00f4a15a3edb13fd497ea2931e67e66826addd0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 9007
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-232f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
193.108.118.121200 OK 9.6 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x70755b56", progressive, precision 8, 258x145, components 3\012- data
Hash 8fcd27f0bcc790f75f46d275a19a6300
556d3ca4dec168c77ae4a73c0c6e8291ef1291c0
78410be719ee73e00845d44e100e280d3989fc3d0fa4d3dcfcd888f13ded1843
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 9565
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-255d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
193.108.118.121200 OK 15 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 258x145, components 3\012- data
Hash bb05342bd1f87ae7624aba323af77dca
4b7c875644d0b6a424abf06cda89ad135bd53d81
828e2c12259274e1eb1c212f3498fb31503462023c4b2642da4f795209b755de
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 14653
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-393d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
193.108.118.121200 OK 10 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1d6d8e5e", progressive, precision 8, 258x145, components 3\012- data
Hash 1541881a313c963dc754657aefd89ef0
fb41198c81ac17da4f9a34e4b4bf21c8c7fe6001
75e1629d9fad2e22b9d9983c65874a19a3f639db43c11db713a7f972b8f72117
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 10352
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2870"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=56938
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 6c17c634ebd856cc85bedd931ac01680
d1e1b9358749b9fd4ff851bb4cbdce54a6223ce8
c1ced3a91bde391f64c6cef03b164cd89ffd499fa5d75a3f797bc57b1fc3c191
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 9032
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2348"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=63956
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
193.108.118.121200 OK 8.3 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 258x145, components 3\012- data
Hash bc1cdeea817d887b981f26bc84236b93
4528ed7010e2e0c774890d6041a60cbeb3c69c92
d737ffd9379d8f2734c1dc6304e4ff75f1c946de29371a1ec9ddc01f423076dd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 8266
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-204a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=45279
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=49157
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
193.108.118.121200 OK 9.9 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x50dba82c", progressive, precision 8, 258x145, components 3\012- data
Hash eed80bba1e2813e70d57a5f3a6bbdf09
3965668a7340d071731a89abf73cc4b3efe4dac3
9ef4f06c23420fae9b1fd163d0719be1b2b258d74d27f7933c810ad64c93ac93
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 9914
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-26ba"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=56374
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
193.108.118.121200 OK 8.9 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 258x145, components 3\012- data
Hash 77df6b7e2677b46a053508a92026cb8a
decad70c5281062495250250fdf985b6073a8a91
6143cd3687b480264dad4e3d3a237c30c26c859ef7fe1c2a7b32472fb65710c0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 8885
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-22b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=61110
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 081a01df58865529d3edcbc765c4dcb5
a7fe3ca35fe5e244926a80addda994218806f613
edebf400c8f60c306491e7b2f8a695b7dde10cf49eed66125423571a1cd60d05
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 12127
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f5f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=67524
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
193.108.118.121200 OK 20 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 107 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash e2aadceedde9aef1bf42c176b31c585c
76c14eae7537160a304aa458bf11a985d5a57375
2b1ff8c49202306d33deac4cf49841f59c1a49d15c80a77c1e001369578cef3f
GET /lands/38/landings/Ihyam_7H2-fd/button.png HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/png
content-length: 19948
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4dec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
193.108.118.121200 OK 15 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 64 x 64\012- data
Hash 571dfe045d66b88d2d5c82151a1bf579
8966eb7cd27754263bd2861737b695386273f423
7c7cd7a7155d3d38bb49fc82c83aa14ed24d56f6886623299b13b6a81486a871
GET /lands/38/landings/Ihyam_7H2-fd/load.gif HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/gif
content-length: 14574
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-38ee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash d660b4b574161fdee86ae57edc8ed0ab
0b947dc39c7ba7415dd78683e06366ff3848b2d5
7483a49fc67a21c7a295b03880aa6c37425f3e96d60dff1ac36eff743ecf6078
GET /lands/38/landings/Ihyam_7H2-fd/flash.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 3829
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-ef5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
193.108.118.121200 OK 24 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:05:13 17:11:55], baseline, precision 8, 990x36, components 3\012- data
Hash ab6b76c0cc6683324bd7fe5923b24d17
559b8b1e50f80b7a218e25ce443e523401882577
a923ea85ee73e53db73038b2ea8712e7e40b067cde25b05ffa999608b17a304d
GET /lands/38/landings/Ihyam_7H2-fd/panel.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 23598
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-5c2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
193.108.118.121200 OK 887 B URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash ddf58dd1f8745a81264b21bcf1f9cc77
73a35df521dc648af06e2e490cac929bc681a06c
a2315bfaefeae19a449f38fe4131531c7603f5c7e75e956c240074da66123134
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1889
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-761"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash 609e06417314a6476bc6d0f3c1900e20
0e2b0d425bd9e5cc0ebb386b093adf64d464ac1e
9450244a77e354c177c18a691c0e5f0c2fc5d0ddf921f40178cbb8bfe4a076ac
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1394
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-572"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 677577d8c6ffb0107ee5c9fbabaa4af7
0bfcbbafee19eeeae113103080c41cd95b4083e5
3a215afa0d15ae2985cfb88e51e90b727f0ba03fe10f8e0b0980ef55af91bdb0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 2646
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-a56"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
193.108.118.121200 OK 1.2 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 1226a24c469c0fba3970548aab13650f
a6d371e4acc2a9181d1d6bf13b5d51f82c49a943
6a1513dacd3fcffe47245068fe9fa6a49cdc9c352b8d9cbf8f72005c4cf5cafc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1191
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
193.108.118.121200 OK 1.7 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 3db490cc8f824e29d6fb07ba75a97a20
84c2c26447f7b49c76999f31c0ed526bde13c6c4
5c13ca439c63d5f3e5d638ba055f399058117d3b554ae3fb751d4a39043a14fd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1729
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xb7d2e3cb", progressive, precision 8, 60x60, components 3\012- data
Hash 47e765dc1abef2d79edafb5fce1c64b5
93d3e7f1e11dd2d98ca3ffb3b49a0211ed76f273
185540f06acc82b2dc4bdfa6d2deb4ce7454bb1e28783acdde67f8a9a90597b1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1441
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-5a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash f042aa7a438ca85be0afeba44a3ac116
183c8b20394fdaf6ba757ff76d3f25e33092369e
05b76ed86b70990f4307223391e1c9abfff59ec545d75d94683c0f69713eed79
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1809
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-711"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 16b2fab44ddad0b620d0eaec2fc1e425
24fa279de6ceb2c0434ff4e750639e15eb22ed29
58076ed17c6377d23375ec949c6cb2eade75010dcf82ba0e64dbdcbd67583912
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1902
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-76e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
193.108.118.121200 OK 1.1 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x0bb5b909", progressive, precision 8, 60x60, components 3\012- data
Hash 01ed303509acb0c822fa3c55976d4b96
7ed250f181498962ebafd21f1bde4ca15e6953c6
fba198ced4795895d1f6d0bc2247d315eb8cc6dda60ad119c99846d68d0ce445
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1085
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
193.108.118.121200 OK 2.4 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash ec2823c426475d6766008dabf85a4bc2
f0681ce27ba96a1b4f6547a42495ebb5b0ca514a
2316f8554d54e907f9992475ced3bf03fc95412e98b2bc29aa6e5407260bcddd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
193.108.118.121200 OK 2.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash 3f809b94b5e5607da5b5c6506a8729c1
26f4376095902a56db86ea2c76689f15ba3cf9c2
7b84461772bad27e431676a53efae81d8584a102f3f6f407ae0a54469a938ff6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-7bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
193.108.118.121200 OK 3.1 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash cbff1c490bcdcad2989c2549f278eae5
56e1b4489cfc0d54f9f72e15777788beba396c95
6d96d3de01207ab505c62b2da624ba787cabe4fee767c181b175186e50c23af4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 3063
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 52eba434e5411806cd92add275d164ea
0cc9df3c52de111a307dc3d8d22254cf51b0c77f
a4c2a01f64274d0ede23e233e2be19225c68e5e5a6206b338fb8bc6410f7005f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1758
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6de"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash c840b43a0575b0a1742c50f186a67c22
d1ac0da47b4394a9dbea90eee26a260b5268c4d9
6a8ef9be89e89c23d6d96c50e2fa62bd25473e9cc7a79e2cd1ef64e2647cb38a
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/png
content-length: 1045
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-415"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash a08c2c5266f9701e422f042b4a3809c5
9884cf987f84b282f920634b2ab811077dfef7a3
054df6bf8ee2bcb904269745cd2c0830918d9e1a6ff1f965673af5f2946a3c37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1373
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-55d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
193.108.118.121200 OK 1.6 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash bfa11442f9457a03384ecf8128a586a2
a30e6f6a18be085197605b6463f840cb249d0510
941411042624c554a5828ee596c1e3ade4a787ae2fad6e5b6d585ab6a6e1e3c6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 1563
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-61b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 96f46fad8cda5895b895f6ec3f95cda4
3bd79ef305bfa4b7c1a3f328828c63f89a818878
8e48576faf920cae224c669d61831d0ad5fc23f6220e83955275a3115bb568fc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/png
content-length: 1046
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-416"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
193.108.118.121200 OK 887 B URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
193.108.118.121200 OK 841 B URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 9cf522c306866742c2806e0c14c8bca7
7a3ff28af2c6f7cfd036ec4fc162651eaf634f7e
fa09bef7875241c06a9e2505bc698a189d3b3ce012af29c65817fd476627ec87
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 841
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 950ff8ae916df997fea302859ca2ccb4
42232e28878f65aaf4120d9435784ad46c2be71c
c0b01da5a48a7ddd619a2dee26bec77300b68bb1b028716320719f9c1a5f769e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 2553
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-9f9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
193.108.118.121200 OK 4.6 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 150x84, components 3\012- data
Hash 0fa4a903a2adc9da58b52661ebc8d38c
061c6359c2951da7509f6ae4039c2f0bc1ce6b62
79d6da7e0398c3f607c4bbc93562cf6ab96bb800cdab4ef6df82718cf0a0d3e5
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 4644
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1224"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 58477c52a9d639b91b16f022d4676bcf
51a85ef703617e996c50cd76b38f2507517a9f25
a0653cc819b252702f55439d6f8763d212fca2f9f604d67224a2a9891e8eadbe
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 4397
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-112d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
193.108.118.121200 OK 7.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7ab4f024", progressive, precision 8, 233x131, components 3\012- data
Hash 2a4d527ed65de8e2e0a69dc9d50442d2
8ec4547a38c9e3d37469acfe21ea755531776f09
275876bbb5190da100ae4f9aca976ec15cea0de20d42e167f522a0a50ba8ca02
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 6972
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1b3c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
193.108.118.121200 OK 4.3 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 365e215442256548316a73bc7c79edf1
13078402132cb89939a39edf11181fb88ebe390f
f8c35c02ff055694af23c83b1e3019a8c29965ab57ed7db8173a23a38494ff58
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 4315
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-10db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
193.108.118.121200 OK 4.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 150x84, components 3\012- data
Hash 416ec3af020687541765d48acb81fc08
48b80345ffb951535d4d6ca811d19bd9dd726998
75c30d77f900b2f4c91f502f45f00606b57a47bb84e6b700fb18482389d88f3c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 4035
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-fc3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
193.108.118.121200 OK 8.6 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 233x131, components 3\012- data
Hash 55778c73ba99a9477464e5c90cdd7e02
bc49e8058f1dafe10e817441de952ba6aa3b7b58
c362fc3a2aafd1b0d8069fb1fae83b5f0abb06443d3e00b21b37be13aeb75bfa
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 8615
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-21a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
193.108.118.121200 OK 5.1 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 72e270f7041c2fe2f326d11e162fb249
3f918a2023f10a01a2ed74713d292df415d14e05
b17ce663fab4421f728ea0dd218d2a8a6a10a4314759fdf139b9388fa26e37f6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 5080
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-13d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6359dcbc", progressive, precision 8, 150x84, components 3\012- data
Hash 447470b34b66b570c8fc0dbc11c06609
863180b376242e256189888eb99282e597d894c9
dd57f5a80517b8109279b57d702278f31a9878295045c6766931a0453244d749
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 4417
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1141"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
193.108.118.121200 OK 7.9 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 233x131, components 3\012- data
Hash 5df975e7a8c0b2610069610c54c5ce6c
ab6390fbb7be1be9a0f4477b4439e34d5175b6fc
bbfb6830dabc55fd598cc0948049f2367d17c80f286e0821e660ba7f5a6b360c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 7904
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1ee0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 150x84, components 3\012- data
Hash 6ed4eca1ed776930746531005fcf22aa
11e8643932e35a8ef65be8ef585afee241c8eddc
28849006b773d85fb8fb2295a86bcee5d2cdabb9a23d854ffebbd8dfd203588c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 3835
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-efb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
193.108.118.121200 OK 4.7 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 12f0c14e5943fd57577ce11155107bdb
a484cb296770fe6cb55d25cba19f831cf1aaf7d1
9eb468f7688a901a3626fdde8d0b07dc490a830718c2938d32f70f0ec122a344
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 4664
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1238"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
193.108.118.121200 OK 6.8 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 233x131, components 3\012- data
Hash 2ad4260dc1204ad8f3c0c29bd919830a
fd2ddfca32f55ba5d180af812a787e61ce136480
acc8f76a570c0833d34835f5694409e082b4af09783366596c2e151e0b0ed128
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 6827
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1aab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
193.108.118.121200 OK 1.9 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 88 x 31\012- data
Hash 2bcf55138cde4a65770426a67ea247fc
13d8c808a4276dc88937817d7df7720182c093f6
348fd1e58aec8d99001aca1dd12b72eafef534c2d11725b2280a173d03b5fa6b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/gif
content-length: 1882
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-75a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/sw.js
193.108.118.121200 OK 4.2 kB IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4168)
Hash 569090f90a522f4c62af3b9e40635957
4e6f57da49920f30777f3fe71f83f6183aeb4f3f
ee8c6af307c8d085753adb810c69c8379d1e8d01211b491409c43e9edc9f6fb5
Analyzer Verdict Alert fortinet Phishing
GET /sw.js HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: application/javascript
content-length: 4199
last-modified: Thu, 01 Dec 2022 08:31:02 GMT
etag: "63886646-1067"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/index.php_files/pu.swf
193.108.118.121200 OK 2.0 kB URL HTTP/2 1.news-civuse.com/lands/38/index.php_files/pu.swf
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 6d40122b8a5b7fd31b5aef2749f519fd
518d585dd26c947344ddea5403324850d1b2f7cd
1da7814acd0d6913438bf701d8a2d2cf29814174b5eff0e6ff129ee74f68a7cf
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/index.php_files/pu.swf HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: application/x-shockwave-flash
content-length: 1953
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=56938
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=63956
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
193.108.118.121200 OK 6.3 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 4017230a30fd2de81422baf57cc42ff6
70e0ec756de5ff3e7da696aa5b187f4344793bd0
c4a26437ec996731964beb8292fea2593d775e127586b4ae54e1b974b885a1b4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-8353"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=49157
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=56374
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=61110
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:30 GMT
cache-control: max-age=67524
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934470.dop068.sk1.t,1674934470.cds243.sk1.hn,1674934470.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250 HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 1b6ee6a5fdcf3c781a0b768964797646
f0bf83f6368d7c31471ad258ce8cfb4848109192
511ad4ad0f3db18490c9b7876d44c887f60d78dd8d06a585367c0ab4ddbbe92f
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250 HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
193.108.118.121200 OK 234 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:06:21 11:55:20], baseline, precision 8, 990x513, components 3\012- data
Size 234 kB (234218 bytes)
Hash 60f67e63f85561c6f95fd573252d2311
6fc6d41b27131074786778522b86077f477dbd51
0e80e9257f1dd0149894bf37342cb082ef2410263de490e851111fa9531e15c6
GET /lands/38/landings/Ihyam_7H2-fd/fon2.jpg HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/jpeg
content-length: 234218
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-392ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250 HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250 HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
151.101.66.217200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
IP 151.101.66.217:0
File type ASCII text, with very long lines (62031)
Hash 1c6083f7ae34ed2fa3236569eec9ff56
0c1be1b5468042e65e02c8b886c50d26427c9ce7
2b1d69121eb9dc0629126ff02cf7acef2f1924b32b0bb654792ecd9101e10c44
GET /7.19.0/bundle.es5.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 11 Nov 2023 17:34:32 GMT
last-modified: Thu, 10 Nov 2022 15:50:35 GMT
etag: "1c6083f7ae34ed2fa3236569eec9ff56"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 19:34:30 GMT
age: 6746398
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20174
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/favicon.png
193.108.118.121200 OK 1.2 kB URL HTTP/2 1.news-civuse.com/lands/38/favicon.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash e7ffe9c659d8c729e12e20dfe05509be
2c413e09ebd14dd3020209fe9c9183e0335fc250
880c000a3ca23bb89262d9c2ccf9d48bab37dcec09f3b3bf55c8385f58745f50
GET /lands/38/favicon.png HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: image/png
content-length: 1233
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-4d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
browser.sentry-cdn.com/7.15.0/bundle.es5.min.js
151.101.66.217200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/7.15.0/bundle.es5.min.js
IP 151.101.66.217:0
File type ASCII text, with very long lines (61994)
Hash 630573cba95f68cf0b327187fb13c020
d43f4f70268aa019fc4d2627cd477864dc291271
ece93676dd48b988b7f480f72442e66e243ed2d1a5989ed742687391c1f21ef6
GET /7.15.0/bundle.es5.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1.news-civuse.com
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Fri, 01 Dec 2023 08:56:47 GMT
last-modified: Mon, 10 Oct 2022 12:23:16 GMT
etag: "630573cba95f68cf0b327187fb13c020"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 19:34:30 GMT
age: 5049464
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20163
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/lp.js
193.108.118.121200 OK 1.4 kB URL HTTP/2 2.news-civuse.com/lands/38/lp.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 8441b469fa0c093bd106a66a4068d944
c3698e755cd1ef7b5d29e233ef615219559a96f3
befe8e9f55c6e3fe10fd398534acb713129764b05d852089ac34bfa535a53902
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/lp.js HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: application/javascript
content-length: 1418
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-58a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/revopush.js?v=4
193.108.118.121200 OK 10 kB URL HTTP/2 2.news-civuse.com/revopush.js?v=4
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (9954), with no line terminators
Hash fc284a0e5d580856ae4863715ad6733e
eb69f303c80ff8e44abc9601b8616c0cf92faafa
2240a1d10744494668058ba210d0d87203609def9fd69d2ac82092ebc79583c0
GET /revopush.js?v=4 HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: application/javascript
content-length: 9954
last-modified: Thu, 15 Dec 2022 09:31:10 GMT
etag: "639ae95e-26e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
193.108.118.121200 OK 4.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4028), with no line terminators
Hash 64f6d7d923f18e5d25a4506b45fcd51d
0e636e489bba7af08cb17f8a72c5dc5685774057
18818b4b5458636324d294a8dee67dbde4808ae542e6cefa18ca6d90c1fc4479
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: text/css
content-length: 4028
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-fbc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
193.108.118.121200 OK 23 kB URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 968b85489bf930d90f857f802b733df3
c243b635d60b230ee89970c2c90458651f89fca4
8f2f2c63bf128abd08787424121e684cd254566e1c658729245a7d1a9a68527e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-8353"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
193.108.118.121200 OK 8.3 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8327), with no line terminators
Hash 8cd6ca47d55ffed774fde852523940e0
49e1e837355b3de08055c650488d0a3382bff9c0
17528d5914a702bb12ac6b36c8e3bbbfbcd3d52b54dd613acbacf8f4bb17ae33
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: text/css
content-length: 8327
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-2087"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
193.108.118.121200 OK 17 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash e87505e4474637517f4fbb389efb0a1d
031a2178a96cd5d7be344a8ca7df5b2f9d3350ce
08a1b25ecd4bbfe701375c951e4930ccdc46643c21cd9694ded8b55b7fd1ff72
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: W/"5d7a0ef0-f889"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
193.108.118.121200 OK 12 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 833a12d372440b20017502d3c72e0b20
5fb9301142e3c53f65cd16502b35d7d1d5f82b98
1531ac56322b89715a35b1cdb5ca1f79f453614f368455b2cc8ef650a992f8cd
GET /lands/38/landings/Ihyam_7H2-fd/18.png HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/png
content-length: 12136
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
193.108.118.121200 OK 25 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 426fb2ee6b08ef9a753f17a0c6947e53
36fd2b968b0c875adf1389e3012b40dcaf850524
18c8b9f528dda8ec1cc0fc699562107a3110770791ba220a84d1e3e90a0919df
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-3957"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
193.108.118.121200 OK 28 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:03:16 09:26:15], baseline, precision 8, 118x88, components 3\012- data
Hash c1a5819d50b9125f0c46ded86fd5b4b6
3926c15be79cb7522cefdbf5066d39623e36a283
374f0cede3c1f91ad174b97554017b74cbd29424d7467d039beab541f6deb873
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 27900
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6cfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
193.108.118.121200 OK 17 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x88, components 3\012- data
Hash 215029a9775d1e9a56c93912ab03f4c6
6a3dbd676e2ea61850d2a20086b9ec84127da0ae
e071c52839ef37679439165349ffdd98cf19aa7e35d0293a1bec69743db70b16
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 17350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash ea52ae32ae4319fb03da1672b0c20ed3
4efd8189179b260a4b51fd4b28d729b6143ef00a
43a4ca83560d5720ffeccf17478d6a1741f86639f35744fb61fcb139dc3020a6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 12525
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-30ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
193.108.118.121200 OK 11 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 2f03fbd61721fdf46883333595050c77
8361f15c906a9457340fc21febd22b5ede56ac61
9f6c76cf695bc0785f4e4f8bb3abe93255af3ea1597307d567dc0fc93fa70560
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 11238
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2be6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
193.108.118.121200 OK 14 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 9903db279cf9714141daac34523f39b6
ac412f9ce9b8c50155e9adb9f5095d82519ccd24
f562892c60fef407c954fd73d6908003c42f832c4ae86f8264438a576ce2c1cd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 13505
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-34c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
193.108.118.121200 OK 13 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash 99a404d25bcdd47a141dafdbe046d0cf
04de642c5cbc865c29ab3599c1c4fa19f2a6ba8e
fbe779bcef340ba0b148f84b50a8323a2bbb493674e130bf877d87c6d163ed36
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 13106
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3332"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
193.108.118.121200 OK 16 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 5a34545daf4bc481bcbc3573062aa426
132d09d36ede8f32c3168ecaaa631e5959ce38ef
c044a81b14812c50f3142ad20d0ca862923daba2483eb164b0348ba98d3b7855
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 15481
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3c79"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
193.108.118.121200 OK 18 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 10e8794e65f20d32932985bf814b8965
0627b8648373340d2ba949fd7fe50611d11b033b
43b9f39f94acb50efb3b6981a6c931dcf25eefcc7b7734a927036255263eee39
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 17978
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-463a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
193.108.118.121200 OK 2.4 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 116 x 86\012- data
Hash ec706a0634f1e5e06ad775b2b2ebdcf2
5a18c424f7b84b40709a6b78b2d632639bb3ff2b
9613f59211bd2194336c666d11a0d2e1daa4dd96d543e661f5835e0a621c2f5d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/gif
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=56937
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
errors.house/api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0
144.76.158.184429 Too Many Requests 162 B URL HTTP/1.1 errors.house/api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0
IP 144.76.158.184:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 7f44c7691673d77d8557d4d5699ef23a
f30daebcb81f94af5e6dfd9e70585b8904d72ac1
413d294fad14524bf94e764b33ff0f327682549408545171fcf9240189c154ae
POST /api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0 HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 135
Origin: https://1.news-civuse.com
Connection: keep-alive
Referer: https://1.news-civuse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 429 Too Many Requests
Server: nginx/1.22.1
Date: Sat, 28 Jan 2023 19:34:31 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xae3bf698", progressive, precision 8, 258x145, components 3\012- data
Hash 58357cada0f0171d2a84540391219649
57123e69e055b4d818faedec09884135c5d4a31e
742c68ecf3dcc1096143a0a5d00f4a15a3edb13fd497ea2931e67e66826addd0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 9007
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-232f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=63955
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
193.108.118.121200 OK 9.6 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x70755b56", progressive, precision 8, 258x145, components 3\012- data
Hash 8fcd27f0bcc790f75f46d275a19a6300
556d3ca4dec168c77ae4a73c0c6e8291ef1291c0
78410be719ee73e00845d44e100e280d3989fc3d0fa4d3dcfcd888f13ded1843
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 9565
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-255d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
193.108.118.121200 OK 15 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 258x145, components 3\012- data
Hash bb05342bd1f87ae7624aba323af77dca
4b7c875644d0b6a424abf06cda89ad135bd53d81
828e2c12259274e1eb1c212f3498fb31503462023c4b2642da4f795209b755de
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 14653
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-393d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
193.108.118.121200 OK 10 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1d6d8e5e", progressive, precision 8, 258x145, components 3\012- data
Hash 1541881a313c963dc754657aefd89ef0
fb41198c81ac17da4f9a34e4b4bf21c8c7fe6001
75e1629d9fad2e22b9d9983c65874a19a3f639db43c11db713a7f972b8f72117
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 10352
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2870"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 6c17c634ebd856cc85bedd931ac01680
d1e1b9358749b9fd4ff851bb4cbdce54a6223ce8
c1ced3a91bde391f64c6cef03b164cd89ffd499fa5d75a3f797bc57b1fc3c191
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 9032
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2348"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
193.108.118.121200 OK 8.3 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 258x145, components 3\012- data
Hash bc1cdeea817d887b981f26bc84236b93
4528ed7010e2e0c774890d6041a60cbeb3c69c92
d737ffd9379d8f2734c1dc6304e4ff75f1c946de29371a1ec9ddc01f423076dd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 8266
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-204a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
193.108.118.121200 OK 9.3 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7cd1fc83", progressive, precision 8, 258x145, components 3\012- data
Hash 5ec2461279f77afe0c6fbb935bd0b94a
95c6e9171db79ea69ce718b02484e36816d1a1cd
ac60e5738d3cf6d32004e1ddfcf4368e256f1928ea923f9369869b8e9af665ba
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 9338
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-247a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
193.108.118.121200 OK 9.9 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x50dba82c", progressive, precision 8, 258x145, components 3\012- data
Hash eed80bba1e2813e70d57a5f3a6bbdf09
3965668a7340d071731a89abf73cc4b3efe4dac3
9ef4f06c23420fae9b1fd163d0719be1b2b258d74d27f7933c810ad64c93ac93
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 9914
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-26ba"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=45278
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
193.108.118.121200 OK 8.9 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 258x145, components 3\012- data
Hash 77df6b7e2677b46a053508a92026cb8a
decad70c5281062495250250fdf985b6073a8a91
6143cd3687b480264dad4e3d3a237c30c26c859ef7fe1c2a7b32472fb65710c0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 8885
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-22b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=49156
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 081a01df58865529d3edcbc765c4dcb5
a7fe3ca35fe5e244926a80addda994218806f613
edebf400c8f60c306491e7b2f8a695b7dde10cf49eed66125423571a1cd60d05
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 12127
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f5f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=56373
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
193.108.118.121200 OK 20 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 107 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash e2aadceedde9aef1bf42c176b31c585c
76c14eae7537160a304aa458bf11a985d5a57375
2b1ff8c49202306d33deac4cf49841f59c1a49d15c80a77c1e001369578cef3f
GET /lands/38/landings/Ihyam_7H2-fd/button.png HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/png
content-length: 19948
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4dec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=61109
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
193.108.118.121200 OK 15 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 64 x 64\012- data
Hash 571dfe045d66b88d2d5c82151a1bf579
8966eb7cd27754263bd2861737b695386273f423
7c7cd7a7155d3d38bb49fc82c83aa14ed24d56f6886623299b13b6a81486a871
GET /lands/38/landings/Ihyam_7H2-fd/load.gif HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/gif
content-length: 14574
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-38ee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash d660b4b574161fdee86ae57edc8ed0ab
0b947dc39c7ba7415dd78683e06366ff3848b2d5
7483a49fc67a21c7a295b03880aa6c37425f3e96d60dff1ac36eff743ecf6078
GET /lands/38/landings/Ihyam_7H2-fd/flash.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 3829
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-ef5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
193.108.118.121200 OK 24 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:05:13 17:11:55], baseline, precision 8, 990x36, components 3\012- data
Hash ab6b76c0cc6683324bd7fe5923b24d17
559b8b1e50f80b7a218e25ce443e523401882577
a923ea85ee73e53db73038b2ea8712e7e40b067cde25b05ffa999608b17a304d
GET /lands/38/landings/Ihyam_7H2-fd/panel.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 23598
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-5c2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
193.108.118.121200 OK 887 B URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=67523
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash ddf58dd1f8745a81264b21bcf1f9cc77
73a35df521dc648af06e2e490cac929bc681a06c
a2315bfaefeae19a449f38fe4131531c7603f5c7e75e956c240074da66123134
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1889
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-761"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash 609e06417314a6476bc6d0f3c1900e20
0e2b0d425bd9e5cc0ebb386b093adf64d464ac1e
9450244a77e354c177c18a691c0e5f0c2fc5d0ddf921f40178cbb8bfe4a076ac
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1394
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-572"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 677577d8c6ffb0107ee5c9fbabaa4af7
0bfcbbafee19eeeae113103080c41cd95b4083e5
3a215afa0d15ae2985cfb88e51e90b727f0ba03fe10f8e0b0980ef55af91bdb0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 2646
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-a56"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
193.108.118.121200 OK 1.2 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 1226a24c469c0fba3970548aab13650f
a6d371e4acc2a9181d1d6bf13b5d51f82c49a943
6a1513dacd3fcffe47245068fe9fa6a49cdc9c352b8d9cbf8f72005c4cf5cafc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1191
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
193.108.118.121200 OK 1.7 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 3db490cc8f824e29d6fb07ba75a97a20
84c2c26447f7b49c76999f31c0ed526bde13c6c4
5c13ca439c63d5f3e5d638ba055f399058117d3b554ae3fb751d4a39043a14fd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1729
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xb7d2e3cb", progressive, precision 8, 60x60, components 3\012- data
Hash 47e765dc1abef2d79edafb5fce1c64b5
93d3e7f1e11dd2d98ca3ffb3b49a0211ed76f273
185540f06acc82b2dc4bdfa6d2deb4ce7454bb1e28783acdde67f8a9a90597b1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1441
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-5a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash f042aa7a438ca85be0afeba44a3ac116
183c8b20394fdaf6ba757ff76d3f25e33092369e
05b76ed86b70990f4307223391e1c9abfff59ec545d75d94683c0f69713eed79
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1809
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-711"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 16b2fab44ddad0b620d0eaec2fc1e425
24fa279de6ceb2c0434ff4e750639e15eb22ed29
58076ed17c6377d23375ec949c6cb2eade75010dcf82ba0e64dbdcbd67583912
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1902
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-76e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
193.108.118.121200 OK 1.1 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x0bb5b909", progressive, precision 8, 60x60, components 3\012- data
Hash 01ed303509acb0c822fa3c55976d4b96
7ed250f181498962ebafd21f1bde4ca15e6953c6
fba198ced4795895d1f6d0bc2247d315eb8cc6dda60ad119c99846d68d0ce445
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1085
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
193.108.118.121200 OK 2.4 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash ec2823c426475d6766008dabf85a4bc2
f0681ce27ba96a1b4f6547a42495ebb5b0ca514a
2316f8554d54e907f9992475ced3bf03fc95412e98b2bc29aa6e5407260bcddd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
193.108.118.121200 OK 2.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash 3f809b94b5e5607da5b5c6506a8729c1
26f4376095902a56db86ea2c76689f15ba3cf9c2
7b84461772bad27e431676a53efae81d8584a102f3f6f407ae0a54469a938ff6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-7bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
193.108.118.121200 OK 3.1 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash cbff1c490bcdcad2989c2549f278eae5
56e1b4489cfc0d54f9f72e15777788beba396c95
6d96d3de01207ab505c62b2da624ba787cabe4fee767c181b175186e50c23af4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 3063
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 52eba434e5411806cd92add275d164ea
0cc9df3c52de111a307dc3d8d22254cf51b0c77f
a4c2a01f64274d0ede23e233e2be19225c68e5e5a6206b338fb8bc6410f7005f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1758
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6de"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash c840b43a0575b0a1742c50f186a67c22
d1ac0da47b4394a9dbea90eee26a260b5268c4d9
6a8ef9be89e89c23d6d96c50e2fa62bd25473e9cc7a79e2cd1ef64e2647cb38a
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/png
content-length: 1045
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-415"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash a08c2c5266f9701e422f042b4a3809c5
9884cf987f84b282f920634b2ab811077dfef7a3
054df6bf8ee2bcb904269745cd2c0830918d9e1a6ff1f965673af5f2946a3c37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1373
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-55d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
193.108.118.121200 OK 1.6 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash bfa11442f9457a03384ecf8128a586a2
a30e6f6a18be085197605b6463f840cb249d0510
941411042624c554a5828ee596c1e3ade4a787ae2fad6e5b6d585ab6a6e1e3c6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 1563
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-61b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 96f46fad8cda5895b895f6ec3f95cda4
3bd79ef305bfa4b7c1a3f328828c63f89a818878
8e48576faf920cae224c669d61831d0ad5fc23f6220e83955275a3115bb568fc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/png
content-length: 1046
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-416"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
193.108.118.121200 OK 887 B URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
193.108.118.121200 OK 841 B URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 9cf522c306866742c2806e0c14c8bca7
7a3ff28af2c6f7cfd036ec4fc162651eaf634f7e
fa09bef7875241c06a9e2505bc698a189d3b3ce012af29c65817fd476627ec87
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 841
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 950ff8ae916df997fea302859ca2ccb4
42232e28878f65aaf4120d9435784ad46c2be71c
c0b01da5a48a7ddd619a2dee26bec77300b68bb1b028716320719f9c1a5f769e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 2553
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-9f9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
193.108.118.121200 OK 4.6 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 150x84, components 3\012- data
Hash 0fa4a903a2adc9da58b52661ebc8d38c
061c6359c2951da7509f6ae4039c2f0bc1ce6b62
79d6da7e0398c3f607c4bbc93562cf6ab96bb800cdab4ef6df82718cf0a0d3e5
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 4644
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1224"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 58477c52a9d639b91b16f022d4676bcf
51a85ef703617e996c50cd76b38f2507517a9f25
a0653cc819b252702f55439d6f8763d212fca2f9f604d67224a2a9891e8eadbe
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 4397
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-112d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
193.108.118.121200 OK 7.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7ab4f024", progressive, precision 8, 233x131, components 3\012- data
Hash 2a4d527ed65de8e2e0a69dc9d50442d2
8ec4547a38c9e3d37469acfe21ea755531776f09
275876bbb5190da100ae4f9aca976ec15cea0de20d42e167f522a0a50ba8ca02
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 6972
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1b3c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
193.108.118.121200 OK 4.3 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 365e215442256548316a73bc7c79edf1
13078402132cb89939a39edf11181fb88ebe390f
f8c35c02ff055694af23c83b1e3019a8c29965ab57ed7db8173a23a38494ff58
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 4315
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-10db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
193.108.118.121200 OK 4.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 150x84, components 3\012- data
Hash 416ec3af020687541765d48acb81fc08
48b80345ffb951535d4d6ca811d19bd9dd726998
75c30d77f900b2f4c91f502f45f00606b57a47bb84e6b700fb18482389d88f3c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 4035
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-fc3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
193.108.118.121200 OK 8.6 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 233x131, components 3\012- data
Hash 55778c73ba99a9477464e5c90cdd7e02
bc49e8058f1dafe10e817441de952ba6aa3b7b58
c362fc3a2aafd1b0d8069fb1fae83b5f0abb06443d3e00b21b37be13aeb75bfa
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 8615
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-21a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
193.108.118.121200 OK 5.1 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 72e270f7041c2fe2f326d11e162fb249
3f918a2023f10a01a2ed74713d292df415d14e05
b17ce663fab4421f728ea0dd218d2a8a6a10a4314759fdf139b9388fa26e37f6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 5080
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-13d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6359dcbc", progressive, precision 8, 150x84, components 3\012- data
Hash 447470b34b66b570c8fc0dbc11c06609
863180b376242e256189888eb99282e597d894c9
dd57f5a80517b8109279b57d702278f31a9878295045c6766931a0453244d749
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 4417
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1141"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
193.108.118.121200 OK 7.9 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 233x131, components 3\012- data
Hash 5df975e7a8c0b2610069610c54c5ce6c
ab6390fbb7be1be9a0f4477b4439e34d5175b6fc
bbfb6830dabc55fd598cc0948049f2367d17c80f286e0821e660ba7f5a6b360c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 7904
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1ee0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 150x84, components 3\012- data
Hash 6ed4eca1ed776930746531005fcf22aa
11e8643932e35a8ef65be8ef585afee241c8eddc
28849006b773d85fb8fb2295a86bcee5d2cdabb9a23d854ffebbd8dfd203588c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 3835
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-efb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
193.108.118.121200 OK 4.7 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 12f0c14e5943fd57577ce11155107bdb
a484cb296770fe6cb55d25cba19f831cf1aaf7d1
9eb468f7688a901a3626fdde8d0b07dc490a830718c2938d32f70f0ec122a344
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 4664
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1238"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
193.108.118.121200 OK 6.8 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 233x131, components 3\012- data
Hash 2ad4260dc1204ad8f3c0c29bd919830a
fd2ddfca32f55ba5d180af812a787e61ce136480
acc8f76a570c0833d34835f5694409e082b4af09783366596c2e151e0b0ed128
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 6827
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1aab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
193.108.118.121200 OK 1.9 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 88 x 31\012- data
Hash 2bcf55138cde4a65770426a67ea247fc
13d8c808a4276dc88937817d7df7720182c093f6
348fd1e58aec8d99001aca1dd12b72eafef534c2d11725b2280a173d03b5fa6b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/gif
content-length: 1882
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-75a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6401
Expires: Sat, 28 Jan 2023 21:21:12 GMT
Date: Sat, 28 Jan 2023 19:34:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6401
Expires: Sat, 28 Jan 2023 21:21:12 GMT
Date: Sat, 28 Jan 2023 19:34:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6401
Expires: Sat, 28 Jan 2023 21:21:12 GMT
Date: Sat, 28 Jan 2023 19:34:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6401
Expires: Sat, 28 Jan 2023 21:21:12 GMT
Date: Sat, 28 Jan 2023 19:34:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6401
Expires: Sat, 28 Jan 2023 21:21:12 GMT
Date: Sat, 28 Jan 2023 19:34:31 GMT
Connection: keep-alive
2.news-civuse.com/lands/38/jquery-3.2.1.min.js
193.108.118.121200 OK 43 kB URL HTTP/2 2.news-civuse.com/lands/38/jquery-3.2.1.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 8936cdcaa08a0529dc7e735b517bb8ca
25ec679c1e0f20e4579e2378897095a28985e950
b8a29bf1648c2d5fca5c054cab9770309bc2874080794efa2429bc9c2d4d8dca
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/jquery-3.2.1.min.js HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:33:06 GMT
etag: W/"5d7a10d2-15283"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4afa01d2ffe17f8378e4c0b5afd4608
f5c7e2137efa07a207427a6b6fe1df541f85ea25
84fc0c05d25d674b5594b54720017332b86d391f66c7136d76cfce3e884e8e12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13375
x-amzn-requestid: 372fcbe8-85a1-4be2-a006-31fb9289c5e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CxF6BoAMFyGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-4b9860545c612cc416cbe599;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yEFlWGi3J14JLA0l2h02VlIqV8opHesKP6GOvfoP5Tp0m7dOYDxIGA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:59:32 GMT
age: 77699
etag: "f5c7e2137efa07a207427a6b6fe1df541f85ea25"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 195316042e7f798eeeb7993fecb3a383
4aeca24ad4702f87feaf9674ea0c1ff6d71826a3
b7e0a61060455241fce844d2c91eca500d409804361063ddb61053cbc9c7b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13376
x-amzn-requestid: 64d0092e-1f1a-4183-a4a6-805e0bf37d32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-DvHIyoAMF6fA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b1-6387770232ddca74531bce91;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jqb6G21QeTDiI0HWT9Fd87D-HkAOiesyfN9vr7vMxrOUADBxV-_Fug==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:55:42 GMT
age: 77929
etag: "4aeca24ad4702f87feaf9674ea0c1ff6d71826a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 2e85f75e-ab9d-4d45-adad-7313950a9647
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSWbxGwnoAMFejw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d117-68f1a9e71a07a0453311fd32;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 06:49:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dbz3wXGNaetf6xvRE98rshyHy-FVfDo8co-4VDL0a4Qe3E4U8A82Og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 18:36:06 GMT
age: 3505
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
2.news-civuse.com/sw.js
193.108.118.121200 OK 4.2 kB IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4168)
Hash 569090f90a522f4c62af3b9e40635957
4e6f57da49920f30777f3fe71f83f6183aeb4f3f
ee8c6af307c8d085753adb810c69c8379d1e8d01211b491409c43e9edc9f6fb5
Analyzer Verdict Alert fortinet Phishing
GET /sw.js HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: application/javascript
content-length: 4199
last-modified: Thu, 01 Dec 2022 08:31:02 GMT
etag: "63886646-1067"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1WE1zQwrCGVy8HLT9_BFkAr6rQE_ROyttMOByR32KeT0w2Hd_ylvYQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:16:00 GMT
age: 76711
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:46 GMT
age: 77865
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=56937
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/index.php_files/pu.swf
193.108.118.121200 OK 2.0 kB URL HTTP/2 2.news-civuse.com/lands/38/index.php_files/pu.swf
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 6d40122b8a5b7fd31b5aef2749f519fd
518d585dd26c947344ddea5403324850d1b2f7cd
1da7814acd0d6913438bf701d8a2d2cf29814174b5eff0e6ff129ee74f68a7cf
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/index.php_files/pu.swf HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: application/x-shockwave-flash
content-length: 1953
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=63955
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=45278
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=49156
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=56373
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=61109
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:31 GMT
cache-control: max-age=67523
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934471.dop068.sk1.t,1674934471.cds243.sk1.hn,1674934471.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
193.108.118.121200 OK 8.2 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 09a3857817c56da56ca915546555bb33
4eef039030de077e7e63d2894f7d0951b1e137c8
44b605c2a3dcc7994d49fb945c6731ed8f03fc7154ab70f7c805c5b6e810e07f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-8353"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 1b6ee6a5fdcf3c781a0b768964797646
f0bf83f6368d7c31471ad258ce8cfb4848109192
511ad4ad0f3db18490c9b7876d44c887f60d78dd8d06a585367c0ab4ddbbe92f
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250 HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
193.108.118.121200 OK 234 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:06:21 11:55:20], baseline, precision 8, 990x513, components 3\012- data
Size 234 kB (234218 bytes)
Hash 60f67e63f85561c6f95fd573252d2311
6fc6d41b27131074786778522b86077f477dbd51
0e80e9257f1dd0149894bf37342cb082ef2410263de490e851111fa9531e15c6
GET /lands/38/landings/Ihyam_7H2-fd/fon2.jpg HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/jpeg
content-length: 234218
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-392ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250 HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250 HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
151.101.66.217200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
IP 151.101.66.217:0
File type ASCII text, with very long lines (62031)
Hash 1c6083f7ae34ed2fa3236569eec9ff56
0c1be1b5468042e65e02c8b886c50d26427c9ce7
2b1d69121eb9dc0629126ff02cf7acef2f1924b32b0bb654792ecd9101e10c44
GET /7.19.0/bundle.es5.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 11 Nov 2023 17:34:32 GMT
last-modified: Thu, 10 Nov 2022 15:50:35 GMT
etag: "1c6083f7ae34ed2fa3236569eec9ff56"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 19:34:31 GMT
age: 6746399
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20174
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/favicon.png
193.108.118.121200 OK 1.2 kB URL HTTP/2 2.news-civuse.com/lands/38/favicon.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash e7ffe9c659d8c729e12e20dfe05509be
2c413e09ebd14dd3020209fe9c9183e0335fc250
880c000a3ca23bb89262d9c2ccf9d48bab37dcec09f3b3bf55c8385f58745f50
GET /lands/38/favicon.png HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: image/png
content-length: 1233
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-4d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/lp.js
193.108.118.121200 OK 1.4 kB URL HTTP/2 3.news-civuse.com/lands/38/lp.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 8441b469fa0c093bd106a66a4068d944
c3698e755cd1ef7b5d29e233ef615219559a96f3
befe8e9f55c6e3fe10fd398534acb713129764b05d852089ac34bfa535a53902
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/lp.js HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/javascript
content-length: 1418
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-58a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/revopush.js?v=4
193.108.118.121200 OK 10 kB URL HTTP/2 3.news-civuse.com/revopush.js?v=4
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (9954), with no line terminators
Hash fc284a0e5d580856ae4863715ad6733e
eb69f303c80ff8e44abc9601b8616c0cf92faafa
2240a1d10744494668058ba210d0d87203609def9fd69d2ac82092ebc79583c0
GET /revopush.js?v=4 HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/javascript
content-length: 9954
last-modified: Thu, 15 Dec 2022 09:31:10 GMT
etag: "639ae95e-26e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
193.108.118.121200 OK 36 kB URL HTTP/2 2.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 67b8ffb32ddb4225358d5f2867a4dd3e
4e3233417b51f80601d2b4024c9afbeb4f08e6f2
1f7650caa9d781ff8e14b7210075314cf26adc34c8e4843589734d2ba436fd54
GET /traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38 HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
193.108.118.121200 OK 4.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4028), with no line terminators
Hash 64f6d7d923f18e5d25a4506b45fcd51d
0e636e489bba7af08cb17f8a72c5dc5685774057
18818b4b5458636324d294a8dee67dbde4808ae542e6cefa18ca6d90c1fc4479
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
content-length: 4028
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-fbc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
193.108.118.121200 OK 6.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (5955), with no line terminators
Hash 0fe9d8c60b2c31a97fa966d14be642ef
eb4f94b637c54906ae38eb350b6310d552c75e6d
191ae0d72198f51609589e26c7d837d2978382861f60b360148e0af13c8583e1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
content-length: 5955
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1743"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
193.108.118.121200 OK 8.3 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8327), with no line terminators
Hash 8cd6ca47d55ffed774fde852523940e0
49e1e837355b3de08055c650488d0a3382bff9c0
17528d5914a702bb12ac6b36c8e3bbbfbcd3d52b54dd613acbacf8f4bb17ae33
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
content-length: 8327
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-2087"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
193.108.118.121200 OK 1.4 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (1391), with no line terminators
Hash 677a255a4a9dc3411b8013e8afb09c42
ec9f1a722b028da2eceb06cdc8c26fc6490a4e70
cc4494353809adb8bdfbbdea2ad72a1a0fc9c84816dc23c7ee1f9466e620eb5e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
content-length: 1391
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-56f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
193.108.118.121200 OK 12 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 833a12d372440b20017502d3c72e0b20
5fb9301142e3c53f65cd16502b35d7d1d5f82b98
1531ac56322b89715a35b1cdb5ca1f79f453614f368455b2cc8ef650a992f8cd
GET /lands/38/landings/Ihyam_7H2-fd/18.png HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/png
content-length: 12136
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
193.108.118.121200 OK 22 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 19b197d779dd9ee78737a456dbd5c1a6
a3f0b1d0659e5a76bdfaa52bb8f68096d1ab1359
806a8a4abe09c02f4e4b3ed4d6514bfcf1a93a941e838aadf56afaef858d8e37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/png
content-length: 21724
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-54dc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
193.108.118.121200 OK 28 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:03:16 09:26:15], baseline, precision 8, 118x88, components 3\012- data
Hash c1a5819d50b9125f0c46ded86fd5b4b6
3926c15be79cb7522cefdbf5066d39623e36a283
374f0cede3c1f91ad174b97554017b74cbd29424d7467d039beab541f6deb873
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 27900
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6cfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
193.108.118.121200 OK 17 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x88, components 3\012- data
Hash 215029a9775d1e9a56c93912ab03f4c6
6a3dbd676e2ea61850d2a20086b9ec84127da0ae
e071c52839ef37679439165349ffdd98cf19aa7e35d0293a1bec69743db70b16
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 17350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash ea52ae32ae4319fb03da1672b0c20ed3
4efd8189179b260a4b51fd4b28d729b6143ef00a
43a4ca83560d5720ffeccf17478d6a1741f86639f35744fb61fcb139dc3020a6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 12525
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-30ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
193.108.118.121200 OK 11 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 2f03fbd61721fdf46883333595050c77
8361f15c906a9457340fc21febd22b5ede56ac61
9f6c76cf695bc0785f4e4f8bb3abe93255af3ea1597307d567dc0fc93fa70560
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 11238
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2be6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
193.108.118.121200 OK 14 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 9903db279cf9714141daac34523f39b6
ac412f9ce9b8c50155e9adb9f5095d82519ccd24
f562892c60fef407c954fd73d6908003c42f832c4ae86f8264438a576ce2c1cd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 13505
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-34c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
193.108.118.121200 OK 13 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash 99a404d25bcdd47a141dafdbe046d0cf
04de642c5cbc865c29ab3599c1c4fa19f2a6ba8e
fbe779bcef340ba0b148f84b50a8323a2bbb493674e130bf877d87c6d163ed36
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 13106
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3332"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
193.108.118.121200 OK 16 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 5a34545daf4bc481bcbc3573062aa426
132d09d36ede8f32c3168ecaaa631e5959ce38ef
c044a81b14812c50f3142ad20d0ca862923daba2483eb164b0348ba98d3b7855
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 15481
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3c79"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
193.108.118.121200 OK 18 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 10e8794e65f20d32932985bf814b8965
0627b8648373340d2ba949fd7fe50611d11b033b
43b9f39f94acb50efb3b6981a6c931dcf25eefcc7b7734a927036255263eee39
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 17978
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-463a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
193.108.118.121200 OK 2.4 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 116 x 86\012- data
Hash ec706a0634f1e5e06ad775b2b2ebdcf2
5a18c424f7b84b40709a6b78b2d632639bb3ff2b
9613f59211bd2194336c666d11a0d2e1daa4dd96d543e661f5835e0a621c2f5d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/gif
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xae3bf698", progressive, precision 8, 258x145, components 3\012- data
Hash 58357cada0f0171d2a84540391219649
57123e69e055b4d818faedec09884135c5d4a31e
742c68ecf3dcc1096143a0a5d00f4a15a3edb13fd497ea2931e67e66826addd0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 9007
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-232f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
193.108.118.121200 OK 15 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 258x145, components 3\012- data
Hash bb05342bd1f87ae7624aba323af77dca
4b7c875644d0b6a424abf06cda89ad135bd53d81
828e2c12259274e1eb1c212f3498fb31503462023c4b2642da4f795209b755de
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 14653
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-393d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
193.108.118.121200 OK 10 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1d6d8e5e", progressive, precision 8, 258x145, components 3\012- data
Hash 1541881a313c963dc754657aefd89ef0
fb41198c81ac17da4f9a34e4b4bf21c8c7fe6001
75e1629d9fad2e22b9d9983c65874a19a3f639db43c11db713a7f972b8f72117
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 10352
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2870"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 6c17c634ebd856cc85bedd931ac01680
d1e1b9358749b9fd4ff851bb4cbdce54a6223ce8
c1ced3a91bde391f64c6cef03b164cd89ffd499fa5d75a3f797bc57b1fc3c191
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 9032
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2348"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
193.108.118.121200 OK 8.3 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 258x145, components 3\012- data
Hash bc1cdeea817d887b981f26bc84236b93
4528ed7010e2e0c774890d6041a60cbeb3c69c92
d737ffd9379d8f2734c1dc6304e4ff75f1c946de29371a1ec9ddc01f423076dd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 8266
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-204a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
193.108.118.121200 OK 9.3 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7cd1fc83", progressive, precision 8, 258x145, components 3\012- data
Hash 5ec2461279f77afe0c6fbb935bd0b94a
95c6e9171db79ea69ce718b02484e36816d1a1cd
ac60e5738d3cf6d32004e1ddfcf4368e256f1928ea923f9369869b8e9af665ba
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 9338
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-247a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
193.108.118.121200 OK 42 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 0a1f91c6795f2488cc036cb9068790bc
7e41bb01c7975a9c340892ce664e51a0a83873f6
4f863dee8c744e89a380fba623b6f4a206668ccab59bd978f737066c66a81244
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-2f3dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=56936
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
193.108.118.121200 OK 27 kB URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 5c70184bd44186d2f238de86f7c0b652
c8809b6f39b81e360fb08ac6e4157321658ca90a
de0bfcc76f31e19c2566b88daf1550e5de576af6773f896c1a12c6de82ef6347
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-10b2b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
193.108.118.121200 OK 3.1 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash f28b03567552ec49b0cf260cf1aabe54
4ce3aac682a9f8484861977a640e2d670f5719d9
dff6024e1c2336d58b5163dc4d9dc6ca0484beb011927bd783d5c5527acf688d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-3957"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
193.108.118.121200 OK 17 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 9b08ea628b711a5ed4e15f2a21e61814
d567e7db7c116c680fee4705cceced47fe67eb26
a8a61cffad75d039df4ad4e652737fe9bb5245b01843854dd8686fce6df63c89
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-6aa0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
193.108.118.121200 OK 20 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 107 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash e2aadceedde9aef1bf42c176b31c585c
76c14eae7537160a304aa458bf11a985d5a57375
2b1ff8c49202306d33deac4cf49841f59c1a49d15c80a77c1e001369578cef3f
GET /lands/38/landings/Ihyam_7H2-fd/button.png HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/png
content-length: 19948
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4dec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
193.108.118.121200 OK 15 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 64 x 64\012- data
Hash 571dfe045d66b88d2d5c82151a1bf579
8966eb7cd27754263bd2861737b695386273f423
7c7cd7a7155d3d38bb49fc82c83aa14ed24d56f6886623299b13b6a81486a871
GET /lands/38/landings/Ihyam_7H2-fd/load.gif HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/gif
content-length: 14574
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-38ee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=45277
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=49155
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash d660b4b574161fdee86ae57edc8ed0ab
0b947dc39c7ba7415dd78683e06366ff3848b2d5
7483a49fc67a21c7a295b03880aa6c37425f3e96d60dff1ac36eff743ecf6078
GET /lands/38/landings/Ihyam_7H2-fd/flash.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 3829
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-ef5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=56372
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
193.108.118.121200 OK 24 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:05:13 17:11:55], baseline, precision 8, 990x36, components 3\012- data
Hash ab6b76c0cc6683324bd7fe5923b24d17
559b8b1e50f80b7a218e25ce443e523401882577
a923ea85ee73e53db73038b2ea8712e7e40b067cde25b05ffa999608b17a304d
GET /lands/38/landings/Ihyam_7H2-fd/panel.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 23598
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-5c2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=61108
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
193.108.118.121200 OK 12 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash dcbca93bab065f86d771507c4f0d1ecf
22a425f8bfa0841b1b00d964164a9151c77f1de3
2e2115e9cdbd9716cb06f448f6f7cc548d5469a4f2a49ca321599af248b3ccde
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-1327c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
193.108.118.121200 OK 17 kB URL HTTP/2 2.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 35c629ffdb7063be2af219b93aecec2c
ffe85c182d589b2b1dc4861628780e54c77d15a1
2802891b05ea0c86b2904e36e047daa3ecbe604f59430267828e61993caa1084
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: W/"5d7a0ef0-f889"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash 609e06417314a6476bc6d0f3c1900e20
0e2b0d425bd9e5cc0ebb386b093adf64d464ac1e
9450244a77e354c177c18a691c0e5f0c2fc5d0ddf921f40178cbb8bfe4a076ac
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1394
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-572"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 677577d8c6ffb0107ee5c9fbabaa4af7
0bfcbbafee19eeeae113103080c41cd95b4083e5
3a215afa0d15ae2985cfb88e51e90b727f0ba03fe10f8e0b0980ef55af91bdb0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 2646
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-a56"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=67522
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
193.108.118.121200 OK 1.2 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 1226a24c469c0fba3970548aab13650f
a6d371e4acc2a9181d1d6bf13b5d51f82c49a943
6a1513dacd3fcffe47245068fe9fa6a49cdc9c352b8d9cbf8f72005c4cf5cafc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1191
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
193.108.118.121200 OK 1.7 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 3db490cc8f824e29d6fb07ba75a97a20
84c2c26447f7b49c76999f31c0ed526bde13c6c4
5c13ca439c63d5f3e5d638ba055f399058117d3b554ae3fb751d4a39043a14fd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1729
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/jquery-3.2.1.min.js
193.108.118.121200 OK 32 kB URL HTTP/2 3.news-civuse.com/lands/38/jquery-3.2.1.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash abdbb4ed622aad1acff61b954285b089
3d43a6efc215776063147dac8ff4abac285db419
9582d95ae8321246f0a4907cbaa77fe77b74db2c57d13d731feabe8929566569
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/jquery-3.2.1.min.js HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:33:06 GMT
etag: W/"5d7a10d2-15283"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash f042aa7a438ca85be0afeba44a3ac116
183c8b20394fdaf6ba757ff76d3f25e33092369e
05b76ed86b70990f4307223391e1c9abfff59ec545d75d94683c0f69713eed79
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1809
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-711"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 16b2fab44ddad0b620d0eaec2fc1e425
24fa279de6ceb2c0434ff4e750639e15eb22ed29
58076ed17c6377d23375ec949c6cb2eade75010dcf82ba0e64dbdcbd67583912
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1902
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-76e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
193.108.118.121200 OK 1.1 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x0bb5b909", progressive, precision 8, 60x60, components 3\012- data
Hash 01ed303509acb0c822fa3c55976d4b96
7ed250f181498962ebafd21f1bde4ca15e6953c6
fba198ced4795895d1f6d0bc2247d315eb8cc6dda60ad119c99846d68d0ce445
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1085
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
193.108.118.121200 OK 2.4 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash ec2823c426475d6766008dabf85a4bc2
f0681ce27ba96a1b4f6547a42495ebb5b0ca514a
2316f8554d54e907f9992475ced3bf03fc95412e98b2bc29aa6e5407260bcddd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
193.108.118.121200 OK 2.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash 3f809b94b5e5607da5b5c6506a8729c1
26f4376095902a56db86ea2c76689f15ba3cf9c2
7b84461772bad27e431676a53efae81d8584a102f3f6f407ae0a54469a938ff6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-7bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
193.108.118.121200 OK 3.1 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash cbff1c490bcdcad2989c2549f278eae5
56e1b4489cfc0d54f9f72e15777788beba396c95
6d96d3de01207ab505c62b2da624ba787cabe4fee767c181b175186e50c23af4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 3063
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 52eba434e5411806cd92add275d164ea
0cc9df3c52de111a307dc3d8d22254cf51b0c77f
a4c2a01f64274d0ede23e233e2be19225c68e5e5a6206b338fb8bc6410f7005f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1758
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6de"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash c840b43a0575b0a1742c50f186a67c22
d1ac0da47b4394a9dbea90eee26a260b5268c4d9
6a8ef9be89e89c23d6d96c50e2fa62bd25473e9cc7a79e2cd1ef64e2647cb38a
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/png
content-length: 1045
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-415"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash a08c2c5266f9701e422f042b4a3809c5
9884cf987f84b282f920634b2ab811077dfef7a3
054df6bf8ee2bcb904269745cd2c0830918d9e1a6ff1f965673af5f2946a3c37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1373
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-55d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
193.108.118.121200 OK 1.6 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash bfa11442f9457a03384ecf8128a586a2
a30e6f6a18be085197605b6463f840cb249d0510
941411042624c554a5828ee596c1e3ade4a787ae2fad6e5b6d585ab6a6e1e3c6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1563
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-61b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 96f46fad8cda5895b895f6ec3f95cda4
3bd79ef305bfa4b7c1a3f328828c63f89a818878
8e48576faf920cae224c669d61831d0ad5fc23f6220e83955275a3115bb568fc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/png
content-length: 1046
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-416"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
193.108.118.121200 OK 887 B URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
193.108.118.121200 OK 841 B URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 9cf522c306866742c2806e0c14c8bca7
7a3ff28af2c6f7cfd036ec4fc162651eaf634f7e
fa09bef7875241c06a9e2505bc698a189d3b3ce012af29c65817fd476627ec87
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 841
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 950ff8ae916df997fea302859ca2ccb4
42232e28878f65aaf4120d9435784ad46c2be71c
c0b01da5a48a7ddd619a2dee26bec77300b68bb1b028716320719f9c1a5f769e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 2553
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-9f9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
193.108.118.121200 OK 4.6 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 150x84, components 3\012- data
Hash 0fa4a903a2adc9da58b52661ebc8d38c
061c6359c2951da7509f6ae4039c2f0bc1ce6b62
79d6da7e0398c3f607c4bbc93562cf6ab96bb800cdab4ef6df82718cf0a0d3e5
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 4644
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1224"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 58477c52a9d639b91b16f022d4676bcf
51a85ef703617e996c50cd76b38f2507517a9f25
a0653cc819b252702f55439d6f8763d212fca2f9f604d67224a2a9891e8eadbe
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 4397
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-112d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
193.108.118.121200 OK 7.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7ab4f024", progressive, precision 8, 233x131, components 3\012- data
Hash 2a4d527ed65de8e2e0a69dc9d50442d2
8ec4547a38c9e3d37469acfe21ea755531776f09
275876bbb5190da100ae4f9aca976ec15cea0de20d42e167f522a0a50ba8ca02
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 6972
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1b3c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
193.108.118.121200 OK 4.3 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 365e215442256548316a73bc7c79edf1
13078402132cb89939a39edf11181fb88ebe390f
f8c35c02ff055694af23c83b1e3019a8c29965ab57ed7db8173a23a38494ff58
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 4315
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-10db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
193.108.118.121200 OK 4.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 150x84, components 3\012- data
Hash 416ec3af020687541765d48acb81fc08
48b80345ffb951535d4d6ca811d19bd9dd726998
75c30d77f900b2f4c91f502f45f00606b57a47bb84e6b700fb18482389d88f3c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 4035
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-fc3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
193.108.118.121200 OK 8.6 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 233x131, components 3\012- data
Hash 55778c73ba99a9477464e5c90cdd7e02
bc49e8058f1dafe10e817441de952ba6aa3b7b58
c362fc3a2aafd1b0d8069fb1fae83b5f0abb06443d3e00b21b37be13aeb75bfa
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 8615
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-21a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
193.108.118.121200 OK 5.1 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 72e270f7041c2fe2f326d11e162fb249
3f918a2023f10a01a2ed74713d292df415d14e05
b17ce663fab4421f728ea0dd218d2a8a6a10a4314759fdf139b9388fa26e37f6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 5080
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-13d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6359dcbc", progressive, precision 8, 150x84, components 3\012- data
Hash 447470b34b66b570c8fc0dbc11c06609
863180b376242e256189888eb99282e597d894c9
dd57f5a80517b8109279b57d702278f31a9878295045c6766931a0453244d749
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 4417
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1141"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
193.108.118.121200 OK 7.9 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 233x131, components 3\012- data
Hash 5df975e7a8c0b2610069610c54c5ce6c
ab6390fbb7be1be9a0f4477b4439e34d5175b6fc
bbfb6830dabc55fd598cc0948049f2367d17c80f286e0821e660ba7f5a6b360c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 7904
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1ee0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 150x84, components 3\012- data
Hash 6ed4eca1ed776930746531005fcf22aa
11e8643932e35a8ef65be8ef585afee241c8eddc
28849006b773d85fb8fb2295a86bcee5d2cdabb9a23d854ffebbd8dfd203588c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 3835
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-efb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
193.108.118.121200 OK 37 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash f3df13e8525196d863e4b445b9b3989f
6ac5f1aa6eb93ebc2a65a911fa3be93367554e16
2c425acbc7aeed1230a5dcc2ca91f849b00616714287abeeb6b7e664d64822bf
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-2f3dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
193.108.118.121200 OK 12 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 79acd1ce374301204f427c7cf60df661
287897b034787b1473f914ad488e250711745566
3ab902e8bcab6c9a37019bc8a58255b8f7541a3d131fd1bb453aeb6d5dcea76b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-6aa0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
193.108.118.121200 OK 1.9 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 88 x 31\012- data
Hash 2bcf55138cde4a65770426a67ea247fc
13d8c808a4276dc88937817d7df7720182c093f6
348fd1e58aec8d99001aca1dd12b72eafef534c2d11725b2280a173d03b5fa6b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/gif
content-length: 1882
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-75a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/sw.js
193.108.118.121200 OK 4.2 kB IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4168)
Hash 569090f90a522f4c62af3b9e40635957
4e6f57da49920f30777f3fe71f83f6183aeb4f3f
ee8c6af307c8d085753adb810c69c8379d1e8d01211b491409c43e9edc9f6fb5
Analyzer Verdict Alert fortinet Phishing
GET /sw.js HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/javascript
content-length: 4199
last-modified: Thu, 01 Dec 2022 08:31:02 GMT
etag: "63886646-1067"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=56936
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=63954
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=45277
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=49155
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=56372
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=61108
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/index.php_files/pu.swf
193.108.118.121200 OK 2.0 kB URL HTTP/2 3.news-civuse.com/lands/38/index.php_files/pu.swf
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 6d40122b8a5b7fd31b5aef2749f519fd
518d585dd26c947344ddea5403324850d1b2f7cd
1da7814acd0d6913438bf701d8a2d2cf29814174b5eff0e6ff129ee74f68a7cf
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/index.php_files/pu.swf HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/x-shockwave-flash
content-length: 1953
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
193.108.118.121200 OK 6.3 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 4017230a30fd2de81422baf57cc42ff6
70e0ec756de5ff3e7da696aa5b187f4344793bd0
c4a26437ec996731964beb8292fea2593d775e127586b4ae54e1b974b885a1b4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-8353"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250 HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 1b6ee6a5fdcf3c781a0b768964797646
f0bf83f6368d7c31471ad258ce8cfb4848109192
511ad4ad0f3db18490c9b7876d44c887f60d78dd8d06a585367c0ab4ddbbe92f
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250 HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
193.108.118.121200 OK 234 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:06:21 11:55:20], baseline, precision 8, 990x513, components 3\012- data
Size 234 kB (234218 bytes)
Hash 60f67e63f85561c6f95fd573252d2311
6fc6d41b27131074786778522b86077f477dbd51
0e80e9257f1dd0149894bf37342cb082ef2410263de490e851111fa9531e15c6
GET /lands/38/landings/Ihyam_7H2-fd/fon2.jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 234218
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-392ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250 HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250 HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/favicon.png
193.108.118.121200 OK 1.2 kB URL HTTP/2 3.news-civuse.com/lands/38/favicon.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash e7ffe9c659d8c729e12e20dfe05509be
2c413e09ebd14dd3020209fe9c9183e0335fc250
880c000a3ca23bb89262d9c2ccf9d48bab37dcec09f3b3bf55c8385f58745f50
GET /lands/38/favicon.png HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/png
content-length: 1233
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-4d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
151.101.66.217200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
IP 151.101.66.217:0
File type ASCII text, with very long lines (62031)
Hash 1c6083f7ae34ed2fa3236569eec9ff56
0c1be1b5468042e65e02c8b886c50d26427c9ce7
2b1d69121eb9dc0629126ff02cf7acef2f1924b32b0bb654792ecd9101e10c44
GET /7.19.0/bundle.es5.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 11 Nov 2023 17:34:32 GMT
last-modified: Thu, 10 Nov 2022 15:50:35 GMT
etag: "1c6083f7ae34ed2fa3236569eec9ff56"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 19:34:32 GMT
age: 6746400
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20174
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/lp.js
193.108.118.121200 OK 1.4 kB URL HTTP/2 4.news-civuse.com/lands/38/lp.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 8441b469fa0c093bd106a66a4068d944
c3698e755cd1ef7b5d29e233ef615219559a96f3
befe8e9f55c6e3fe10fd398534acb713129764b05d852089ac34bfa535a53902
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/lp.js HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/javascript
content-length: 1418
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-58a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/revopush.js?v=4
193.108.118.121200 OK 10 kB URL HTTP/2 4.news-civuse.com/revopush.js?v=4
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (9954), with no line terminators
Hash fc284a0e5d580856ae4863715ad6733e
eb69f303c80ff8e44abc9601b8616c0cf92faafa
2240a1d10744494668058ba210d0d87203609def9fd69d2ac82092ebc79583c0
GET /revopush.js?v=4 HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/javascript
content-length: 9954
last-modified: Thu, 15 Dec 2022 09:31:10 GMT
etag: "639ae95e-26e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
193.108.118.121200 OK 4.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4028), with no line terminators
Hash 64f6d7d923f18e5d25a4506b45fcd51d
0e636e489bba7af08cb17f8a72c5dc5685774057
18818b4b5458636324d294a8dee67dbde4808ae542e6cefa18ca6d90c1fc4479
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
content-length: 4028
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-fbc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
193.108.118.121200 OK 6.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (5955), with no line terminators
Hash 0fe9d8c60b2c31a97fa966d14be642ef
eb4f94b637c54906ae38eb350b6310d552c75e6d
191ae0d72198f51609589e26c7d837d2978382861f60b360148e0af13c8583e1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
content-length: 5955
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1743"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
193.108.118.121200 OK 8.3 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8327), with no line terminators
Hash 8cd6ca47d55ffed774fde852523940e0
49e1e837355b3de08055c650488d0a3382bff9c0
17528d5914a702bb12ac6b36c8e3bbbfbcd3d52b54dd613acbacf8f4bb17ae33
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
content-length: 8327
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-2087"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
193.108.118.121200 OK 1.4 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (1391), with no line terminators
Hash 677a255a4a9dc3411b8013e8afb09c42
ec9f1a722b028da2eceb06cdc8c26fc6490a4e70
cc4494353809adb8bdfbbdea2ad72a1a0fc9c84816dc23c7ee1f9466e620eb5e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
content-length: 1391
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-56f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
193.108.118.121200 OK 12 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 833a12d372440b20017502d3c72e0b20
5fb9301142e3c53f65cd16502b35d7d1d5f82b98
1531ac56322b89715a35b1cdb5ca1f79f453614f368455b2cc8ef650a992f8cd
GET /lands/38/landings/Ihyam_7H2-fd/18.png HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/png
content-length: 12136
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
193.108.118.121200 OK 22 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 19b197d779dd9ee78737a456dbd5c1a6
a3f0b1d0659e5a76bdfaa52bb8f68096d1ab1359
806a8a4abe09c02f4e4b3ed4d6514bfcf1a93a941e838aadf56afaef858d8e37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/png
content-length: 21724
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-54dc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
193.108.118.121200 OK 28 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:03:16 09:26:15], baseline, precision 8, 118x88, components 3\012- data
Hash c1a5819d50b9125f0c46ded86fd5b4b6
3926c15be79cb7522cefdbf5066d39623e36a283
374f0cede3c1f91ad174b97554017b74cbd29424d7467d039beab541f6deb873
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 27900
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6cfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
193.108.118.121200 OK 17 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x88, components 3\012- data
Hash 215029a9775d1e9a56c93912ab03f4c6
6a3dbd676e2ea61850d2a20086b9ec84127da0ae
e071c52839ef37679439165349ffdd98cf19aa7e35d0293a1bec69743db70b16
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 17350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash ea52ae32ae4319fb03da1672b0c20ed3
4efd8189179b260a4b51fd4b28d729b6143ef00a
43a4ca83560d5720ffeccf17478d6a1741f86639f35744fb61fcb139dc3020a6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 12525
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-30ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
193.108.118.121200 OK 36 kB URL HTTP/2 4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash c6628e3c26fcfb4079ce8bbd48d38bd2
4e53836adff11bd55adeaeb8c7a3475190a9e533
9bbe964ba794b97f24a31e7cd32dddbc1ee5c7c3207891226113fa8c112ce4be
GET /lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4= HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
set-cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8; expires=Sat, 28-Jan-2023 20:34:32 GMT; Max-Age=3600; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
193.108.118.121200 OK 11 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 2f03fbd61721fdf46883333595050c77
8361f15c906a9457340fc21febd22b5ede56ac61
9f6c76cf695bc0785f4e4f8bb3abe93255af3ea1597307d567dc0fc93fa70560
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 11238
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2be6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
193.108.118.121200 OK 14 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 9903db279cf9714141daac34523f39b6
ac412f9ce9b8c50155e9adb9f5095d82519ccd24
f562892c60fef407c954fd73d6908003c42f832c4ae86f8264438a576ce2c1cd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 13505
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-34c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
193.108.118.121200 OK 13 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash 99a404d25bcdd47a141dafdbe046d0cf
04de642c5cbc865c29ab3599c1c4fa19f2a6ba8e
fbe779bcef340ba0b148f84b50a8323a2bbb493674e130bf877d87c6d163ed36
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 13106
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3332"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
193.108.118.121200 OK 16 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 5a34545daf4bc481bcbc3573062aa426
132d09d36ede8f32c3168ecaaa631e5959ce38ef
c044a81b14812c50f3142ad20d0ca862923daba2483eb164b0348ba98d3b7855
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 15481
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3c79"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=56936
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=63954
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=45277
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=49155
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
193.108.118.121200 OK 18 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 10e8794e65f20d32932985bf814b8965
0627b8648373340d2ba949fd7fe50611d11b033b
43b9f39f94acb50efb3b6981a6c931dcf25eefcc7b7734a927036255263eee39
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 17978
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-463a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
193.108.118.121200 OK 13 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 175985b3f1a72b7d1382bd02ab906ae5
101c64a4e582da5df9386dbbf2a3b7e6352cfdc3
33431c1a59dcfcfbb3146ed417105a72876b5d3c06e3c476fa046497233337ff
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-1327c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xae3bf698", progressive, precision 8, 258x145, components 3\012- data
Hash 58357cada0f0171d2a84540391219649
57123e69e055b4d818faedec09884135c5d4a31e
742c68ecf3dcc1096143a0a5d00f4a15a3edb13fd497ea2931e67e66826addd0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 9007
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-232f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
193.108.118.121200 OK 9.6 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x70755b56", progressive, precision 8, 258x145, components 3\012- data
Hash 8fcd27f0bcc790f75f46d275a19a6300
556d3ca4dec168c77ae4a73c0c6e8291ef1291c0
78410be719ee73e00845d44e100e280d3989fc3d0fa4d3dcfcd888f13ded1843
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 9565
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-255d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=61108
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
193.108.118.121200 OK 24 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 8ec6d83b5b20e4a24bf3d548425fd2d8
e08f6482b96e80d40253c5ca0bc630dda43ae795
0c32c784ff05d47281b800cdff0a45b780ef78dfeac74049bb04af6c15f7de33
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-10b2b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
193.108.118.121200 OK 26 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 0551af21357266a2319cddd71e885332
6ae961230739be735684cf9591e33b30c4237e36
5105a9ca8c2ae2d7bafdc176fdc065afcc2ae71e85bb027d01b98c7b29a2fb19
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: W/"5d7a0ef0-f889"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:32 GMT
cache-control: max-age=67522
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934472.dop068.sk1.t,1674934472.cds243.sk1.hn,1674934472.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 6c17c634ebd856cc85bedd931ac01680
d1e1b9358749b9fd4ff851bb4cbdce54a6223ce8
c1ced3a91bde391f64c6cef03b164cd89ffd499fa5d75a3f797bc57b1fc3c191
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 9032
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2348"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
193.108.118.121200 OK 8.3 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 258x145, components 3\012- data
Hash bc1cdeea817d887b981f26bc84236b93
4528ed7010e2e0c774890d6041a60cbeb3c69c92
d737ffd9379d8f2734c1dc6304e4ff75f1c946de29371a1ec9ddc01f423076dd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 8266
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-204a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/jquery-3.2.1.min.js
193.108.118.121200 OK 40 kB URL HTTP/2 4.news-civuse.com/lands/38/jquery-3.2.1.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 515bd106b10f671a9b3aa7b83f2697a1
f0ea24d528d81873135fac3a2f9223967648e884
6747bebb3a346f42f1cf9d57ba31c42cc74c0e3b19e5600a5499a14b53a386a4
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/jquery-3.2.1.min.js HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:33:06 GMT
etag: W/"5d7a10d2-15283"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
193.108.118.121200 OK 9.9 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x50dba82c", progressive, precision 8, 258x145, components 3\012- data
Hash eed80bba1e2813e70d57a5f3a6bbdf09
3965668a7340d071731a89abf73cc4b3efe4dac3
9ef4f06c23420fae9b1fd163d0719be1b2b258d74d27f7933c810ad64c93ac93
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 9914
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-26ba"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
193.108.118.121200 OK 8.9 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 258x145, components 3\012- data
Hash 77df6b7e2677b46a053508a92026cb8a
decad70c5281062495250250fdf985b6073a8a91
6143cd3687b480264dad4e3d3a237c30c26c859ef7fe1c2a7b32472fb65710c0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 8885
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-22b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
193.108.118.121200 OK 12 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 081a01df58865529d3edcbc765c4dcb5
a7fe3ca35fe5e244926a80addda994218806f613
edebf400c8f60c306491e7b2f8a695b7dde10cf49eed66125423571a1cd60d05
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 9565
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-255d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
193.108.118.121200 OK 20 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 107 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash e2aadceedde9aef1bf42c176b31c585c
76c14eae7537160a304aa458bf11a985d5a57375
2b1ff8c49202306d33deac4cf49841f59c1a49d15c80a77c1e001369578cef3f
GET /lands/38/landings/Ihyam_7H2-fd/button.png HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/png
content-length: 19948
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4dec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
193.108.118.121200 OK 15 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 64 x 64\012- data
Hash 571dfe045d66b88d2d5c82151a1bf579
8966eb7cd27754263bd2861737b695386273f423
7c7cd7a7155d3d38bb49fc82c83aa14ed24d56f6886623299b13b6a81486a871
GET /lands/38/landings/Ihyam_7H2-fd/load.gif HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/gif
content-length: 14574
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-38ee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash d660b4b574161fdee86ae57edc8ed0ab
0b947dc39c7ba7415dd78683e06366ff3848b2d5
7483a49fc67a21c7a295b03880aa6c37425f3e96d60dff1ac36eff743ecf6078
GET /lands/38/landings/Ihyam_7H2-fd/flash.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 3829
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-ef5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
193.108.118.121200 OK 24 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:05:13 17:11:55], baseline, precision 8, 990x36, components 3\012- data
Hash ab6b76c0cc6683324bd7fe5923b24d17
559b8b1e50f80b7a218e25ce443e523401882577
a923ea85ee73e53db73038b2ea8712e7e40b067cde25b05ffa999608b17a304d
GET /lands/38/landings/Ihyam_7H2-fd/panel.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 23598
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-5c2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
193.108.118.121200 OK 887 B URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash ddf58dd1f8745a81264b21bcf1f9cc77
73a35df521dc648af06e2e490cac929bc681a06c
a2315bfaefeae19a449f38fe4131531c7603f5c7e75e956c240074da66123134
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1889
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-761"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash 609e06417314a6476bc6d0f3c1900e20
0e2b0d425bd9e5cc0ebb386b093adf64d464ac1e
9450244a77e354c177c18a691c0e5f0c2fc5d0ddf921f40178cbb8bfe4a076ac
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1394
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-572"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 677577d8c6ffb0107ee5c9fbabaa4af7
0bfcbbafee19eeeae113103080c41cd95b4083e5
3a215afa0d15ae2985cfb88e51e90b727f0ba03fe10f8e0b0980ef55af91bdb0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 2646
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-a56"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
193.108.118.121200 OK 1.2 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 1226a24c469c0fba3970548aab13650f
a6d371e4acc2a9181d1d6bf13b5d51f82c49a943
6a1513dacd3fcffe47245068fe9fa6a49cdc9c352b8d9cbf8f72005c4cf5cafc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1191
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
193.108.118.121200 OK 34 kB URL HTTP/2 3.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash d4354591bcc835c5d08534fc95519b95
7c19bd8c522559eb5675ac8d68f737776eb571e9
faae87852c7d2587c18f6fb97db06c60ce15476692db0474f4fd8bccf71a547b
GET /traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38 HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xb7d2e3cb", progressive, precision 8, 60x60, components 3\012- data
Hash 47e765dc1abef2d79edafb5fce1c64b5
93d3e7f1e11dd2d98ca3ffb3b49a0211ed76f273
185540f06acc82b2dc4bdfa6d2deb4ce7454bb1e28783acdde67f8a9a90597b1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1441
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-5a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
193.108.118.121200 OK 7.1 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 805f90e998bbfc0c38a3017be2f90f9e
08ce1261089fc058107e8900e8601bdc8e9972a8
6fddeedb31a7cecb89a503664a9e7f401c663e786c794871e1a32a9ada3be2d1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-6aa0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 16b2fab44ddad0b620d0eaec2fc1e425
24fa279de6ceb2c0434ff4e750639e15eb22ed29
58076ed17c6377d23375ec949c6cb2eade75010dcf82ba0e64dbdcbd67583912
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1902
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-76e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
193.108.118.121200 OK 1.1 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x0bb5b909", progressive, precision 8, 60x60, components 3\012- data
Hash 01ed303509acb0c822fa3c55976d4b96
7ed250f181498962ebafd21f1bde4ca15e6953c6
fba198ced4795895d1f6d0bc2247d315eb8cc6dda60ad119c99846d68d0ce445
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1085
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
193.108.118.121200 OK 2.4 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash ec2823c426475d6766008dabf85a4bc2
f0681ce27ba96a1b4f6547a42495ebb5b0ca514a
2316f8554d54e907f9992475ced3bf03fc95412e98b2bc29aa6e5407260bcddd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
193.108.118.121200 OK 2.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash 3f809b94b5e5607da5b5c6506a8729c1
26f4376095902a56db86ea2c76689f15ba3cf9c2
7b84461772bad27e431676a53efae81d8584a102f3f6f407ae0a54469a938ff6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-7bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
193.108.118.121200 OK 3.1 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash cbff1c490bcdcad2989c2549f278eae5
56e1b4489cfc0d54f9f72e15777788beba396c95
6d96d3de01207ab505c62b2da624ba787cabe4fee767c181b175186e50c23af4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 3063
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 52eba434e5411806cd92add275d164ea
0cc9df3c52de111a307dc3d8d22254cf51b0c77f
a4c2a01f64274d0ede23e233e2be19225c68e5e5a6206b338fb8bc6410f7005f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1758
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6de"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash c840b43a0575b0a1742c50f186a67c22
d1ac0da47b4394a9dbea90eee26a260b5268c4d9
6a8ef9be89e89c23d6d96c50e2fa62bd25473e9cc7a79e2cd1ef64e2647cb38a
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/png
content-length: 1045
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-415"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash a08c2c5266f9701e422f042b4a3809c5
9884cf987f84b282f920634b2ab811077dfef7a3
054df6bf8ee2bcb904269745cd2c0830918d9e1a6ff1f965673af5f2946a3c37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1373
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-55d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
193.108.118.121200 OK 1.6 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash bfa11442f9457a03384ecf8128a586a2
a30e6f6a18be085197605b6463f840cb249d0510
941411042624c554a5828ee596c1e3ade4a787ae2fad6e5b6d585ab6a6e1e3c6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 1563
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-61b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
193.108.118.121200 OK 12 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 4964b420245d667b74cf0c9eb1049adf
33b52bc6f82396c7444772ea45970db402aabadc
1d485b31302f5bd5eae148456f2e67b3bed39738bae6820d2295fcf6e116f435
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-1327c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
193.108.118.121200 OK 887 B URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
193.108.118.121200 OK 841 B URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 9cf522c306866742c2806e0c14c8bca7
7a3ff28af2c6f7cfd036ec4fc162651eaf634f7e
fa09bef7875241c06a9e2505bc698a189d3b3ce012af29c65817fd476627ec87
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 841
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 950ff8ae916df997fea302859ca2ccb4
42232e28878f65aaf4120d9435784ad46c2be71c
c0b01da5a48a7ddd619a2dee26bec77300b68bb1b028716320719f9c1a5f769e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 2553
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-9f9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
193.108.118.121200 OK 4.6 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 150x84, components 3\012- data
Hash 0fa4a903a2adc9da58b52661ebc8d38c
061c6359c2951da7509f6ae4039c2f0bc1ce6b62
79d6da7e0398c3f607c4bbc93562cf6ab96bb800cdab4ef6df82718cf0a0d3e5
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 4644
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1224"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 58477c52a9d639b91b16f022d4676bcf
51a85ef703617e996c50cd76b38f2507517a9f25
a0653cc819b252702f55439d6f8763d212fca2f9f604d67224a2a9891e8eadbe
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 4397
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-112d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
193.108.118.121200 OK 7.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7ab4f024", progressive, precision 8, 233x131, components 3\012- data
Hash 2a4d527ed65de8e2e0a69dc9d50442d2
8ec4547a38c9e3d37469acfe21ea755531776f09
275876bbb5190da100ae4f9aca976ec15cea0de20d42e167f522a0a50ba8ca02
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 6972
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1b3c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
193.108.118.121200 OK 4.3 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 365e215442256548316a73bc7c79edf1
13078402132cb89939a39edf11181fb88ebe390f
f8c35c02ff055694af23c83b1e3019a8c29965ab57ed7db8173a23a38494ff58
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 4315
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-10db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
193.108.118.121200 OK 4.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 150x84, components 3\012- data
Hash 416ec3af020687541765d48acb81fc08
48b80345ffb951535d4d6ca811d19bd9dd726998
75c30d77f900b2f4c91f502f45f00606b57a47bb84e6b700fb18482389d88f3c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 4035
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-fc3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
193.108.118.121200 OK 8.6 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 233x131, components 3\012- data
Hash 55778c73ba99a9477464e5c90cdd7e02
bc49e8058f1dafe10e817441de952ba6aa3b7b58
c362fc3a2aafd1b0d8069fb1fae83b5f0abb06443d3e00b21b37be13aeb75bfa
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 8615
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-21a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
193.108.118.121200 OK 5.1 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 72e270f7041c2fe2f326d11e162fb249
3f918a2023f10a01a2ed74713d292df415d14e05
b17ce663fab4421f728ea0dd218d2a8a6a10a4314759fdf139b9388fa26e37f6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 5080
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-13d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6359dcbc", progressive, precision 8, 150x84, components 3\012- data
Hash 447470b34b66b570c8fc0dbc11c06609
863180b376242e256189888eb99282e597d894c9
dd57f5a80517b8109279b57d702278f31a9878295045c6766931a0453244d749
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 4417
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1141"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
193.108.118.121200 OK 7.9 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 233x131, components 3\012- data
Hash 5df975e7a8c0b2610069610c54c5ce6c
ab6390fbb7be1be9a0f4477b4439e34d5175b6fc
bbfb6830dabc55fd598cc0948049f2367d17c80f286e0821e660ba7f5a6b360c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 7904
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1ee0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 150x84, components 3\012- data
Hash 6ed4eca1ed776930746531005fcf22aa
11e8643932e35a8ef65be8ef585afee241c8eddc
28849006b773d85fb8fb2295a86bcee5d2cdabb9a23d854ffebbd8dfd203588c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 3835
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-efb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
193.108.118.121200 OK 4.7 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 12f0c14e5943fd57577ce11155107bdb
a484cb296770fe6cb55d25cba19f831cf1aaf7d1
9eb468f7688a901a3626fdde8d0b07dc490a830718c2938d32f70f0ec122a344
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 4664
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1238"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
193.108.118.121200 OK 6.8 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 233x131, components 3\012- data
Hash 2ad4260dc1204ad8f3c0c29bd919830a
fd2ddfca32f55ba5d180af812a787e61ce136480
acc8f76a570c0833d34835f5694409e082b4af09783366596c2e151e0b0ed128
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/jpeg
content-length: 6827
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1aab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
193.108.118.121200 OK 1.9 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 88 x 31\012- data
Hash 2bcf55138cde4a65770426a67ea247fc
13d8c808a4276dc88937817d7df7720182c093f6
348fd1e58aec8d99001aca1dd12b72eafef534c2d11725b2280a173d03b5fa6b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: image/gif
content-length: 1882
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-75a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/sw.js
193.108.118.121200 OK 4.2 kB IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4168)
Hash 569090f90a522f4c62af3b9e40635957
4e6f57da49920f30777f3fe71f83f6183aeb4f3f
ee8c6af307c8d085753adb810c69c8379d1e8d01211b491409c43e9edc9f6fb5
Analyzer Verdict Alert fortinet Phishing
GET /sw.js HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/javascript
content-length: 4199
last-modified: Thu, 01 Dec 2022 08:31:02 GMT
etag: "63886646-1067"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/index.php_files/pu.swf
193.108.118.121200 OK 2.0 kB URL HTTP/2 4.news-civuse.com/lands/38/index.php_files/pu.swf
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 6d40122b8a5b7fd31b5aef2749f519fd
518d585dd26c947344ddea5403324850d1b2f7cd
1da7814acd0d6913438bf701d8a2d2cf29814174b5eff0e6ff129ee74f68a7cf
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/index.php_files/pu.swf HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/x-shockwave-flash
content-length: 1953
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=56935
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=63953
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=45276
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=49154
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=56371
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=61107
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=67521
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
193.108.118.121200 OK 7.5 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 4a29a7232d0715bebf86fff347173ec8
e5d508580d5d8309f5cde536bf499dda3ba4de5d
5b0c059250ed6f96788447c04b80ec6b313860d7b68ec5ae0b45543abfe704f0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-8353"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250 HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 1b6ee6a5fdcf3c781a0b768964797646
f0bf83f6368d7c31471ad258ce8cfb4848109192
511ad4ad0f3db18490c9b7876d44c887f60d78dd8d06a585367c0ab4ddbbe92f
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250 HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
193.108.118.121200 OK 237 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Size 237 kB (237289 bytes)
Hash a6c2df9c449d6f6a426720cb3a436bc1
a63dc54df9b7fa583f9ef17a9c42996f6936ad63
64bc4d3c53048b1ba04eb93ebd1463749c72da342842422401ebb5106500c139
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-3957"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250 HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250 HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
151.101.66.217200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
IP 151.101.66.217:0
File type ASCII text, with very long lines (62031)
Hash 1c6083f7ae34ed2fa3236569eec9ff56
0c1be1b5468042e65e02c8b886c50d26427c9ce7
2b1d69121eb9dc0629126ff02cf7acef2f1924b32b0bb654792ecd9101e10c44
GET /7.19.0/bundle.es5.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 11 Nov 2023 17:34:32 GMT
last-modified: Thu, 10 Nov 2022 15:50:35 GMT
etag: "1c6083f7ae34ed2fa3236569eec9ff56"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 19:34:33 GMT
age: 6746401
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20174
X-Firefox-Spdy: h2
4.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
193.108.118.121200 OK 1.5 kB URL HTTP/2 4.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 9619a8a211ccf83f10c8afb09703b540
6a711be31a713d082f9519cfb57c748a37f11172
80d40490b962f9c0fd1008bf191dc92b28d81dd6bf49778c3639a85f228e9bf8
GET /traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38 HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
5.news-civuse.com/revopush.js?v=4
193.108.118.121200 OK 10 kB URL HTTP/2 5.news-civuse.com/revopush.js?v=4
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (9954), with no line terminators
Hash fc284a0e5d580856ae4863715ad6733e
eb69f303c80ff8e44abc9601b8616c0cf92faafa
2240a1d10744494668058ba210d0d87203609def9fd69d2ac82092ebc79583c0
GET /revopush.js?v=4 HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/javascript
content-length: 9954
last-modified: Thu, 15 Dec 2022 09:31:10 GMT
etag: "639ae95e-26e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
193.108.118.121200 OK 19 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 216adab07daa744a5b8227f573b17fcf
a435e6ce2ceceaee316bee0885bdd8f01e34222a
785c5edf2f82209136ef5546e3c86a6f1b79820845483da0a96793f2bf023f4e
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: W/"5d7a0ef0-f889"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
193.108.118.121200 OK 6.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (5955), with no line terminators
Hash 0fe9d8c60b2c31a97fa966d14be642ef
eb4f94b637c54906ae38eb350b6310d552c75e6d
191ae0d72198f51609589e26c7d837d2978382861f60b360148e0af13c8583e1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/css
content-length: 5955
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1743"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
193.108.118.121200 OK 8.3 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8327), with no line terminators
Hash 8cd6ca47d55ffed774fde852523940e0
49e1e837355b3de08055c650488d0a3382bff9c0
17528d5914a702bb12ac6b36c8e3bbbfbcd3d52b54dd613acbacf8f4bb17ae33
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/css
content-length: 8327
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-2087"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
193.108.118.121200 OK 1.4 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (1391), with no line terminators
Hash 677a255a4a9dc3411b8013e8afb09c42
ec9f1a722b028da2eceb06cdc8c26fc6490a4e70
cc4494353809adb8bdfbbdea2ad72a1a0fc9c84816dc23c7ee1f9466e620eb5e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/css
content-length: 1391
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-56f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
193.108.118.121200 OK 12 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 833a12d372440b20017502d3c72e0b20
5fb9301142e3c53f65cd16502b35d7d1d5f82b98
1531ac56322b89715a35b1cdb5ca1f79f453614f368455b2cc8ef650a992f8cd
GET /lands/38/landings/Ihyam_7H2-fd/18.png HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/png
content-length: 12136
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
193.108.118.121200 OK 22 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 19b197d779dd9ee78737a456dbd5c1a6
a3f0b1d0659e5a76bdfaa52bb8f68096d1ab1359
806a8a4abe09c02f4e4b3ed4d6514bfcf1a93a941e838aadf56afaef858d8e37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/png
content-length: 21724
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-54dc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
193.108.118.121200 OK 28 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:03:16 09:26:15], baseline, precision 8, 118x88, components 3\012- data
Hash c1a5819d50b9125f0c46ded86fd5b4b6
3926c15be79cb7522cefdbf5066d39623e36a283
374f0cede3c1f91ad174b97554017b74cbd29424d7467d039beab541f6deb873
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 27900
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6cfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0
144.76.158.184429 Too Many Requests 162 B URL HTTP/1.1 errors.house/api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0
IP 144.76.158.184:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 7f44c7691673d77d8557d4d5699ef23a
f30daebcb81f94af5e6dfd9e70585b8904d72ac1
413d294fad14524bf94e764b33ff0f327682549408545171fcf9240189c154ae
POST /api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0 HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 136
Origin: https://4.news-civuse.com
Connection: keep-alive
Referer: https://4.news-civuse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 429 Too Many Requests
Server: nginx/1.22.1
Date: Sat, 28 Jan 2023 19:34:33 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
193.108.118.121200 OK 17 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x88, components 3\012- data
Hash 215029a9775d1e9a56c93912ab03f4c6
6a3dbd676e2ea61850d2a20086b9ec84127da0ae
e071c52839ef37679439165349ffdd98cf19aa7e35d0293a1bec69743db70b16
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 17350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash ea52ae32ae4319fb03da1672b0c20ed3
4efd8189179b260a4b51fd4b28d729b6143ef00a
43a4ca83560d5720ffeccf17478d6a1741f86639f35744fb61fcb139dc3020a6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 12525
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-30ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=56935
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
193.108.118.121200 OK 11 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 2f03fbd61721fdf46883333595050c77
8361f15c906a9457340fc21febd22b5ede56ac61
9f6c76cf695bc0785f4e4f8bb3abe93255af3ea1597307d567dc0fc93fa70560
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 11238
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2be6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
193.108.118.121200 OK 14 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 9903db279cf9714141daac34523f39b6
ac412f9ce9b8c50155e9adb9f5095d82519ccd24
f562892c60fef407c954fd73d6908003c42f832c4ae86f8264438a576ce2c1cd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 13505
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-34c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
193.108.118.121200 OK 13 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash 99a404d25bcdd47a141dafdbe046d0cf
04de642c5cbc865c29ab3599c1c4fa19f2a6ba8e
fbe779bcef340ba0b148f84b50a8323a2bbb493674e130bf877d87c6d163ed36
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 13106
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3332"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
193.108.118.121200 OK 16 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 5a34545daf4bc481bcbc3573062aa426
132d09d36ede8f32c3168ecaaa631e5959ce38ef
c044a81b14812c50f3142ad20d0ca862923daba2483eb164b0348ba98d3b7855
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 15481
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3c79"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
193.108.118.121200 OK 21 kB URL HTTP/2 3.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 41bb24c09b02b756489d0c877c849c0c
50b634e169d334546f6b424a24797b378ba6e435
da71f2b7f2e58dcd656112739e8d0684405df62713649d5a973e2d38e47fa1ad
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css HTTP/1.1
Host: 3.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-3957"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
193.108.118.121200 OK 2.4 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 116 x 86\012- data
Hash ec706a0634f1e5e06ad775b2b2ebdcf2
5a18c424f7b84b40709a6b78b2d632639bb3ff2b
9613f59211bd2194336c666d11a0d2e1daa4dd96d543e661f5835e0a621c2f5d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/gif
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xae3bf698", progressive, precision 8, 258x145, components 3\012- data
Hash 58357cada0f0171d2a84540391219649
57123e69e055b4d818faedec09884135c5d4a31e
742c68ecf3dcc1096143a0a5d00f4a15a3edb13fd497ea2931e67e66826addd0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 9007
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-232f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=63953
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
193.108.118.121200 OK 9.6 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x70755b56", progressive, precision 8, 258x145, components 3\012- data
Hash 8fcd27f0bcc790f75f46d275a19a6300
556d3ca4dec168c77ae4a73c0c6e8291ef1291c0
78410be719ee73e00845d44e100e280d3989fc3d0fa4d3dcfcd888f13ded1843
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 9565
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-255d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
193.108.118.121200 OK 15 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 258x145, components 3\012- data
Hash bb05342bd1f87ae7624aba323af77dca
4b7c875644d0b6a424abf06cda89ad135bd53d81
828e2c12259274e1eb1c212f3498fb31503462023c4b2642da4f795209b755de
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 14653
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-393d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
193.108.118.121200 OK 10 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1d6d8e5e", progressive, precision 8, 258x145, components 3\012- data
Hash 1541881a313c963dc754657aefd89ef0
fb41198c81ac17da4f9a34e4b4bf21c8c7fe6001
75e1629d9fad2e22b9d9983c65874a19a3f639db43c11db713a7f972b8f72117
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 10352
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2870"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 6c17c634ebd856cc85bedd931ac01680
d1e1b9358749b9fd4ff851bb4cbdce54a6223ce8
c1ced3a91bde391f64c6cef03b164cd89ffd499fa5d75a3f797bc57b1fc3c191
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 9032
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2348"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=45276
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
193.108.118.121200 OK 8.3 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 258x145, components 3\012- data
Hash bc1cdeea817d887b981f26bc84236b93
4528ed7010e2e0c774890d6041a60cbeb3c69c92
d737ffd9379d8f2734c1dc6304e4ff75f1c946de29371a1ec9ddc01f423076dd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 8266
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-204a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
193.108.118.121200 OK 9.3 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7cd1fc83", progressive, precision 8, 258x145, components 3\012- data
Hash 5ec2461279f77afe0c6fbb935bd0b94a
95c6e9171db79ea69ce718b02484e36816d1a1cd
ac60e5738d3cf6d32004e1ddfcf4368e256f1928ea923f9369869b8e9af665ba
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 9338
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-247a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
193.108.118.121200 OK 9.9 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x50dba82c", progressive, precision 8, 258x145, components 3\012- data
Hash eed80bba1e2813e70d57a5f3a6bbdf09
3965668a7340d071731a89abf73cc4b3efe4dac3
9ef4f06c23420fae9b1fd163d0719be1b2b258d74d27f7933c810ad64c93ac93
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 9914
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-26ba"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
193.108.118.121200 OK 8.9 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 258x145, components 3\012- data
Hash 77df6b7e2677b46a053508a92026cb8a
decad70c5281062495250250fdf985b6073a8a91
6143cd3687b480264dad4e3d3a237c30c26c859ef7fe1c2a7b32472fb65710c0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 8885
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-22b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=49154
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=56371
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=61107
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=67521
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 081a01df58865529d3edcbc765c4dcb5
a7fe3ca35fe5e244926a80addda994218806f613
edebf400c8f60c306491e7b2f8a695b7dde10cf49eed66125423571a1cd60d05
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 12127
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f5f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
193.108.118.121200 OK 20 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 107 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash e2aadceedde9aef1bf42c176b31c585c
76c14eae7537160a304aa458bf11a985d5a57375
2b1ff8c49202306d33deac4cf49841f59c1a49d15c80a77c1e001369578cef3f
GET /lands/38/landings/Ihyam_7H2-fd/button.png HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/png
content-length: 19948
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4dec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
193.108.118.121200 OK 15 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 64 x 64\012- data
Hash 571dfe045d66b88d2d5c82151a1bf579
8966eb7cd27754263bd2861737b695386273f423
7c7cd7a7155d3d38bb49fc82c83aa14ed24d56f6886623299b13b6a81486a871
GET /lands/38/landings/Ihyam_7H2-fd/load.gif HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/gif
content-length: 14574
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-38ee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash d660b4b574161fdee86ae57edc8ed0ab
0b947dc39c7ba7415dd78683e06366ff3848b2d5
7483a49fc67a21c7a295b03880aa6c37425f3e96d60dff1ac36eff743ecf6078
GET /lands/38/landings/Ihyam_7H2-fd/flash.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 3829
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-ef5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
193.108.118.121200 OK 24 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:05:13 17:11:55], baseline, precision 8, 990x36, components 3\012- data
Hash ab6b76c0cc6683324bd7fe5923b24d17
559b8b1e50f80b7a218e25ce443e523401882577
a923ea85ee73e53db73038b2ea8712e7e40b067cde25b05ffa999608b17a304d
GET /lands/38/landings/Ihyam_7H2-fd/panel.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 23598
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-5c2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
193.108.118.121200 OK 887 B URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash ddf58dd1f8745a81264b21bcf1f9cc77
73a35df521dc648af06e2e490cac929bc681a06c
a2315bfaefeae19a449f38fe4131531c7603f5c7e75e956c240074da66123134
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1889
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-761"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash 609e06417314a6476bc6d0f3c1900e20
0e2b0d425bd9e5cc0ebb386b093adf64d464ac1e
9450244a77e354c177c18a691c0e5f0c2fc5d0ddf921f40178cbb8bfe4a076ac
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1394
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-572"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 677577d8c6ffb0107ee5c9fbabaa4af7
0bfcbbafee19eeeae113103080c41cd95b4083e5
3a215afa0d15ae2985cfb88e51e90b727f0ba03fe10f8e0b0980ef55af91bdb0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 2646
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-a56"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
193.108.118.121200 OK 1.2 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 1226a24c469c0fba3970548aab13650f
a6d371e4acc2a9181d1d6bf13b5d51f82c49a943
6a1513dacd3fcffe47245068fe9fa6a49cdc9c352b8d9cbf8f72005c4cf5cafc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1191
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
193.108.118.121200 OK 1.7 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 3db490cc8f824e29d6fb07ba75a97a20
84c2c26447f7b49c76999f31c0ed526bde13c6c4
5c13ca439c63d5f3e5d638ba055f399058117d3b554ae3fb751d4a39043a14fd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1729
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xb7d2e3cb", progressive, precision 8, 60x60, components 3\012- data
Hash 47e765dc1abef2d79edafb5fce1c64b5
93d3e7f1e11dd2d98ca3ffb3b49a0211ed76f273
185540f06acc82b2dc4bdfa6d2deb4ce7454bb1e28783acdde67f8a9a90597b1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1441
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-5a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash f042aa7a438ca85be0afeba44a3ac116
183c8b20394fdaf6ba757ff76d3f25e33092369e
05b76ed86b70990f4307223391e1c9abfff59ec545d75d94683c0f69713eed79
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1809
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-711"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 16b2fab44ddad0b620d0eaec2fc1e425
24fa279de6ceb2c0434ff4e750639e15eb22ed29
58076ed17c6377d23375ec949c6cb2eade75010dcf82ba0e64dbdcbd67583912
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1902
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-76e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
193.108.118.121200 OK 1.1 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x0bb5b909", progressive, precision 8, 60x60, components 3\012- data
Hash 01ed303509acb0c822fa3c55976d4b96
7ed250f181498962ebafd21f1bde4ca15e6953c6
fba198ced4795895d1f6d0bc2247d315eb8cc6dda60ad119c99846d68d0ce445
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1085
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
193.108.118.121200 OK 2.4 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash ec2823c426475d6766008dabf85a4bc2
f0681ce27ba96a1b4f6547a42495ebb5b0ca514a
2316f8554d54e907f9992475ced3bf03fc95412e98b2bc29aa6e5407260bcddd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
193.108.118.121200 OK 2.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash 3f809b94b5e5607da5b5c6506a8729c1
26f4376095902a56db86ea2c76689f15ba3cf9c2
7b84461772bad27e431676a53efae81d8584a102f3f6f407ae0a54469a938ff6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-7bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
193.108.118.121200 OK 3.1 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash cbff1c490bcdcad2989c2549f278eae5
56e1b4489cfc0d54f9f72e15777788beba396c95
6d96d3de01207ab505c62b2da624ba787cabe4fee767c181b175186e50c23af4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 3063
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 52eba434e5411806cd92add275d164ea
0cc9df3c52de111a307dc3d8d22254cf51b0c77f
a4c2a01f64274d0ede23e233e2be19225c68e5e5a6206b338fb8bc6410f7005f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1758
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6de"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash c840b43a0575b0a1742c50f186a67c22
d1ac0da47b4394a9dbea90eee26a260b5268c4d9
6a8ef9be89e89c23d6d96c50e2fa62bd25473e9cc7a79e2cd1ef64e2647cb38a
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/png
content-length: 1045
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-415"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash a08c2c5266f9701e422f042b4a3809c5
9884cf987f84b282f920634b2ab811077dfef7a3
054df6bf8ee2bcb904269745cd2c0830918d9e1a6ff1f965673af5f2946a3c37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1373
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-55d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
193.108.118.121200 OK 1.6 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash bfa11442f9457a03384ecf8128a586a2
a30e6f6a18be085197605b6463f840cb249d0510
941411042624c554a5828ee596c1e3ade4a787ae2fad6e5b6d585ab6a6e1e3c6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 1563
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-61b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 96f46fad8cda5895b895f6ec3f95cda4
3bd79ef305bfa4b7c1a3f328828c63f89a818878
8e48576faf920cae224c669d61831d0ad5fc23f6220e83955275a3115bb568fc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/png
content-length: 1046
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-416"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
193.108.118.121200 OK 887 B URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
193.108.118.121200 OK 841 B URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 9cf522c306866742c2806e0c14c8bca7
7a3ff28af2c6f7cfd036ec4fc162651eaf634f7e
fa09bef7875241c06a9e2505bc698a189d3b3ce012af29c65817fd476627ec87
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 841
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 950ff8ae916df997fea302859ca2ccb4
42232e28878f65aaf4120d9435784ad46c2be71c
c0b01da5a48a7ddd619a2dee26bec77300b68bb1b028716320719f9c1a5f769e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 2553
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-9f9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
193.108.118.121200 OK 4.6 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 150x84, components 3\012- data
Hash 0fa4a903a2adc9da58b52661ebc8d38c
061c6359c2951da7509f6ae4039c2f0bc1ce6b62
79d6da7e0398c3f607c4bbc93562cf6ab96bb800cdab4ef6df82718cf0a0d3e5
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 4644
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1224"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 58477c52a9d639b91b16f022d4676bcf
51a85ef703617e996c50cd76b38f2507517a9f25
a0653cc819b252702f55439d6f8763d212fca2f9f604d67224a2a9891e8eadbe
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 4397
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-112d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
193.108.118.121200 OK 7.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7ab4f024", progressive, precision 8, 233x131, components 3\012- data
Hash 2a4d527ed65de8e2e0a69dc9d50442d2
8ec4547a38c9e3d37469acfe21ea755531776f09
275876bbb5190da100ae4f9aca976ec15cea0de20d42e167f522a0a50ba8ca02
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 6972
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1b3c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
193.108.118.121200 OK 4.3 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 365e215442256548316a73bc7c79edf1
13078402132cb89939a39edf11181fb88ebe390f
f8c35c02ff055694af23c83b1e3019a8c29965ab57ed7db8173a23a38494ff58
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 4315
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-10db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
193.108.118.121200 OK 4.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 150x84, components 3\012- data
Hash 416ec3af020687541765d48acb81fc08
48b80345ffb951535d4d6ca811d19bd9dd726998
75c30d77f900b2f4c91f502f45f00606b57a47bb84e6b700fb18482389d88f3c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 4035
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-fc3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
193.108.118.121200 OK 8.6 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 233x131, components 3\012- data
Hash 55778c73ba99a9477464e5c90cdd7e02
bc49e8058f1dafe10e817441de952ba6aa3b7b58
c362fc3a2aafd1b0d8069fb1fae83b5f0abb06443d3e00b21b37be13aeb75bfa
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 8615
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-21a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
193.108.118.121200 OK 5.1 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 72e270f7041c2fe2f326d11e162fb249
3f918a2023f10a01a2ed74713d292df415d14e05
b17ce663fab4421f728ea0dd218d2a8a6a10a4314759fdf139b9388fa26e37f6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 5080
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-13d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6359dcbc", progressive, precision 8, 150x84, components 3\012- data
Hash 447470b34b66b570c8fc0dbc11c06609
863180b376242e256189888eb99282e597d894c9
dd57f5a80517b8109279b57d702278f31a9878295045c6766931a0453244d749
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 4417
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1141"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
193.108.118.121200 OK 7.9 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 233x131, components 3\012- data
Hash 5df975e7a8c0b2610069610c54c5ce6c
ab6390fbb7be1be9a0f4477b4439e34d5175b6fc
bbfb6830dabc55fd598cc0948049f2367d17c80f286e0821e660ba7f5a6b360c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 7904
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1ee0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 150x84, components 3\012- data
Hash 6ed4eca1ed776930746531005fcf22aa
11e8643932e35a8ef65be8ef585afee241c8eddc
28849006b773d85fb8fb2295a86bcee5d2cdabb9a23d854ffebbd8dfd203588c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 3835
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-efb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
193.108.118.121200 OK 4.7 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 12f0c14e5943fd57577ce11155107bdb
a484cb296770fe6cb55d25cba19f831cf1aaf7d1
9eb468f7688a901a3626fdde8d0b07dc490a830718c2938d32f70f0ec122a344
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 4664
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1238"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
193.108.118.121200 OK 6.8 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 233x131, components 3\012- data
Hash 2ad4260dc1204ad8f3c0c29bd919830a
fd2ddfca32f55ba5d180af812a787e61ce136480
acc8f76a570c0833d34835f5694409e082b4af09783366596c2e151e0b0ed128
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/jpeg
content-length: 6827
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1aab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
193.108.118.121200 OK 1.9 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 88 x 31\012- data
Hash 2bcf55138cde4a65770426a67ea247fc
13d8c808a4276dc88937817d7df7720182c093f6
348fd1e58aec8d99001aca1dd12b72eafef534c2d11725b2280a173d03b5fa6b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/gif
content-length: 1882
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-75a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/sw.js
193.108.118.121200 OK 4.2 kB IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4168)
Hash 569090f90a522f4c62af3b9e40635957
4e6f57da49920f30777f3fe71f83f6183aeb4f3f
ee8c6af307c8d085753adb810c69c8379d1e8d01211b491409c43e9edc9f6fb5
Analyzer Verdict Alert fortinet Phishing
GET /sw.js HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/javascript
content-length: 4199
last-modified: Thu, 01 Dec 2022 08:31:02 GMT
etag: "63886646-1067"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/index.php_files/pu.swf
193.108.118.121200 OK 2.0 kB URL HTTP/2 5.news-civuse.com/lands/38/index.php_files/pu.swf
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 6d40122b8a5b7fd31b5aef2749f519fd
518d585dd26c947344ddea5403324850d1b2f7cd
1da7814acd0d6913438bf701d8a2d2cf29814174b5eff0e6ff129ee74f68a7cf
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/index.php_files/pu.swf HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/x-shockwave-flash
content-length: 1953
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=56935
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=63953
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=45276
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=49154
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=56371
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=61107
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:33 GMT
cache-control: max-age=67521
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934473.dop068.sk1.t,1674934473.cds243.sk1.hn,1674934473.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250 HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 1b6ee6a5fdcf3c781a0b768964797646
f0bf83f6368d7c31471ad258ce8cfb4848109192
511ad4ad0f3db18490c9b7876d44c887f60d78dd8d06a585367c0ab4ddbbe92f
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250 HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
193.108.118.121200 OK 240 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Size 240 kB (240459 bytes)
Hash cefa4257785e684010a7236ade10dfe0
c75dac80f506400a35f071b9327050f7dc353516
f2fd6b618ed74dc21d56f08987feecffbd7de20ad62250603c14581ad7c3d52d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-8353"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250 HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250 HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
151.101.66.217200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
IP 151.101.66.217:0
File type ASCII text, with very long lines (62031)
Hash 1c6083f7ae34ed2fa3236569eec9ff56
0c1be1b5468042e65e02c8b886c50d26427c9ce7
2b1d69121eb9dc0629126ff02cf7acef2f1924b32b0bb654792ecd9101e10c44
GET /7.19.0/bundle.es5.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 11 Nov 2023 17:34:32 GMT
last-modified: Thu, 10 Nov 2022 15:50:35 GMT
etag: "1c6083f7ae34ed2fa3236569eec9ff56"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 19:34:33 GMT
age: 6746402
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20174
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/favicon.png
193.108.118.121200 OK 1.2 kB URL HTTP/2 5.news-civuse.com/lands/38/favicon.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash e7ffe9c659d8c729e12e20dfe05509be
2c413e09ebd14dd3020209fe9c9183e0335fc250
880c000a3ca23bb89262d9c2ccf9d48bab37dcec09f3b3bf55c8385f58745f50
GET /lands/38/favicon.png HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: image/png
content-length: 1233
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-4d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/lp.js
193.108.118.121200 OK 1.4 kB URL HTTP/2 6.news-civuse.com/lands/38/lp.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 8441b469fa0c093bd106a66a4068d944
c3698e755cd1ef7b5d29e233ef615219559a96f3
befe8e9f55c6e3fe10fd398534acb713129764b05d852089ac34bfa535a53902
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/lp.js HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: application/javascript
content-length: 1418
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-58a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/revopush.js?v=4
193.108.118.121200 OK 10 kB URL HTTP/2 6.news-civuse.com/revopush.js?v=4
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (9954), with no line terminators
Hash fc284a0e5d580856ae4863715ad6733e
eb69f303c80ff8e44abc9601b8616c0cf92faafa
2240a1d10744494668058ba210d0d87203609def9fd69d2ac82092ebc79583c0
GET /revopush.js?v=4 HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: application/javascript
content-length: 9954
last-modified: Thu, 15 Dec 2022 09:31:10 GMT
etag: "639ae95e-26e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
193.108.118.121200 OK 4.1 kB URL HTTP/2 5.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 79e8df65a8bd52c13d32a342409a61b7
0a3c2dd5860c1d250a0525e7d78be8fe1fe28920
d9899b5e76492b5ac9e9c2a888df7c83a2dbf97cecaade29f05bad530edbaa76
GET /traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38 HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
193.108.118.121200 OK 6.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (5955), with no line terminators
Hash 0fe9d8c60b2c31a97fa966d14be642ef
eb4f94b637c54906ae38eb350b6310d552c75e6d
191ae0d72198f51609589e26c7d837d2978382861f60b360148e0af13c8583e1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: text/css
content-length: 5955
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1743"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
193.108.118.121200 OK 44 kB URL HTTP/2 6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 97357913cd40a374c82b033e904b0510
2e48e4570a45434fa2f14d545505b9be33cd3a45
8f0f16519f8bdb8719366784ab1272a4095d31052fe841281595aabf15e93435
GET /lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4= HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
set-cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8; expires=Sat, 28-Jan-2023 20:34:34 GMT; Max-Age=3600; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
193.108.118.121200 OK 1.4 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (1391), with no line terminators
Hash 677a255a4a9dc3411b8013e8afb09c42
ec9f1a722b028da2eceb06cdc8c26fc6490a4e70
cc4494353809adb8bdfbbdea2ad72a1a0fc9c84816dc23c7ee1f9466e620eb5e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: text/css
content-length: 1391
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-56f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
193.108.118.121200 OK 12 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 833a12d372440b20017502d3c72e0b20
5fb9301142e3c53f65cd16502b35d7d1d5f82b98
1531ac56322b89715a35b1cdb5ca1f79f453614f368455b2cc8ef650a992f8cd
GET /lands/38/landings/Ihyam_7H2-fd/18.png HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/png
content-length: 12136
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
193.108.118.121200 OK 54 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash abb6ab5475d71d8b282f1650f0d49a4d
a1ad24303afb3467481b99d06309e965395b5c44
24ba8f34dcd0d0773ddc6c3f657b2c78db797e0db44e886060560aa22385b059
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-2f3dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
193.108.118.121200 OK 28 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:03:16 09:26:15], baseline, precision 8, 118x88, components 3\012- data
Hash c1a5819d50b9125f0c46ded86fd5b4b6
3926c15be79cb7522cefdbf5066d39623e36a283
374f0cede3c1f91ad174b97554017b74cbd29424d7467d039beab541f6deb873
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 27900
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6cfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
193.108.118.121200 OK 17 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x88, components 3\012- data
Hash 215029a9775d1e9a56c93912ab03f4c6
6a3dbd676e2ea61850d2a20086b9ec84127da0ae
e071c52839ef37679439165349ffdd98cf19aa7e35d0293a1bec69743db70b16
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 17350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash ea52ae32ae4319fb03da1672b0c20ed3
4efd8189179b260a4b51fd4b28d729b6143ef00a
43a4ca83560d5720ffeccf17478d6a1741f86639f35744fb61fcb139dc3020a6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 12525
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-30ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
193.108.118.121200 OK 16 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 7d2f4cac627b252599add0115cee197e
d9b9d55fbbc9b2917c40f71a4d6d26aa43d5ea9f
359f6326fd88335977d492fd532c3fddc2cfd2b2c025ea904c384348c98ab2bb
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-6aa0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
193.108.118.121200 OK 23 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 06fd9e95e8ffea9c5d2178fe00703fa2
db982d4b85b7b2e94e6676be0bcce252536f79aa
4b664e9dd1997e15640b2ffd2ce959502d86806fa771200833d11bb9e69e975e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-10b2b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
193.108.118.121200 OK 13 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash 99a404d25bcdd47a141dafdbe046d0cf
04de642c5cbc865c29ab3599c1c4fa19f2a6ba8e
fbe779bcef340ba0b148f84b50a8323a2bbb493674e130bf877d87c6d163ed36
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 13106
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3332"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
193.108.118.121200 OK 16 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 5a34545daf4bc481bcbc3573062aa426
132d09d36ede8f32c3168ecaaa631e5959ce38ef
c044a81b14812c50f3142ad20d0ca862923daba2483eb164b0348ba98d3b7855
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 15481
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3c79"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
193.108.118.121200 OK 21 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 41bb24c09b02b756489d0c877c849c0c
50b634e169d334546f6b424a24797b378ba6e435
da71f2b7f2e58dcd656112739e8d0684405df62713649d5a973e2d38e47fa1ad
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-3957"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
193.108.118.121200 OK 2.4 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 116 x 86\012- data
Hash ec706a0634f1e5e06ad775b2b2ebdcf2
5a18c424f7b84b40709a6b78b2d632639bb3ff2b
9613f59211bd2194336c666d11a0d2e1daa4dd96d543e661f5835e0a621c2f5d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/gif
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xae3bf698", progressive, precision 8, 258x145, components 3\012- data
Hash 58357cada0f0171d2a84540391219649
57123e69e055b4d818faedec09884135c5d4a31e
742c68ecf3dcc1096143a0a5d00f4a15a3edb13fd497ea2931e67e66826addd0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 9007
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-232f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
193.108.118.121200 OK 9.6 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x70755b56", progressive, precision 8, 258x145, components 3\012- data
Hash 8fcd27f0bcc790f75f46d275a19a6300
556d3ca4dec168c77ae4a73c0c6e8291ef1291c0
78410be719ee73e00845d44e100e280d3989fc3d0fa4d3dcfcd888f13ded1843
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 9565
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-255d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
193.108.118.121200 OK 15 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 258x145, components 3\012- data
Hash bb05342bd1f87ae7624aba323af77dca
4b7c875644d0b6a424abf06cda89ad135bd53d81
828e2c12259274e1eb1c212f3498fb31503462023c4b2642da4f795209b755de
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 14653
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-393d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=56934
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
errors.house/api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0
144.76.158.184200 OK 2 B URL HTTP/1.1 errors.house/api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0
IP 144.76.158.184:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0 HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 136
Origin: https://5.news-civuse.com
Connection: keep-alive
Referer: https://5.news-civuse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 28 Jan 2023 19:34:34 GMT
Content-Type: application/json
Content-Length: 2
Connection: close
access-control-allow-origin: https://5.news-civuse.com
access-control-expose-headers: x-sentry-rate-limits, x-sentry-error, retry-after
vary: Origin
Strict-Transport-Security: max-age=31536000
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
193.108.118.121200 OK 26 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 0551af21357266a2319cddd71e885332
6ae961230739be735684cf9591e33b30c4237e36
5105a9ca8c2ae2d7bafdc176fdc065afcc2ae71e85bb027d01b98c7b29a2fb19
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: W/"5d7a0ef0-f889"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=63952
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 6c17c634ebd856cc85bedd931ac01680
d1e1b9358749b9fd4ff851bb4cbdce54a6223ce8
c1ced3a91bde391f64c6cef03b164cd89ffd499fa5d75a3f797bc57b1fc3c191
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 9032
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2348"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=45275
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
193.108.118.121200 OK 8.3 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 258x145, components 3\012- data
Hash bc1cdeea817d887b981f26bc84236b93
4528ed7010e2e0c774890d6041a60cbeb3c69c92
d737ffd9379d8f2734c1dc6304e4ff75f1c946de29371a1ec9ddc01f423076dd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 8266
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-204a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=49153
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
193.108.118.121200 OK 9.3 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7cd1fc83", progressive, precision 8, 258x145, components 3\012- data
Hash 5ec2461279f77afe0c6fbb935bd0b94a
95c6e9171db79ea69ce718b02484e36816d1a1cd
ac60e5738d3cf6d32004e1ddfcf4368e256f1928ea923f9369869b8e9af665ba
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 9338
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-247a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=56370
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
193.108.118.121200 OK 9.9 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x50dba82c", progressive, precision 8, 258x145, components 3\012- data
Hash eed80bba1e2813e70d57a5f3a6bbdf09
3965668a7340d071731a89abf73cc4b3efe4dac3
9ef4f06c23420fae9b1fd163d0719be1b2b258d74d27f7933c810ad64c93ac93
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 9914
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-26ba"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
193.108.118.121200 OK 8.9 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 258x145, components 3\012- data
Hash 77df6b7e2677b46a053508a92026cb8a
decad70c5281062495250250fdf985b6073a8a91
6143cd3687b480264dad4e3d3a237c30c26c859ef7fe1c2a7b32472fb65710c0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 8885
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-22b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
193.108.118.121200 OK 23 kB URL HTTP/2 5.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 6bf57b841f1834d809f4e5b1c8da9fce
3b34800700ad44d1c491fe8550f8e539eeb32a8e
d3e0ae8ee17349e19367d15740d9cf48e4c90b0970dd57165046fbb830ec4e3b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-1327c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
193.108.118.121200 OK 20 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 107 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash e2aadceedde9aef1bf42c176b31c585c
76c14eae7537160a304aa458bf11a985d5a57375
2b1ff8c49202306d33deac4cf49841f59c1a49d15c80a77c1e001369578cef3f
GET /lands/38/landings/Ihyam_7H2-fd/button.png HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/png
content-length: 19948
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4dec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
193.108.118.121200 OK 15 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 64 x 64\012- data
Hash 571dfe045d66b88d2d5c82151a1bf579
8966eb7cd27754263bd2861737b695386273f423
7c7cd7a7155d3d38bb49fc82c83aa14ed24d56f6886623299b13b6a81486a871
GET /lands/38/landings/Ihyam_7H2-fd/load.gif HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/gif
content-length: 14574
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-38ee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=61106
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash d660b4b574161fdee86ae57edc8ed0ab
0b947dc39c7ba7415dd78683e06366ff3848b2d5
7483a49fc67a21c7a295b03880aa6c37425f3e96d60dff1ac36eff743ecf6078
GET /lands/38/landings/Ihyam_7H2-fd/flash.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 3829
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-ef5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
193.108.118.121200 OK 24 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:05:13 17:11:55], baseline, precision 8, 990x36, components 3\012- data
Hash ab6b76c0cc6683324bd7fe5923b24d17
559b8b1e50f80b7a218e25ce443e523401882577
a923ea85ee73e53db73038b2ea8712e7e40b067cde25b05ffa999608b17a304d
GET /lands/38/landings/Ihyam_7H2-fd/panel.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 23598
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-5c2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=67520
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
193.108.118.121200 OK 887 B URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash ddf58dd1f8745a81264b21bcf1f9cc77
73a35df521dc648af06e2e490cac929bc681a06c
a2315bfaefeae19a449f38fe4131531c7603f5c7e75e956c240074da66123134
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 1889
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-761"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash 609e06417314a6476bc6d0f3c1900e20
0e2b0d425bd9e5cc0ebb386b093adf64d464ac1e
9450244a77e354c177c18a691c0e5f0c2fc5d0ddf921f40178cbb8bfe4a076ac
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 1394
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-572"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 677577d8c6ffb0107ee5c9fbabaa4af7
0bfcbbafee19eeeae113103080c41cd95b4083e5
3a215afa0d15ae2985cfb88e51e90b727f0ba03fe10f8e0b0980ef55af91bdb0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 2646
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-a56"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
193.108.118.121200 OK 1.2 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 1226a24c469c0fba3970548aab13650f
a6d371e4acc2a9181d1d6bf13b5d51f82c49a943
6a1513dacd3fcffe47245068fe9fa6a49cdc9c352b8d9cbf8f72005c4cf5cafc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 1191
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
193.108.118.121200 OK 1.7 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 3db490cc8f824e29d6fb07ba75a97a20
84c2c26447f7b49c76999f31c0ed526bde13c6c4
5c13ca439c63d5f3e5d638ba055f399058117d3b554ae3fb751d4a39043a14fd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 1729
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xb7d2e3cb", progressive, precision 8, 60x60, components 3\012- data
Hash 47e765dc1abef2d79edafb5fce1c64b5
93d3e7f1e11dd2d98ca3ffb3b49a0211ed76f273
185540f06acc82b2dc4bdfa6d2deb4ce7454bb1e28783acdde67f8a9a90597b1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 1441
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-5a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/jquery-3.2.1.min.js
193.108.118.121200 OK 32 kB URL HTTP/2 6.news-civuse.com/lands/38/jquery-3.2.1.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash e8438d93f439689848daa3143fe6ea72
20bca887a8fb1c2c36e6824f092b8596745589b3
9c28f07ed3e9d252be7719db95fe0e9048564d867ac6417b789087e4a17a39dd
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/jquery-3.2.1.min.js HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:33:06 GMT
etag: W/"5d7a10d2-15283"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 16b2fab44ddad0b620d0eaec2fc1e425
24fa279de6ceb2c0434ff4e750639e15eb22ed29
58076ed17c6377d23375ec949c6cb2eade75010dcf82ba0e64dbdcbd67583912
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 1902
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-76e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
193.108.118.121200 OK 10 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 7f10ec8b678b816861745d887b5c98b8
816c527350e51bf8de74d377053bfbb19dd0c215
fb91b4a197806f2666fae81daa686e6ad1b37087926b8a04837a6f5fd9177074
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-10b2b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
193.108.118.121200 OK 2.4 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash ec2823c426475d6766008dabf85a4bc2
f0681ce27ba96a1b4f6547a42495ebb5b0ca514a
2316f8554d54e907f9992475ced3bf03fc95412e98b2bc29aa6e5407260bcddd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
193.108.118.121200 OK 2.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash 3f809b94b5e5607da5b5c6506a8729c1
26f4376095902a56db86ea2c76689f15ba3cf9c2
7b84461772bad27e431676a53efae81d8584a102f3f6f407ae0a54469a938ff6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-7bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
193.108.118.121200 OK 3.1 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash cbff1c490bcdcad2989c2549f278eae5
56e1b4489cfc0d54f9f72e15777788beba396c95
6d96d3de01207ab505c62b2da624ba787cabe4fee767c181b175186e50c23af4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 3063
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 52eba434e5411806cd92add275d164ea
0cc9df3c52de111a307dc3d8d22254cf51b0c77f
a4c2a01f64274d0ede23e233e2be19225c68e5e5a6206b338fb8bc6410f7005f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 1758
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6de"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash c840b43a0575b0a1742c50f186a67c22
d1ac0da47b4394a9dbea90eee26a260b5268c4d9
6a8ef9be89e89c23d6d96c50e2fa62bd25473e9cc7a79e2cd1ef64e2647cb38a
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/png
content-length: 1045
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-415"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash a08c2c5266f9701e422f042b4a3809c5
9884cf987f84b282f920634b2ab811077dfef7a3
054df6bf8ee2bcb904269745cd2c0830918d9e1a6ff1f965673af5f2946a3c37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 1373
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-55d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
193.108.118.121200 OK 1.6 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash bfa11442f9457a03384ecf8128a586a2
a30e6f6a18be085197605b6463f840cb249d0510
941411042624c554a5828ee596c1e3ade4a787ae2fad6e5b6d585ab6a6e1e3c6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 1563
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-61b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 96f46fad8cda5895b895f6ec3f95cda4
3bd79ef305bfa4b7c1a3f328828c63f89a818878
8e48576faf920cae224c669d61831d0ad5fc23f6220e83955275a3115bb568fc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/png
content-length: 1046
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-416"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
193.108.118.121200 OK 887 B URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
193.108.118.121200 OK 33 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 8df6d9ee0c1d6613e5b32b4a5cedb6d6
025c022209e913170b4de5dec8a9861ab2373e89
66c26bac2299809c9b7835947389d8e21cb06e3b70c21ac6b637e04433a75d61
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-2f3dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
193.108.118.121200 OK 7.8 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash d54440f1aa28967a3ee95d38507edcf6
0660eac2356c956d6b4c33e2b43583d662099d52
fe4a715a48297287ac7ff8263bdcd1f5e0b2b17bfc5d0618dca6cc48e3bedce9
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-6aa0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
193.108.118.121200 OK 4.6 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 150x84, components 3\012- data
Hash 0fa4a903a2adc9da58b52661ebc8d38c
061c6359c2951da7509f6ae4039c2f0bc1ce6b62
79d6da7e0398c3f607c4bbc93562cf6ab96bb800cdab4ef6df82718cf0a0d3e5
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 4644
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1224"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
193.108.118.121200 OK 7.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7ab4f024", progressive, precision 8, 233x131, components 3\012- data
Hash 2a4d527ed65de8e2e0a69dc9d50442d2
8ec4547a38c9e3d37469acfe21ea755531776f09
275876bbb5190da100ae4f9aca976ec15cea0de20d42e167f522a0a50ba8ca02
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 6972
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1b3c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
193.108.118.121200 OK 15 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 86c9e6757e858b7841f3c8ab45575446
9aa15a83063e29d6f2d968251f1d9b75adbc857a
e60ea5f93db005ffb2dca224364032d70b564364143f70ca9e6e1f833893e789
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-1327c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
193.108.118.121200 OK 4.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 150x84, components 3\012- data
Hash 416ec3af020687541765d48acb81fc08
48b80345ffb951535d4d6ca811d19bd9dd726998
75c30d77f900b2f4c91f502f45f00606b57a47bb84e6b700fb18482389d88f3c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 4035
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-fc3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
193.108.118.121200 OK 8.6 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 233x131, components 3\012- data
Hash 55778c73ba99a9477464e5c90cdd7e02
bc49e8058f1dafe10e817441de952ba6aa3b7b58
c362fc3a2aafd1b0d8069fb1fae83b5f0abb06443d3e00b21b37be13aeb75bfa
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 8615
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-21a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
193.108.118.121200 OK 8.2 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 6967bad74e308c512e18dc04d78ef551
483d84667ed31668a65816b265a398400dd35f2b
1ae35be7713280088e4092d78ca8f81b67f12f917ce5425c0b4adb18df1c273e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-3957"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6359dcbc", progressive, precision 8, 150x84, components 3\012- data
Hash 447470b34b66b570c8fc0dbc11c06609
863180b376242e256189888eb99282e597d894c9
dd57f5a80517b8109279b57d702278f31a9878295045c6766931a0453244d749
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 4417
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1141"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
193.108.118.121200 OK 7.9 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 233x131, components 3\012- data
Hash 5df975e7a8c0b2610069610c54c5ce6c
ab6390fbb7be1be9a0f4477b4439e34d5175b6fc
bbfb6830dabc55fd598cc0948049f2367d17c80f286e0821e660ba7f5a6b360c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 7904
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1ee0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
193.108.118.121200 OK 49 kB URL HTTP/2 4.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash f1b7a1a2fc648a9b5f55e33b4091541a
979ff42c1b14a08df65722e752a0b6b7a2da2b96
3637480000d79eb8e1f2512509b9494324dc41a033fe12a84744670ecdf29d65
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css HTTP/1.1
Host: 4.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:32 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-10b2b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
193.108.118.121200 OK 4.7 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 12f0c14e5943fd57577ce11155107bdb
a484cb296770fe6cb55d25cba19f831cf1aaf7d1
9eb468f7688a901a3626fdde8d0b07dc490a830718c2938d32f70f0ec122a344
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 4664
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1238"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
193.108.118.121200 OK 6.8 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 233x131, components 3\012- data
Hash 2ad4260dc1204ad8f3c0c29bd919830a
fd2ddfca32f55ba5d180af812a787e61ce136480
acc8f76a570c0833d34835f5694409e082b4af09783366596c2e151e0b0ed128
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 6827
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1aab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
193.108.118.121200 OK 1.9 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 88 x 31\012- data
Hash 2bcf55138cde4a65770426a67ea247fc
13d8c808a4276dc88937817d7df7720182c093f6
348fd1e58aec8d99001aca1dd12b72eafef534c2d11725b2280a173d03b5fa6b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/gif
content-length: 1882
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-75a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/sw.js
193.108.118.121200 OK 4.2 kB IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4168)
Hash 569090f90a522f4c62af3b9e40635957
4e6f57da49920f30777f3fe71f83f6183aeb4f3f
ee8c6af307c8d085753adb810c69c8379d1e8d01211b491409c43e9edc9f6fb5
Analyzer Verdict Alert fortinet Phishing
GET /sw.js HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: application/javascript
content-length: 4199
last-modified: Thu, 01 Dec 2022 08:31:02 GMT
etag: "63886646-1067"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/index.php_files/pu.swf
193.108.118.121200 OK 2.0 kB URL HTTP/2 6.news-civuse.com/lands/38/index.php_files/pu.swf
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 6d40122b8a5b7fd31b5aef2749f519fd
518d585dd26c947344ddea5403324850d1b2f7cd
1da7814acd0d6913438bf701d8a2d2cf29814174b5eff0e6ff129ee74f68a7cf
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/index.php_files/pu.swf HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: application/x-shockwave-flash
content-length: 1953
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=56934
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=63952
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=45275
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=49153
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=56370
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=61106
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:34 GMT
cache-control: max-age=67520
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934474.dop068.sk1.t,1674934474.cds243.sk1.hn,1674934474.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
193.108.118.121200 OK 7.5 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 4a29a7232d0715bebf86fff347173ec8
e5d508580d5d8309f5cde536bf499dda3ba4de5d
5b0c059250ed6f96788447c04b80ec6b313860d7b68ec5ae0b45543abfe704f0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-8353"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250 HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 1b6ee6a5fdcf3c781a0b768964797646
f0bf83f6368d7c31471ad258ce8cfb4848109192
511ad4ad0f3db18490c9b7876d44c887f60d78dd8d06a585367c0ab4ddbbe92f
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250 HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
193.108.118.121200 OK 234 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:06:21 11:55:20], baseline, precision 8, 990x513, components 3\012- data
Size 234 kB (234218 bytes)
Hash 60f67e63f85561c6f95fd573252d2311
6fc6d41b27131074786778522b86077f477dbd51
0e80e9257f1dd0149894bf37342cb082ef2410263de490e851111fa9531e15c6
GET /lands/38/landings/Ihyam_7H2-fd/fon2.jpg HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: image/jpeg
content-length: 234218
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-392ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250 HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250 HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
151.101.66.217200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
IP 151.101.66.217:0
File type ASCII text, with very long lines (62031)
Hash 1c6083f7ae34ed2fa3236569eec9ff56
0c1be1b5468042e65e02c8b886c50d26427c9ce7
2b1d69121eb9dc0629126ff02cf7acef2f1924b32b0bb654792ecd9101e10c44
GET /7.19.0/bundle.es5.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6.news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 11 Nov 2023 17:34:32 GMT
last-modified: Thu, 10 Nov 2022 15:50:35 GMT
etag: "1c6083f7ae34ed2fa3236569eec9ff56"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 19:34:34 GMT
age: 6746403
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20174
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/lp.js
193.108.118.121200 OK 1.4 kB URL HTTP/2 7.news-civuse.com/lands/38/lp.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 8441b469fa0c093bd106a66a4068d944
c3698e755cd1ef7b5d29e233ef615219559a96f3
befe8e9f55c6e3fe10fd398534acb713129764b05d852089ac34bfa535a53902
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/lp.js HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/javascript
content-length: 1418
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-58a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/revopush.js?v=4
193.108.118.121200 OK 10 kB URL HTTP/2 7.news-civuse.com/revopush.js?v=4
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (9954), with no line terminators
Hash fc284a0e5d580856ae4863715ad6733e
eb69f303c80ff8e44abc9601b8616c0cf92faafa
2240a1d10744494668058ba210d0d87203609def9fd69d2ac82092ebc79583c0
GET /revopush.js?v=4 HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/javascript
content-length: 9954
last-modified: Thu, 15 Dec 2022 09:31:10 GMT
etag: "639ae95e-26e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
193.108.118.121200 OK 4.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4028), with no line terminators
Hash 64f6d7d923f18e5d25a4506b45fcd51d
0e636e489bba7af08cb17f8a72c5dc5685774057
18818b4b5458636324d294a8dee67dbde4808ae542e6cefa18ca6d90c1fc4479
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
content-length: 4028
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-fbc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
193.108.118.121200 OK 6.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (5955), with no line terminators
Hash 0fe9d8c60b2c31a97fa966d14be642ef
eb4f94b637c54906ae38eb350b6310d552c75e6d
191ae0d72198f51609589e26c7d837d2978382861f60b360148e0af13c8583e1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
content-length: 5955
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1743"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
193.108.118.121200 OK 8.3 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8327), with no line terminators
Hash 8cd6ca47d55ffed774fde852523940e0
49e1e837355b3de08055c650488d0a3382bff9c0
17528d5914a702bb12ac6b36c8e3bbbfbcd3d52b54dd613acbacf8f4bb17ae33
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
content-length: 8327
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-2087"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
193.108.118.121200 OK 1.4 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (1391), with no line terminators
Hash 677a255a4a9dc3411b8013e8afb09c42
ec9f1a722b028da2eceb06cdc8c26fc6490a4e70
cc4494353809adb8bdfbbdea2ad72a1a0fc9c84816dc23c7ee1f9466e620eb5e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
content-length: 1391
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-56f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
193.108.118.121200 OK 12 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 833a12d372440b20017502d3c72e0b20
5fb9301142e3c53f65cd16502b35d7d1d5f82b98
1531ac56322b89715a35b1cdb5ca1f79f453614f368455b2cc8ef650a992f8cd
GET /lands/38/landings/Ihyam_7H2-fd/18.png HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/png
content-length: 12136
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
193.108.118.121200 OK 22 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 19b197d779dd9ee78737a456dbd5c1a6
a3f0b1d0659e5a76bdfaa52bb8f68096d1ab1359
806a8a4abe09c02f4e4b3ed4d6514bfcf1a93a941e838aadf56afaef858d8e37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/png
content-length: 21724
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-54dc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
193.108.118.121200 OK 28 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:03:16 09:26:15], baseline, precision 8, 118x88, components 3\012- data
Hash c1a5819d50b9125f0c46ded86fd5b4b6
3926c15be79cb7522cefdbf5066d39623e36a283
374f0cede3c1f91ad174b97554017b74cbd29424d7467d039beab541f6deb873
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 27900
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6cfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=56933
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
193.108.118.121200 OK 17 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x88, components 3\012- data
Hash 215029a9775d1e9a56c93912ab03f4c6
6a3dbd676e2ea61850d2a20086b9ec84127da0ae
e071c52839ef37679439165349ffdd98cf19aa7e35d0293a1bec69743db70b16
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 17350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=63951
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
6.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
193.108.118.121200 OK 36 kB URL HTTP/2 6.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash e1e23634dfa3b4498e1557fd78952d50
c7297e36ebec5cba265ba0c3c52dc448f37059e5
f1db1e647911d23a76084bbe61d82d7db89711bab44f72f17a8cc50b4fd48f3e
GET /traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38 HTTP/1.1
Host: 6.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://6.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:34 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash ea52ae32ae4319fb03da1672b0c20ed3
4efd8189179b260a4b51fd4b28d729b6143ef00a
43a4ca83560d5720ffeccf17478d6a1741f86639f35744fb61fcb139dc3020a6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 12525
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-30ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
193.108.118.121200 OK 11 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 2f03fbd61721fdf46883333595050c77
8361f15c906a9457340fc21febd22b5ede56ac61
9f6c76cf695bc0785f4e4f8bb3abe93255af3ea1597307d567dc0fc93fa70560
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 11238
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2be6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
193.108.118.121200 OK 14 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 9903db279cf9714141daac34523f39b6
ac412f9ce9b8c50155e9adb9f5095d82519ccd24
f562892c60fef407c954fd73d6908003c42f832c4ae86f8264438a576ce2c1cd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 13505
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-34c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
193.108.118.121200 OK 13 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash 99a404d25bcdd47a141dafdbe046d0cf
04de642c5cbc865c29ab3599c1c4fa19f2a6ba8e
fbe779bcef340ba0b148f84b50a8323a2bbb493674e130bf877d87c6d163ed36
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 13106
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3332"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
193.108.118.121200 OK 16 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 5a34545daf4bc481bcbc3573062aa426
132d09d36ede8f32c3168ecaaa631e5959ce38ef
c044a81b14812c50f3142ad20d0ca862923daba2483eb164b0348ba98d3b7855
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 15481
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3c79"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=45274
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
193.108.118.121200 OK 18 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 10e8794e65f20d32932985bf814b8965
0627b8648373340d2ba949fd7fe50611d11b033b
43b9f39f94acb50efb3b6981a6c931dcf25eefcc7b7734a927036255263eee39
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 17978
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-463a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
193.108.118.121200 OK 2.4 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 116 x 86\012- data
Hash ec706a0634f1e5e06ad775b2b2ebdcf2
5a18c424f7b84b40709a6b78b2d632639bb3ff2b
9613f59211bd2194336c666d11a0d2e1daa4dd96d543e661f5835e0a621c2f5d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/gif
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=56369
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xae3bf698", progressive, precision 8, 258x145, components 3\012- data
Hash 58357cada0f0171d2a84540391219649
57123e69e055b4d818faedec09884135c5d4a31e
742c68ecf3dcc1096143a0a5d00f4a15a3edb13fd497ea2931e67e66826addd0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 9007
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-232f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
193.108.118.121200 OK 9.6 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x70755b56", progressive, precision 8, 258x145, components 3\012- data
Hash 8fcd27f0bcc790f75f46d275a19a6300
556d3ca4dec168c77ae4a73c0c6e8291ef1291c0
78410be719ee73e00845d44e100e280d3989fc3d0fa4d3dcfcd888f13ded1843
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 9565
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-255d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=49152
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
193.108.118.121200 OK 15 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 258x145, components 3\012- data
Hash bb05342bd1f87ae7624aba323af77dca
4b7c875644d0b6a424abf06cda89ad135bd53d81
828e2c12259274e1eb1c212f3498fb31503462023c4b2642da4f795209b755de
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 14653
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-393d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=61105
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
193.108.118.121200 OK 10 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1d6d8e5e", progressive, precision 8, 258x145, components 3\012- data
Hash 1541881a313c963dc754657aefd89ef0
fb41198c81ac17da4f9a34e4b4bf21c8c7fe6001
75e1629d9fad2e22b9d9983c65874a19a3f639db43c11db713a7f972b8f72117
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 10352
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2870"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=67519
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 6c17c634ebd856cc85bedd931ac01680
d1e1b9358749b9fd4ff851bb4cbdce54a6223ce8
c1ced3a91bde391f64c6cef03b164cd89ffd499fa5d75a3f797bc57b1fc3c191
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 9032
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2348"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
193.108.118.121200 OK 8.3 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 258x145, components 3\012- data
Hash bc1cdeea817d887b981f26bc84236b93
4528ed7010e2e0c774890d6041a60cbeb3c69c92
d737ffd9379d8f2734c1dc6304e4ff75f1c946de29371a1ec9ddc01f423076dd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 8266
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-204a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
193.108.118.121200 OK 9.3 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7cd1fc83", progressive, precision 8, 258x145, components 3\012- data
Hash 5ec2461279f77afe0c6fbb935bd0b94a
95c6e9171db79ea69ce718b02484e36816d1a1cd
ac60e5738d3cf6d32004e1ddfcf4368e256f1928ea923f9369869b8e9af665ba
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 9338
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-247a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
193.108.118.121200 OK 9.9 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x50dba82c", progressive, precision 8, 258x145, components 3\012- data
Hash eed80bba1e2813e70d57a5f3a6bbdf09
3965668a7340d071731a89abf73cc4b3efe4dac3
9ef4f06c23420fae9b1fd163d0719be1b2b258d74d27f7933c810ad64c93ac93
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 9914
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-26ba"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
193.108.118.121200 OK 8.9 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 258x145, components 3\012- data
Hash 77df6b7e2677b46a053508a92026cb8a
decad70c5281062495250250fdf985b6073a8a91
6143cd3687b480264dad4e3d3a237c30c26c859ef7fe1c2a7b32472fb65710c0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 8885
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-22b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 081a01df58865529d3edcbc765c4dcb5
a7fe3ca35fe5e244926a80addda994218806f613
edebf400c8f60c306491e7b2f8a695b7dde10cf49eed66125423571a1cd60d05
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 12127
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f5f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
193.108.118.121200 OK 20 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 107 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash e2aadceedde9aef1bf42c176b31c585c
76c14eae7537160a304aa458bf11a985d5a57375
2b1ff8c49202306d33deac4cf49841f59c1a49d15c80a77c1e001369578cef3f
GET /lands/38/landings/Ihyam_7H2-fd/button.png HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/png
content-length: 19948
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4dec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
193.108.118.121200 OK 15 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 64 x 64\012- data
Hash 571dfe045d66b88d2d5c82151a1bf579
8966eb7cd27754263bd2861737b695386273f423
7c7cd7a7155d3d38bb49fc82c83aa14ed24d56f6886623299b13b6a81486a871
GET /lands/38/landings/Ihyam_7H2-fd/load.gif HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/gif
content-length: 14574
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-38ee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash d660b4b574161fdee86ae57edc8ed0ab
0b947dc39c7ba7415dd78683e06366ff3848b2d5
7483a49fc67a21c7a295b03880aa6c37425f3e96d60dff1ac36eff743ecf6078
GET /lands/38/landings/Ihyam_7H2-fd/flash.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 3829
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-ef5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
193.108.118.121200 OK 24 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:05:13 17:11:55], baseline, precision 8, 990x36, components 3\012- data
Hash ab6b76c0cc6683324bd7fe5923b24d17
559b8b1e50f80b7a218e25ce443e523401882577
a923ea85ee73e53db73038b2ea8712e7e40b067cde25b05ffa999608b17a304d
GET /lands/38/landings/Ihyam_7H2-fd/panel.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 23598
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-5c2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
193.108.118.121200 OK 887 B URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash ddf58dd1f8745a81264b21bcf1f9cc77
73a35df521dc648af06e2e490cac929bc681a06c
a2315bfaefeae19a449f38fe4131531c7603f5c7e75e956c240074da66123134
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1889
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-761"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash 609e06417314a6476bc6d0f3c1900e20
0e2b0d425bd9e5cc0ebb386b093adf64d464ac1e
9450244a77e354c177c18a691c0e5f0c2fc5d0ddf921f40178cbb8bfe4a076ac
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1394
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-572"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/jquery-3.2.1.min.js
193.108.118.121200 OK 33 kB URL HTTP/2 7.news-civuse.com/lands/38/jquery-3.2.1.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 19b76608f42275ff19adbf59e93cf4f8
d2dab5303a6355ae196afdd4b0b6458b3778e51f
0b4c0f79c5423e9c142b65f15a51a7e56af3132fde848d6427c4b15a7e589788
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/jquery-3.2.1.min.js HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:33:06 GMT
etag: W/"5d7a10d2-15283"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
193.108.118.121200 OK 10 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash bbdfcb79e9b7bf5f3fbe9dbed9e6a107
985e6c0b247a94b72e64c6012eff9a2bbfc1a18f
4ebf03a698478f2d151495011940725cfc7501144928ac022a5bdcc2f6351fda
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-10b2b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
193.108.118.121200 OK 34 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 553764ecc96a1f420061a4c85edad032
11701ab80d45af7debf7446ac9e7cd59947868c3
47429eb8117e26419386b117c0e494c75684d65b2e5f27a67b35386787c10b71
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-2f3dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xb7d2e3cb", progressive, precision 8, 60x60, components 3\012- data
Hash 47e765dc1abef2d79edafb5fce1c64b5
93d3e7f1e11dd2d98ca3ffb3b49a0211ed76f273
185540f06acc82b2dc4bdfa6d2deb4ce7454bb1e28783acdde67f8a9a90597b1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1441
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-5a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
193.108.118.121200 OK 12 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 1fae64d6e1313a299ceaeb6d4f0449f0
67a925631872ff8ee4a9c3d748e42f3c66285431
26ff61934c34eb63164a859c2d29d89a008f00197a9d479636c7b8756d0dbe75
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-1327c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
193.108.118.121200 OK 7.2 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 399eab7e11b7598e8983e327338deff8
3392901d39b2e7a9b439348f53bd72507a5a95de
197a920762723a8285104bcb6f9e1580124ba2db2197bbd977d285c30fe10368
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-6aa0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
193.108.118.121200 OK 1.1 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x0bb5b909", progressive, precision 8, 60x60, components 3\012- data
Hash 01ed303509acb0c822fa3c55976d4b96
7ed250f181498962ebafd21f1bde4ca15e6953c6
fba198ced4795895d1f6d0bc2247d315eb8cc6dda60ad119c99846d68d0ce445
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1085
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
193.108.118.121200 OK 2.4 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash ec2823c426475d6766008dabf85a4bc2
f0681ce27ba96a1b4f6547a42495ebb5b0ca514a
2316f8554d54e907f9992475ced3bf03fc95412e98b2bc29aa6e5407260bcddd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
193.108.118.121200 OK 2.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash 3f809b94b5e5607da5b5c6506a8729c1
26f4376095902a56db86ea2c76689f15ba3cf9c2
7b84461772bad27e431676a53efae81d8584a102f3f6f407ae0a54469a938ff6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-7bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
193.108.118.121200 OK 6.1 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash d80f2f7a42e56657afe80e64778b4c50
5c90f44f03094501e4c82097b6f7738f9f16c786
32dd8bb782d745fa221bad514ecd115017b2f26fe100ccc9aaa710751420260c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-3957"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 52eba434e5411806cd92add275d164ea
0cc9df3c52de111a307dc3d8d22254cf51b0c77f
a4c2a01f64274d0ede23e233e2be19225c68e5e5a6206b338fb8bc6410f7005f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1758
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6de"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
193.108.118.121200 OK 16 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 656d22b93ceca0ae4cd53d494354ca50
e21469a47771e75740bbeb3ba9af62591808ffdd
e85237f5fc4b34cb0e75dac56fd955d9cb1c93ad4b9df63b395fdad93e375998
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: W/"5d7a0ef0-f889"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash a08c2c5266f9701e422f042b4a3809c5
9884cf987f84b282f920634b2ab811077dfef7a3
054df6bf8ee2bcb904269745cd2c0830918d9e1a6ff1f965673af5f2946a3c37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1373
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-55d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
193.108.118.121200 OK 1.6 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash bfa11442f9457a03384ecf8128a586a2
a30e6f6a18be085197605b6463f840cb249d0510
941411042624c554a5828ee596c1e3ade4a787ae2fad6e5b6d585ab6a6e1e3c6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1563
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-61b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 96f46fad8cda5895b895f6ec3f95cda4
3bd79ef305bfa4b7c1a3f328828c63f89a818878
8e48576faf920cae224c669d61831d0ad5fc23f6220e83955275a3115bb568fc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/png
content-length: 1046
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-416"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
193.108.118.121200 OK 887 B URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
193.108.118.121200 OK 841 B URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 9cf522c306866742c2806e0c14c8bca7
7a3ff28af2c6f7cfd036ec4fc162651eaf634f7e
fa09bef7875241c06a9e2505bc698a189d3b3ce012af29c65817fd476627ec87
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 841
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 950ff8ae916df997fea302859ca2ccb4
42232e28878f65aaf4120d9435784ad46c2be71c
c0b01da5a48a7ddd619a2dee26bec77300b68bb1b028716320719f9c1a5f769e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 2553
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-9f9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
193.108.118.121200 OK 4.6 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 150x84, components 3\012- data
Hash 0fa4a903a2adc9da58b52661ebc8d38c
061c6359c2951da7509f6ae4039c2f0bc1ce6b62
79d6da7e0398c3f607c4bbc93562cf6ab96bb800cdab4ef6df82718cf0a0d3e5
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4644
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1224"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 58477c52a9d639b91b16f022d4676bcf
51a85ef703617e996c50cd76b38f2507517a9f25
a0653cc819b252702f55439d6f8763d212fca2f9f604d67224a2a9891e8eadbe
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4397
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-112d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
193.108.118.121200 OK 7.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7ab4f024", progressive, precision 8, 233x131, components 3\012- data
Hash 2a4d527ed65de8e2e0a69dc9d50442d2
8ec4547a38c9e3d37469acfe21ea755531776f09
275876bbb5190da100ae4f9aca976ec15cea0de20d42e167f522a0a50ba8ca02
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 6972
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1b3c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
193.108.118.121200 OK 4.3 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 365e215442256548316a73bc7c79edf1
13078402132cb89939a39edf11181fb88ebe390f
f8c35c02ff055694af23c83b1e3019a8c29965ab57ed7db8173a23a38494ff58
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4315
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-10db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
193.108.118.121200 OK 4.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 150x84, components 3\012- data
Hash 416ec3af020687541765d48acb81fc08
48b80345ffb951535d4d6ca811d19bd9dd726998
75c30d77f900b2f4c91f502f45f00606b57a47bb84e6b700fb18482389d88f3c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4035
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-fc3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
193.108.118.121200 OK 8.6 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 233x131, components 3\012- data
Hash 55778c73ba99a9477464e5c90cdd7e02
bc49e8058f1dafe10e817441de952ba6aa3b7b58
c362fc3a2aafd1b0d8069fb1fae83b5f0abb06443d3e00b21b37be13aeb75bfa
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 8615
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-21a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
193.108.118.121200 OK 5.1 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 72e270f7041c2fe2f326d11e162fb249
3f918a2023f10a01a2ed74713d292df415d14e05
b17ce663fab4421f728ea0dd218d2a8a6a10a4314759fdf139b9388fa26e37f6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 5080
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-13d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6359dcbc", progressive, precision 8, 150x84, components 3\012- data
Hash 447470b34b66b570c8fc0dbc11c06609
863180b376242e256189888eb99282e597d894c9
dd57f5a80517b8109279b57d702278f31a9878295045c6766931a0453244d749
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4417
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1141"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
193.108.118.121200 OK 7.9 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 233x131, components 3\012- data
Hash 5df975e7a8c0b2610069610c54c5ce6c
ab6390fbb7be1be9a0f4477b4439e34d5175b6fc
bbfb6830dabc55fd598cc0948049f2367d17c80f286e0821e660ba7f5a6b360c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 7904
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1ee0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 150x84, components 3\012- data
Hash 6ed4eca1ed776930746531005fcf22aa
11e8643932e35a8ef65be8ef585afee241c8eddc
28849006b773d85fb8fb2295a86bcee5d2cdabb9a23d854ffebbd8dfd203588c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 3835
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-efb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
193.108.118.121200 OK 4.7 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 12f0c14e5943fd57577ce11155107bdb
a484cb296770fe6cb55d25cba19f831cf1aaf7d1
9eb468f7688a901a3626fdde8d0b07dc490a830718c2938d32f70f0ec122a344
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4664
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1238"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
193.108.118.121200 OK 6.8 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 233x131, components 3\012- data
Hash 2ad4260dc1204ad8f3c0c29bd919830a
fd2ddfca32f55ba5d180af812a787e61ce136480
acc8f76a570c0833d34835f5694409e082b4af09783366596c2e151e0b0ed128
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 6827
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1aab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
193.108.118.121200 OK 1.9 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 88 x 31\012- data
Hash 2bcf55138cde4a65770426a67ea247fc
13d8c808a4276dc88937817d7df7720182c093f6
348fd1e58aec8d99001aca1dd12b72eafef534c2d11725b2280a173d03b5fa6b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/gif
content-length: 1882
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-75a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/sw.js
193.108.118.121200 OK 4.2 kB IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4168)
Hash 569090f90a522f4c62af3b9e40635957
4e6f57da49920f30777f3fe71f83f6183aeb4f3f
ee8c6af307c8d085753adb810c69c8379d1e8d01211b491409c43e9edc9f6fb5
Analyzer Verdict Alert fortinet Phishing
GET /sw.js HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/javascript
content-length: 4199
last-modified: Thu, 01 Dec 2022 08:31:02 GMT
etag: "63886646-1067"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/index.php_files/pu.swf
193.108.118.121200 OK 2.0 kB URL HTTP/2 7.news-civuse.com/lands/38/index.php_files/pu.swf
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 6d40122b8a5b7fd31b5aef2749f519fd
518d585dd26c947344ddea5403324850d1b2f7cd
1da7814acd0d6913438bf701d8a2d2cf29814174b5eff0e6ff129ee74f68a7cf
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/index.php_files/pu.swf HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/x-shockwave-flash
content-length: 1953
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=56933
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=63951
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=45274
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=49152
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=56369
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=61105
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=67519
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
193.108.118.121200 OK 8.2 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 09a3857817c56da56ca915546555bb33
4eef039030de077e7e63d2894f7d0951b1e137c8
44b605c2a3dcc7994d49fb945c6731ed8f03fc7154ab70f7c805c5b6e810e07f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-8353"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 1b6ee6a5fdcf3c781a0b768964797646
f0bf83f6368d7c31471ad258ce8cfb4848109192
511ad4ad0f3db18490c9b7876d44c887f60d78dd8d06a585367c0ab4ddbbe92f
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250 HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
193.108.118.121200 OK 234 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:06:21 11:55:20], baseline, precision 8, 990x513, components 3\012- data
Size 234 kB (234218 bytes)
Hash 60f67e63f85561c6f95fd573252d2311
6fc6d41b27131074786778522b86077f477dbd51
0e80e9257f1dd0149894bf37342cb082ef2410263de490e851111fa9531e15c6
GET /lands/38/landings/Ihyam_7H2-fd/fon2.jpg HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 234218
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-392ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250 HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250 HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0
144.76.158.184429 Too Many Requests 162 B URL HTTP/1.1 errors.house/api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0
IP 144.76.158.184:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 7f44c7691673d77d8557d4d5699ef23a
f30daebcb81f94af5e6dfd9e70585b8904d72ac1
413d294fad14524bf94e764b33ff0f327682549408545171fcf9240189c154ae
POST /api/3/envelope/?sentry_key=f1c7cfc107e94764b41b7a2b50de5ae0&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.15.0 HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://7.news-civuse.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://7.news-civuse.com
Content-Length: 1252
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 429 Too Many Requests
Server: nginx/1.22.1
Date: Sat, 28 Jan 2023 19:34:35 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
7.news-civuse.com/lands/38/favicon.png
193.108.118.121200 OK 1.2 kB URL HTTP/2 7.news-civuse.com/lands/38/favicon.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash e7ffe9c659d8c729e12e20dfe05509be
2c413e09ebd14dd3020209fe9c9183e0335fc250
880c000a3ca23bb89262d9c2ccf9d48bab37dcec09f3b3bf55c8385f58745f50
GET /lands/38/favicon.png HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/png
content-length: 1233
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-4d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
151.101.66.217200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
IP 151.101.66.217:0
File type ASCII text, with very long lines (62031)
Hash 1c6083f7ae34ed2fa3236569eec9ff56
0c1be1b5468042e65e02c8b886c50d26427c9ce7
2b1d69121eb9dc0629126ff02cf7acef2f1924b32b0bb654792ecd9101e10c44
GET /7.19.0/bundle.es5.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 11 Nov 2023 17:34:32 GMT
last-modified: Thu, 10 Nov 2022 15:50:35 GMT
etag: "1c6083f7ae34ed2fa3236569eec9ff56"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 19:34:35 GMT
age: 6746403
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20174
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
193.108.118.121200 OK 37 kB URL HTTP/2 8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 6e67ebbf69e6cba8e9cc920d24df8547
9ad580370b70012053e0c67cdf2ea7d3acbce68e
6ba16421c180cf1cbb959ff262a4ceda8e69f5bdf599f990235da86b30473bff
GET /lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4= HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://7.news-civuse.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
set-cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8; expires=Sat, 28-Jan-2023 20:34:35 GMT; Max-Age=3600; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
8.news-civuse.com/revopush.js?v=4
193.108.118.121200 OK 10 kB URL HTTP/2 8.news-civuse.com/revopush.js?v=4
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (9954), with no line terminators
Hash fc284a0e5d580856ae4863715ad6733e
eb69f303c80ff8e44abc9601b8616c0cf92faafa
2240a1d10744494668058ba210d0d87203609def9fd69d2ac82092ebc79583c0
GET /revopush.js?v=4 HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/javascript
content-length: 9954
last-modified: Thu, 15 Dec 2022 09:31:10 GMT
etag: "639ae95e-26e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
7.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
193.108.118.121200 OK 258 B URL HTTP/2 7.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 50a3720bb974a2879bc6b5ed60a17409
80756c3bfe16040eba528550bc229bac5d526210
917933302b3f28c361ea4f6cf390553779bc0833da3923fcb25307f8b070019c
GET /traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38 HTTP/1.1
Host: 7.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://7.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
193.108.118.121200 OK 4.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4028), with no line terminators
Hash 64f6d7d923f18e5d25a4506b45fcd51d
0e636e489bba7af08cb17f8a72c5dc5685774057
18818b4b5458636324d294a8dee67dbde4808ae542e6cefa18ca6d90c1fc4479
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
content-length: 4028
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-fbc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
193.108.118.121200 OK 6.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (5955), with no line terminators
Hash 0fe9d8c60b2c31a97fa966d14be642ef
eb4f94b637c54906ae38eb350b6310d552c75e6d
191ae0d72198f51609589e26c7d837d2978382861f60b360148e0af13c8583e1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
content-length: 5955
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1743"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
193.108.118.121200 OK 8.3 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8327), with no line terminators
Hash 8cd6ca47d55ffed774fde852523940e0
49e1e837355b3de08055c650488d0a3382bff9c0
17528d5914a702bb12ac6b36c8e3bbbfbcd3d52b54dd613acbacf8f4bb17ae33
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
content-length: 8327
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-2087"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
193.108.118.121200 OK 1.4 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (1391), with no line terminators
Hash 677a255a4a9dc3411b8013e8afb09c42
ec9f1a722b028da2eceb06cdc8c26fc6490a4e70
cc4494353809adb8bdfbbdea2ad72a1a0fc9c84816dc23c7ee1f9466e620eb5e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
content-length: 1391
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-56f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
193.108.118.121200 OK 12 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 833a12d372440b20017502d3c72e0b20
5fb9301142e3c53f65cd16502b35d7d1d5f82b98
1531ac56322b89715a35b1cdb5ca1f79f453614f368455b2cc8ef650a992f8cd
GET /lands/38/landings/Ihyam_7H2-fd/18.png HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/png
content-length: 12136
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
193.108.118.121200 OK 22 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 19b197d779dd9ee78737a456dbd5c1a6
a3f0b1d0659e5a76bdfaa52bb8f68096d1ab1359
806a8a4abe09c02f4e4b3ed4d6514bfcf1a93a941e838aadf56afaef858d8e37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/png
content-length: 21724
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-54dc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
193.108.118.121200 OK 28 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:03:16 09:26:15], baseline, precision 8, 118x88, components 3\012- data
Hash c1a5819d50b9125f0c46ded86fd5b4b6
3926c15be79cb7522cefdbf5066d39623e36a283
374f0cede3c1f91ad174b97554017b74cbd29424d7467d039beab541f6deb873
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 27900
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6cfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
193.108.118.121200 OK 17 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x88, components 3\012- data
Hash 215029a9775d1e9a56c93912ab03f4c6
6a3dbd676e2ea61850d2a20086b9ec84127da0ae
e071c52839ef37679439165349ffdd98cf19aa7e35d0293a1bec69743db70b16
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 17350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash ea52ae32ae4319fb03da1672b0c20ed3
4efd8189179b260a4b51fd4b28d729b6143ef00a
43a4ca83560d5720ffeccf17478d6a1741f86639f35744fb61fcb139dc3020a6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 12525
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-30ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
193.108.118.121200 OK 11 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 2f03fbd61721fdf46883333595050c77
8361f15c906a9457340fc21febd22b5ede56ac61
9f6c76cf695bc0785f4e4f8bb3abe93255af3ea1597307d567dc0fc93fa70560
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 11238
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2be6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
193.108.118.121200 OK 14 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 9903db279cf9714141daac34523f39b6
ac412f9ce9b8c50155e9adb9f5095d82519ccd24
f562892c60fef407c954fd73d6908003c42f832c4ae86f8264438a576ce2c1cd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 13505
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-34c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
193.108.118.121200 OK 13 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash 99a404d25bcdd47a141dafdbe046d0cf
04de642c5cbc865c29ab3599c1c4fa19f2a6ba8e
fbe779bcef340ba0b148f84b50a8323a2bbb493674e130bf877d87c6d163ed36
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 13106
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3332"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
193.108.118.121200 OK 16 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 5a34545daf4bc481bcbc3573062aa426
132d09d36ede8f32c3168ecaaa631e5959ce38ef
c044a81b14812c50f3142ad20d0ca862923daba2483eb164b0348ba98d3b7855
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 15481
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3c79"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
193.108.118.121200 OK 18 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 10e8794e65f20d32932985bf814b8965
0627b8648373340d2ba949fd7fe50611d11b033b
43b9f39f94acb50efb3b6981a6c931dcf25eefcc7b7734a927036255263eee39
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 17978
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-463a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
193.108.118.121200 OK 2.4 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 116 x 86\012- data
Hash ec706a0634f1e5e06ad775b2b2ebdcf2
5a18c424f7b84b40709a6b78b2d632639bb3ff2b
9613f59211bd2194336c666d11a0d2e1daa4dd96d543e661f5835e0a621c2f5d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/gif
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xae3bf698", progressive, precision 8, 258x145, components 3\012- data
Hash 58357cada0f0171d2a84540391219649
57123e69e055b4d818faedec09884135c5d4a31e
742c68ecf3dcc1096143a0a5d00f4a15a3edb13fd497ea2931e67e66826addd0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 9007
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-232f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
193.108.118.121200 OK 9.6 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x70755b56", progressive, precision 8, 258x145, components 3\012- data
Hash 8fcd27f0bcc790f75f46d275a19a6300
556d3ca4dec168c77ae4a73c0c6e8291ef1291c0
78410be719ee73e00845d44e100e280d3989fc3d0fa4d3dcfcd888f13ded1843
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 9565
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-255d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
193.108.118.121200 OK 15 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 258x145, components 3\012- data
Hash bb05342bd1f87ae7624aba323af77dca
4b7c875644d0b6a424abf06cda89ad135bd53d81
828e2c12259274e1eb1c212f3498fb31503462023c4b2642da4f795209b755de
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 14653
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-393d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
193.108.118.121200 OK 10 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1d6d8e5e", progressive, precision 8, 258x145, components 3\012- data
Hash 1541881a313c963dc754657aefd89ef0
fb41198c81ac17da4f9a34e4b4bf21c8c7fe6001
75e1629d9fad2e22b9d9983c65874a19a3f639db43c11db713a7f972b8f72117
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 10352
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2870"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 6c17c634ebd856cc85bedd931ac01680
d1e1b9358749b9fd4ff851bb4cbdce54a6223ce8
c1ced3a91bde391f64c6cef03b164cd89ffd499fa5d75a3f797bc57b1fc3c191
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 9032
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2348"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=56933
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
193.108.118.121200 OK 8.3 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 258x145, components 3\012- data
Hash bc1cdeea817d887b981f26bc84236b93
4528ed7010e2e0c774890d6041a60cbeb3c69c92
d737ffd9379d8f2734c1dc6304e4ff75f1c946de29371a1ec9ddc01f423076dd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 8266
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-204a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=63951
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
193.108.118.121200 OK 9.3 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7cd1fc83", progressive, precision 8, 258x145, components 3\012- data
Hash 5ec2461279f77afe0c6fbb935bd0b94a
95c6e9171db79ea69ce718b02484e36816d1a1cd
ac60e5738d3cf6d32004e1ddfcf4368e256f1928ea923f9369869b8e9af665ba
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 9338
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-247a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
193.108.118.121200 OK 9.9 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x50dba82c", progressive, precision 8, 258x145, components 3\012- data
Hash eed80bba1e2813e70d57a5f3a6bbdf09
3965668a7340d071731a89abf73cc4b3efe4dac3
9ef4f06c23420fae9b1fd163d0719be1b2b258d74d27f7933c810ad64c93ac93
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 9914
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-26ba"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
193.108.118.121200 OK 8.9 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 258x145, components 3\012- data
Hash 77df6b7e2677b46a053508a92026cb8a
decad70c5281062495250250fdf985b6073a8a91
6143cd3687b480264dad4e3d3a237c30c26c859ef7fe1c2a7b32472fb65710c0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 8885
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-22b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 081a01df58865529d3edcbc765c4dcb5
a7fe3ca35fe5e244926a80addda994218806f613
edebf400c8f60c306491e7b2f8a695b7dde10cf49eed66125423571a1cd60d05
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 12127
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f5f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
193.108.118.121200 OK 20 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 107 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash e2aadceedde9aef1bf42c176b31c585c
76c14eae7537160a304aa458bf11a985d5a57375
2b1ff8c49202306d33deac4cf49841f59c1a49d15c80a77c1e001369578cef3f
GET /lands/38/landings/Ihyam_7H2-fd/button.png HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/png
content-length: 19948
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4dec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
193.108.118.121200 OK 15 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 64 x 64\012- data
Hash 571dfe045d66b88d2d5c82151a1bf579
8966eb7cd27754263bd2861737b695386273f423
7c7cd7a7155d3d38bb49fc82c83aa14ed24d56f6886623299b13b6a81486a871
GET /lands/38/landings/Ihyam_7H2-fd/load.gif HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/gif
content-length: 14574
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-38ee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash d660b4b574161fdee86ae57edc8ed0ab
0b947dc39c7ba7415dd78683e06366ff3848b2d5
7483a49fc67a21c7a295b03880aa6c37425f3e96d60dff1ac36eff743ecf6078
GET /lands/38/landings/Ihyam_7H2-fd/flash.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 3829
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-ef5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
193.108.118.121200 OK 24 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:05:13 17:11:55], baseline, precision 8, 990x36, components 3\012- data
Hash ab6b76c0cc6683324bd7fe5923b24d17
559b8b1e50f80b7a218e25ce443e523401882577
a923ea85ee73e53db73038b2ea8712e7e40b067cde25b05ffa999608b17a304d
GET /lands/38/landings/Ihyam_7H2-fd/panel.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 23598
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-5c2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=45274
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=49152
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
193.108.118.121200 OK 887 B URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=56369
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=61105
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash ddf58dd1f8745a81264b21bcf1f9cc77
73a35df521dc648af06e2e490cac929bc681a06c
a2315bfaefeae19a449f38fe4131531c7603f5c7e75e956c240074da66123134
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1889
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-761"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:35 GMT
cache-control: max-age=67519
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934475.dop068.sk1.t,1674934475.cds243.sk1.hn,1674934475.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash 609e06417314a6476bc6d0f3c1900e20
0e2b0d425bd9e5cc0ebb386b093adf64d464ac1e
9450244a77e354c177c18a691c0e5f0c2fc5d0ddf921f40178cbb8bfe4a076ac
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1394
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-572"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 677577d8c6ffb0107ee5c9fbabaa4af7
0bfcbbafee19eeeae113103080c41cd95b4083e5
3a215afa0d15ae2985cfb88e51e90b727f0ba03fe10f8e0b0980ef55af91bdb0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 2646
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-a56"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
193.108.118.121200 OK 1.2 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 1226a24c469c0fba3970548aab13650f
a6d371e4acc2a9181d1d6bf13b5d51f82c49a943
6a1513dacd3fcffe47245068fe9fa6a49cdc9c352b8d9cbf8f72005c4cf5cafc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1191
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
193.108.118.121200 OK 1.7 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 3db490cc8f824e29d6fb07ba75a97a20
84c2c26447f7b49c76999f31c0ed526bde13c6c4
5c13ca439c63d5f3e5d638ba055f399058117d3b554ae3fb751d4a39043a14fd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1729
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xb7d2e3cb", progressive, precision 8, 60x60, components 3\012- data
Hash 47e765dc1abef2d79edafb5fce1c64b5
93d3e7f1e11dd2d98ca3ffb3b49a0211ed76f273
185540f06acc82b2dc4bdfa6d2deb4ce7454bb1e28783acdde67f8a9a90597b1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1441
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-5a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash f042aa7a438ca85be0afeba44a3ac116
183c8b20394fdaf6ba757ff76d3f25e33092369e
05b76ed86b70990f4307223391e1c9abfff59ec545d75d94683c0f69713eed79
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1809
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-711"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 16b2fab44ddad0b620d0eaec2fc1e425
24fa279de6ceb2c0434ff4e750639e15eb22ed29
58076ed17c6377d23375ec949c6cb2eade75010dcf82ba0e64dbdcbd67583912
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1902
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-76e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
193.108.118.121200 OK 1.1 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x0bb5b909", progressive, precision 8, 60x60, components 3\012- data
Hash 01ed303509acb0c822fa3c55976d4b96
7ed250f181498962ebafd21f1bde4ca15e6953c6
fba198ced4795895d1f6d0bc2247d315eb8cc6dda60ad119c99846d68d0ce445
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1085
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
193.108.118.121200 OK 2.4 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash ec2823c426475d6766008dabf85a4bc2
f0681ce27ba96a1b4f6547a42495ebb5b0ca514a
2316f8554d54e907f9992475ced3bf03fc95412e98b2bc29aa6e5407260bcddd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
193.108.118.121200 OK 2.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash 3f809b94b5e5607da5b5c6506a8729c1
26f4376095902a56db86ea2c76689f15ba3cf9c2
7b84461772bad27e431676a53efae81d8584a102f3f6f407ae0a54469a938ff6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-7bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
193.108.118.121200 OK 3.1 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash cbff1c490bcdcad2989c2549f278eae5
56e1b4489cfc0d54f9f72e15777788beba396c95
6d96d3de01207ab505c62b2da624ba787cabe4fee767c181b175186e50c23af4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 3063
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 52eba434e5411806cd92add275d164ea
0cc9df3c52de111a307dc3d8d22254cf51b0c77f
a4c2a01f64274d0ede23e233e2be19225c68e5e5a6206b338fb8bc6410f7005f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1758
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6de"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash c840b43a0575b0a1742c50f186a67c22
d1ac0da47b4394a9dbea90eee26a260b5268c4d9
6a8ef9be89e89c23d6d96c50e2fa62bd25473e9cc7a79e2cd1ef64e2647cb38a
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/png
content-length: 1045
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-415"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash a08c2c5266f9701e422f042b4a3809c5
9884cf987f84b282f920634b2ab811077dfef7a3
054df6bf8ee2bcb904269745cd2c0830918d9e1a6ff1f965673af5f2946a3c37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1373
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-55d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
193.108.118.121200 OK 1.6 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash bfa11442f9457a03384ecf8128a586a2
a30e6f6a18be085197605b6463f840cb249d0510
941411042624c554a5828ee596c1e3ade4a787ae2fad6e5b6d585ab6a6e1e3c6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 1563
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-61b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 96f46fad8cda5895b895f6ec3f95cda4
3bd79ef305bfa4b7c1a3f328828c63f89a818878
8e48576faf920cae224c669d61831d0ad5fc23f6220e83955275a3115bb568fc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/png
content-length: 1046
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-416"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
193.108.118.121200 OK 887 B URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
193.108.118.121200 OK 841 B URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 9cf522c306866742c2806e0c14c8bca7
7a3ff28af2c6f7cfd036ec4fc162651eaf634f7e
fa09bef7875241c06a9e2505bc698a189d3b3ce012af29c65817fd476627ec87
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 841
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 950ff8ae916df997fea302859ca2ccb4
42232e28878f65aaf4120d9435784ad46c2be71c
c0b01da5a48a7ddd619a2dee26bec77300b68bb1b028716320719f9c1a5f769e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 2553
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-9f9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
193.108.118.121200 OK 4.6 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 150x84, components 3\012- data
Hash 0fa4a903a2adc9da58b52661ebc8d38c
061c6359c2951da7509f6ae4039c2f0bc1ce6b62
79d6da7e0398c3f607c4bbc93562cf6ab96bb800cdab4ef6df82718cf0a0d3e5
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4644
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1224"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 58477c52a9d639b91b16f022d4676bcf
51a85ef703617e996c50cd76b38f2507517a9f25
a0653cc819b252702f55439d6f8763d212fca2f9f604d67224a2a9891e8eadbe
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4397
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-112d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
193.108.118.121200 OK 7.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7ab4f024", progressive, precision 8, 233x131, components 3\012- data
Hash 2a4d527ed65de8e2e0a69dc9d50442d2
8ec4547a38c9e3d37469acfe21ea755531776f09
275876bbb5190da100ae4f9aca976ec15cea0de20d42e167f522a0a50ba8ca02
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 6972
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1b3c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
193.108.118.121200 OK 4.3 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 365e215442256548316a73bc7c79edf1
13078402132cb89939a39edf11181fb88ebe390f
f8c35c02ff055694af23c83b1e3019a8c29965ab57ed7db8173a23a38494ff58
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4315
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-10db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
193.108.118.121200 OK 4.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 150x84, components 3\012- data
Hash 416ec3af020687541765d48acb81fc08
48b80345ffb951535d4d6ca811d19bd9dd726998
75c30d77f900b2f4c91f502f45f00606b57a47bb84e6b700fb18482389d88f3c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4035
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-fc3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
193.108.118.121200 OK 8.6 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 233x131, components 3\012- data
Hash 55778c73ba99a9477464e5c90cdd7e02
bc49e8058f1dafe10e817441de952ba6aa3b7b58
c362fc3a2aafd1b0d8069fb1fae83b5f0abb06443d3e00b21b37be13aeb75bfa
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 8615
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-21a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
193.108.118.121200 OK 5.1 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 72e270f7041c2fe2f326d11e162fb249
3f918a2023f10a01a2ed74713d292df415d14e05
b17ce663fab4421f728ea0dd218d2a8a6a10a4314759fdf139b9388fa26e37f6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 5080
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-13d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6359dcbc", progressive, precision 8, 150x84, components 3\012- data
Hash 447470b34b66b570c8fc0dbc11c06609
863180b376242e256189888eb99282e597d894c9
dd57f5a80517b8109279b57d702278f31a9878295045c6766931a0453244d749
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4417
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1141"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
193.108.118.121200 OK 7.9 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 233x131, components 3\012- data
Hash 5df975e7a8c0b2610069610c54c5ce6c
ab6390fbb7be1be9a0f4477b4439e34d5175b6fc
bbfb6830dabc55fd598cc0948049f2367d17c80f286e0821e660ba7f5a6b360c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 7904
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1ee0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 150x84, components 3\012- data
Hash 6ed4eca1ed776930746531005fcf22aa
11e8643932e35a8ef65be8ef585afee241c8eddc
28849006b773d85fb8fb2295a86bcee5d2cdabb9a23d854ffebbd8dfd203588c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 3835
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-efb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
193.108.118.121200 OK 4.7 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 12f0c14e5943fd57577ce11155107bdb
a484cb296770fe6cb55d25cba19f831cf1aaf7d1
9eb468f7688a901a3626fdde8d0b07dc490a830718c2938d32f70f0ec122a344
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 4664
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1238"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
193.108.118.121200 OK 6.8 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 233x131, components 3\012- data
Hash 2ad4260dc1204ad8f3c0c29bd919830a
fd2ddfca32f55ba5d180af812a787e61ce136480
acc8f76a570c0833d34835f5694409e082b4af09783366596c2e151e0b0ed128
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/jpeg
content-length: 6827
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1aab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
193.108.118.121200 OK 1.9 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 88 x 31\012- data
Hash 2bcf55138cde4a65770426a67ea247fc
13d8c808a4276dc88937817d7df7720182c093f6
348fd1e58aec8d99001aca1dd12b72eafef534c2d11725b2280a173d03b5fa6b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: image/gif
content-length: 1882
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-75a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/jquery-3.2.1.min.js
193.108.118.121200 OK 34 kB URL HTTP/2 8.news-civuse.com/lands/38/jquery-3.2.1.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 934ddbb2df5ca0d8d7386b8008fcab04
b343b16df0e9f8217f251b456bb96ae775e8a9cf
5db683473a0dc46bfbb3adcd2986ab6442ecdf7a252255f6c4ef3fce323aafa0
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/jquery-3.2.1.min.js HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:33:06 GMT
etag: W/"5d7a10d2-15283"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
193.108.118.121200 OK 34 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash dc210e8ff9fbe14f7c12066e2070a896
71c6193625e64429d227e24914a0de43e0844f18
71e31e8461c1247ae841a4fbcdbe8679c8a460bbb2e565d39fed8764a39aaa51
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-2f3dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=56932
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=63950
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=45273
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
193.108.118.121200 OK 11 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash a0bd8fc4369589e155458ef80626040b
1bca34e4cf03de587d454580868a132b0957b873
160cca693a3e0a0a865b6c811a4a2e49983b06f3454d50bcb883e5dcc7137b48
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-1327c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=56368
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=61104
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=67518
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
193.108.118.121200 OK 8.2 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 09a3857817c56da56ca915546555bb33
4eef039030de077e7e63d2894f7d0951b1e137c8
44b605c2a3dcc7994d49fb945c6731ed8f03fc7154ab70f7c805c5b6e810e07f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-8353"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 1b6ee6a5fdcf3c781a0b768964797646
f0bf83f6368d7c31471ad258ce8cfb4848109192
511ad4ad0f3db18490c9b7876d44c887f60d78dd8d06a585367c0ab4ddbbe92f
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250 HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
193.108.118.121200 OK 234 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:06:21 11:55:20], baseline, precision 8, 990x513, components 3\012- data
Size 234 kB (234218 bytes)
Hash 60f67e63f85561c6f95fd573252d2311
6fc6d41b27131074786778522b86077f477dbd51
0e80e9257f1dd0149894bf37342cb082ef2410263de490e851111fa9531e15c6
GET /lands/38/landings/Ihyam_7H2-fd/fon2.jpg HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 234218
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-392ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250 HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250 HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
193.108.118.121200 OK 5.1 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 2852767f7c635f3aebf716b7a55dcae0
f6e38c05fe5eff478e08e4f2fcceef1ce2247a08
6f8be383d2861c3d1b6c712358761fac2c58e973ad74af170bac8adbc23ff07e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-3957"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/favicon.png
193.108.118.121200 OK 1.2 kB URL HTTP/2 8.news-civuse.com/lands/38/favicon.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash e7ffe9c659d8c729e12e20dfe05509be
2c413e09ebd14dd3020209fe9c9183e0335fc250
880c000a3ca23bb89262d9c2ccf9d48bab37dcec09f3b3bf55c8385f58745f50
GET /lands/38/favicon.png HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/png
content-length: 1233
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-4d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
151.101.66.217200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
IP 151.101.66.217:0
File type ASCII text, with very long lines (62031)
Hash 1c6083f7ae34ed2fa3236569eec9ff56
0c1be1b5468042e65e02c8b886c50d26427c9ce7
2b1d69121eb9dc0629126ff02cf7acef2f1924b32b0bb654792ecd9101e10c44
GET /7.19.0/bundle.es5.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 11 Nov 2023 17:34:32 GMT
last-modified: Thu, 10 Nov 2022 15:50:35 GMT
etag: "1c6083f7ae34ed2fa3236569eec9ff56"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 19:34:36 GMT
age: 6746404
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20174
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/lp.js
193.108.118.121200 OK 1.4 kB URL HTTP/2 9.news-civuse.com/lands/38/lp.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 8441b469fa0c093bd106a66a4068d944
c3698e755cd1ef7b5d29e233ef615219559a96f3
befe8e9f55c6e3fe10fd398534acb713129764b05d852089ac34bfa535a53902
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/lp.js HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: application/javascript
content-length: 1418
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-58a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/revopush.js?v=4
193.108.118.121200 OK 10 kB URL HTTP/2 9.news-civuse.com/revopush.js?v=4
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (9954), with no line terminators
Hash fc284a0e5d580856ae4863715ad6733e
eb69f303c80ff8e44abc9601b8616c0cf92faafa
2240a1d10744494668058ba210d0d87203609def9fd69d2ac82092ebc79583c0
GET /revopush.js?v=4 HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: application/javascript
content-length: 9954
last-modified: Thu, 15 Dec 2022 09:31:10 GMT
etag: "639ae95e-26e2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
193.108.118.121200 OK 4.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4028), with no line terminators
Hash 64f6d7d923f18e5d25a4506b45fcd51d
0e636e489bba7af08cb17f8a72c5dc5685774057
18818b4b5458636324d294a8dee67dbde4808ae542e6cefa18ca6d90c1fc4479
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: text/css
content-length: 4028
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-fbc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
193.108.118.121200 OK 6.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (5955), with no line terminators
Hash 0fe9d8c60b2c31a97fa966d14be642ef
eb4f94b637c54906ae38eb350b6310d552c75e6d
191ae0d72198f51609589e26c7d837d2978382861f60b360148e0af13c8583e1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: text/css
content-length: 5955
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1743"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
193.108.118.121200 OK 8.3 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8327), with no line terminators
Hash 8cd6ca47d55ffed774fde852523940e0
49e1e837355b3de08055c650488d0a3382bff9c0
17528d5914a702bb12ac6b36c8e3bbbfbcd3d52b54dd613acbacf8f4bb17ae33
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: text/css
content-length: 8327
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: "61deb724-2087"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
193.108.118.121200 OK 1.4 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (1391), with no line terminators
Hash 677a255a4a9dc3411b8013e8afb09c42
ec9f1a722b028da2eceb06cdc8c26fc6490a4e70
cc4494353809adb8bdfbbdea2ad72a1a0fc9c84816dc23c7ee1f9466e620eb5e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: text/css
content-length: 1391
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-56f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
193.108.118.121200 OK 12 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/18.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 833a12d372440b20017502d3c72e0b20
5fb9301142e3c53f65cd16502b35d7d1d5f82b98
1531ac56322b89715a35b1cdb5ca1f79f453614f368455b2cc8ef650a992f8cd
GET /lands/38/landings/Ihyam_7H2-fd/18.png HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/png
content-length: 12136
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f68"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
193.108.118.121200 OK 22 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 19b197d779dd9ee78737a456dbd5c1a6
a3f0b1d0659e5a76bdfaa52bb8f68096d1ab1359
806a8a4abe09c02f4e4b3ed4d6514bfcf1a93a941e838aadf56afaef858d8e37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/png
content-length: 21724
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-54dc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
193.108.118.121200 OK 28 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:03:16 09:26:15], baseline, precision 8, 118x88, components 3\012- data
Hash c1a5819d50b9125f0c46ded86fd5b4b6
3926c15be79cb7522cefdbf5066d39623e36a283
374f0cede3c1f91ad174b97554017b74cbd29424d7467d039beab541f6deb873
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 27900
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6cfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=56932
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
193.108.118.121200 OK 17 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x88, components 3\012- data
Hash 215029a9775d1e9a56c93912ab03f4c6
6a3dbd676e2ea61850d2a20086b9ec84127da0ae
e071c52839ef37679439165349ffdd98cf19aa7e35d0293a1bec69743db70b16
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 17350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43c6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
193.108.118.121200 OK 5.3 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash a5804562fb31668fa149b7b9c0620034
89494d5e286d7246d643fd1b10007e4112a2de8b
46e7b1862cfc231947c65b59a32333f08851d2469b7eca150a00833486de9410
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-6aa0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash ea52ae32ae4319fb03da1672b0c20ed3
4efd8189179b260a4b51fd4b28d729b6143ef00a
43a4ca83560d5720ffeccf17478d6a1741f86639f35744fb61fcb139dc3020a6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 12525
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-30ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
193.108.118.121200 OK 11 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 2f03fbd61721fdf46883333595050c77
8361f15c906a9457340fc21febd22b5ede56ac61
9f6c76cf695bc0785f4e4f8bb3abe93255af3ea1597307d567dc0fc93fa70560
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 11238
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2be6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
193.108.118.121200 OK 14 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 9903db279cf9714141daac34523f39b6
ac412f9ce9b8c50155e9adb9f5095d82519ccd24
f562892c60fef407c954fd73d6908003c42f832c4ae86f8264438a576ce2c1cd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 13505
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-34c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
193.108.118.121200 OK 13 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data
Hash 99a404d25bcdd47a141dafdbe046d0cf
04de642c5cbc865c29ab3599c1c4fa19f2a6ba8e
fbe779bcef340ba0b148f84b50a8323a2bbb493674e130bf877d87c6d163ed36
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 13106
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3332"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
193.108.118.121200 OK 16 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 5a34545daf4bc481bcbc3573062aa426
132d09d36ede8f32c3168ecaaa631e5959ce38ef
c044a81b14812c50f3142ad20d0ca862923daba2483eb164b0348ba98d3b7855
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 15481
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-3c79"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
193.108.118.121200 OK 18 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data
Hash 10e8794e65f20d32932985bf814b8965
0627b8648373340d2ba949fd7fe50611d11b033b
43b9f39f94acb50efb3b6981a6c931dcf25eefcc7b7734a927036255263eee39
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 17978
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-463a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
193.108.118.121200 OK 2.4 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 116 x 86\012- data
Hash ec706a0634f1e5e06ad775b2b2ebdcf2
5a18c424f7b84b40709a6b78b2d632639bb3ff2b
9613f59211bd2194336c666d11a0d2e1daa4dd96d543e661f5835e0a621c2f5d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/gif
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xae3bf698", progressive, precision 8, 258x145, components 3\012- data
Hash 58357cada0f0171d2a84540391219649
57123e69e055b4d818faedec09884135c5d4a31e
742c68ecf3dcc1096143a0a5d00f4a15a3edb13fd497ea2931e67e66826addd0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 9007
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-232f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
193.108.118.121200 OK 9.6 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x70755b56", progressive, precision 8, 258x145, components 3\012- data
Hash 8fcd27f0bcc790f75f46d275a19a6300
556d3ca4dec168c77ae4a73c0c6e8291ef1291c0
78410be719ee73e00845d44e100e280d3989fc3d0fa4d3dcfcd888f13ded1843
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 9565
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-255d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
193.108.118.121200 OK 15 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 258x145, components 3\012- data
Hash bb05342bd1f87ae7624aba323af77dca
4b7c875644d0b6a424abf06cda89ad135bd53d81
828e2c12259274e1eb1c212f3498fb31503462023c4b2642da4f795209b755de
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 14653
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-393d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
193.108.118.121200 OK 10 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1d6d8e5e", progressive, precision 8, 258x145, components 3\012- data
Hash 1541881a313c963dc754657aefd89ef0
fb41198c81ac17da4f9a34e4b4bf21c8c7fe6001
75e1629d9fad2e22b9d9983c65874a19a3f639db43c11db713a7f972b8f72117
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 10352
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2870"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=45273
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds205.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
193.108.118.121200 OK 9.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 6c17c634ebd856cc85bedd931ac01680
d1e1b9358749b9fd4ff851bb4cbdce54a6223ce8
c1ced3a91bde391f64c6cef03b164cd89ffd499fa5d75a3f797bc57b1fc3c191
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 9032
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2348"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
193.108.118.121200 OK 8.3 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 258x145, components 3\012- data
Hash bc1cdeea817d887b981f26bc84236b93
4528ed7010e2e0c774890d6041a60cbeb3c69c92
d737ffd9379d8f2734c1dc6304e4ff75f1c946de29371a1ec9ddc01f423076dd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 8266
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-204a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
193.108.118.121200 OK 9.3 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7cd1fc83", progressive, precision 8, 258x145, components 3\012- data
Hash 5ec2461279f77afe0c6fbb935bd0b94a
95c6e9171db79ea69ce718b02484e36816d1a1cd
ac60e5738d3cf6d32004e1ddfcf4368e256f1928ea923f9369869b8e9af665ba
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 9338
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-247a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=49151
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
193.108.118.121200 OK 24 kB URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 6b62a0205c3a4a641548c0975bb2b2db
7fa5c376ce883f854862bd60a2c399d4db6f705d
c36205a5a576edc96de5abe0587e8ae3c40a93789339788ecbe14cb4f718f126
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-6aa0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
193.108.118.121200 OK 8.9 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 258x145, components 3\012- data
Hash 77df6b7e2677b46a053508a92026cb8a
decad70c5281062495250250fdf985b6073a8a91
6143cd3687b480264dad4e3d3a237c30c26c859ef7fe1c2a7b32472fb65710c0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 8885
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-22b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
193.108.118.121200 OK 12 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data
Hash 081a01df58865529d3edcbc765c4dcb5
a7fe3ca35fe5e244926a80addda994218806f613
edebf400c8f60c306491e7b2f8a695b7dde10cf49eed66125423571a1cd60d05
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 12127
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-2f5f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=56368
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
193.108.118.121200 OK 20 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/button.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 107 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash e2aadceedde9aef1bf42c176b31c585c
76c14eae7537160a304aa458bf11a985d5a57375
2b1ff8c49202306d33deac4cf49841f59c1a49d15c80a77c1e001369578cef3f
GET /lands/38/landings/Ihyam_7H2-fd/button.png HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/png
content-length: 19948
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4dec"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
193.108.118.121200 OK 15 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/load.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 64 x 64\012- data
Hash 571dfe045d66b88d2d5c82151a1bf579
8966eb7cd27754263bd2861737b695386273f423
7c7cd7a7155d3d38bb49fc82c83aa14ed24d56f6886623299b13b6a81486a871
GET /lands/38/landings/Ihyam_7H2-fd/load.gif HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/gif
content-length: 14574
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-38ee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
193.108.118.121200 OK 36 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 6e3a450cb3b57d014fa9b288a152347f
4588f27043e812d62488a78d14240a38386d7680
031c19f5bf1408578a384638a1d8be118daf7b15394e140cc362e059bee11cae
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-2f3dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
193.108.118.121200 OK 24 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:05:13 17:11:55], baseline, precision 8, 990x36, components 3\012- data
Hash ab6b76c0cc6683324bd7fe5923b24d17
559b8b1e50f80b7a218e25ce443e523401882577
a923ea85ee73e53db73038b2ea8712e7e40b067cde25b05ffa999608b17a304d
GET /lands/38/landings/Ihyam_7H2-fd/panel.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 23598
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-5c2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
193.108.118.121200 OK 887 B URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 7754ce192cf45ea10de0706da442d2ff
b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238
0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 887
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash ddf58dd1f8745a81264b21bcf1f9cc77
73a35df521dc648af06e2e490cac929bc681a06c
a2315bfaefeae19a449f38fe4131531c7603f5c7e75e956c240074da66123134
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1889
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-761"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash 609e06417314a6476bc6d0f3c1900e20
0e2b0d425bd9e5cc0ebb386b093adf64d464ac1e
9450244a77e354c177c18a691c0e5f0c2fc5d0ddf921f40178cbb8bfe4a076ac
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1394
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-572"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 677577d8c6ffb0107ee5c9fbabaa4af7
0bfcbbafee19eeeae113103080c41cd95b4083e5
3a215afa0d15ae2985cfb88e51e90b727f0ba03fe10f8e0b0980ef55af91bdb0
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 2646
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-a56"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
193.108.118.121200 OK 1.2 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 1226a24c469c0fba3970548aab13650f
a6d371e4acc2a9181d1d6bf13b5d51f82c49a943
6a1513dacd3fcffe47245068fe9fa6a49cdc9c352b8d9cbf8f72005c4cf5cafc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1191
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-4a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=61104
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
8.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
193.108.118.121200 OK 258 B URL HTTP/2 8.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 59b716d98339f0a2296d2f5efc91dc98
a10cff4a232924f9ab5d117e1d29120f2058c330
7c73ce6af110e73c6f6b39337d6e912b9362e55466e916ea93cdc6e4392b77e1
GET /traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38 HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
193.108.118.121200 OK 1.7 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 3db490cc8f824e29d6fb07ba75a97a20
84c2c26447f7b49c76999f31c0ed526bde13c6c4
5c13ca439c63d5f3e5d638ba055f399058117d3b554ae3fb751d4a39043a14fd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1729
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6c1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:36 GMT
cache-control: max-age=67518
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934476.dop068.sk1.t,1674934476.cds243.sk1.hn,1674934476.cds219.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xb7d2e3cb", progressive, precision 8, 60x60, components 3\012- data
Hash 47e765dc1abef2d79edafb5fce1c64b5
93d3e7f1e11dd2d98ca3ffb3b49a0211ed76f273
185540f06acc82b2dc4bdfa6d2deb4ce7454bb1e28783acdde67f8a9a90597b1
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1441
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-5a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash f042aa7a438ca85be0afeba44a3ac116
183c8b20394fdaf6ba757ff76d3f25e33092369e
05b76ed86b70990f4307223391e1c9abfff59ec545d75d94683c0f69713eed79
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1809
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-711"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
193.108.118.121200 OK 1.9 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 16b2fab44ddad0b620d0eaec2fc1e425
24fa279de6ceb2c0434ff4e750639e15eb22ed29
58076ed17c6377d23375ec949c6cb2eade75010dcf82ba0e64dbdcbd67583912
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1902
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-76e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
193.108.118.121200 OK 1.1 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x0bb5b909", progressive, precision 8, 60x60, components 3\012- data
Hash 01ed303509acb0c822fa3c55976d4b96
7ed250f181498962ebafd21f1bde4ca15e6953c6
fba198ced4795895d1f6d0bc2247d315eb8cc6dda60ad119c99846d68d0ce445
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1085
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-43d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
193.108.118.121200 OK 2.4 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash ec2823c426475d6766008dabf85a4bc2
f0681ce27ba96a1b4f6547a42495ebb5b0ca514a
2316f8554d54e907f9992475ced3bf03fc95412e98b2bc29aa6e5407260bcddd
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 2350
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-92e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
193.108.118.121200 OK 2.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash 3f809b94b5e5607da5b5c6506a8729c1
26f4376095902a56db86ea2c76689f15ba3cf9c2
7b84461772bad27e431676a53efae81d8584a102f3f6f407ae0a54469a938ff6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-7bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
193.108.118.121200 OK 3.1 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data
Hash cbff1c490bcdcad2989c2549f278eae5
56e1b4489cfc0d54f9f72e15777788beba396c95
6d96d3de01207ab505c62b2da624ba787cabe4fee767c181b175186e50c23af4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 3063
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
193.108.118.121200 OK 1.8 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 52eba434e5411806cd92add275d164ea
0cc9df3c52de111a307dc3d8d22254cf51b0c77f
a4c2a01f64274d0ede23e233e2be19225c68e5e5a6206b338fb8bc6410f7005f
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1758
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-6de"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash c840b43a0575b0a1742c50f186a67c22
d1ac0da47b4394a9dbea90eee26a260b5268c4d9
6a8ef9be89e89c23d6d96c50e2fa62bd25473e9cc7a79e2cd1ef64e2647cb38a
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/png
content-length: 1045
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-415"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
193.108.118.121200 OK 1.4 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data
Hash a08c2c5266f9701e422f042b4a3809c5
9884cf987f84b282f920634b2ab811077dfef7a3
054df6bf8ee2bcb904269745cd2c0830918d9e1a6ff1f965673af5f2946a3c37
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1373
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-55d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
193.108.118.121200 OK 1.6 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data
Hash bfa11442f9457a03384ecf8128a586a2
a30e6f6a18be085197605b6463f840cb249d0510
941411042624c554a5828ee596c1e3ade4a787ae2fad6e5b6d585ab6a6e1e3c6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 1563
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-61b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
193.108.118.121200 OK 1.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 96f46fad8cda5895b895f6ec3f95cda4
3bd79ef305bfa4b7c1a3f328828c63f89a818878
8e48576faf920cae224c669d61831d0ad5fc23f6220e83955275a3115bb568fc
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/png
content-length: 1046
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-416"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
193.108.118.121200 OK 12 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash dcbca93bab065f86d771507c4f0d1ecf
22a425f8bfa0841b1b00d964164a9151c77f1de3
2e2115e9cdbd9716cb06f448f6f7cc548d5469a4f2a49ca321599af248b3ccde
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-1327c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
193.108.118.121200 OK 841 B URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data
Hash 9cf522c306866742c2806e0c14c8bca7
7a3ff28af2c6f7cfd036ec4fc162651eaf634f7e
fa09bef7875241c06a9e2505bc698a189d3b3ce012af29c65817fd476627ec87
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 841
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-349"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
193.108.118.121200 OK 2.6 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data
Hash 950ff8ae916df997fea302859ca2ccb4
42232e28878f65aaf4120d9435784ad46c2be71c
c0b01da5a48a7ddd619a2dee26bec77300b68bb1b028716320719f9c1a5f769e
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 2553
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-9f9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
193.108.118.121200 OK 4.6 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 150x84, components 3\012- data
Hash 0fa4a903a2adc9da58b52661ebc8d38c
061c6359c2951da7509f6ae4039c2f0bc1ce6b62
79d6da7e0398c3f607c4bbc93562cf6ab96bb800cdab4ef6df82718cf0a0d3e5
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 4644
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1224"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 58477c52a9d639b91b16f022d4676bcf
51a85ef703617e996c50cd76b38f2507517a9f25
a0653cc819b252702f55439d6f8763d212fca2f9f604d67224a2a9891e8eadbe
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 4397
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-112d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
193.108.118.121200 OK 7.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7ab4f024", progressive, precision 8, 233x131, components 3\012- data
Hash 2a4d527ed65de8e2e0a69dc9d50442d2
8ec4547a38c9e3d37469acfe21ea755531776f09
275876bbb5190da100ae4f9aca976ec15cea0de20d42e167f522a0a50ba8ca02
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 6972
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1b3c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
193.108.118.121200 OK 4.3 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 365e215442256548316a73bc7c79edf1
13078402132cb89939a39edf11181fb88ebe390f
f8c35c02ff055694af23c83b1e3019a8c29965ab57ed7db8173a23a38494ff58
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 4315
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-10db"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
193.108.118.121200 OK 4.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 150x84, components 3\012- data
Hash 416ec3af020687541765d48acb81fc08
48b80345ffb951535d4d6ca811d19bd9dd726998
75c30d77f900b2f4c91f502f45f00606b57a47bb84e6b700fb18482389d88f3c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 4035
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-fc3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
193.108.118.121200 OK 8.6 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 233x131, components 3\012- data
Hash 55778c73ba99a9477464e5c90cdd7e02
bc49e8058f1dafe10e817441de952ba6aa3b7b58
c362fc3a2aafd1b0d8069fb1fae83b5f0abb06443d3e00b21b37be13aeb75bfa
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 8615
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-21a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
193.108.118.121200 OK 5.1 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data
Hash 72e270f7041c2fe2f326d11e162fb249
3f918a2023f10a01a2ed74713d292df415d14e05
b17ce663fab4421f728ea0dd218d2a8a6a10a4314759fdf139b9388fa26e37f6
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 5080
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-13d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
193.108.118.121200 OK 4.4 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6359dcbc", progressive, precision 8, 150x84, components 3\012- data
Hash 447470b34b66b570c8fc0dbc11c06609
863180b376242e256189888eb99282e597d894c9
dd57f5a80517b8109279b57d702278f31a9878295045c6766931a0453244d749
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 4417
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1141"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
193.108.118.121200 OK 7.9 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 233x131, components 3\012- data
Hash 5df975e7a8c0b2610069610c54c5ce6c
ab6390fbb7be1be9a0f4477b4439e34d5175b6fc
bbfb6830dabc55fd598cc0948049f2367d17c80f286e0821e660ba7f5a6b360c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 7904
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1ee0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
193.108.118.121200 OK 3.8 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 150x84, components 3\012- data
Hash 6ed4eca1ed776930746531005fcf22aa
11e8643932e35a8ef65be8ef585afee241c8eddc
28849006b773d85fb8fb2295a86bcee5d2cdabb9a23d854ffebbd8dfd203588c
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 3835
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-efb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
193.108.118.121200 OK 4.7 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data
Hash 12f0c14e5943fd57577ce11155107bdb
a484cb296770fe6cb55d25cba19f831cf1aaf7d1
9eb468f7688a901a3626fdde8d0b07dc490a830718c2938d32f70f0ec122a344
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 4664
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1238"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
193.108.118.121200 OK 6.8 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 233x131, components 3\012- data
Hash 2ad4260dc1204ad8f3c0c29bd919830a
fd2ddfca32f55ba5d180af812a787e61ce136480
acc8f76a570c0833d34835f5694409e082b4af09783366596c2e151e0b0ed128
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/jpeg
content-length: 6827
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-1aab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
193.108.118.121200 OK 1.9 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type GIF image data, version 89a, 88 x 31\012- data
Hash 2bcf55138cde4a65770426a67ea247fc
13d8c808a4276dc88937817d7df7720182c093f6
348fd1e58aec8d99001aca1dd12b72eafef534c2d11725b2280a173d03b5fa6b
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: image/gif
content-length: 1882
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-75a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/sw.js
193.108.118.121200 OK 4.2 kB IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (4168)
Hash 569090f90a522f4c62af3b9e40635957
4e6f57da49920f30777f3fe71f83f6183aeb4f3f
ee8c6af307c8d085753adb810c69c8379d1e8d01211b491409c43e9edc9f6fb5
Analyzer Verdict Alert fortinet Phishing
GET /sw.js HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:37 GMT
content-type: application/javascript
content-length: 4199
last-modified: Thu, 01 Dec 2022 08:31:02 GMT
etag: "63886646-1067"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/index.php_files/pu.swf
193.108.118.121200 OK 2.0 kB URL HTTP/2 9.news-civuse.com/lands/38/index.php_files/pu.swf
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 6d40122b8a5b7fd31b5aef2749f519fd
518d585dd26c947344ddea5403324850d1b2f7cd
1da7814acd0d6913438bf701d8a2d2cf29814174b5eff0e6ff129ee74f68a7cf
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/index.php_files/pu.swf HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:37 GMT
content-type: application/x-shockwave-flash
content-length: 1953
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7a1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:37 GMT
cache-control: max-age=56931
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934477.dop068.sk1.t,1674934477.cds243.sk1.hn,1674934477.cds212.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:37 GMT
cache-control: max-age=63949
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934477.dop068.sk1.t,1674934477.cds243.sk1.hn,1674934477.cds251.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
193.108.118.121200 OK 6.3 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash 4017230a30fd2de81422baf57cc42ff6
70e0ec756de5ff3e7da696aa5b187f4344793bd0
c4a26437ec996731964beb8292fea2593d775e127586b4ae54e1b974b885a1b4
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/large_temp.css HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:37 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-8353"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:37 GMT
cache-control: max-age=49150
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934477.dop068.sk1.t,1674934477.cds243.sk1.hn,1674934477.cds003.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:37 GMT
cache-control: max-age=56367
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934477.dop068.sk1.t,1674934477.cds243.sk1.hn,1674934477.cds001.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
205.185.208.60403 Forbidden 9 B URL HTTP/2 cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg
IP 205.185.208.60:0
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1
Host: cdn-d-img.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 19:34:37 GMT
cache-control: max-age=61103
content-length: 9
content-type: text/plain
accept-ranges: bytes
x-hw: 1674934477.dop068.sk1.t,1674934477.cds243.sk1.hn,1674934477.cds247.sk1.c
access-control-allow-origin: *
timing-allow-origin: *
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
193.108.118.121200 OK 3.1 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Hash f28b03567552ec49b0cf260cf1aabe54
4ce3aac682a9f8484861977a640e2d670f5719d9
dff6024e1c2336d58b5163dc4d9dc6ca0484beb011927bd783d5c5527acf688d
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-3957"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/favicon.png
193.108.118.121200 OK 1.2 kB URL HTTP/2 9.news-civuse.com/lands/38/favicon.png
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash e7ffe9c659d8c729e12e20dfe05509be
2c413e09ebd14dd3020209fe9c9183e0335fc250
880c000a3ca23bb89262d9c2ccf9d48bab37dcec09f3b3bf55c8385f58745f50
GET /lands/38/favicon.png HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:37 GMT
content-type: image/png
content-length: 1233
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: "5d7a0ef0-4d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:37 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf.png@cache=2016051250 HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:37 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 1b6ee6a5fdcf3c781a0b768964797646
f0bf83f6368d7c31471ad258ce8cfb4848109192
511ad4ad0f3db18490c9b7876d44c887f60d78dd8d06a585367c0ab4ddbbe92f
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/premium/premium-spirte.png@cache=2016051250 HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:37 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
193.108.118.121200 OK 234 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/fon2.jpg
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:06:21 11:55:20], baseline, precision 8, 990x513, components 3\012- data
Size 234 kB (234218 bytes)
Hash 60f67e63f85561c6f95fd573252d2311
6fc6d41b27131074786778522b86077f477dbd51
0e80e9257f1dd0149894bf37342cb082ef2410263de490e851111fa9531e15c6
GET /lands/38/landings/Ihyam_7H2-fd/fon2.jpg HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:37 GMT
content-type: image/jpeg
content-length: 234218
last-modified: Thu, 12 Sep 2019 09:25:02 GMT
etag: "5d7a0eee-392ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 613999d4801774b827b4f8bd140a605f
2c5b07d29a96ee02d53dd712b7e00e24e155cb22
cc78e35561f66b97b4b68cee9544c54190e44bb07bf8e6a067a45db32f5b1883
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/sprite-pornhub-nf-2.png@cache=2016051250 HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:37 GMT
content-type: application/octet-stream
content-length: 1979
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7bb"
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/redesign-stream-ui.png@cache=2016051250 HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:37 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
193.108.118.121200 OK 2.0 kB URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 787dca6a9c809e6dcc3d3018f3f639bb
cf5838982dcd16a1cca3e810716270434413ea80
6fe734b116afdc3782aef601ddee34dfa45e93c69ff372143f3ae187c47627d3
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/images/profile/sprite-icons.png@cache=2016051250 HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:37 GMT
content-type: application/octet-stream
content-length: 1995
last-modified: Thu, 12 Sep 2019 09:25:00 GMT
etag: "5d7a0eec-7cb"
accept-ranges: bytes
X-Firefox-Spdy: h2
browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
151.101.66.217200 OK 20 kB URL HTTP/2 browser.sentry-cdn.com/7.19.0/bundle.es5.min.js
IP 151.101.66.217:0
File type ASCII text, with very long lines (62031)
Hash 1c6083f7ae34ed2fa3236569eec9ff56
0c1be1b5468042e65e02c8b886c50d26427c9ce7
2b1d69121eb9dc0629126ff02cf7acef2f1924b32b0bb654792ecd9101e10c44
GET /7.19.0/bundle.es5.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sat, 11 Nov 2023 17:34:32 GMT
last-modified: Thu, 10 Nov 2022 15:50:35 GMT
etag: "1c6083f7ae34ed2fa3236569eec9ff56"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 19:34:37 GMT
age: 6746405
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20174
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
193.108.118.121200 OK 0 B URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-10b2b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
news-civuse.com/tds.php?sid=8051799&p1=&domain=news-civuse.com&p2=s8hnpa6qpoch&p3=
193.108.118.121302 Found 0 B URL HTTP/2 news-civuse.com/tds.php?sid=8051799&p1=&domain=news-civuse.com&p2=s8hnpa6qpoch&p3=
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /tds.php?sid=8051799&p1=&domain=news-civuse.com&p2=s8hnpa6qpoch&p3= HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Sat, 28 Jan 2023 19:34:28 GMT
content-type: text/html; charset=UTF-8
location: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
cache-control: no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
193.108.118.121200 OK 0 B URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-6aa0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
193.108.118.121200 OK 0 B URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-2f3dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
193.108.118.121200 OK 0 B URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: W/"5d7a0ef0-f889"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
193.108.118.121200 OK 0 B URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/header.css HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-10b2b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
193.108.118.121200 OK 0 B URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/commons.css HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-2f3dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
193.108.118.121200 OK 0 B URL HTTP/2 5.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4= HTTP/1.1
Host: 5.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4.news-civuse.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:33 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
set-cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8; expires=Sat, 28-Jan-2023 20:34:33 GMT; Max-Age=3600; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
193.108.118.121200 OK 0 B URL HTTP/2 1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4= HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
set-cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8; expires=Sat, 28-Jan-2023 20:34:30 GMT; Max-Age=3600; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
193.108.118.121200 OK 0 B URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/show_new.css HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-1327c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
193.108.118.121200 OK 0 B URL HTTP/2 2.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4= HTTP/1.1
Host: 2.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:31 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
set-cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8; expires=Sat, 28-Jan-2023 20:34:31 GMT; Max-Age=3600; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,400&subset=latin,latin-ext
142.250.74.74200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400&subset=latin,latin-ext
IP 142.250.74.74:0
GET /css?family=Open+Sans:300,400&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 28 Jan 2023 19:34:29 GMT
date: Sat, 28 Jan 2023 19:34:29 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
193.108.118.121200 OK 0 B URL HTTP/2 1.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/playlist-base.css HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-6aa0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
1.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
193.108.118.121200 OK 0 B URL HTTP/2 1.news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38 HTTP/1.1
Host: 1.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:30 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
193.108.118.121200 OK 0 B URL HTTP/2 news-civuse.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/premium-modals.css HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: text/css
last-modified: Wed, 12 Jan 2022 11:10:28 GMT
etag: W/"61deb724-3957"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
193.108.118.121200 OK 0 B URL HTTP/2 8.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js HTTP/1.1
Host: 8.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:35 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: W/"5d7a0ef0-f889"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
news-civuse.com/lands/38/jquery-3.2.1.min.js
193.108.118.121200 OK 0 B URL HTTP/2 news-civuse.com/lands/38/jquery-3.2.1.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/jquery-3.2.1.min.js HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:33:06 GMT
etag: W/"5d7a10d2-15283"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
193.108.118.121200 OK 0 B URL HTTP/2 news-civuse.com/traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /traffback.php?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=&land=38 HTTP/1.1
Host: news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Connection: keep-alive
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:29 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
193.108.118.121200 OK 0 B URL HTTP/2 9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
GET /lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4= HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8.news-civuse.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
set-cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8; expires=Sat, 28-Jan-2023 20:34:36 GMT; Max-Age=3600; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
193.108.118.121200 OK 0 B URL HTTP/2 9.news-civuse.com/lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js
IP 193.108.118.121:0
ASN #61003 GlobalTeleHost Corp.
Analyzer Verdict Alert fortinet Phishing
GET /lands/38/landings/Ihyam_7H2-fd/sweetalert2.all.min.js HTTP/1.1
Host: 9.news-civuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9.news-civuse.com/lands/38/?site=8051799&sub1=&sub2=s8hnpa6qpoch&sub3=&sub4=
Cookie: clickdata=ODA1MTc5OXw6fDM4fDp8fDp8czhobnBhNnFwb2NofDp8fDp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:34:36 GMT
content-type: application/javascript
last-modified: Thu, 12 Sep 2019 09:25:04 GMT
etag: W/"5d7a0ef0-f889"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
evweinviw.com/WPMM8BgZ
188.114.96.1302 Found 0 B IP 188.114.96.1:0
GET /WPMM8BgZ HTTP/1.1
Host: evweinviw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Sat, 28 Jan 2023 19:34:28 GMT
content-type: text/html; charset=UTF-8
location: https://news-civuse.com/tds.php?sid=8051799&p1=&domain=news-civuse.com&p2=s8hnpa6qpoch&p3=
cache-control: no-cache, no-store, must-revalidate,post-check=0,pre-check=0
expires: 0
last-modified: Sat, 28 Jan 2023 19:34:28 GMT
pragma: no-cache
set-cookie: _subid=s8hnpa6qpoch;Expires=Tuesday, 28-Feb-2023 19:34:28 GMT;Max-Age=2678400;Path=/
_token=uuid_s8hnpa6qpoch_s8hnpa6qpoch63d578c4bb8a63.50157950;Expires=Tuesday, 28-Feb-2023 19:34:28 GMT;Max-Age=2678400;Path=/
26a99=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI2NFwiOjE2NzQ5MzQ0Njh9LFwiY2FtcGFpZ25zXCI6e1wiMTUyXCI6MTY3NDkzNDQ2OH0sXCJ0aW1lXCI6MTY3NDkzNDQ2OH0ifQ.WkCE1jkMPfLj3I6_5blyeZpsxRHK3Nw5rDWXdDxhA-g;Expires=Wednesday, 26-Feb-2076 15:08:56 GMT;Max-Age=1675020868;Path=/
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ccIYxIBTK4wgWUwq1kNAyEx2ma7%2F%2FDP%2F17t9D8GIyBOrZv5YYZ9xErXhPrvHrnnCgI94oxFJoDUeibBXHer%2BNmVjYuMRZRYSpdcT9UMALQGkLwu%2Bpk7hHCq91o0lP%2FtL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790c2a6d6a410b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2