Report - news-refexa.com/tds.php?sid=8060051&p1=&domain=news-refexa.com&p2=vml86513035fs&p3=

Report Overview

Submitted URL
news-refexa.com/tds.php?sid=8060051&p1=&domain=news-refexa.com&p2=vml86513035fs&p3=
IP
149.7.16.92
ASN
#63023 AS-GLOBALTELEHOST
Submitted
2023-06-09 20:25:15
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
6
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn-d-img.pornhub.com	740189	2000-10-31	2015-10-10	2023-06-09	3.8 kB	16 kB	205.185.208.60
eighter.fun	unknown	2023-02-05	2023-02-08	2023-06-08	511 B	18 kB	104.21.59.197
realrb.bid	unknown	2020-06-17	2020-06-17	2023-06-08	410 B	35 kB	95.216.65.102
zerossl.ocsp.sectigo.com	4049	2018-08-16	2020-05-09	2023-06-09	338 B	806 B	104.18.15.101
news-refexa.com	unknown	2023-04-19	2023-04-20	2023-06-08	40 kB	481 kB	193.108.118.54
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2023-06-09	463 B	1.9 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2023-06-09	1.1 kB	33 kB	216.58.207.227
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-06-09	1.7 kB	3.5 kB	142.250.74.131
l1kbg.webout.life	unknown	2020-04-22	2022-06-12	2023-06-08	2.8 kB	246 kB	136.243.92.2

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-09 20:24:57	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-06-09 20:24:57	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-06-09 20:24:57	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-06-09 20:24:57	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-06-09 20:24:57	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-06-09 20:24:58	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	l1kbg.webout.life/	0 B	2023-03-07	2024-04-24
Pretty URL l1kbg.webout.life/ IP 136.243.92.2 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-24 16:53:25 Times Seen37041732 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	realrb.bid/pushJs/Ae7lrjHov.js	34 kB	2023-04-05	2023-06-12
Pretty URL realrb.bid/pushJs/Ae7lrjHov.js IP 95.216.65.102 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 23:26:41 Last Seen2023-06-12 21:38:34 Times Seen27 Hash 16aaaaef6409cf6aeb5848e98f39c0db 956abd04368fbe847698b9f6627cabff79610a0d cc000af562081c0b04667431782b2b7b441fe728e022fc66d67c398fa6fb53fc Loading...

	l1kbg.webout.life/js/jquery.js	87 kB	2023-03-07	2024-04-24
Pretty URL l1kbg.webout.life/js/jquery.js IP 136.243.92.2 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:32 Last Seen2024-04-24 12:59:27 Times Seen2975 Hash 378087a64e1394fc51f300bb9c11878c 0c3192b500a4fd550e483cf77a49806a5872185b 4fe68fa216176e6d1f4580e924bafecc9f519984ecc06b1a840a08b0d88c95de Loading...

HTTP Transactions (90)

	URL	IP	Response	Size
	zerossl.ocsp.sectigo.com/	104.18.15.101		314 B
URL zerossl.ocsp.sectigo.com/ IP 104.18.15.101:0 ASN #13335 CLOUDFLARENET File type data Size 314 B (314 bytes) Hash 76a6ae835b56a8c60b9509f38789fe69 0ab9be1489cdcc89b9b25ac9b6d115ae6adde750 7d61cc8a93e20e1ad870efe3bd5befabe846509bcaa8b1f7aef109c6505dc0c5 HTTP Headers `POST / HTTP/1.1 Host: zerossl.ocsp.sectigo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 09 Jun 2023 20:24:56 GMT Content-Type: application/ocsp-response Content-Length: 314 Connection: keep-alive Last-Modified: Thu, 08 Jun 2023 10:24:02 GMT Expires: Thu, 15 Jun 2023 10:24:01 GMT Etag: "0ab9be1489cdcc89b9b25ac9b6d115ae6adde750" Cache-Control: max-age=481744,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb5 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7d4c19d8e9d2b52d-OSL`

	news-refexa.com/lands/38/lp.js	193.108.118.54		1.4 kB
URL news-refexa.com/lands/38/lp.js IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type Unicode text, UTF-8 text Size 1.4 kB (1418 bytes) Hash 8441b469fa0c093bd106a66a4068d944 c3698e755cd1ef7b5d29e233ef615219559a96f3 befe8e9f55c6e3fe10fd398534acb713129764b05d852089ac34bfa535a53902 HTTP Headers GET /lands/38/lp.js HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:56 GMT content-type: application/javascript content-length: 1418 last-modified: Thu, 12 Sep 2019 09:25:04 GMT etag: "5d7a0ef0-58a" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/revopush.js?v=4	193.108.118.54		10 kB
URL news-refexa.com/revopush.js?v=4 IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type ASCII text, with very long lines (9954), with no line terminators Size 10 kB (9954 bytes) Hash fc284a0e5d580856ae4863715ad6733e eb69f303c80ff8e44abc9601b8616c0cf92faafa 2240a1d10744494668058ba210d0d87203609def9fd69d2ac82092ebc79583c0 HTTP Headers GET /revopush.js?v=4 HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:56 GMT content-type: application/javascript content-length: 9954 last-modified: Thu, 15 Dec 2022 09:31:17 GMT etag: "639ae965-26e2" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg	205.185.208.60		9 B
URL cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg IP 205.185.208.60:0 ASN #20446 STACKPATH-CDN File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET /m=ecuK8daaaa/videos/201401/21/22195452/original/16.jpg HTTP/1.1 Host: cdn-d-img.pornhub.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden date: Fri, 09 Jun 2023 20:24:57 GMT cache-control: max-age=52702 content-length: 9 content-type: text/plain accept-ranges: bytes x-hw: 1686342297.dop219.sk1.t,1686342297.cds224.sk1.hn,1686342297.cds212.sk1.c access-control-allow-origin: * timing-allow-origin: * X-Firefox-Spdy: h2`

	cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg	205.185.208.60		9 B
URL cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg IP 205.185.208.60:0 ASN #20446 STACKPATH-CDN File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET /m=ecuK8daaaa/videos/201507/15/52864251/original/12.jpg HTTP/1.1 Host: cdn-d-img.pornhub.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 403 Forbidden date: Fri, 09 Jun 2023 20:24:57 GMT cache-control: max-age=48934 content-length: 9 content-type: text/plain accept-ranges: bytes x-hw: 1686342297.dop219.sk1.t,1686342297.cds224.sk1.hn,1686342297.cds003.sk1.c access-control-allow-origin: * timing-allow-origin: * X-Firefox-Spdy: h2`

	cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg	205.185.208.60		9 B
URL cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg IP 205.185.208.60:0 ASN #20446 STACKPATH-CDN File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET /m=ecuK8daaaa/videos/201410/28/34062481/original/7.jpg HTTP/1.1 Host: cdn-d-img.pornhub.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 403 Forbidden date: Fri, 09 Jun 2023 20:24:57 GMT cache-control: max-age=55137 content-length: 9 content-type: text/plain accept-ranges: bytes x-hw: 1686342297.dop219.sk1.t,1686342297.cds224.sk1.hn,1686342297.cds001.sk1.c access-control-allow-origin: * timing-allow-origin: * X-Firefox-Spdy: h2`

	cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg	205.185.208.60		9 B
URL cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg IP 205.185.208.60:0 ASN #20446 STACKPATH-CDN File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET /m=ecuK8daaaa/videos/201503/17/46253311/original/6.jpg HTTP/1.1 Host: cdn-d-img.pornhub.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 403 Forbidden date: Fri, 09 Jun 2023 20:24:57 GMT cache-control: max-age=50445 content-length: 9 content-type: text/plain accept-ranges: bytes x-hw: 1686342297.dop219.sk1.t,1686342297.cds224.sk1.hn,1686342297.cds247.sk1.c access-control-allow-origin: * timing-allow-origin: * X-Firefox-Spdy: h2`

	cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg	205.185.208.60		9 B
URL cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg IP 205.185.208.60:0 ASN #20446 STACKPATH-CDN File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET /m=ecuK8daaaa/videos/201508/06/54560451/original/14.jpg HTTP/1.1 Host: cdn-d-img.pornhub.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 403 Forbidden date: Fri, 09 Jun 2023 20:24:57 GMT cache-control: max-age=64795 content-length: 9 content-type: text/plain accept-ranges: bytes x-hw: 1686342297.dop219.sk1.t,1686342297.cds224.sk1.hn,1686342297.cds219.sk1.c access-control-allow-origin: * timing-allow-origin: * X-Firefox-Spdy: h2`

	cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201504/13/47540711/original/3.jpg	205.185.208.60		13 kB
URL cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201504/13/47540711/original/3.jpg IP 205.185.208.60:0 ASN #20446 STACKPATH-CDN File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 258x145, components 3\012- data Size 13 kB (13332 bytes) Hash dce82d44b4b11da45323c7fb3d48f2e8 1f89ba9a7c5f9bb914f4d9a8546119f68f7ddcfc 71035bfb92d2af8dd1b035d0b27b853e08adfc90b0c248d1ce3a131cf7631601 HTTP Headers `GET /m=ecuK8daaaa/videos/201504/13/47540711/original/3.jpg HTTP/1.1 Host: cdn-d-img.pornhub.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Fri, 09 Jun 2023 20:24:57 GMT etag: "1576646962" content-length: 13332 content-type: image/jpeg last-modified: Wed, 18 Dec 2019 05:29:22 GMT accept-ranges: bytes cache-control: max-age=10377942 x-hw: 1686342297.dop219.sk1.t,1686342297.cds224.sk1.hn,1686342297.cds240.sk1.c access-control-allow-origin: * timing-allow-origin: * X-Firefox-Spdy: h2`

	cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg	205.185.208.60		9 B
URL cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg IP 205.185.208.60:0 ASN #20446 STACKPATH-CDN File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET /m=ecuK8daaaa/videos/201602/03/67748611/original/5.jpg HTTP/1.1 Host: cdn-d-img.pornhub.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden date: Fri, 09 Jun 2023 20:24:57 GMT cache-control: max-age=63242 content-length: 9 content-type: text/plain accept-ranges: bytes x-hw: 1686342297.dop219.sk1.t,1686342297.cds224.sk1.hn,1686342297.cds251.sk1.c access-control-allow-origin: * timing-allow-origin: * X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css	193.108.118.54		4.0 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type ASCII text, with very long lines (4028), with no line terminators Size 4.0 kB (4028 bytes) Hash 64f6d7d923f18e5d25a4506b45fcd51d 0e636e489bba7af08cb17f8a72c5dc5685774057 18818b4b5458636324d294a8dee67dbde4808ae542e6cefa18ca6d90c1fc4479 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/modals_commons.css HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: text/css content-length: 4028 last-modified: Wed, 12 Jan 2022 11:10:28 GMT etag: "61deb724-fbc" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css	193.108.118.54		6.0 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type ASCII text, with very long lines (5955), with no line terminators Size 6.0 kB (5955 bytes) Hash 0fe9d8c60b2c31a97fa966d14be642ef eb4f94b637c54906ae38eb350b6310d552c75e6d 191ae0d72198f51609589e26c7d837d2978382861f60b360148e0af13c8583e1 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/layout.css HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: text/css content-length: 5955 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-1743" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css	193.108.118.54		8.3 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type ASCII text, with very long lines (8327), with no line terminators Size 8.3 kB (8327 bytes) Hash 8cd6ca47d55ffed774fde852523940e0 49e1e837355b3de08055c650488d0a3382bff9c0 17528d5914a702bb12ac6b36c8e3bbbfbcd3d52b54dd613acbacf8f4bb17ae33 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/widgets-comments.css HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: text/css content-length: 8327 last-modified: Wed, 12 Jan 2022 11:10:28 GMT etag: "61deb724-2087" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css	193.108.118.54		1.4 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type ASCII text, with very long lines (1391), with no line terminators Size 1.4 kB (1391 bytes) Hash 677a255a4a9dc3411b8013e8afb09c42 ec9f1a722b028da2eceb06cdc8c26fc6490a4e70 cc4494353809adb8bdfbbdea2ad72a1a0fc9c84816dc23c7ee1f9466e620eb5e HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/pb_block.css HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: text/css content-length: 1391 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-56f" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg	205.185.208.60		9 B
URL cdn-d-img.pornhub.com/m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg IP 205.185.208.60:0 ASN #20446 STACKPATH-CDN File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET /m=ecuK8daaaa/videos/201510/20/59925001/original/0.jpg HTTP/1.1 Host: cdn-d-img.pornhub.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 403 Forbidden date: Fri, 09 Jun 2023 20:24:57 GMT cache-control: max-age=42618 content-length: 9 content-type: text/plain accept-ranges: bytes x-hw: 1686342297.dop219.sk1.t,1686342297.cds224.sk1.hn,1686342297.cds205.sk1.c access-control-allow-origin: * timing-allow-origin: * X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/18.png	193.108.118.54		12 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/18.png IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Size 12 kB (12136 bytes) Hash 833a12d372440b20017502d3c72e0b20 5fb9301142e3c53f65cd16502b35d7d1d5f82b98 1531ac56322b89715a35b1cdb5ca1f79f453614f368455b2cc8ef650a992f8cd HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/18.png HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/png content-length: 12136 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-2f68" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png	193.108.118.54		22 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced\012- data Size 22 kB (21724 bytes) Hash 19b197d779dd9ee78737a456dbd5c1a6 a3f0b1d0659e5a76bdfaa52bb8f68096d1ab1359 806a8a4abe09c02f4e4b3ed4d6514bfcf1a93a941e838aadf56afaef858d8e37 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/681.png HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/png content-length: 21724 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-54dc" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg	193.108.118.54		28 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:03:16 09:26:15], baseline, precision 8, 118x88, components 3\012- data Size 28 kB (27900 bytes) Hash c1a5819d50b9125f0c46ded86fd5b4b6 3926c15be79cb7522cefdbf5066d39623e36a283 374f0cede3c1f91ad174b97554017b74cbd29424d7467d039beab541f6deb873 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/104.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 27900 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-6cfc" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg	193.108.118.54		17 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x88, components 3\012- data Size 17 kB (17350 bytes) Hash 215029a9775d1e9a56c93912ab03f4c6 6a3dbd676e2ea61850d2a20086b9ec84127da0ae e071c52839ef37679439165349ffdd98cf19aa7e35d0293a1bec69743db70b16 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/36.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 17350 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-43c6" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg	193.108.118.54		12 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data Size 12 kB (12525 bytes) Hash ea52ae32ae4319fb03da1672b0c20ed3 4efd8189179b260a4b51fd4b28d729b6143ef00a 43a4ca83560d5720ffeccf17478d6a1741f86639f35744fb61fcb139dc3020a6 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/27.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 12525 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-30ed" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg	193.108.118.54		11 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data Size 11 kB (11238 bytes) Hash 2f03fbd61721fdf46883333595050c77 8361f15c906a9457340fc21febd22b5ede56ac61 9f6c76cf695bc0785f4e4f8bb3abe93255af3ea1597307d567dc0fc93fa70560 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 11238 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-2be6" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg	193.108.118.54		14 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data Size 14 kB (13505 bytes) Hash 9903db279cf9714141daac34523f39b6 ac412f9ce9b8c50155e9adb9f5095d82519ccd24 f562892c60fef407c954fd73d6908003c42f832c4ae86f8264438a576ce2c1cd HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/35.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 13505 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-34c1" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg	193.108.118.54		13 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 118x88, components 3\012- data Size 13 kB (13106 bytes) Hash 99a404d25bcdd47a141dafdbe046d0cf 04de642c5cbc865c29ab3599c1c4fa19f2a6ba8e fbe779bcef340ba0b148f84b50a8323a2bbb493674e130bf877d87c6d163ed36 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/73.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 13106 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-3332" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg	193.108.118.54		16 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data Size 16 kB (15481 bytes) Hash 5a34545daf4bc481bcbc3573062aa426 132d09d36ede8f32c3168ecaaa631e5959ce38ef c044a81b14812c50f3142ad20d0ca862923daba2483eb164b0348ba98d3b7855 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 15481 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-3c79" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg	193.108.118.54		18 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 118x88, components 3\012- data Size 18 kB (17978 bytes) Hash 10e8794e65f20d32932985bf814b8965 0627b8648373340d2ba949fd7fe50611d11b033b 43b9f39f94acb50efb3b6981a6c931dcf25eefcc7b7734a927036255263eee39 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/28.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 17978 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-463a" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif	193.108.118.54		2.4 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type GIF image data, version 89a, 116 x 86\012- data Size 2.4 kB (2350 bytes) Hash ec706a0634f1e5e06ad775b2b2ebdcf2 5a18c424f7b84b40709a6b78b2d632639bb3ff2b 9613f59211bd2194336c666d11a0d2e1daa4dd96d543e661f5835e0a621c2f5d HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/categories_seeall.gif HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/gif content-length: 2350 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-92e" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg	193.108.118.54		9.0 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xae3bf698", progressive, precision 8, 258x145, components 3\012- data Size 9.0 kB (9007 bytes) Hash 58357cada0f0171d2a84540391219649 57123e69e055b4d818faedec09884135c5d4a31e 742c68ecf3dcc1096143a0a5d00f4a15a3edb13fd497ea2931e67e66826addd0 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/2.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 9007 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-232f" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg	193.108.118.54		9.6 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x70755b56", progressive, precision 8, 258x145, components 3\012- data Size 9.6 kB (9565 bytes) Hash 8fcd27f0bcc790f75f46d275a19a6300 556d3ca4dec168c77ae4a73c0c6e8291ef1291c0 78410be719ee73e00845d44e100e280d3989fc3d0fa4d3dcfcd888f13ded1843 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(1).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 9565 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-255d" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg	193.108.118.54		15 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 258x145, components 3\012- data Size 15 kB (14653 bytes) Hash bb05342bd1f87ae7624aba323af77dca 4b7c875644d0b6a424abf06cda89ad135bd53d81 828e2c12259274e1eb1c212f3498fb31503462023c4b2642da4f795209b755de HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/15.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 14653 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-393d" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg	193.108.118.54		10 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1d6d8e5e", progressive, precision 8, 258x145, components 3\012- data Size 10 kB (10352 bytes) Hash 1541881a313c963dc754657aefd89ef0 fb41198c81ac17da4f9a34e4b4bf21c8c7fe6001 75e1629d9fad2e22b9d9983c65874a19a3f639db43c11db713a7f972b8f72117 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 10352 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-2870" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg	193.108.118.54		9.0 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data Size 9.0 kB (9032 bytes) Hash 6c17c634ebd856cc85bedd931ac01680 d1e1b9358749b9fd4ff851bb4cbdce54a6223ce8 c1ced3a91bde391f64c6cef03b164cd89ffd499fa5d75a3f797bc57b1fc3c191 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/0.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 9032 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-2348" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg	193.108.118.54		8.3 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 258x145, components 3\012- data Size 8.3 kB (8266 bytes) Hash bc1cdeea817d887b981f26bc84236b93 4528ed7010e2e0c774890d6041a60cbeb3c69c92 d737ffd9379d8f2734c1dc6304e4ff75f1c946de29371a1ec9ddc01f423076dd HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/14.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 8266 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-204a" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg	193.108.118.54		9.3 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7cd1fc83", progressive, precision 8, 258x145, components 3\012- data Size 9.3 kB (9338 bytes) Hash 5ec2461279f77afe0c6fbb935bd0b94a 95c6e9171db79ea69ce718b02484e36816d1a1cd ac60e5738d3cf6d32004e1ddfcf4368e256f1928ea923f9369869b8e9af665ba HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 9338 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-247a" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg	193.108.118.54		9.9 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x50dba82c", progressive, precision 8, 258x145, components 3\012- data Size 9.9 kB (9914 bytes) Hash eed80bba1e2813e70d57a5f3a6bbdf09 3965668a7340d071731a89abf73cc4b3efe4dac3 9ef4f06c23420fae9b1fd163d0719be1b2b258d74d27f7933c810ad64c93ac93 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 9914 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-26ba" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg	193.108.118.54		8.9 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 258x145, components 3\012- data Size 8.9 kB (8885 bytes) Hash 77df6b7e2677b46a053508a92026cb8a decad70c5281062495250250fdf985b6073a8a91 6143cd3687b480264dad4e3d3a237c30c26c859ef7fe1c2a7b32472fb65710c0 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/8(2).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 8885 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-22b5" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg	193.108.118.54		12 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 258x145, components 3\012- data Size 12 kB (12127 bytes) Hash 081a01df58865529d3edcbc765c4dcb5 a7fe3ca35fe5e244926a80addda994218806f613 edebf400c8f60c306491e7b2f8a695b7dde10cf49eed66125423571a1cd60d05 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/5.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 12127 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-2f5f" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/button.png	193.108.118.54		20 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/button.png IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type PNG image data, 107 x 93, 8-bit/color RGBA, non-interlaced\012- data Size 20 kB (19948 bytes) Hash e2aadceedde9aef1bf42c176b31c585c 76c14eae7537160a304aa458bf11a985d5a57375 2b1ff8c49202306d33deac4cf49841f59c1a49d15c80a77c1e001369578cef3f HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/button.png HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/png content-length: 19948 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-4dec" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/load.gif	193.108.118.54		15 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/load.gif IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type GIF image data, version 89a, 64 x 64\012- data Size 15 kB (14574 bytes) Hash 571dfe045d66b88d2d5c82151a1bf579 8966eb7cd27754263bd2861737b695386273f423 7c7cd7a7155d3d38bb49fc82c83aa14ed24d56f6886623299b13b6a81486a871 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/load.gif HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/gif content-length: 14574 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-38ee" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg	193.108.118.54		3.8 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/flash.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data Size 3.8 kB (3829 bytes) Hash d660b4b574161fdee86ae57edc8ed0ab 0b947dc39c7ba7415dd78683e06366ff3848b2d5 7483a49fc67a21c7a295b03880aa6c37425f3e96d60dff1ac36eff743ecf6078 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/flash.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 3829 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-ef5" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg	193.108.118.54		24 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/panel.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:05:13 17:11:55], baseline, precision 8, 990x36, components 3\012- data Size 24 kB (23598 bytes) Hash ab6b76c0cc6683324bd7fe5923b24d17 559b8b1e50f80b7a218e25ce443e523401882577 a923ea85ee73e53db73038b2ea8712e7e40b067cde25b05ffa999608b17a304d HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/panel.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 23598 last-modified: Thu, 12 Sep 2019 09:25:04 GMT etag: "5d7a0ef0-5c2e" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg	193.108.118.54		887 B
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data Size 887 B (887 bytes) Hash 7754ce192cf45ea10de0706da442d2ff b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238 0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 887 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-377" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg	193.108.118.54		1.9 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data Size 1.9 kB (1889 bytes) Hash ddf58dd1f8745a81264b21bcf1f9cc77 73a35df521dc648af06e2e490cac929bc681a06c a2315bfaefeae19a449f38fe4131531c7603f5c7e75e956c240074da66123134 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1889 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-761" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg	193.108.118.54		1.4 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data Size 1.4 kB (1394 bytes) Hash 609e06417314a6476bc6d0f3c1900e20 0e2b0d425bd9e5cc0ebb386b093adf64d464ac1e 9450244a77e354c177c18a691c0e5f0c2fc5d0ddf921f40178cbb8bfe4a076ac HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(1).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1394 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-572" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg	193.108.118.54		2.6 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data Size 2.6 kB (2646 bytes) Hash 677577d8c6ffb0107ee5c9fbabaa4af7 0bfcbbafee19eeeae113103080c41cd95b4083e5 3a215afa0d15ae2985cfb88e51e90b727f0ba03fe10f8e0b0980ef55af91bdb0 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(2).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 2646 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-a56" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg	193.108.118.54		1.2 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data Size 1.2 kB (1191 bytes) Hash 1226a24c469c0fba3970548aab13650f a6d371e4acc2a9181d1d6bf13b5d51f82c49a943 6a1513dacd3fcffe47245068fe9fa6a49cdc9c352b8d9cbf8f72005c4cf5cafc HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(3).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1191 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-4a7" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg	193.108.118.54		1.7 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data Size 1.7 kB (1729 bytes) Hash 3db490cc8f824e29d6fb07ba75a97a20 84c2c26447f7b49c76999f31c0ed526bde13c6c4 5c13ca439c63d5f3e5d638ba055f399058117d3b554ae3fb751d4a39043a14fd HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(4).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1729 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-6c1" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg	193.108.118.54		1.4 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xb7d2e3cb", progressive, precision 8, 60x60, components 3\012- data Size 1.4 kB (1441 bytes) Hash 47e765dc1abef2d79edafb5fce1c64b5 93d3e7f1e11dd2d98ca3ffb3b49a0211ed76f273 185540f06acc82b2dc4bdfa6d2deb4ce7454bb1e28783acdde67f8a9a90597b1 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(5).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1441 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-5a1" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg	193.108.118.54		1.8 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data Size 1.8 kB (1809 bytes) Hash f042aa7a438ca85be0afeba44a3ac116 183c8b20394fdaf6ba757ff76d3f25e33092369e 05b76ed86b70990f4307223391e1c9abfff59ec545d75d94683c0f69713eed79 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(6).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1809 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-711" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg	193.108.118.54		1.9 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data Size 1.9 kB (1902 bytes) Hash 16b2fab44ddad0b620d0eaec2fc1e425 24fa279de6ceb2c0434ff4e750639e15eb22ed29 58076ed17c6377d23375ec949c6cb2eade75010dcf82ba0e64dbdcbd67583912 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(7).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1902 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-76e" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg	193.108.118.54		1.1 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x0bb5b909", progressive, precision 8, 60x60, components 3\012- data Size 1.1 kB (1085 bytes) Hash 01ed303509acb0c822fa3c55976d4b96 7ed250f181498962ebafd21f1bde4ca15e6953c6 fba198ced4795895d1f6d0bc2247d315eb8cc6dda60ad119c99846d68d0ce445 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(8).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1085 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-43d" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg	193.108.118.54		2.4 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data Size 2.4 kB (2350 bytes) Hash ec2823c426475d6766008dabf85a4bc2 f0681ce27ba96a1b4f6547a42495ebb5b0ca514a 2316f8554d54e907f9992475ced3bf03fc95412e98b2bc29aa6e5407260bcddd HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(9).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 2350 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-92e" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg	193.108.118.54		2.0 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data Size 2.0 kB (1979 bytes) Hash 3f809b94b5e5607da5b5c6506a8729c1 26f4376095902a56db86ea2c76689f15ba3cf9c2 7b84461772bad27e431676a53efae81d8584a102f3f6f407ae0a54469a938ff6 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(10).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1979 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-7bb" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg	193.108.118.54		3.1 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xd191bb02", progressive, precision 8, 60x60, components 3\012- data Size 3.1 kB (3063 bytes) Hash cbff1c490bcdcad2989c2549f278eae5 56e1b4489cfc0d54f9f72e15777788beba396c95 6d96d3de01207ab505c62b2da624ba787cabe4fee767c181b175186e50c23af4 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(11).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 3063 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-bf7" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg	193.108.118.54		1.8 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data Size 1.8 kB (1758 bytes) Hash 52eba434e5411806cd92add275d164ea 0cc9df3c52de111a307dc3d8d22254cf51b0c77f a4c2a01f64274d0ede23e233e2be19225c68e5e5a6206b338fb8bc6410f7005f HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(12).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1758 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-6de" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png	193.108.118.54		1.0 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data Size 1.0 kB (1045 bytes) Hash c840b43a0575b0a1742c50f186a67c22 d1ac0da47b4394a9dbea90eee26a260b5268c4d9 6a8ef9be89e89c23d6d96c50e2fa62bd25473e9cc7a79e2cd1ef64e2647cb38a HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/wink.png HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/png content-length: 1045 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-415" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg	193.108.118.54		1.4 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.2 0x2a0818fe", progressive, precision 8, 60x60, components 3\012- data Size 1.4 kB (1373 bytes) Hash a08c2c5266f9701e422f042b4a3809c5 9884cf987f84b282f920634b2ab811077dfef7a3 054df6bf8ee2bcb904269745cd2c0830918d9e1a6ff1f965673af5f2946a3c37 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(13).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1373 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-55d" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg	193.108.118.54		1.6 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe0e89376", progressive, precision 8, 60x60, components 3\012- data Size 1.6 kB (1563 bytes) Hash bfa11442f9457a03384ecf8128a586a2 a30e6f6a18be085197605b6463f840cb249d0510 941411042624c554a5828ee596c1e3ade4a787ae2fad6e5b6d585ab6a6e1e3c6 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(14).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 1563 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-61b" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png	193.108.118.54		1.0 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data Size 1.0 kB (1046 bytes) Hash 96f46fad8cda5895b895f6ec3f95cda4 3bd79ef305bfa4b7c1a3f328828c63f89a818878 8e48576faf920cae224c669d61831d0ad5fc23f6220e83955275a3115bb568fc HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/tongue.png HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/png content-length: 1046 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-416" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg	193.108.118.54		887 B
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data Size 887 B (887 bytes) Hash 7754ce192cf45ea10de0706da442d2ff b5b7d0fcf5e84b04b34629d5a5a9c0bb69ca5238 0bfd7fc5264b6cede1f78a26a96cee917f96989822aa2aa20ac854e13ad46b2b HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/male(1).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 887 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-377" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg	193.108.118.54		841 B
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6e5cd524", progressive, precision 8, 60x60, components 3\012- data Size 841 B (841 bytes) Hash 9cf522c306866742c2806e0c14c8bca7 7a3ff28af2c6f7cfd036ec4fc162651eaf634f7e fa09bef7875241c06a9e2505bc698a189d3b3ce012af29c65817fd476627ec87 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(15).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 841 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-349" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg	193.108.118.54		2.6 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0xe705e0c1", progressive, precision 8, 60x60, components 3\012- data Size 2.6 kB (2553 bytes) Hash 950ff8ae916df997fea302859ca2ccb4 42232e28878f65aaf4120d9435784ad46c2be71c c0b01da5a48a7ddd619a2dee26bec77300b68bb1b028716320719f9c1a5f769e HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/200x200(16).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 2553 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-9f9" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg	193.108.118.54		4.6 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 150x84, components 3\012- data Size 4.6 kB (4644 bytes) Hash 0fa4a903a2adc9da58b52661ebc8d38c 061c6359c2951da7509f6ae4039c2f0bc1ce6b62 79d6da7e0398c3f607c4bbc93562cf6ab96bb800cdab4ef6df82718cf0a0d3e5 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/11.jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 4644 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-1224" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg	193.108.118.54		4.4 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data Size 4.4 kB (4397 bytes) Hash 58477c52a9d639b91b16f022d4676bcf 51a85ef703617e996c50cd76b38f2507517a9f25 a0653cc819b252702f55439d6f8763d212fca2f9f604d67224a2a9891e8eadbe HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(1).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 4397 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-112d" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg	193.108.118.54		7.0 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x7ab4f024", progressive, precision 8, 233x131, components 3\012- data Size 7.0 kB (6972 bytes) Hash 2a4d527ed65de8e2e0a69dc9d50442d2 8ec4547a38c9e3d37469acfe21ea755531776f09 275876bbb5190da100ae4f9aca976ec15cea0de20d42e167f522a0a50ba8ca02 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(2).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 6972 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-1b3c" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg	193.108.118.54		4.3 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data Size 4.3 kB (4315 bytes) Hash 365e215442256548316a73bc7c79edf1 13078402132cb89939a39edf11181fb88ebe390f f8c35c02ff055694af23c83b1e3019a8c29965ab57ed7db8173a23a38494ff58 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/10(1).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 4315 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-10db" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg	193.108.118.54		4.0 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x541b39db", progressive, precision 8, 150x84, components 3\012- data Size 4.0 kB (4035 bytes) Hash 416ec3af020687541765d48acb81fc08 48b80345ffb951535d4d6ca811d19bd9dd726998 75c30d77f900b2f4c91f502f45f00606b57a47bb84e6b700fb18482389d88f3c HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(3).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 4035 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-fc3" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg	193.108.118.54		8.6 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x905c306b", progressive, precision 8, 233x131, components 3\012- data Size 8.6 kB (8615 bytes) Hash 55778c73ba99a9477464e5c90cdd7e02 bc49e8058f1dafe10e817441de952ba6aa3b7b58 c362fc3a2aafd1b0d8069fb1fae83b5f0abb06443d3e00b21b37be13aeb75bfa HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(4).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 8615 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-21a7" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg	193.108.118.54		5.1 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x852b408e", progressive, precision 8, 150x84, components 3\012- data Size 5.1 kB (5080 bytes) Hash 72e270f7041c2fe2f326d11e162fb249 3f918a2023f10a01a2ed74713d292df415d14e05 b17ce663fab4421f728ea0dd218d2a8a6a10a4314759fdf139b9388fa26e37f6 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(2).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 5080 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-13d8" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg	193.108.118.54		4.4 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x6359dcbc", progressive, precision 8, 150x84, components 3\012- data Size 4.4 kB (4417 bytes) Hash 447470b34b66b570c8fc0dbc11c06609 863180b376242e256189888eb99282e597d894c9 dd57f5a80517b8109279b57d702278f31a9878295045c6766931a0453244d749 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/7(2).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 4417 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-1141" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg	193.108.118.54		7.9 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 233x131, components 3\012- data Size 7.9 kB (7904 bytes) Hash 5df975e7a8c0b2610069610c54c5ce6c ab6390fbb7be1be9a0f4477b4439e34d5175b6fc bbfb6830dabc55fd598cc0948049f2367d17c80f286e0821e660ba7f5a6b360c HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(1).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 7904 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-1ee0" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg	193.108.118.54		3.8 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x8c97c7da", progressive, precision 8, 150x84, components 3\012- data Size 3.8 kB (3835 bytes) Hash 6ed4eca1ed776930746531005fcf22aa 11e8643932e35a8ef65be8ef585afee241c8eddc 28849006b773d85fb8fb2295a86bcee5d2cdabb9a23d854ffebbd8dfd203588c HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/12(5).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 3835 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-efb" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg	193.108.118.54		4.7 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x550d5e4d", progressive, precision 8, 150x84, components 3\012- data Size 4.7 kB (4664 bytes) Hash 12f0c14e5943fd57577ce11155107bdb a484cb296770fe6cb55d25cba19f831cf1aaf7d1 9eb468f7688a901a3626fdde8d0b07dc490a830718c2938d32f70f0ec122a344 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/13(2).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 4664 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-1238" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg	193.108.118.54		6.8 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.12.0.4 0x1f7d625b", progressive, precision 8, 233x131, components 3\012- data Size 6.8 kB (6827 bytes) Hash 2ad4260dc1204ad8f3c0c29bd919830a fd2ddfca32f55ba5d180af812a787e61ce136480 acc8f76a570c0833d34835f5694409e082b4af09783366596c2e151e0b0ed128 HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/3(3).jpg HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/jpeg content-length: 6827 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-1aab" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif	193.108.118.54		1.9 kB
URL news-refexa.com/lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif IP 193.108.118.54:0 ASN #61003 GlobalTeleHost Corp. File type GIF image data, version 89a, 88 x 31\012- data Size 1.9 kB (1882 bytes) Hash 2bcf55138cde4a65770426a67ea247fc 13d8c808a4276dc88937817d7df7720182c093f6 348fd1e58aec8d99001aca1dd12b72eafef534c2d11725b2280a173d03b5fa6b HTTP Headers GET /lands/38/landings/Ihyam_7H2-fd/index.php_files/rta-1.gif HTTP/1.1 Host: news-refexa.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/lands/38/?site=8060051&sub1=&sub2=vml86513035fs&sub3=&sub4= Cookie: clickdata=ODA2MDA1MXw6fDM4fDp8fDp8dm1sODY1MTMwMzVmc3w6fHw6fA%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:57 GMT content-type: image/gif content-length: 1882 last-modified: Thu, 12 Sep 2019 09:25:02 GMT etag: "5d7a0eee-75a" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash df893f12f5cf31daedf4910ffcc872c8 bbd271b0e76cd11d6a00327914b74882c95655fb 134d16adfc51baecc40c9fba86cc6c2d37b489435c99878912d1948543a0337b HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Jun 2023 20:24:57 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	l1kbg.webout.life/	136.243.92.2		1.6 kB
URL l1kbg.webout.life/ IP 136.243.92.2:0 ASN #24940 Hetzner Online GmbH File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators Size 1.6 kB (1561 bytes) Hash da87631d53dc79fcd4a2c3a8d35bfbcf 0ef434d3aba7d3bf0a98024d9817a8b6e402bc2c 839fc74c578d44389f93dd40160181e9e551de48f172a70f0351ebde6f71fb7d HTTP Headers `GET / HTTP/1.1 Host: l1kbg.webout.life User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://news-refexa.com/ DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:58 GMT content-type: text/html; charset=UTF-8 content-length: 1561 vary: Accept-Encoding content-encoding: gzip strict-transport-security: max-age=63072000 X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash df893f12f5cf31daedf4910ffcc872c8 bbd271b0e76cd11d6a00327914b74882c95655fb 134d16adfc51baecc40c9fba86cc6c2d37b489435c99878912d1948543a0337b HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Jun 2023 20:24:58 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	fonts.googleapis.com/css?family=Roboto:300,400,700,400i&subset=cyrillic	142.250.74.106		1.2 kB
URL fonts.googleapis.com/css?family=Roboto:300,400,700,400i&subset=cyrillic IP 142.250.74.106:0 ASN #15169 GOOGLE File type gzip compressed data, max compression\012- data Size 1.2 kB (1230 bytes) Hash 91d005a9b65aa17fa19925bfc690bf9e f98b9c0012c1e02c3b35ad688c95e53e33dd20ac ef0601263e400f0c5ca2699802eb3908690c496cac35d1971000dfa61ca4efed HTTP Headers `GET /css?family=Roboto:300,400,700,400i&subset=cyrillic HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://l1kbg.webout.life/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Fri, 09 Jun 2023 20:24:58 GMT date: Fri, 09 Jun 2023 20:24:58 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash cfa2f4faaa3c178ca36297b0c4264e37 7a77047e893a983873f15a67f94b2be4b114be43 faebb1831224e4843915d60cdc5f707ea6de1fd82d1e3b9620bc5c9b611729b6 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Jun 2023 20:24:58 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash cfa2f4faaa3c178ca36297b0c4264e37 7a77047e893a983873f15a67f94b2be4b114be43 faebb1831224e4843915d60cdc5f707ea6de1fd82d1e3b9620bc5c9b611729b6 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Jun 2023 20:24:58 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2	216.58.207.227	200 OK	16 kB
URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP 216.58.207.227:443 ASN #15169 GOOGLE Requested by https://l1kbg.webout.life/ Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5 ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Size 16 kB (15744 bytes) Hash 15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615 HTTP Headers GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://l1kbg.webout.life DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 15744 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Sat, 03 Jun 2023 07:44:41 GMT expires: Sun, 02 Jun 2024 07:44:41 GMT cache-control: public, max-age=31536000 age: 564017 last-modified: Wed, 11 May 2022 19:24:48 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	eighter.fun/g69Hg9Hh	104.21.59.197	302 Found	17 kB
URL User Request GET HTTP/2 eighter.fun/g69Hg9Hh IP 104.21.59.197:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjecteighter.fun Fingerprint59:CE:D0:79:B7:FE:92:70:2E:53:2D:6F:39:A3:24:7B:64:52:A1:5D ValiditySat, 03 Jun 2023 15:21:51 GMT - Fri, 01 Sep 2023 15:21:50 GMT File type data Size 17 kB (16793 bytes) Hash 0a16f07f42e0266d8e379bd9d17dacf0 5bf81fb2d495723910231c9521e38e3ef1085e43 3356c12a37bf82e9f68a7961e2b56a9d7dbbbcaec8fd38dc99ccc33865cdcc48 HTTP Headers `GET /g69Hg9Hh HTTP/1.1 Host: eighter.fun User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://news-refexa.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found date: Fri, 09 Jun 2023 20:24:57 GMT content-type: text/html; charset=UTF-8 location: https://l1kbg.webout.life cache-control: no-cache, no-store, must-revalidate,post-check=0,pre-check=0 expires: 0 last-modified: Fri, 09 Jun 2023 20:24:57 GMT pragma: no-cache set-cookie: _subid=1sisi1a1303692;Expires=Monday, 10-Jul-2023 20:24:57 GMT;Max-Age=2678400;Path=/ _token=uuid_1sisi1a1303692_1sisi1a130369264838a99d7c9e5.50435481;Expires=Monday, 10-Jul-2023 20:24:57 GMT;Max-Age=2678400;Path=/ 330d8=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjU3M1wiOjE2ODYzNDIyOTd9LFwiY2FtcGFpZ25zXCI6e1wiMTE2XCI6MTY4NjM0MjI5N30sXCJ0aW1lXCI6MTY4NjM0MjI5N30ifQ.HmH-6fdkpCxiXDybUP2Rd3ctzMEtr9hRM6BeiwSud40;Expires=Monday, 16-Nov-2076 16:49:54 GMT;Max-Age=1686428697;Path=/ vary: Accept-Encoding access-control-allow-origin: * cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BstqJ9yDa0lqeIUmKncqH6KboGjkloqesHBCRKvscmff7%2FbXJ299YFEhAefHD93RqIUVNubvcIdcqUtC6%2FOeV3ynmzs3AYAEhXyQoZ%2B9jXICagQch9EIDuPQ25k%2BLw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 7d4c19e149a5b505-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	l1kbg.webout.life/images/simple/adult/background.jpg	136.243.92.2	200 OK	151 kB
URL GET HTTP/2 l1kbg.webout.life/images/simple/adult/background.jpg IP 136.243.92.2:443 ASN #24940 Hetzner Online GmbH Requested by https://l1kbg.webout.life/ Certificate IssuerLet's Encrypt Subjectwebout.life Fingerprint9A:85:AC:BE:85:02:88:23:7A:CF:36:06:C4:59:7F:96:DE:FE:B6:3F ValidityTue, 25 Apr 2023 17:16:07 GMT - Mon, 24 Jul 2023 17:16:06 GMT File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=2667, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=4000], baseline, precision 8, 4000x2667, components 3\012- data Size 151 kB (151270 bytes) Hash d06243db5eaed3c22dd6794f0384be16 752c841153c3fc67482180d49c8492021def9817 9f4e5aae6461b0d857a26e03d10a44ccc41db096b257a33c5c58f6961b32ad30 HTTP Headers `GET /images/simple/adult/background.jpg HTTP/1.1 Host: l1kbg.webout.life User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://l1kbg.webout.life/css/simple/adult.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:58 GMT content-type: image/jpeg content-length: 151270 last-modified: Tue, 29 Mar 2022 11:54:01 GMT etag: "6242f359-24ee6" expires: Mon, 12 Jun 2023 20:24:58 GMT cache-control: max-age=259200, public, must_revalidate accept-ranges: bytes X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash cfa2f4faaa3c178ca36297b0c4264e37 7a77047e893a983873f15a67f94b2be4b114be43 faebb1831224e4843915d60cdc5f707ea6de1fd82d1e3b9620bc5c9b611729b6 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Jun 2023 20:24:58 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	l1kbg.webout.life/site/set-cache	136.243.92.2		1 B
URL l1kbg.webout.life/site/set-cache IP 136.243.92.2:0 ASN #24940 Hetzner Online GmbH File type very short file (no magic) Size 1 B (1 bytes) Hash c4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b HTTP Headers `POST /site/set-cache HTTP/1.1 Host: l1kbg.webout.life User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://l1kbg.webout.life/ Content-Type: application/json Content-Length: 226 Origin: https://l1kbg.webout.life DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:58 GMT content-type: text/html; charset=UTF-8 content-length: 1 access-control-allow-origin: * access-control-allow-methods: POST, OPTIONS access-control-allow-headers: content-type strict-transport-security: max-age=63072000 X-Firefox-Spdy: h2`

	l1kbg.webout.life/js/jquery.js	136.243.92.2	200 OK	87 kB
URL GET HTTP/2 l1kbg.webout.life/js/jquery.js IP 136.243.92.2:443 ASN #24940 Hetzner Online GmbH Requested by https://l1kbg.webout.life/ Certificate IssuerLet's Encrypt Subjectwebout.life Fingerprint9A:85:AC:BE:85:02:88:23:7A:CF:36:06:C4:59:7F:96:DE:FE:B6:3F ValidityTue, 25 Apr 2023 17:16:07 GMT - Mon, 24 Jul 2023 17:16:06 GMT File type ASCII text, with very long lines (65450), with CRLF line terminators Size 87 kB (86929 bytes) Hash 378087a64e1394fc51f300bb9c11878c 0c3192b500a4fd550e483cf77a49806a5872185b 4fe68fa216176e6d1f4580e924bafecc9f519984ecc06b1a840a08b0d88c95de HTTP Headers `GET /js/jquery.js HTTP/1.1 Host: l1kbg.webout.life User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://l1kbg.webout.life/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:58 GMT content-type: application/javascript last-modified: Tue, 29 Mar 2022 11:54:01 GMT etag: W/"6242f359-15391" expires: Mon, 12 Jun 2023 20:24:58 GMT cache-control: max-age=259200, public, must_revalidate content-encoding: br X-Firefox-Spdy: h2`

	realrb.bid/pushJs/Ae7lrjHov.js	95.216.65.102	200 OK	35 kB
URL GET HTTP/2 realrb.bid/pushJs/Ae7lrjHov.js IP 95.216.65.102:443 ASN #24940 Hetzner Online GmbH Requested by https://l1kbg.webout.life/ Certificate IssuerLet's Encrypt Subjectrealrb.bid FingerprintD5:35:9D:B3:AB:AF:4A:C8:C3:D8:DF:71:A5:88:A3:50:74:76:A7:82 ValidityFri, 05 May 2023 17:48:35 GMT - Thu, 03 Aug 2023 17:48:34 GMT File type Size 35 kB (34603 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /pushJs/Ae7lrjHov.js HTTP/1.1 Host: realrb.bid User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://l1kbg.webout.life/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: cloudflare-nginx date: Fri, 09 Jun 2023 20:24:58 GMT content-type: application/javascript last-modified: Wed, 08 Feb 2023 11:47:20 GMT etag: W/"63e38bc8-872b" expires: Fri, 09 Jun 2023 20:34:58 GMT cache-control: max-age=600, public, must_revalidate strict-transport-security: max-age=63072000 content-encoding: br X-Firefox-Spdy: h2`

	l1kbg.webout.life/css/simple/adult.css	136.243.92.2	200 OK	3.5 kB
URL GET HTTP/2 l1kbg.webout.life/css/simple/adult.css IP 136.243.92.2:443 ASN #24940 Hetzner Online GmbH Requested by https://l1kbg.webout.life/ Certificate IssuerLet's Encrypt Subjectwebout.life Fingerprint9A:85:AC:BE:85:02:88:23:7A:CF:36:06:C4:59:7F:96:DE:FE:B6:3F ValidityTue, 25 Apr 2023 17:16:07 GMT - Mon, 24 Jul 2023 17:16:06 GMT File type ASCII text, with very long lines (3924), with no line terminators Size 3.5 kB (3506 bytes) Hash edc274139539ba0b4ea977ca879426b6 855e98f92c3d906f508bc5d3f0ed6b326daa827d 3c034be3de46d9d9d6d9ea175c086b885c8e20a01fedb32b1a2902b198a31843 HTTP Headers `GET /css/simple/adult.css HTTP/1.1 Host: l1kbg.webout.life User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://l1kbg.webout.life/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:58 GMT content-type: text/css last-modified: Tue, 29 Mar 2022 11:54:01 GMT etag: W/"6242f359-db2" expires: Mon, 12 Jun 2023 20:24:58 GMT cache-control: max-age=259200, public, must_revalidate content-encoding: br X-Firefox-Spdy: h2`

	l1kbg.webout.life/images/simple/adult/favicon.ico	136.243.92.2	200 OK	1.2 kB
URL GET HTTP/2 l1kbg.webout.life/images/simple/adult/favicon.ico IP 136.243.92.2:443 ASN #24940 Hetzner Online GmbH Requested by https://l1kbg.webout.life/ Certificate IssuerLet's Encrypt Subjectwebout.life Fingerprint9A:85:AC:BE:85:02:88:23:7A:CF:36:06:C4:59:7F:96:DE:FE:B6:3F ValidityTue, 25 Apr 2023 17:16:07 GMT - Mon, 24 Jul 2023 17:16:06 GMT File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data Size 1.2 kB (1150 bytes) Hash 183cab2f5d4582ef71ae37efc8d458dd 7c230eba9c1ce7900ea9bbf53dde00ea068dc995 c96fb13d89231c5a743ca1826064cd884ed4ec629fd66f15c0dbcf173dfbbf3e HTTP Headers `GET /images/simple/adult/favicon.ico HTTP/1.1 Host: l1kbg.webout.life User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://l1kbg.webout.life/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 09 Jun 2023 20:24:58 GMT content-type: image/x-icon last-modified: Tue, 29 Mar 2022 11:54:01 GMT etag: W/"6242f359-47e" expires: Mon, 12 Jun 2023 20:24:58 GMT cache-control: max-age=259200, public, must_revalidate content-encoding: br X-Firefox-Spdy: h2`

	fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2	216.58.207.227	200 OK	16 kB
URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP 216.58.207.227:443 ASN #15169 GOOGLE Requested by https://l1kbg.webout.life/ Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5 ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Size 16 kB (15860 bytes) Hash e9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860 HTTP Headers GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://l1kbg.webout.life DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 15860 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Sat, 03 Jun 2023 03:11:48 GMT expires: Sun, 02 Jun 2024 03:11:48 GMT cache-control: public, max-age=31536000 age: 580390 last-modified: Wed, 11 May 2022 19:24:42 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (90)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type