Overview

URLhttp://www.masoudpc.blogfa.com/post-636.aspx
IP38.74.1.50
ASNAS174 Cogent/PSI
Location United States
Report completed2012-11-06 20:29:30 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 20:28:59 urlQuery Client Internal IP2ET CURRENT_EVENTS DNS Query to a .tk domain - Likely Hostile
2012-11-06 20:28:59 urlQuery Client 5.9.85.1242ET CURRENT_EVENTS HTTP Request to a *.tk domain
2012-11-06 20:28:59 urlQuery Client Internal IP2ET CURRENT_EVENTS DNS Query to a .tk domain - Likely Hostile
2012-11-06 20:28:59 urlQuery Client Internal IP2ET CURRENT_EVENTS DNS Query to a .tk domain - Likely Hostile
2012-11-06 20:28:59 urlQuery Client 5.9.85.1242ET CURRENT_EVENTS HTTP Request to a *.tk domain
2012-11-06 20:29:00 urlQuery Client 5.9.85.1242ET CURRENT_EVENTS HTTP Request to a *.tk domain
2012-11-06 20:29:15 urlQuery Client Internal IP2ET CURRENT_EVENTS DNS Query to a .tk domain - Likely Hostile
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 38.74.1.50

Date Alerts / IDS URL IP
2013-01-16 05:05:530 / 3http://iranfoodpack.blogfa.com38.74.1.50
2012-12-13 06:07:010 / 0http://www.isfahancity.blogfa.com38.74.1.50
2012-12-06 13:16:290 / 3http://kahkeshan122.blogfa.com/38.74.1.50
2012-11-11 06:49:340 / 2http://iranilove.blogfa.com38.74.1.50
2012-11-03 09:31:410 / 3http://kacoli.blogfa.com/38.74.1.50
2012-10-31 17:41:130 / 1http://rendez-vous.blogfa.com38.74.1.50

Last 6 reports on ASN: AS174 Cogent/PSI

Date Alerts / IDS URL IP
2013-02-16 21:42:411 / 3http://www.morvariddarya.com/38.117.65.89
2013-02-16 19:22:500 / 1http://e-clicking.in38.101.213.240
2013-02-15 00:34:090 / 0http://154.54.28.130154.54.28.130
2013-02-15 00:30:120 / 0http://38.126.51.3438.126.51.34
2013-02-14 23:21:230 / 0http://38.119.86.112/subdivision.php38.119.86.112
2013-02-14 23:03:210 / 0http://www.abujosa.net149.13.20.193



JavaScript

Executed Scripts (14)


Executed Evals (0)


Executed Writes (6)

#1 JavaScript::Write (size: 244, repeated: 1) 

<a href="javascript:void(0)" onclick="javascript:window.open('/comments/?blogid=masoudpc&postid=636&timezone=12600','blogfa_comments','status=yes,scrollbars=yes,toolbar=no,menubar=no,location=no ,width=500px,height=500px')" >"14ÌH F81'* </a>

#2 JavaScript::Write (size: 546, repeated: 1) 

<a target="_blank" href="http://zahtab.com/ads/click.php?a=151&z=1&c=1&adurl=61881"><img alt="/H3*Ì'(Ì" border=0 src="http://zahtab.com/ads/banners/151-1-1352098449.png" width="468" height="60"></a><table width="468"><tr><td height="12" width="100%" style="padding: 0px; margin: 0px; border-style:none; text-align:center"><a target="_blank" href="http://zahtab.com/ads//page.php?page=adm" target="_blank" style="text-decoration:none; font-size: 10px; font-family: tahoma; line-height: 1.2; color:;">*(DÌ:'* (' 2G*'(</a></td></tr></table>

#3 JavaScript::Write (size: 605, repeated: 1) 

<div align="center"><iframe scrolling=no width=125 height=110 border=0 frameborder=0 allowtransparency="true" src="http://engine.webgozar.com/counter/xstat.aspx?t=sum1&code=2707938&rnd=10063&s=1176x885&c=2&ref=&title=%u062A%u0631%u0641%u0646%u062F%u0633%u0631%u0627%20-%20%u0645%u0639%u0631%u0641%u06CC%20%u0633%u0627%u06CC%u062A%u06CC%20%u0628%u0631%u0627%u06CC%20%u0627%u0637%u0645%u06CC%u0646%u0627%u0646%20%u0627%u0632%20%u0633%u0627%u0644%u0645%20%u0628%u0648%u062F%u0646%20%u06CC%u06A9%20%u0633%u0627%u06CC%u062A%20%u0627%u0632%20%u0646%u0638%u0631%20%u0648%u06CC%u0631%u0648%u0633" ></iframe></div>

#4 JavaScript::Write (size: 223, repeated: 1) 

<head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><center><iframe src="http://clicktala.com/banner/" width="522" height="202" frameborder="0" style="border:0px solid #cccccc"></iframe></center>

#5 JavaScript::Write (size: 479, repeated: 1) 

<iframe src="http://service.persianstat.com/Stats.aspx?psid=10165151&psop=0&pscn=referral&pscr=masoudpc.blogfa.com&psct=/post-636.aspx&psep=0&psuq=0&psuu=0&psrd=1426063852&pscs=UTF-8&pswh=1176x885&pssc=24&psul=en-us&psje=1&pspl=1&pstl=Untitled%20Document&pshn=clicktala.com&pspt=%2Fbanner%2F&psrf=www.masoudpc.blogfa.com%2Fpost-636.aspx" height="16" width="16" scrolling="no" marginwidth="0" allowtransparency="true" frameborder="no" marginheight="0" name="PersianStat"></iframe>

#6 JavaScript::Write (size: 111, repeated: 1) 

<script type="text/javascript" src="http://zahtab.com/ads/show.php?z=1&pl=431&j=1&code=1352230140322"></script>


HTTP Transactions (46)


Request Response 
GET /post-636.aspx HTTP/1.1

Host: www.masoudpc.blogfa.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 19:28:43 GMT
Content-Length: 15448
GET /image/modir.jpg HTTP/1.1

Host: masoudpc1.persiangig.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 14:22:28 GMT
Server: Apache/2.2.8 (Unix)
Last-Modified: Sun, 30 Sep 2012 19:42:54 GMT
Etag: &quot;5ca33f-977-4caf07ec5347f&quot;
Accept-Ranges: bytes
Content-Length: 2423
Content-Control: private
Connection: close
GET /image/favicon.jpg HTTP/1.1

Host: masoudpc1.persiangig.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 14:22:28 GMT
Server: Apache/2.2.8 (Unix)
Last-Modified: Sun, 30 Sep 2012 18:15:02 GMT
Etag: &quot;6e057c-c6-4caef4481f62f&quot;
Accept-Ranges: bytes
Content-Length: 198
Content-Control: private
Connection: close
GET /image/tabadolelink.jpg HTTP/1.1

Host: masoudpc1.persiangig.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 14:22:28 GMT
Server: Apache/2.2.8 (Unix)
Last-Modified: Sun, 30 Sep 2012 18:28:00 GMT
Etag: &quot;5ca1a7-94d-4caef72e8e9b9&quot;
Accept-Ranges: bytes
Content-Length: 2381
Content-Control: private
Connection: close
GET /image/linkbox.jpg HTTP/1.1

Host: masoudpc1.persiangig.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 14:22:28 GMT
Server: Apache/2.2.8 (Unix)
Last-Modified: Sun, 30 Sep 2012 18:28:00 GMT
Etag: &quot;5ca1a8-8b3-4caef72e90511&quot;
Accept-Ranges: bytes
Content-Length: 2227
Content-Control: private
Connection: close
GET /ads/banner2/4800811289705.gif HTTP/1.1

Host: www.blogfa.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Thu, 09 Aug 2012 03:52:08 GMT
Accept-Ranges: bytes
Etag: &quot;287a9659e275cd1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 19:27:54 GMT
Content-Length: 18889
GET /Vista-1/Jpeg/other/7.jpg HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;5c3-4ec525b6-ce858d&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 1475
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Vista-1/c.css HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: text/css

Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;728-4ec525b6-ce8588&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 713
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Vista-1/Gif/4.gif HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;3d2-4ec525b6-ce85b1&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 978
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Vista-1/Gif/2.gif HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;3c0-4ec525b6-ce85b3&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 960
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Vista-1/Jpeg/other/3.jpg HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;514-4ec525b6-ce8585&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 1300
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Vista-1/Jpeg/other/1.jpg HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;3ac-4ec525b6-ce8582&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 940
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Table_title_bg.gif HTTP/1.1

Host: www.masoudpc.blogfa.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 404 Not Found

Content-Type: text/html

Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 19:28:49 GMT
Content-Length: 1245
GET /pop.js HTTP/1.1

Host: pop2.blogfacod.tk

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: close
Etag: &quot;ea4-5090108a-0&quot;
Last-Modified: Tue, 30 Oct 2012 17:38:18 GMT
Content-Length: 1439
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Vista-1/Jpeg/other/6.jpg HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;15c-4ec525b6-ce858f&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 348
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Vista-1/Gif/6.gif HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;28b-4ec525b6-ce85b2&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 651
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Vista-1/Gif/1.gif HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;98-4ec525b6-ce85b5&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 152
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Vista-1/Gif/5.gif HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;6af-4ec525b6-ce85b7&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 1711
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Vista-1/Jpeg/3.jpg HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;151-4ec525b6-ce85bf&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 337
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /Vista-1/Gif/3.gif HTTP/1.1

Host: themeupload.theme-designer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 19:28:58 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;83a-4ec525b6-ce85b0&quot;
Last-Modified: Thu, 17 Nov 2011 15:18:14 GMT
Content-Length: 2106
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:58 GMT
GET /photo/m/masoudpc.jpg HTTP/1.1

Host: www.blogfa.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Last-Modified: Sat, 24 Sep 2011 13:17:27 GMT
Accept-Ranges: bytes
Etag: &quot;cad2874ebc7acc1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 19:28:00 GMT
Content-Length: 3717
GET /bb.Js HTTP/1.1

Host: www.pic2.blogfacod.tk

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 06 Nov 2012 19:28:59 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: close
Etag: &quot;dbe-509637a7-0&quot;
Last-Modified: Sun, 04 Nov 2012 09:38:47 GMT
Content-Length: 1568
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:59 GMT
GET /image/1link.gif HTTP/1.1

Host: masoudpc1.persiangig.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 14:22:34 GMT
Server: Apache/2.2.8 (Unix)
Last-Modified: Fri, 12 Oct 2012 15:11:25 GMT
Etag: &quot;6e522a-21ab-4cbde19f29c4c&quot;
Accept-Ranges: bytes
Content-Length: 8619
Content-Control: private
Connection: close
GET /image/tablighaat1.gif HTTP/1.1

Host: masoudpc1.persiangig.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 14:22:34 GMT
Server: Apache/2.2.8 (Unix)
Last-Modified: Sun, 21 Oct 2012 15:38:10 GMT
Etag: &quot;6d698d-3485-4cc93862b57d9&quot;
Accept-Ranges: bytes
Content-Length: 13445
Content-Control: private
Connection: close
GET /c.aspx?Code=2707938&t=counter HTTP/1.1

Host: www.webgozar.ir
GET /c.aspx?Code=2707938&amp;t=counter HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Cache-Control: private
Content-Length: 660
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
Set-Cookie: ASP.NET_SessionId=to2zpe451leotrju1gzcty45; path=/; HttpOnly
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 19:27:42 GMT
GET /Foroshgah/2000.gif HTTP/1.1

Host: masoudpc1.persiangig.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 14:22:34 GMT
Server: Apache/2.2.8 (Unix)
Last-Modified: Tue, 28 Aug 2012 00:48:10 GMT
Etag: &quot;6c9f0a-465d-4c848cbe05c0f&quot;
Accept-Ranges: bytes
Content-Length: 18013
Content-Control: private
Connection: close
GET /banner/ HTTP/1.1

Host: clicktala.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 06 Nov 2012 19:28:59 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: close
Etag: &quot;ffd-50963738-0&quot;
Last-Modified: Sun, 04 Nov 2012 09:36:56 GMT
Content-Length: 1252
GET /abzar/tools/page-rank/1/3.png HTTP/1.1

Host: 1abzar.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Tue, 06 Nov 2012 19:29:03 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;3346-4f1c42d8-0&quot;
Last-Modified: Sun, 22 Jan 2012 17:09:44 GMT
Content-Length: 13126
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:29:03 GMT
GET /banner/bgbg.gif HTTP/1.1

Host: clicktala.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 19:28:59 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;3df-50958656-0&quot;
Last-Modified: Sat, 03 Nov 2012 21:02:14 GMT
Content-Length: 991
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:59 GMT
GET /image/url.query.www.tarfandsara.ir.jpg HTTP/1.1

Host: masoudpc1.persiangig.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 14:22:34 GMT
Server: Apache/2.2.8 (Unix)
Last-Modified: Thu, 10 May 2012 15:42:52 GMT
Etag: &quot;110cf1-b875-4bfb078ff7700&quot;
Accept-Ranges: bytes
Content-Length: 47221
Content-Control: private
Connection: close
GET /banner/ax/moharam2.jpg HTTP/1.1

Host: www.clicktala.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 19:28:59 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;2560-50925056-0&quot;
Last-Modified: Thu, 01 Nov 2012 10:35:02 GMT
Content-Length: 9568
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:28:59 GMT
GET /show_statics.php HTTP/1.1

Host: web2.blogfacod.tk

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 06 Nov 2012 19:29:00 GMT
Server: LiteSpeed
Connection: close
X-Powered-By: PHP/5.2.17
Content-Length: 38
GET /ads/show.php?z=1&pl=431&j=1&code=1352230140322 HTTP/1.1

Host: zahtab.com
GET /ads/show.php?z=1&amp;pl=431&amp;j=1&amp;code=1352230140322 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Tue, 06 Nov 2012 19:46:06 GMT
Server: Apache/2
X-Powered-By: PHP/5.2.9
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=3ae7e275338e79354edfec233dd0926d; path=/
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 397
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
GET /imag/tala.jpg HTTP/1.1

Host: clicktala.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 19:29:00 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;8ff-5070cca0-0&quot;
Last-Modified: Sun, 07 Oct 2012 00:28:16 GMT
Content-Length: 2303
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 19:29:00 GMT
GET /counter/xstat.aspx?t=sum1&code=2707938&rnd=10063&s=1176x885&c=2&ref=&title=%u062A%u0631%u0641%u0646%u062F%u0633%u0631%u0627%20-%20%u0645%u0639%u0631%u0641%u06CC%20%u0633%u0627%u06CC%u062A%u06CC%20%u0628%u0631%u0627%u06CC%20%u0627%u0637%u0645%u06CC%u0646%u0627%u0646%20%u0627%u0632%20%u0633%u0627%u0644%u0645%20%u0628%u0648%u062F%u0646%20%u06CC%u06A9%20%u0633%u0627%u06CC%u062A%20%u0627%u0632%20%u0646%u0638%u0631%20%u0648%u06CC%u0631%u0648%u0633 HTTP/1.1

Host: engine.webgozar.com
GET /counter/xstat.aspx?t=sum1&amp;code=2707938&amp;rnd=10063&amp;s=1176x885&amp;c=2&amp;ref=&amp;title=%u062A%u0631%u0641%u0646%u062F%u0633%u0631%u0627%20-%20%u0645%u0639%u0631%u0641%u06CC%20%u0633%u0627%u06CC%u062A%u06CC%20%u0628%u0631%u0627%u06CC%20%u0627%u0637%u0645%u06CC%u0646%u0627%u0646%20%u0627%u0632%20%u0633%u0627%u0644%u0645%20%u0628%u0648%u062F%u0646%20%u06CC%u06A9%20%u0633%u0627%u06CC%u062A%20%u0627%u0632%20%u0646%u0638%u0631%20%u0648%u06CC%u0631%u0648%u0633 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Cache-Control: private
Content-Length: 915
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
Set-Cookie: 2707938=3596; path=/
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 19:28:26 GMT
GET /service/stat.js HTTP/1.1

Host: www.persianstat.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Length: 6631
Last-Modified: Tue, 02 Nov 2010 19:07:14 GMT
Accept-Ranges: bytes
Etag: &quot;78841729c17acb1:420a&quot;
Server: Microsoft-IIS/6.0
P3P: policyref=&quot;http://service.persianstat.com/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA&quot;
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 19:28:46 GMT
GET /ads/banners/151-1-1352098449.png HTTP/1.1

Host: zahtab.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
Cookie: PHPSESSID=3ae7e275338e79354edfec233dd0926d
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Tue, 06 Nov 2012 19:46:06 GMT
Server: Apache/2
Last-Modified: Mon, 05 Nov 2012 06:24:09 GMT
Etag: &quot;b6f8973-8643-4cdb988773440&quot;
Accept-Ranges: bytes
Content-Length: 34371
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
GET /Stats.aspx?psid=10165151&psop=0&pscn=referral&pscr=masoudpc.blogfa.com&psct=/post-636.aspx&psep=0&psuq=0&psuu=0&psrd=1426063852&pscs=UTF-8&pswh=1176x885&pssc=24&psul=en-us&psje=1&pspl=1&pstl=Untitled%20Document&pshn=clicktala.com&pspt=%2Fbanner%2F&psrf=www.masoudpc.blogfa.com%2Fpost-636.aspx HTTP/1.1

Host: service.persianstat.com
GET /Stats.aspx?psid=10165151&amp;psop=0&amp;pscn=referral&amp;pscr=masoudpc.blogfa.com&amp;psct=/post-636.aspx&amp;psep=0&amp;psuq=0&amp;psuu=0&amp;psrd=1426063852&amp;pscs=UTF-8&amp;pswh=1176x885&amp;pssc=24&amp;psul=en-us&amp;psje=1&amp;pspl=1&amp;pstl=Untitled%20Document&amp;pshn=clicktala.com&amp;pspt=%2Fbanner%2F&amp;psrf=www.masoudpc.blogfa.com%2Fpost-636.aspx HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Date: Tue, 06 Nov 2012 19:28:47 GMT
Server: Microsoft-IIS/6.0
P3P: policyref=&quot;http://service.persianstat.com/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA&quot;
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Length: 254
GET /images/stat.gif HTTP/1.1

Host: service.persianstat.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://service.persianstat.com/Stats.aspx?psid=10165151&amp;psop=0&amp;pscn=referral&amp;pscr=masoudpc.blogfa.com&amp;psct=/post-636.aspx&amp;psep=0&amp;psuq=0&amp;psuu=0&amp;psrd=1426063852&amp;pscs=UTF-8&amp;pswh=1176x885&amp;pssc=24&amp;psul=en-us&amp;psje=1&amp;pspl=1&amp;pstl=Untitled%20Document&amp;pshn=clicktala.com&amp;pspt=%2Fbanner%2F&amp;psrf=www.masoudpc.blogfa.com%2Fpost-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/gif

Content-Length: 1094
Last-Modified: Tue, 02 Nov 2010 19:07:19 GMT
Accept-Ranges: bytes
Etag: &quot;3e38362cc17acb1:420a&quot;
Server: Microsoft-IIS/6.0
P3P: policyref=&quot;http://service.persianstat.com/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA&quot;
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 19:28:47 GMT
GET /file/7515314301/back4.jpg HTTP/1.1

Host: s3.picofile.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.masoudpc.blogfa.com/post-636.aspx
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Cache-Control: public
Content-Length: 11853
Last-Modified: Sun, 30 Sep 2012 19:10:59 GMT
Server: Microsoft-IIS/7.5
Content-Disposition: filename=&quot;back4.jpg&quot;
Date: Tue, 06 Nov 2012 19:29:01 GMT
GET /file/7505262575/Ezare.gif HTTP/1.1

Host: s3.picofile.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: public
Content-Length: 11111
Last-Modified: Wed, 19 Sep 2012 15:42:55 GMT
Server: Microsoft-IIS/7.5
Content-Disposition: filename=&quot;Ezare.gif&quot;
Date: Tue, 06 Nov 2012 19:29:02 GMT
GET /file/7516922468/12_07_91.gif HTTP/1.1

Host: s3.picofile.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: public
Content-Length: 12961
Last-Modified: Tue, 02 Oct 2012 17:28:20 GMT
Server: Microsoft-IIS/7.5
Content-Disposition: filename=&quot;12.07.91.gif&quot;
Date: Tue, 06 Nov 2012 19:29:02 GMT
GET /file/7525623759/91_7_21.gif HTTP/1.1

Host: s3.picofile.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: public
Content-Length: 23098
Last-Modified: Fri, 12 Oct 2012 08:23:17 GMT
Server: Microsoft-IIS/7.5
Content-Disposition: filename=&quot;91.7.21.gif&quot;
Date: Tue, 06 Nov 2012 19:29:02 GMT
GET /file/7519651719/15_7_91.gif HTTP/1.1

Host: s3.picofile.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: public
Content-Length: 22105
Last-Modified: Fri, 05 Oct 2012 16:58:31 GMT
Server: Microsoft-IIS/7.5
Content-Disposition: filename=&quot;15.7.91.gif&quot;
Date: Tue, 06 Nov 2012 19:29:02 GMT
GET /file/7532654943/91_7_29.png HTTP/1.1

Host: s1.picofile.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
 
HTTP/1.1 200 OK

Content-Type: image/png

Cache-Control: public
Content-Length: 6412
Last-Modified: Sat, 20 Oct 2012 05:57:16 GMT
Server: Microsoft-IIS/7.5
Content-Disposition: filename=&quot;91.7.29.png&quot;
Date: Tue, 06 Nov 2012 19:29:12 GMT
GET /file/7531627418/91_7_28.gif HTTP/1.1

Host: s1.picofile.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clicktala.com/banner/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: public
Content-Length: 11333
Last-Modified: Fri, 19 Oct 2012 04:50:54 GMT
Server: Microsoft-IIS/7.5
Content-Disposition: filename=&quot;91.7.28.gif&quot;
Date: Tue, 06 Nov 2012 19:29:12 GMT