Overview

URLhttp://myarch.persianblog.ir/post/39
IP174.120.93.132
ASNAS21844 ThePlanet.com Internet Services, Inc.
Location United States
Report completed2012-11-07 19:36:54 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-07 19:36:12 174.120.93.132 urlQuery Client2ET WEB_CLIENT Hex Obfuscation of document.write % Encoding
2012-11-07 19:36:12 174.120.93.132 urlQuery Client2ET WEB_CLIENT Hex Obfuscation of charCodeAt % Encoding
2012-11-07 19:36:12 174.120.93.132 urlQuery Client2ET WEB_CLIENT Hex Obfuscation of String.fromCharCode % Encoding
2012-11-07 19:36:12 174.120.93.132 urlQuery Client2ET WEB_CLIENT Hex Obfuscation of unescape % Encoding
2012-11-07 19:36:12 174.120.93.132 urlQuery Client2ET WEB_CLIENT Hex Obfuscation of parseInt % Encoding
2012-11-07 19:36:32 74.52.87.212 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-07 19:36:32 173.194.69.95 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-07 19:36:12 174.120.93.132 urlQuery Client3INDICATOR-OBFUSCATION Potential obfuscated javascript eval unescape attack attempt


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 174.120.93.132

Date Alerts / IDS URL IP
2013-03-03 06:07:140 / 7http://persianblog.ir174.120.93.132
2013-02-12 09:07:050 / 0http://kayvan.persianblog.ir/174.120.93.132
2013-01-05 08:20:180 / 4http://oldmanclub.persianblog.ir/post/287174.120.93.132
2012-12-18 23:53:340 / 1http://parnian.persianblog.ir/post/64/174.120.93.132
2012-12-07 02:08:400 / 6http://parnian.persianblog.ir/post/109174.120.93.132
2012-12-06 01:15:520 / 5http://shakhehnabat.persianblog.ir/post/186174.120.93.132

Last 6 reports on ASN: AS21844 ThePlanet.com Internet Services, Inc.

Date Alerts / IDS URL IP
2013-03-08 14:18:300 / 3http://174.120.138.45/~riv22/templates/beez/track.php?pprec174.120.138.45
2013-03-08 14:18:131 / 5http://sirtarieres.gr/3/boy-snake174.122.148.158
2013-03-08 14:10:560 / 0http://forum.statcounter.com70.86.178.18
2013-03-08 14:08:032 / 9http://antiquetradingpost.com/shop.php?parent_id=2116216.40.206.10
2013-03-08 14:07:190 / 2http://chevendra.com/332.jar174.121.85.126
2013-03-08 14:06:531 / 1http://livehacksource.com/wifi-password-hack-2013-wifi-password-finder/174.132.129.35

Last 6 reports on domain: myarch.persianblog.ir

Date Alerts / IDS URL IP
2012-11-07 19:36:520 / 8http://myarch.persianblog.ir/post/38174.120.93.132
2012-11-07 19:31:310 / 8http://myarch.persianblog.ir/post/30174.120.93.132
2012-11-07 06:13:470 / 7http://myarch.persianblog.ir/post/41174.120.93.132
2012-11-07 06:13:460 / 7http://myarch.persianblog.ir/post/40174.120.93.132
2012-11-07 06:13:300 / 8http://myarch.persianblog.ir/post/43174.120.93.132
2012-11-07 06:13:180 / 8http://myarch.persianblog.ir/post/42174.120.93.132



JavaScript

Executed Scripts (18)


Executed Evals (2)

#1 JavaScript::Eval (size: 1030, repeated: 1)

document.write(q5bad8c56('%31%5e%6a%71%18%69%6b%75%64%5e%34%1a%77%64%5e%67%63%36%34%28%2c%37%6f%5c%74%68%20%5b%6f%62%63%6c%31%5b%5d%69%6d%59%6a%32%60%60%69%6c%23%68%65%76%5e%37%34%6c%69%35%54%68%64%6d%69%32%1f%5e%32%37%59%2d%2a%3c%63%5d%67%64%64%6c%35%2f%2c%33%67%66%60%5a%6c%30%69%65%63%63%6d%33%1a%3f%36%55%39%34%64%6c%6e%6c%1b%6e%65%72%58%37%15%2a%1e%3c%2d%32%34%28%63%6f%6e%69%38%3f%28%5e%3c%06%30%59%1b%61%6a%59%67%37%15%63%6c%6a%6f%32%2b%28%72%77%77%2f%5c%6f%68%63%69%60%65%6a%29%60%6a%2f%1b%1a%67%5a%6e%65%5a%68%35%1d%5a%5a%60%5c%68%6c%1d%3a%32%65%6f%6a%6f%19%5b%6f%61%69%65%36%1e%19%2b%28%2c%2f%2d%28%1a%3f%1a%58%5e%5e%62%6c%67%18%4f%61%59%61%58%6d%13%3d%71%1e%33%5a%3a%3d%65%6f%67%1d%4d%6c%62%6a%1e%33%2f%5e%39%35%2f%66%6e%68%67%39%34%2d%5e%3e%34%5d%3b%30%66%6e%68%67%1b%6f%67%71%59%35%1d%28%1a%3e%33%28%3f%28%62%6d%6d%68%3a%37%2a%5a%3e%31%29%57%62%72%3c%33%2f%5c%62%73%3e%30%2e%5e%6a%71%3a%32%5b%65%72%1b%5e%60%5d%6a%6d%3e%66%59%67%6d%60%3a%37%5d%65%76%1d%5d%6f%5a%6f%69%32%61%5d%69%6c%3e7561549%37%30%39%31%32%34%35'));

#2 JavaScript::Eval (size: 259, repeated: 1)

function q5bad8c56(s) {
    var r = "";
    var tmp = s.split("7561549");
    s = unescape(tmp[0]);
    k = unescape(tmp[1] + "621366");
    for (var i = 0; i < s.length; i++) {
        r += String.fromCharCode((parseInt(k.charAt(i % k.length)) ^ s.charCodeAt(i)) + 6);
    }
    return r;
}

Executed Writes (8)

#1 JavaScript::Write (size: 1, repeated: 2)

0

#2 JavaScript::Write (size: 1, repeated: 1)

1

#3 JavaScript::Write (size: 2, repeated: 2)

11

#4 JavaScript::Write (size: 762, repeated: 1)

<div style="border-right: #c6c8ca 1px solid; border-top: #c6c8ca 1px solid; left: 0px;z-index: 4000; border-left: #c6c8ca 1px solid; width: 485px; border-bottom: #c6c8ca 1px solid;position: absolute; top: 0px; height: 60px; background-color: #e9e9e9" id="divADV"><table border="0" cellpadding="0" cellspacing="0" width="485"><tr><td style="width:468px" id="tdAdv"><iframe style="z-index:4000; width:468px; height:60px; margin:0" src="http://persianbox.com/s.aspx?pscn=0&pscr=-&psct=-&psep=0" frameborder="0" scrolling="no" target="_top"></iframe></td><td style="width:16px; text-align:center; vertical-align:top"><img alt="close" src="http://persianbox.com/close.gif" id="imgClose" onclick="javascript:closeWindow();"style="cursor: hand"></td></tr></table></div>

#5 JavaScript::Write (size: 324, repeated: 1)

<div style="width:630;text-align:center;font-size:8pt;color:#e77e00;height:20;float:right;"><b><font size="1">.:</font></b>	<a href="http://www.blogskin.ir/" target="_blank"><font color="#444444"> Weblog Themes By <b>Blog Skin </b></font></a><b><font size="1">:.</font></b></div></div></div><div class=mainl><div class=menu>

#6 JavaScript::Write (size: 2411, repeated: 1)

<head><meta http-equiv="Content-Type" content="text/html; charset=UTF8"><link rel="stylesheet" type="text/css" href="http://translate.googleapis.com/translate_static/css/translateelement.css"></head><body class="goog-te-banner" scroll="no" border=0 dir="ltr"><table border=0 cellspacing=0 cellpadding=0 width=100% height=100%><tr valign=middle><td width=1 nowrap><a href="http://translate.google.com" class="goog-logo-link" target="_blank"><img src="http://www.google.com/intl/en/images/logos/translate_logo_sm.png" alt="Google Translate"></a></td><td class="goog-te-banner-margin"></td><td><table border=0 cellspacing=0 cellpadding=0 height=100%><tr id=":1.promptSection" style="display:none" valign=middle><td nowrap><span class="goog-te-banner-content">View this page in: <span id=":1.promptTargetLang"></span></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.confirm"><b>Translate</b></button></div></div></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.noAutoPopup"></button></div></div></td></tr><tr id=":1.progressSection" style="display:none" valign=middle><td><span class="goog-te-banner-content">Translation in progress&nbsp;<span dir="ltr">(<b id=":1.progressValue"></b>%)</span>&nbsp;<img src="http://translate.googleapis.com/translate_static/img/loading.gif"></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.cancel">Cancel</button></div></div></td></tr><tr id=":1.finishSection" style="display:none"><td><span class="goog-te-banner-content">Translated to: <span id=":1.finishTargetLang"></span></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.restore">Show original</button></div></div></td></tr><tr id=":1.errorSection" style="display:none" valign=middle><td><span id=":1.errorContent" class="goog-te-banner-content"></span></td></tr></table></td><td><td class="goog-te-banner-margin"></td></td><td width=1 id="options"></td><td width=1><a id=":1.close" class="goog-close-link" href="javascript:void(0)" title="Close"><img src="http://www.google.com/images/cleardot.gif" width="15" height="15" alt="Close" style="background-image:url(http://translate.googleapis.com/translate_static/img/te_ctrl3.gif);background-position:-28px 0px"></a></td></tr></table></body>

#7 JavaScript::Write (size: 381, repeated: 1)

<head><meta http-equiv="Content-Type" content="text/html; charset=UTF8"><link rel="stylesheet" type="text/css" href="http://translate.googleapis.com/translate_static/css/translateelement.css"></head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":2.menuBody" class="goog-te-menu"></div></body>

#8 JavaScript::Write (size: 381, repeated: 1)

<head><meta http-equiv="Content-Type" content="text/html; charset=UTF8"><link rel="stylesheet" type="text/css" href="http://translate.googleapis.com/translate_static/css/translateelement.css"></head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":3.menuBody" class="goog-te-menu"></div></body>


HTTP Transactions (67)


Request Response
GET /post/39 HTTP/1.1

Host: myarch.persianblog.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Cache-Control: private
Content-Length: 145
Location: http://myarch.persianblog.ir
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 18:35:16 GMT
GET /blog.js HTTP/1.1

Host: blogskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 301 Moved Permanently

Content-Type: text/html
Date: Wed, 07 Nov 2012 18:36:16 GMT
Server: LiteSpeed
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Location: http://www.blogskin.ir/blog.js
Content-Length: 413
GET / HTTP/1.1

Host: myarch.persianblog.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 18:35:17 GMT
Content-Length: 24300
GET /images/9yq3ouforynq63tbsrg0.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:12 GMT
Content-Length: 169
Connection: keep-alive
GET /images/f88rpm8bch6904gyzm92.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:12 GMT
Content-Length: 169
Connection: keep-alive
GET /images/sfohzux4at5bwautqrfv.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:12 GMT
Content-Length: 169
Connection: keep-alive
GET /images/80hr9ndgqv957t1izp2g.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:12 GMT
Content-Length: 169
Connection: keep-alive
GET /cc.aspx?blogID=229897&rnd=40186.3525115741 HTTP/1.1

Host: comments.persianblog.ir
GET /cc.aspx?blogID=229897&amp;rnd=40186.3525115741 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Cache-Control: private
Content-Length: 979
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
PersianBlog: 2.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 18:35:17 GMT
GET /ads.js HTTP/1.1

Host: persianblog.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Mon, 05 Sep 2011 12:16:02 GMT
Accept-Ranges: bytes
Etag: &quot;06dd793c56bcc1:0&quot;
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 18:35:17 GMT
Content-Length: 1974
GET /blog.js HTTP/1.1

Host: www.blogskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: application/octet-stream
Date: Wed, 07 Nov 2012 18:36:16 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: close
Etag: &quot;28e-4c5187a4-0&quot;
Last-Modified: Thu, 29 Jul 2010 13:52:36 GMT
Content-Length: 654
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1

Host: translate.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Date: Wed, 07 Nov 2012 18:36:12 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Language: en
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: HTTP server (unknown)
Content-Length: 702
X-XSS-Protection: 1; mode=block
GET /images/li4y4qel6ektlfuzmq8.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:12 GMT
Content-Length: 169
Connection: keep-alive
GET /images/hxibm0oa3jwi2zm2lm7.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:12 GMT
Content-Length: 169
Connection: keep-alive
GET /images/lqdwkk1jc1820kk1e12.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:12 GMT
Content-Length: 169
Connection: keep-alive
GET /images/24w3dqulrf0xu8sg2v.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:12 GMT
Content-Length: 169
Connection: keep-alive
GET /ps.js HTTP/1.1

Host: persianblog.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Mon, 22 Dec 2008 16:48:00 GMT
Accept-Ranges: bytes
Etag: &quot;06069c5564c91:0&quot;
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 18:35:17 GMT
Content-Length: 2707
GET /images/ea07rhai42pyj58tu8u1.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:13 GMT
Content-Length: 169
Connection: keep-alive
GET /images/t0jc6d4n2cp6bqvu2mmd.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:13 GMT
Content-Length: 169
Connection: keep-alive
GET /editor/images/smilies/5.gif HTTP/1.1

Host: www.persianblog.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Sat, 17 May 2008 10:20:00 GMT
Accept-Ranges: bytes
Etag: &quot;08fc8f7b8c81:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 18:35:18 GMT
Content-Length: 1146
GET /images/maghalat-f/honar/ashura.jpg HTTP/1.1

Host: www.imamreza.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 18:36:01 GMT
Server: Apache/2.0.63 (FreeBSD) mod_python/3.3.1 Python/2.5.2 PHP/5.2.8 with Suhosin-Patch mod_ssl/2.0.63 OpenSSL/0.9.7e-p1 mod_perl/2.0.4 Perl/v5.8.8
Last-Modified: Tue, 03 Aug 2004 09:30:16 GMT
Etag: &quot;19b7f16-93be-90af1a00&quot;
Accept-Ranges: bytes
Content-Length: 37822
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
GET /40/style.css HTTP/1.1

Host: topskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: text/css
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Wed, 07 Nov 2012 18:36:25 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;951-4c34d5b8-0&quot;
Last-Modified: Wed, 07 Jul 2010 19:30:00 GMT
Content-Length: 838
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 18:36:25 GMT
GET /40/bg.jpg HTTP/1.1

Host: topskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://topskin.ir/40/style.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 18:36:25 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;551-4c34d5b8-0&quot;
Last-Modified: Wed, 07 Jul 2010 19:30:00 GMT
Content-Length: 1361
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 18:36:25 GMT
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Wed, 07 Nov 2012 13:09:21 GMT
Expires: Thu, 08 Nov 2012 01:09:21 GMT
Vary: Accept-Encoding
Age: 19621
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /images/80hr9ndgqv957t1izp2g.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:22 GMT
Content-Length: 169
Connection: keep-alive
GET /images/f88rpm8bch6904gyzm92.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:22 GMT
Content-Length: 169
Connection: keep-alive
GET /translate_static/js/element/main.js HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Sat, 02 Jun 2012 02:49:04 GMT
Date: Wed, 07 Nov 2012 17:41:58 GMT
Expires: Wed, 07 Nov 2012 18:41:58 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 1542
X-XSS-Protection: 1; mode=block
Age: 3264
Cache-Control: public, max-age=3600
GET /images/sfohzux4at5bwautqrfv.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:22 GMT
Content-Length: 169
Connection: keep-alive
GET /translate_static/css/translateelement.css HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: text/css
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Tue, 22 May 2012 18:21:40 GMT
Date: Wed, 07 Nov 2012 17:37:31 GMT
Expires: Wed, 07 Nov 2012 18:37:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 3559
X-XSS-Protection: 1; mode=block
Age: 3531
Cache-Control: public, max-age=3600
GET /images/9yq3ouforynq63tbsrg0.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:22 GMT
Content-Length: 169
Connection: keep-alive
GET /images/hxibm0oa3jwi2zm2lm7.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:22 GMT
Content-Length: 169
Connection: keep-alive
GET /images/li4y4qel6ektlfuzmq8.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:22 GMT
Content-Length: 169
Connection: keep-alive
GET /close.gif HTTP/1.1

Host: persianbox.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: image/gif
Content-Length: 176
Last-Modified: Mon, 15 Nov 2010 10:23:44 GMT
Accept-Ranges: bytes
Etag: &quot;4193a12eaf84cb1:420a&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 18:36:09 GMT
GET /s.aspx?pscn=0&pscr=-&psct=-&psep=0 HTTP/1.1

Host: persianbox.com
GET /s.aspx?pscn=0&amp;pscr=-&amp;psct=-&amp;psep=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Date: Wed, 07 Nov 2012 18:36:09 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Location: http://74.52.87.212/abmw.aspx?z=165&amp;isframe=true
Cache-Control: private
Content-Length: 169
GET /images/lqdwkk1jc1820kk1e12.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:22 GMT
Content-Length: 169
Connection: keep-alive
GET /images/24w3dqulrf0xu8sg2v.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:22 GMT
Content-Length: 169
Connection: keep-alive
GET /images/ea07rhai42pyj58tu8u1.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:22 GMT
Content-Length: 169
Connection: keep-alive
GET /images/t0jc6d4n2cp6bqvu2mmd.jpg HTTP/1.1

Host: myup.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 18:36:22 GMT
Content-Length: 169
Connection: keep-alive
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=139119935&utmhn=myarch.persianblog.ir&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=%D9%85%D9%86%20%D9%88%20%D9%85%D8%B9%D9%85%D8%A7%D8%B1%DB%8C&utmhid=1020636545&utmr=-&utmp=%2F&utmac=UA-9749048-4&utmcc=__utma%3D224929925.183569124.1352313383.1352313383.1352313383.1%3B%2B__utmz%3D224929925.1352313383.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qB~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=1&amp;utmn=139119935&amp;utmhn=myarch.persianblog.ir&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1159x778&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=%D9%85%D9%86%20%D9%88%20%D9%85%D8%B9%D9%85%D8%A7%D8%B1%DB%8C&amp;utmhid=1020636545&amp;utmr=-&amp;utmp=%2F&amp;utmac=UA-9749048-4&amp;utmcc=__utma%3D224929925.183569124.1352313383.1352313383.1352313383.1%3B%2B__utmz%3D224929925.1352313383.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=qB~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Thu, 01 Nov 2012 01:37:46 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 579517
Server: GFE/2.0
GET /translate_static/js/element/10/element_main.js HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Sat, 02 Jun 2012 01:19:15 GMT
Date: Wed, 07 Nov 2012 17:37:35 GMT
Expires: Wed, 07 Nov 2012 18:37:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 75700
X-XSS-Protection: 1; mode=block
Age: 3528
Cache-Control: public, max-age=3600
GET /js/plusone.js HTTP/1.1

Host: apis.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: application/javascript; charset=utf-8
X-UA-Compatible: IE=edge, chrome=1
Etag: &quot;99cef75a216e7271081f480fb640e7fe&quot;
Expires: Wed, 07 Nov 2012 18:36:23 GMT
Date: Wed, 07 Nov 2012 18:36:23 GMT
Cache-Control: private, max-age=1800
Content-Encoding: gzip
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
GET /_/apps-static/_/js/gapi/plusone/rt=j/ver=zfq9BF98FFM.no./sv=1/am=!R7JhevK68w2IwTSFZw/d=1/rs=AItRSTOFOTeV3g2f5Xg8Wf3esjJMS5F10g/cb=gapi.loaded_0 HTTP/1.1

Host: apis.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Etag: &quot;1509811931&quot;
Expires: Fri, 07 Dec 2012 02:13:02 GMT
Date: Wed, 07 Nov 2012 02:13:02 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Cache-Control: public, max-age=2592000
Content-Length: 27849
Age: 59001
GET /abmw.aspx?z=165&isframe=true HTTP/1.1

Host: 74.52.87.212
GET /abmw.aspx?z=165&amp;isframe=true HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Date: Wed, 07 Nov 2012 18:36:20 GMT
Server: Microsoft-IIS/6.0
P3P: policyref=&quot;http://adsready.persianblog.com/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA&quot;
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Set-Cookie: xlaABMclient=country=; path=/
Cache-Control: private
Content-Length: 928
GET /40/top.jpg HTTP/1.1

Host: topskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 18:36:26 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;e377-4c34d5b8-0&quot;
Last-Modified: Wed, 07 Jul 2010 19:30:00 GMT
Content-Length: 58231
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 18:36:26 GMT
GET /Stats.aspx?psid=40229897&psop=4&pscn=direct&pscr=-&psct=-&psep=-&psuq=0&psuu=0&psrd=987050730&pscs=UTF-8&pswh=1176x885&pssc=24&psul=en-us&psje=1&pspl=1&pstl=%D9%85%D9%86%20%D9%88%20%D9%85%D8%B9%D9%85%D8%A7%D8%B1%DB%8C&pshn=myarch.persianblog.ir&pspt=%2F&psrf=- HTTP/1.1

Host: service.persianstat.com
GET /Stats.aspx?psid=40229897&amp;psop=4&amp;pscn=direct&amp;pscr=-&amp;psct=-&amp;psep=-&amp;psuq=0&amp;psuu=0&amp;psrd=987050730&amp;pscs=UTF-8&amp;pswh=1176x885&amp;pssc=24&amp;psul=en-us&amp;psje=1&amp;pspl=1&amp;pstl=%D9%85%D9%86%20%D9%88%20%D9%85%D8%B9%D9%85%D8%A7%D8%B1%DB%8C&amp;pshn=myarch.persianblog.ir&amp;pspt=%2F&amp;psrf=- HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Date: Wed, 07 Nov 2012 18:36:10 GMT
Server: Microsoft-IIS/6.0
P3P: policyref=&quot;http://service.persianstat.com/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA&quot;
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Length: 0
GET /40/m2.jpg HTTP/1.1

Host: topskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://topskin.ir/40/style.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 18:36:27 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;b55-4c34d5b8-0&quot;
Last-Modified: Wed, 07 Jul 2010 19:30:00 GMT
Content-Length: 2901
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 18:36:27 GMT
GET /40/m3.jpg HTTP/1.1

Host: topskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://topskin.ir/40/style.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 18:36:27 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;bf6-4c34d5b8-0&quot;
Last-Modified: Wed, 07 Jul 2010 19:30:00 GMT
Content-Length: 3062
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 18:36:27 GMT
GET /40/ft.jpg HTTP/1.1

Host: topskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://topskin.ir/40/style.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 18:36:27 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;51b9-4c34d5b8-0&quot;
Last-Modified: Wed, 07 Jul 2010 19:30:00 GMT
Content-Length: 20921
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 18:36:27 GMT
GET /s2/oz/images/stars/po/Publisher/sprite4-a67f741843ffc4220554c34bd01bb0bb.png HTTP/1.1

Host: ssl.gstatic.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 13 Sep 2012 21:47:55 GMT
Date: Thu, 01 Nov 2012 01:21:37 GMT
Expires: Fri, 01 Nov 2013 01:21:37 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 21399
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 580488
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: &quot;87de33-256-4cd617ed12480&quot;
Accept-Ranges: bytes
Content-Length: 598
Date: Wed, 07 Nov 2012 18:36:25 GMT
Connection: keep-alive
GET /banners/hairloss/Pezeshk1.swf?url=http%3a%2f%2f74.52.87.212%2fabmc.aspx%3fb%3d2552%26z%3d165 HTTP/1.1

Host: 74.52.87.212

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://74.52.87.212/abmw.aspx?z=165&amp;isframe=true
Cookie: xlaABMclient=country=
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Content-Length: 39650
Last-Modified: Sat, 27 Oct 2012 10:47:35 GMT
Accept-Ranges: bytes
Etag: &quot;f89997930b4cd1:66c3&quot;
Server: Microsoft-IIS/6.0
P3P: policyref=&quot;http://adsready.persianblog.com/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA&quot;
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 18:36:22 GMT
GET /40/p3.jpg HTTP/1.1

Host: topskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://topskin.ir/40/style.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 18:36:35 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;370-4c34d5b8-0&quot;
Last-Modified: Wed, 07 Jul 2010 19:30:00 GMT
Content-Length: 880
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 18:36:35 GMT
GET /40/bg2.jpg HTTP/1.1

Host: topskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://topskin.ir/40/style.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 18:36:35 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;6c6-4c34d5b8-0&quot;
Last-Modified: Wed, 07 Jul 2010 19:30:00 GMT
Content-Length: 1734
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 18:36:35 GMT
GET /40/p1.jpg HTTP/1.1

Host: topskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://topskin.ir/40/style.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 18:36:35 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;5d9-4c34d5b8-0&quot;
Last-Modified: Wed, 07 Jul 2010 19:30:00 GMT
Content-Length: 1497
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 18:36:35 GMT
GET /40/p2.jpg HTTP/1.1

Host: topskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://topskin.ir/40/style.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 18:36:35 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;8d9-4c34d5b8-0&quot;
Last-Modified: Wed, 07 Jul 2010 19:30:00 GMT
Content-Length: 2265
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 18:36:35 GMT
GET /40/m1.jpg HTTP/1.1

Host: topskin.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://topskin.ir/40/style.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 18:36:35 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;11c4-4c34d5b8-0&quot;
Last-Modified: Wed, 07 Jul 2010 19:30:00 GMT
Content-Length: 4548
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 18:36:35 GMT
GET /favicon.ico HTTP/1.1

Host: myarch.persianblog.ir

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __utma=224929925.183569124.1352313383.1352313383.1352313383.1; __utmb=224929925.1.10.1352313383; __utmc=224929925; __utmz=224929925.1352313383.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); ___ptma=104432156; ___ptmb=104432156
HTTP/1.1 200 OK

Content-Type: image/x-icon
Last-Modified: Mon, 18 Feb 2008 17:23:00 GMT
Accept-Ranges: bytes
Etag: &quot;0f2e0e85272c81:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 18:35:36 GMT
Content-Length: 3638
GET /translate_static/js/element/hrs.swf HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT
Date: Wed, 07 Nov 2012 17:39:54 GMT
Expires: Wed, 07 Nov 2012 18:39:54 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 4689
X-XSS-Protection: 1; mode=block
Age: 3398
Cache-Control: public, max-age=3600
GET /images/icons/product/translate-32.png HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Mon, 02 Apr 2012 02:13:37 GMT
Date: Wed, 07 Nov 2012 18:36:32 GMT
Expires: Wed, 07 Nov 2012 18:36:32 GMT
Cache-Control: private, max-age=31536000
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 1464
X-XSS-Protection: 1; mode=block
GET /images/logos/google_logo_41.png HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Mon, 02 Apr 2012 02:13:37 GMT
Date: Wed, 07 Nov 2012 18:36:32 GMT
Expires: Wed, 07 Nov 2012 18:36:32 GMT
Cache-Control: private, max-age=31536000
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 6321
X-XSS-Protection: 1; mode=block
GET /translate_a/l?client=te&alpha=true&hl=en&cb=_callbacks_._0h98sh7oy HTTP/1.1

Host: translate.googleapis.com
GET /translate_a/l?client=te&amp;alpha=true&amp;hl=en&amp;cb=_callbacks_._0h98sh7oy HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Date: Wed, 07 Nov 2012 18:36:32 GMT
Expires: Wed, 07 Nov 2012 18:36:32 GMT
Cache-Control: private, max-age=86400
Content-Language: en
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: HTTP server (unknown)
Content-Length: 652
X-XSS-Protection: 1; mode=block
GET /translate_static/img/loading.gif HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT
Date: Thu, 01 Nov 2012 01:09:21 GMT
Expires: Fri, 01 Nov 2013 01:09:21 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 702
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 581231
GET /gen204?sl=fa&nca=te_ap&client=te&logld=v10 HTTP/1.1

Host: translate.google.com
GET /gen204?sl=fa&amp;nca=te_ap&amp;client=te&amp;logld=v10 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 204 No Content

Content-Type: image/gif
Date: Wed, 07 Nov 2012 18:36:32 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
X-Content-Type-Options: nosniff
Server: HTTP server (unknown)
Content-Length: 0
X-XSS-Protection: 1; mode=block
GET /images/cleardot.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Mon, 02 Apr 2012 02:13:37 GMT
Date: Wed, 07 Nov 2012 18:36:32 GMT
Expires: Wed, 07 Nov 2012 18:36:32 GMT
Cache-Control: private, max-age=31536000
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 43
X-XSS-Protection: 1; mode=block
GET /intl/en/images/logos/translate_logo_sm.png HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Mon, 02 Apr 2012 02:13:37 GMT
Date: Wed, 07 Nov 2012 18:36:32 GMT
Expires: Wed, 07 Nov 2012 18:36:32 GMT
Cache-Control: private, max-age=31536000
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 6081
X-XSS-Protection: 1; mode=block
GET /banners/hairloss/Pezeshk1.swf?url=http%3a%2f%2f74.52.87.212%2fabmc.aspx%3fb%3d2552%26z%3d165 HTTP/1.1

Host: 74.52.87.212

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://74.52.87.212/abmw.aspx?z=165&amp;isframe=true
Cookie: xlaABMclient=country=
If-Modified-Since: Sat, 27 Oct 2012 10:47:35 GMT
If-None-Match: &quot;f89997930b4cd1:66c3&quot;
HTTP/1.1 304 Not Modified

HTTP/1.1 304 Not Modified
Last-Modified: Sat, 27 Oct 2012 10:47:35 GMT
Accept-Ranges: bytes
Etag: &quot;f89997930b4cd1:66c3&quot;
Server: Microsoft-IIS/6.0
P3P: policyref=&quot;http://adsready.persianblog.com/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA&quot;
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 18:36:29 GMT
GET /translate_static/img/te_bk.gif HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT
Date: Thu, 01 Nov 2012 01:09:21 GMT
Expires: Fri, 01 Nov 2013 01:09:21 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 848
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 581231
GET /translate_static/img/te_ctrl3.gif HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://myarch.persianblog.ir/
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT
Date: Thu, 01 Nov 2012 01:09:27 GMT
Expires: Fri, 01 Nov 2013 01:09:27 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 2849
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 581225