www.p30day.com/cat/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-%D8%A8%D8%A7%D8%B2%DB%8C/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
301 Moved Permanently 707 B URL HTTP/1.1 www.p30day.com/cat/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-%D8%A8%D8%A7%D8%B2%DB%8C/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /cat/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-%D8%A8%D8%A7%D8%B2%DB%8C/%D8%A8%D8%A7%D8%B2%DB%8C-ps3 HTTP/1.1
Host: www.p30day.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 08 Dec 2022 21:07:26 GMT
server: LiteSpeed
location: https://www.p30day.ir/cat/دانلود-بازی/بازی-ps3
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8239
Expires: Thu, 08 Dec 2022 23:24:45 GMT
Date: Thu, 08 Dec 2022 21:07:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2486
Expires: Thu, 08 Dec 2022 21:48:52 GMT
Date: Thu, 08 Dec 2022 21:07:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c3470f9f0a4df8c1496b577fa9435ff6
f83b0226bb57ed0f3e1acdad61b940414add135d
f542579e3a3577a646babde862282c2afda6ed784360a915143216100f7a3d91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F542579E3A3577A646BABDE862282C2AFDA6ED784360A915143216100F7A3D91"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9704
Expires: Thu, 08 Dec 2022 23:49:10 GMT
Date: Thu, 08 Dec 2022 21:07:26 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 20:08:13 GMT
content-type: application/json
age: 3553
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: x8ifIIMUBlQCzVwifhyCU0EVqAkF99tFjO3yRPGSvFMrNURB9hZ6IaXuDh6q22BaOEeivNN9Wqo=
x-amz-request-id: V8AJAZ465GZQGWVV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 20:48:03 GMT
age: 1163
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 21:07:26 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 20:07:55 GMT
age: 3571
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.p30day.ir/cat/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-%D8%A8%D8%A7%D8%B2%DB%8C/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
301 Moved Permanently 707 B URL HTTP/2 www.p30day.ir/cat/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-%D8%A8%D8%A7%D8%B2%DB%8C/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Malware
GET /cat/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-%D8%A8%D8%A7%D8%B2%DB%8C/%D8%A8%D8%A7%D8%B2%DB%8C-ps3 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 707
date: Thu, 08 Dec 2022 21:07:27 GMT
server: LiteSpeed
location: https://www.p30day.ir/game/بازی-ps3
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
200 OK 946 B URL HTTP/2 www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 56781600f3610a0c3aee4400a041688e
38fd980c6ff335f41e64d59a2d9950fcbc26ca5b
dff76a2659379fb8fac5aeb38ef8a5272fd2d4d6ea9766eacea21f040b07c67a
Analyzer Verdict Alert fortinet Malware
GET /game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 946
content-encoding: gzip
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:27 GMT
server: LiteSpeed
cache-control: no-cache,no-store
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fd55f4aaaab6ec40bc7dc10252cd819a
a72523f60be265a391fa9edc43e0a93418ad1fd0
bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5708
Cache-Control: max-age=135273
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:27 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 10:42:00 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 36aa9c5e53f991eb8d297dd0dc17fe51
e9ff18cdc1cf0e5da0c628b68238d47c8ca53886
29f75d2830d9d367894e87b372a2e79cc9fc2e267c5c6c9677301d0c01fc9856
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.recaptcha.net/recaptcha/api.js?onload=onloadCallback&render=explicit
200 OK 580 B URL HTTP/2 www.recaptcha.net/recaptcha/api.js?onload=onloadCallback&render=explicit
IP
File type ASCII text, with very long lines (912), with no line terminators
Hash 4fb3a68840a7c654a0f7422fec954003
47a1bd1343b7cea8143c9c44098320a25562ec28
4ee7379b939b77b7f49819ba6a7174c397f6dd076a4ae46a371f756459afcd44
GET /recaptcha/api.js?onload=onloadCallback&render=explicit HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 08 Dec 2022 21:07:27 GMT
date: Thu, 08 Dec 2022 21:07:27 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 580
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 36aa9c5e53f991eb8d297dd0dc17fe51
e9ff18cdc1cf0e5da0c628b68238d47c8ca53886
29f75d2830d9d367894e87b372a2e79cc9fc2e267c5c6c9677301d0c01fc9856
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 13:40:02 GMT
expires: Thu, 07 Dec 2023 13:40:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 113245
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.p30day.ir/favicon.ico
200 OK 15 kB URL HTTP/2 www.p30day.ir/favicon.ico
IP
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 26e511556c4a83b0f712b1de5eb858e5
72ffda4d53534a27869b2a89dee605f24ae168b9
87fbebcd24b46ab646e62dd65be350ff1ce80d9e23c1dc197207a32d8cd097d5
GET /favicon.ico HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:27 GMT
content-type: image/x-icon
last-modified: Tue, 15 Jun 2021 13:52:21 GMT
accept-ranges: bytes
content-length: 15406
date: Thu, 08 Dec 2022 21:07:27 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:48:03 GMT
expires: Fri, 01 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 602364
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 16:40:43 GMT
expires: Fri, 08 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 16004
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.p30day.ir/.lsrecap/recaptcha?
301 Moved Permanently 0 B URL HTTP/2 www.p30day.ir/.lsrecap/recaptcha?
IP
ASN #43754 Asiatech Data Transmission company
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /.lsrecap/recaptcha? HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1251
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
location: /game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
content-type: text/html; charset=utf-8
content-length: 0
date: Thu, 08 Dec 2022 21:07:28 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12650
Expires: Fri, 09 Dec 2022 00:38:18 GMT
Date: Thu, 08 Dec 2022 21:07:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12650
Expires: Fri, 09 Dec 2022 00:38:18 GMT
Date: Thu, 08 Dec 2022 21:07:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12650
Expires: Fri, 09 Dec 2022 00:38:18 GMT
Date: Thu, 08 Dec 2022 21:07:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12650
Expires: Fri, 09 Dec 2022 00:38:18 GMT
Date: Thu, 08 Dec 2022 21:07:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12650
Expires: Fri, 09 Dec 2022 00:38:18 GMT
Date: Thu, 08 Dec 2022 21:07:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24d89b69ba37bf23c5d576aff4063caf
3d46a21b4da571d7e4962e335c18a28ca5f81ecf
09b52cdab278805c6e7282f469a02768ee62fc9ef09a6623a337e3d3aaa446fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7268
x-amzn-requestid: ae5c231c-b1be-498a-a242-e8d641f3fe8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFDgEzUoAMFgyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911baf-10f06dc37cac69631c823fd9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:03:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QSv756DvAzOQnKae5wVg75wrQS6oDGPkfIZka86FNQ2vizBnZ7sIDQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:12:45 GMT
age: 78883
etag: "3d46a21b4da571d7e4962e335c18a28ca5f81ecf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57be99ac898a37d73f2ba4a24f56248f
04e32eb45581201a6a1863200e4d139df48285e6
a20081b64fc019372843360b15aa3461ec9dd3deb50ab398bca0a5e74d5468c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12534
x-amzn-requestid: 2a01f2ba-cf3a-4f59-8339-214c66bcc0d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czDbyGTcoAMF_TQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911918-5d3eba8d01e4175a71acc6cd;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:52:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NoZlZ8WFfOuIbkWaC2pJPJQrWtjzz2gCHJWr-u-nMNYmu8MkTf6_PA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:03:58 GMT
age: 79410
etag: "04e32eb45581201a6a1863200e4d139df48285e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b87d6543345f73653ed4a49b37d7c959
c4f26846b8b72293368ff16915d49297cf12bbb9
aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:33:19 GMT
age: 77649
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c408efaa98ac2ce63bb1618368d10c15
a51bbb49ebd862d04eaee465d0a35b22dcd21391
077eb8c8739f527828c71c25a1c3aaae46afead3aac093ec11a6d5488ef2f0ec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9596
x-amzn-requestid: e5e6ceb2-5bad-4146-a9de-92a859716029
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_qH63oAMFfLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-678bed1b7729b8aa2645688d;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FsbiyZG0110CEANduIIWuLcxFOxfrV0YPvOSy-ScXFIX1qM6qaOdCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:21:22 GMT
age: 81966
etag: "a51bbb49ebd862d04eaee465d0a35b22dcd21391"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 98d2cf29c710d25bd2f03ff216fdd369
b8eb2e11f9655f19334befc036f21489a6473827
614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 14:20:11 GMT
age: 24437
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c94003641bb5a7595e7004f80f95d22
3446450df60d732f9021d5bfd5f5f7c6c870d9ec
4d782dbf94b2163e9bc18028cd0c1a391fdcfcb019f23c4c26ea0b44432039ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7801
x-amzn-requestid: cb8d5aab-409f-4b39-b498-b1ba84f34e06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFRNHX4oAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c07-7c6e3bfa3f81082b48f43fa9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8QHhEAFHTHd-5UqS1S5qwJj_h4WNfix2CgS4MO4zR_psrzgMP3SZ5g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:16:35 GMT
age: 78653
etag: "3446450df60d732f9021d5bfd5f5f7c6c870d9ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
200 OK 3.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 85 x 86, 8-bit colormap, non-interlaced\012- data
Hash c736084f562340b160cbb12fcdcf59e2
efdd05e9198f48aca2e530cecf5868731769b15a
0a79347b3008d5832c869fb8bc82e6e889a84048f9d2684e458df0da405c194c
GET /wp-content/themes/p30dayv7.1/data/images/logo.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/png
last-modified: Thu, 08 Jul 2021 15:50:55 GMT
accept-ranges: bytes
content-length: 2976
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
200 OK 30 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8ae8c48601d555e7b5178c263e4d45aa
49ffb3f1eeb3df85c1b90925ef527e0ee31710b1
ae512287111e88212e1b1ac6b5a785381f86d0e733e811e9971907580d0d347c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: text/css
last-modified: Mon, 05 Dec 2022 16:33:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30353
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/winrar.webp
200 OK 868 B URL HTTP/2 www.p30day.ir/images/fastdl/winrar.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 43x43, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 87c92fbb7d5a79faceffbf561c56bd0c
8145b4c0a0a040a5696a63a15ce26e215bf6439d
ab07ecfe46a014e8c7df29ed8d828aca0c2cffa78b1bec043bbf190fec5f293d
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/winrar.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Fri, 06 Jul 2018 12:04:56 GMT
accept-ranges: bytes
content-length: 868
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/idm.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/idm.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fb32f9bbbd50740c31723747dc5e1e5
59c219d247b2a02f9c0c908ab85f3f2d0cc1c521
cad6e35932597fb152209d206c301e5b0fb337b77c0637fd9639cda97c2781c8
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/idm.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:18 GMT
accept-ranges: bytes
content-length: 1286
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/chrome.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/chrome.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7d04c08bcdd79e30879c5d15c2806bd5
5917e971d8e243cf82d6abcdaedc9ae1fca7b7ab
d11703cc091f7177b192c810e165c5cc96d6d3517a6c6a4477dcec38f703b900
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/chrome.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1298
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ff.webp
200 OK 1.8 kB URL HTTP/2 www.p30day.ir/images/fastdl/ff.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 26635d4802f5bf01d7cde8bcb429a493
f7ba292a1d5d91e29f9a0cabf8f204c0bb73b3c4
44686b2af956e0928ed8d000e83d1ee0007223bb74b6e268503ff208f4f7dedb
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ff.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1754
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/nvidia.webp
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/nvidia.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7012172e13a625b034e882677435c7a0
98451904b87560a908d7211a06f4a73d80eb8b9f
fd7f3840bff4766d23c3ff979652e119036f484c1cb60f24ba6b0d39a037943c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/nvidia.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1202
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
404 Not Found 31 kB URL HTTP/2 www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (27170)
Hash 2faed02ad8a6cf6916df37f36e4c0204
ee0fe2c40c4dd24d3785f7e49c934eab645c35c3
9b3a7da6a06fce4a0dfeaaeabc9e55b7a86160fe1659a982ef3342606eae89f3
Analyzer Verdict Alert fortinet Malware
GET /game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
x-dns-prefetch-control: on
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
link: <https://www.p30day.ir/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: f51_HTTP.404,f51_404,f51_URL.122c062bac641192d5fbfd285cb33c83,f51_guest,f51_,f51_MIN.8de6feeb5b8fcc14d9cf514a7b9f9473.css,f51_MIN.9ab09e9b4aa5d113f71e8d785928edfa.js
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (3683), with no line terminators
Hash f3c166f319aea691586c1f2f4afe2118
a300f6381204e7c980b147530257244c4093df42
45eb812e6973267111387a695e662c78eeef445860ee720c8e9e623d38d05022
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: application/javascript
last-modified: Tue, 01 Nov 2022 13:47:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1167
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/reader.webp
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/reader.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fff23369545f680acbb06c513a551f6
5552213ae9ff2876b1f694bff383004629c55174
0bd7f6d56d8347f607373f7f0fe59bbd12218c9bd0d062fb035bdcc93173f873
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/reader.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1226
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/kmp.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/kmp.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ab2eb9b46ba51721999a1d0350bbf38
894ae30f4e29af81c60bb7502a864474dae8b626
3df5a58530b161285349a08201222fb34f760b117edd49e2ebba455b4ed52d0a
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/kmp.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1058
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/klite.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/klite.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash b3762ca2e70f1f68da4fc38f53dce6b3
62eb7b1023cf4be53c3182cc32cd794aa1fba741
b68afab14ce590f52341f15711e29511323129ae83930c61732d293fef120c9c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/klite.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1332
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/aimp.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/aimp.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 56e0584dce3543e6e8863428ae915ede
cbff7f659dc8db1b819324511aacd68b6c68f0ef
b0d948b1483456bd5fc8b4e31726442084b42419a7608d3a89acb99376e7cd47
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/aimp.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Fri, 06 Jul 2018 11:59:58 GMT
accept-ranges: bytes
content-length: 1074
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/daemon-tools.webp
200 OK 1.6 kB URL HTTP/2 www.p30day.ir/images/fastdl/daemon-tools.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash f1c4998e619d02f2c966d18cafa3ae5f
038e50d4c3f60a34e28bfa54d73d2f676a8b02f3
05df4592018b5987fbb9dec7d6b83d4c05f281621b694fb9b04538540d5f5442
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/daemon-tools.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1632
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/office.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/office.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8ba130fcea19ecd9ed5233ce0d22dd76
8bc7e1cf3869002d614f431ea39416f8bcb259f5
6b860744ee34632f6a2fbe3ceb00a29d7cf67f31f4273db9372486d0bff4abd9
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/office.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1078
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ps.webp
200 OK 656 B URL HTTP/2 www.p30day.ir/images/fastdl/ps.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash d086c0af387345300bf7a1d54ad05820
7e6b249d54a92b5ede190734e4392b70dc332f1b
2c9967c77a7ffa6ddeda076c1b90a6beda16864fa9e131e205fcdc70f49849ec
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ps.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 656
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/skype.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/skype.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2612c7b808a386c27c45c9d7a3ab05c7
a0c0acc0a9c0529df19d5ecc0aa8e66a4f3b3cf0
433be5e918c73c43f2130158730859ddcc9aa058d229feb01714d80cc3dfb324
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/skype.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1140
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/win10.webp
200 OK 516 B URL HTTP/2 www.p30day.ir/images/fastdl/win10.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3e95105787f48e97f255c054163b1ff2
bbd996c9d0de0c5d89bbcf02b5dbd9d0d0cb38c0
aef03c97b401a3b2d73fb25e0c926b8af7b4d01eaffa56e64828772b3624e5ae
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/win10.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 516
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/windows11.webp
200 OK 306 B URL HTTP/2 www.p30day.ir/images/fastdl/windows11.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash c07f514a1feb0a64d02a0f002103eacf
88bfe92c334f01ca1ee74adaa3187d15e77783b0
ba56118c3788fa3e7e8dd8b5a6d2299a00026356f98ff25138cc86215ff25bdf
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/windows11.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: image/webp
last-modified: Sat, 19 Jun 2021 11:21:28 GMT
accept-ranges: bytes
content-length: 306
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
200 OK 836 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash b6de7641069b95fb7c051e730ecb3ab1
20e90d406e0a5d1e8e12897756d560f44ba282da
0c10e76e6ce8fe60e6d33c738a107efb9fd5a9517770ab1ca23b12ec359bda4b
GET /wp-content/themes/p30dayv7.1/fontiran.css HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: text/css
last-modified: Wed, 19 Dec 2018 18:34:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 836
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tablighat/faradars970.webm
206 Partial Content 104 kB URL HTTP/2 www.p30day.ir/images/tablighat/faradars970.webm
IP
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Size 104 kB (104427 bytes)
Hash c55d384a87daca4533daf2ffa189fd17
1d9b2d0a32ec5070435c14b99da8ed5d7d6109be
ead160ef9c494503ff00dbd6c84eb27d4857fe140d3387105742d1694d0b28bb
Analyzer Verdict Alert fortinet Malware
GET /images/tablighat/faradars970.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: video/webm
last-modified: Sun, 16 Oct 2022 10:36:12 GMT
content-range: bytes 0-104426/104427
content-length: 104427
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tablighat/animeongif.webm
206 Partial Content 47 kB URL HTTP/2 www.p30day.ir/images/tablighat/animeongif.webm
IP
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 28aa7d1f52ec5ebeb47acbabda32e578
53ad8749ce9287382a29d535b57e2c4069cf2bbb
f3f51b0c0c64c201f999c25a8cfeeebe4cc2961fb5114bab05acf050dc64c3c7
Analyzer Verdict Alert fortinet Malware
GET /images/tablighat/animeongif.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: video/webm
last-modified: Wed, 24 Aug 2022 09:20:55 GMT
content-range: bytes 0-47091/47092
content-length: 47092
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tabligh/cdkeyshare270.webm
206 Partial Content 34 kB URL HTTP/2 www.p30day.ir/images/tabligh/cdkeyshare270.webm
IP
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 38f15843970f1fa7d76fad78b988ee08
cbebe6f42ee44f06a843d5caac682a36b54ed42e
bb5d619ead452b1feba0e7c654f2a5d05086fad43c9e04a9c19db01a27dc5045
Analyzer Verdict Alert fortinet Malware
GET /images/tabligh/cdkeyshare270.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: video/webm
last-modified: Sun, 19 Jun 2022 10:43:45 GMT
content-range: bytes 0-34370/34371
content-length: 34371
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tabligh/gift11.webm
206 Partial Content 39 kB URL HTTP/2 www.p30day.ir/images/tabligh/gift11.webm
IP
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Hash af0ddd2b6fefee24e4183f51648c11c9
667feac1697012dcf2666a1129cb333468612fb5
88239934567ce74587ac82a31e3b77479ef1c8cb67e3f9f33baacfbbf47ea859
Analyzer Verdict Alert fortinet Malware
GET /images/tabligh/gift11.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: video/webm
last-modified: Fri, 09 Sep 2022 21:10:07 GMT
content-range: bytes 0-38866/38867
content-length: 38867
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tablighat/pcgamebanner.webm
206 Partial Content 156 kB URL HTTP/2 www.p30day.ir/images/tablighat/pcgamebanner.webm
IP
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Size 156 kB (156122 bytes)
Hash f212bf7e0a69e1cf8e167679d438f52d
766427c965b4b3ca8fe5eb23097c3d23057cf672
b780218c7eaba88ab5e3ced7c7459a59091627357c1bbd638de7b794f347aaaf
Analyzer Verdict Alert fortinet Malware
GET /images/tablighat/pcgamebanner.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:29 GMT
content-type: video/webm
last-modified: Wed, 12 Oct 2022 10:08:41 GMT
content-range: bytes 0-156121/156122
content-length: 156122
date: Thu, 08 Dec 2022 21:07:29 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg
200 OK 193 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x38, components 1\012- data
Hash bd79e4f635621819a0f871f71828313c
7cca8338395407917aa037a2ac64c965e81b17d8
d7c3581c0769f58151379bbbc5a34fc8f46caf00c05298f90b6639e349b2e59d
GET /wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 193
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logohead.jpg
200 OK 2.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logohead.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 284x38, components 3\012- data
Hash 4dd2b75ea3ab31ba5a8e6319244abca5
9a968b99721ac4f1dd311cf29bbbe04f229c4e21
13b88e24a117d01c8010505955530b45e2d5087dc2d377f6760eecf26fc28ede
GET /wp-content/themes/p30dayv7.1/data/images/logohead.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1980
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logobg.png
200 OK 8.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logobg.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 270 x 153, 8-bit/color RGB, non-interlaced\012- data
Hash 378fc626281e0c092602e3ac451bb582
cc2d093a754823a4fe5a3fdcda0c7c6428917c2d
17d63a6e2bcbd671e239e66155afe0630724920218447bcdf8536a61d37e1c36
GET /wp-content/themes/p30dayv7.1/data/images/logobg.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/png
last-modified: Sat, 23 Feb 2019 10:53:10 GMT
accept-ranges: bytes
content-length: 7952
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/08/No-Mans-Sky-WayPoint-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/08/No-Mans-Sky-WayPoint-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d1fd4a6ccc9fec49113988109228466b
a19c201729404a39073401a73eac885c7085d650
82c5adb4cbf904ed64f8f46fa9883d143bd611c1aaf776fa778c5540c1052cbb
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/08/No-Mans-Sky-WayPoint-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/webp
last-modified: Sat, 08 Oct 2022 14:42:40 GMT
accept-ranges: bytes
content-length: 20438
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1dda844459ad71a9d0b89ff5eadf46de
c0f435cebb2b18fc35b24d2d5fd055fc96796797
16be7e869311aa777d99a8066863eb0fb6903de667d50ca7b9e6a36c722bfac0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/webp
last-modified: Fri, 05 Nov 2021 17:11:00 GMT
accept-ranges: bytes
content-length: 21166
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2020/11/Call-of-Duty-Black-Ops-Cold-War-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2020/11/Call-of-Duty-Black-Ops-Cold-War-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f11f670e459c14e7e0983f3e68789dfc
ae215a5e19d8b5bac4e8bff497bf9134e39ea28e
f89ea1995fa97cb5b2a1f060c22702fc4b1cb93f644bf3c0105e6f7b823179a6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2020/11/Call-of-Duty-Black-Ops-Cold-War-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/webp
last-modified: Mon, 16 Nov 2020 22:31:15 GMT
accept-ranges: bytes
content-length: 20464
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2c22c0e7cd4e6d18e32b5ddfd06f15b6
0c1af87f3a62b77efafb9bc069421548b8c54f50
c5ec278775b4aca8587701226794c288ad31fdd410d10753a39ce24e4e78f1ac
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/webp
last-modified: Fri, 27 Aug 2021 23:11:40 GMT
accept-ranges: bytes
content-length: 19592
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/08/fall-guys-new-season-2-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
200 OK 32 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/08/fall-guys-new-season-2-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 990f8e489eb0f20e7ad89938dc335070
8ffe63e847f78a2d14150f9c7116d03a31f67dfd
0a28c5270413639f67b9089eb2dc15e80779ad03fd09e0363c66098a16931b37
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/08/fall-guys-new-season-2-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/webp
last-modified: Mon, 19 Sep 2022 08:00:38 GMT
accept-ranges: bytes
content-length: 31560
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
200 OK 186 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 8x8, components 1\012- data
Hash c07b958a50276ef2335c0a97b26fba73
66951a4e8c12e80814625f90167c95a3ebabca82
e4c78d99b0c76d668d08209ec3d822c48d4b8f85d6f09eecc796e68b2cacb665
GET /wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 186
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 23x141, components 1\012- data
Hash 7d90c92e3961b8322b3335c00bc3bc87
1d4994b1397daccb185623e49e91f957cb264f3a
f063582f1f7df2931308adeff5d9239f6fe78c3476c07034cf39e0516d0410dd
GET /wp-content/themes/p30dayv7.1/data/images/adstext.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1301
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/category_icon.jpg
200 OK 599 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/category_icon.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 15x14, components 3\012- data
Hash 32ab43edb43c80f4084ed7818a36f029
fb4422a9be5226f1cde126ff4744c30fd4d45fc8
8956e0239a3313ccbd33cef0c9879921e91cef1b8c7372bb7c21c560672349c2
GET /wp-content/themes/p30dayv7.1/data/images/category_icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 599
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
200 OK 177 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x38, components 1\012- data
Hash 909e83f543a3bc1d93cbc088b6c4db0d
9e4988299811f5854420d28598c521ec405844e4
4d1c24eda2bfa81daf6efa53831e2b65eda16945d4e087960c83c3d6b5ef4756
GET /wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 177
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg
200 OK 343 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x28, components 3\012- data
Hash 575e419ed841227e17b3ff68601ebad7
ab05132fb073e59fc9ba4bd28e29be6585aadf90
b00f625e73941ed1350b7661d37f53f728e0bda561e22443ef2a6b4b3a812590
GET /wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 343
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg
200 OK 184 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x28, components 1\012- data
Hash 29a713549baf2b7a8d3c98386876f918
d18b936322da10fb3e0e7c156ba117e6f2489f40
53345b3b9a6cd850c85cd62ef2936de688d5779c8b670e7a65782b245f0bcb58
GET /wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 184
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
200 OK 455 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 21x21, components 1\012- data
Hash ef487d89559d14481fe71408729115ed
1287c52488f6fff71fe0c16b441e650198bd0a74
d274862bd1bc6b81df11f8a26506d6b01800f5b5a5350f66bea78a57a3a758ec
GET /wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 455
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 270x64, components 3\012- data
Hash 733f3ccb8e1f56ce42bc4dbdcb97487f
2090588bc395bb2a6ac2b614dc7122beb088646e
8560e5600d8636cffb075c9d774e594aeaf84e1405608d8a93bf246d11646480
GET /wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1162
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
200 OK 102 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 8 x 5, 2-bit colormap, non-interlaced\012- data
Hash e83c058adc9ac1ea2966138ddc28c83f
a7210bf381afb33535d4e55667f473bcaad195a9
f797a59c0d0c69ed3a140b2651b786583e372708de82b22e7bdbf6588199677f
GET /wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/gif
last-modified: Sat, 23 Feb 2019 10:56:42 GMT
accept-ranges: bytes
content-length: 102
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
200 OK 170 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x2, components 1\012- data
Hash 204ccbc677cdc87675467ffe8c9129a0
9ea29e505de3e97d6f6b9638a4b379f21a0def7b
109936adfb4a38a446b3ffa75836a002b241ea538f1b9727546d431761a889f4
GET /wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 170
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
200 OK 30 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 29820, version 1.0\012- data
Hash 9d38733b8a7b9153f2bf9bfe476ef8e3
93f8caeb96e52cd35dd24ffe8dbbc911af5b236e
b2144257a57aa398277a4977bfab616e368f4d8c8c45c79f2f128d8db537cbc8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:48 GMT
accept-ranges: bytes
content-length: 29820
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
200 OK 8.9 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 8900, version 1.0\012- data
Hash 6427d2890332acaa1a4cd0102a7f64d1
2dbca84994471c8cfd3944f3e1df902fbed726fd
6bce3d5ade75e6533bf17697cff7f66cfb51955ec9d158aeface37363b5ff754
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=ffacb
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: font/woff
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 8900
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 28388, version 1.0\012- data
Hash 2f6f164c3e1f1329cc658b3c725bfd98
9e63d01d8561d79074bd8e46fbf265285ab958b7
a068d909851e4b57d0847b6c35457ab980463710e124a7e5e26b642e7f9f64fa
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:49 GMT
accept-ranges: bytes
content-length: 28388
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg
200 OK 9.7 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 3a1e7ba4dff14150dccc88e5f52b667f
39e6d094a15d6f25f144a8e917a2ec0e69b7621c
65f833659efc428f6518cfbff0c96079156e4e4082890dab65fe0a52a40ac3a7
GET /wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Mon, 26 Nov 2018 15:53:27 GMT
accept-ranges: bytes
content-length: 9726
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2015/12/0_878cb_ad7e591_M.jpeg.jpg
200 OK 13 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2015/12/0_878cb_ad7e591_M.jpeg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash f23e5819820043feaafe5859ad16d2c2
c1d4d0d4b2df08bbe60c0f1d27bfb27b848f905e
060f76261a706fc1f8f8715b847dce1e93f49c8b750070f1224bf43c5de0815e
GET /wp-content/uploads/2015/12/0_878cb_ad7e591_M.jpeg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Fri, 26 Jan 2018 08:42:29 GMT
accept-ranges: bytes
content-length: 13246
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg
200 OK 4.5 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 6cfd2c88405e6e0c9e908f4a690975b1
7513ec40888b1edce91427375c66d51127ab7845
122413e8513d08d34485393f751b6170eb77385e7565ec2c3cf3acaa3120fb2f
GET /wp-content/uploads/2021/06/Windows-11-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 19 Jun 2021 04:10:26 GMT
accept-ranges: bytes
content-length: 4456
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg
200 OK 7.7 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 256x256, components 3\012- data
Hash 13cd832d0f976898ae96bfdf56574448
bf817b252dd9b65aeeff7ec2c29b47362b42fc93
a84947a67f8f1172beba5e432863221c0638f1852e75d18267f37713aee6c6fd
GET /wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Wed, 20 Dec 2017 13:04:44 GMT
accept-ranges: bytes
content-length: 7712
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
200 OK 14 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash d70b4b85df7894ae52c49d6d2082e5a1
6d9cd83d5d22cc9ceb29a3f46158ef47cde6978e
c878111b78203ce81009f09637a3b9339a13a4be6399a370d10e054c91f93449
GET /wp-content/uploads/2018/08/Fortnite-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jan 2019 15:54:33 GMT
accept-ranges: bytes
content-length: 14195
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 5a8cf6d3b62188b06f86bfa8d2541406
3a83683da979322b727c69b5f43ecdebff2a5937
316c2cef65cd88c00b9c470f43708aa37b854714ab80a30a2a7af0d294912098
GET /wp-content/uploads/2022/03/trainer2.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Fri, 11 Mar 2022 21:10:15 GMT
accept-ranges: bytes
content-length: 12033
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
200 OK 9.5 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash a7c5fb47b5a2241827154e67e2063d7d
750b7e9141cc35af7da9b03f6f5ec0f5f468b397
deb2589dcf6631e013ceac516224880daa4f7970218ae3dc2c8473ce8bd75072
GET /wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Fri, 15 Dec 2017 22:16:01 GMT
accept-ranges: bytes
content-length: 9474
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
200 OK 9.8 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 4de60df9a9dd0f161ef7086529319bd4
32809468ded58d918127dc62243f6d5997f73fac
cc789bee8ec9544815531b72d475f178f3842e5536522fbe991144849bd5a444
GET /wp-content/uploads/2021/08/nvidia-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 14 Aug 2021 18:10:08 GMT
accept-ranges: bytes
content-length: 9750
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2013/01/kaspers-300x264.jpeg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2013/01/kaspers-300x264.jpeg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x264, components 3\012- data
Hash 8c9d1dec0b8cee0e8d4a3d340199bbc3
6b8b4cb6ec5f2b6ab91d01b42abe57ff64b3edb3
7051a3e408acc1ec6290d2039d9e16fb8d5a9a2cc7d4d27971a3126e32381a91
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2013/01/kaspers-300x264.jpeg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sun, 22 Apr 2018 23:12:08 GMT
accept-ranges: bytes
content-length: 11927
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 17d7f8f05769b4c612baaf104a938457
e03f6cc0f577b8489adce4992270c2207a1b2d47
6c02051060327c956a79e836091fc937b469ff04d559bb86a7f03c72255839ee
GET /wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sun, 14 Jan 2018 12:58:38 GMT
accept-ranges: bytes
content-length: 12336
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2012/06/Telewebion-logo.png
200 OK 15 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2012/06/Telewebion-logo.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 1350e6ebde75e48a0a6f0637227e69fc
842fd619acb59e824074140b15aefd30866ba6d3
a95fc52118e8ea0f3192d0615ac7fb5e7ed9aa6675a0766d4d2fdb8511d911b5
GET /wp-content/uploads/2012/06/Telewebion-logo.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/png
last-modified: Fri, 12 Jan 2018 19:02:21 GMT
accept-ranges: bytes
content-length: 15158
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 266c07d954f38debe51569c226038bc7
648c6b63a63539270ac00b8ab2df8f0ba3256356
1e065c4e9a86693f4e08c4010826da7e33d64d6b83d2d7faac55063c54eb78c0
GET /wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Fri, 05 Nov 2021 17:10:59 GMT
accept-ranges: bytes
content-length: 24922
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/Aliens-Fireteam-Elite-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 27 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/Aliens-Fireteam-Elite-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 2e7c289811031e48c1d9433e47a10667
b4a2fd40ffe98e7103521eaf3003036748fefb56
385bceed54107a0d24bb8559a780d5c76a0a5cd8e195d405f2c775a88c1f33b3
GET /wp-content/uploads/2021/08/Aliens-Fireteam-Elite-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Tue, 24 Aug 2021 16:40:39 GMT
accept-ranges: bytes
content-length: 27147
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2020/11/Call-of-Duty-Black-Ops-Cold-War-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 24 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2020/11/Call-of-Duty-Black-Ops-Cold-War-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash e3a6b63ab4927c8d92f7056e32f15b83
cf236e0b5cc225c5ddd1292a6596f146f7cf0ae6
37f0289800ef724263526231414f89204b3b37c431ffcf1e6effa0e1f470c040
GET /wp-content/uploads/2020/11/Call-of-Duty-Black-Ops-Cold-War-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Mon, 16 Nov 2020 22:31:14 GMT
accept-ranges: bytes
content-length: 24044
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 23 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 6df787773b8c18cc98b2ffe157d8cf0b
17f3492d8b28fca50a3325e3a9f01d4e6286c54e
c864dfad37871565a7e5f4c88b78d942cfe49296a83794e2c129957d9cecb6c7
GET /wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Fri, 27 Aug 2021 23:11:40 GMT
accept-ranges: bytes
content-length: 22629
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/Call-of-Duty-Warzone-Mobile-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 24 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/Call-of-Duty-Warzone-Mobile-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash b25768f673578d69392366c5673dad87
f16df20bfda1ccfcf63304604c1dd5340a81d911
5a43602bb62cbe5566d428674cb5f2f8267bcfc92425135ee9c202135c1f6144
GET /wp-content/uploads/2022/11/Call-of-Duty-Warzone-Mobile-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Wed, 30 Nov 2022 11:01:40 GMT
accept-ranges: bytes
content-length: 23790
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 04800cc8299476f9ffdd0fb9c4e46c7b
89ebcfda8cab223733b7a8f9b85408c2cff9aaba
16ca7625901b216dc43a51319400eac8e6b8716a4e8e669d64ac45c36e41741e
GET /wp-content/uploads/2022/05/pubg-mobil.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Fri, 13 May 2022 22:40:24 GMT
accept-ranges: bytes
content-length: 25225
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 6439adca635d68a4903139b773a037df
37ea4e385cc38a7b0b7ef5ece59c8c42471c2690
dc5bac1e0f414a15e14b46a0cb4edfa95db7a906edb79df61ebb8958be914dd7
GET /wp-content/uploads/2019/05/cod-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Fri, 24 May 2019 19:25:58 GMT
accept-ranges: bytes
content-length: 28142
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
200 OK 40 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 282ab4960a3218179243add97e98d1bb
f3f55b81949c9c10f6e7c7b7fdd150fc0256d7c0
b4eeca569cb6f2401e2645fdf01d952240276ca6bd21d21c3f358f8314ef77d0
GET /wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Mon, 26 Sep 2022 19:29:35 GMT
accept-ranges: bytes
content-length: 39795
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
200 OK 23 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash c59c5894ca56da620457ac4f3d675ab7
4b2d5bd0680aa6fbfae98fefac9270831b447e35
6989b43e56daa13a2702b1baba2f2220eb2f54af4d0c32cb613776b90ebc058d
GET /wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Tue, 20 Sep 2022 09:45:30 GMT
accept-ranges: bytes
content-length: 22630
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 080d36f5a29083af1b095fa12aa3f8ab
c809e9cc01c78fbb315899b038532e2bad0ac2fb
50864ff8ca4ba1ba0fdb31fb21e0d6d5c962f97235e84ac2600ce144e418bc98
GET /wp-content/uploads/2022/07/elden-ring-game.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Wed, 20 Jul 2022 11:10:18 GMT
accept-ranges: bytes
content-length: 20052
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2015/09/km-player-th-400x400.png
200 OK 51 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2015/09/km-player-th-400x400.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash 205e12f75385cafb75b912e46db54b65
d43c5de6d53e09cd11bc7543939c96f2c6c48b28
cf5eea7524bd31057d0ced2b870245a9c43328dad273de28a70fe4295741498d
GET /wp-content/uploads/2015/09/km-player-th-400x400.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/png
last-modified: Thu, 22 Sep 2016 23:22:28 GMT
accept-ranges: bytes
content-length: 50688
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/12/ELDEN-RING-Ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/12/ELDEN-RING-Ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 3146ff24c6fe2d2c70062628faa397bc
991f1951593f3a140b64971081ff9ff60417fb1c
707cf4cf4f51203b21d6e7b00c81dd85502e816a3c57d54511604c2fd2b90362
GET /wp-content/uploads/2021/12/ELDEN-RING-Ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Wed, 15 Dec 2021 19:10:23 GMT
accept-ranges: bytes
content-length: 20912
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/06/Rocket-League-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 32 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/06/Rocket-League-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 34b09eae05db99094172cc45404ab755
489232ad42b71bfa7f98e31a8165e1c111e9662e
24c94f52c8da445a1cf4aca46c05c72f1cd0f9d12140e71e4c1d31231c05092e
GET /wp-content/uploads/2022/06/Rocket-League-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Wed, 15 Jun 2022 14:10:15 GMT
accept-ranges: bytes
content-length: 32269
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/07/F1-22-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 27 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/07/F1-22-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 00e582a9b2582728f8751a1690b11a19
72a3061408f60e44b6fc8fd3e766c3e4453db487
626ce29155ec951df8a4a57730a8ce845382edc0799d368780547762ec6b174b
GET /wp-content/uploads/2022/07/F1-22-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Tue, 05 Jul 2022 07:40:17 GMT
accept-ranges: bytes
content-length: 27084
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/07/F1-22-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/07/F1-22-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 3043553741d0d38aeb7ddc04304bbfbb
b22f77c142b88777f045ea3540262ef618d8cb61
93853b94a97cd8553e9f97b24ddc921c1aec7ab374ff7032d0fb8e1171ceba5e
GET /wp-content/uploads/2022/07/F1-22-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/jpeg
last-modified: Sat, 09 Jul 2022 14:10:51 GMT
accept-ranges: bytes
content-length: 24593
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 795e67bdfadc3c890a663080413b56b7
fdefde3befb6aceac3c337c34c8d738f5091908c
8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.p30day.ir/wp-content/plugins/litespeed-cache/guest.vary.php
200 OK 20 B URL HTTP/2 www.p30day.ir/wp-content/plugins/litespeed-cache/guest.vary.php
IP
ASN #43754 Asiatech Data Transmission company
File type JSON data\012- , ASCII text, with no line terminators
Hash 6983d6b2ea353ce0b2b3d2477674219d
d1b7a9df890d2bf30ce03ee569b28d5c3226debe
0056a5d09750d683c893ec741a9c08940a19439d1c67b3de820c31cdfd15eb02
Analyzer Verdict Alert fortinet Malware
POST /wp-content/plugins/litespeed-cache/guest.vary.php HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Origin: https://www.p30day.ir
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
x-litespeed-cache-control: no-cache
set-cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; expires=Sat, 10-Dec-2022 21:07:30 GMT; Max-Age=172800; path=/; secure; HttpOnly
content-type: text/html; charset=UTF-8
content-length: 20
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2011/09/Background-Remover-logo7.png
200 OK 155 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2011/09/Background-Remover-logo7.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 155 kB (155259 bytes)
Hash 1d033432c9ac3fee7a4ffbc4de309cd1
431c31bba217ad86cd581b05a875e6ddc6d6f56a
7c3937ef30c9a71ceaf9b81a9da41f8fa46f833ad30acdadfa38cca87f6474ed
GET /wp-content/uploads/2011/09/Background-Remover-logo7.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:30 GMT
content-type: image/png
last-modified: Tue, 26 Dec 2017 10:24:11 GMT
accept-ranges: bytes
content-length: 155259
date: Thu, 08 Dec 2022 21:07:30 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-15659274-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-15659274-1
IP
File type ASCII text, with very long lines (1921)
Hash 42b3d3ae7ab7d4ca0bd0e6bbc0029aa0
44b0ad8edcf23eea9985767d2b35a8c61af16b75
7d2856b3349e0c6ea488bdd35477f37a4f61e42e3d6fd505258b46bacd0e19fa
GET /gtag/js?id=UA-15659274-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:30 GMT
expires: Thu, 08 Dec 2022 21:07:30 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43598
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 795e67bdfadc3c890a663080413b56b7
fdefde3befb6aceac3c337c34c8d738f5091908c
8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7a9ce4f25c6e52a075a60cecb812ddd2
c6fa3e2af976cd93315fbdf36f5f12c3689682c2
a362bdf62942f7affb23f4dbd42af52c220899b8b996974866ddaf68eeec404c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A362BDF62942F7AFFB23F4DBD42AF52C220899B8B996974866DDAF68EEEC404C"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11396
Expires: Fri, 09 Dec 2022 00:17:26 GMT
Date: Thu, 08 Dec 2022 21:07:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c30cdfaa36f75325d98406ff7216b513
f17d65386584f7b629655d9c724ff8e105c523a9
dbe12e22e6a19c35da02604df23db4c7cbbe9be12f525f498649452a42846f51
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBE12E22E6A19C35DA02604DF23DB4C7CBBE9BE12F525F498649452A42846F51"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3538
Expires: Thu, 08 Dec 2022 22:06:28 GMT
Date: Thu, 08 Dec 2022 21:07:30 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c89743226644fddacbe5d50c110b950
b343ae9eb9047cf764b518083d612ffd3652b209
1bf675bb6e12e913a98cd8849c1af9a0c50b0bb8bfa670c86419b41782e06e47
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 08 Dec 2022 20:41:08 GMT
expires: Thu, 08 Dec 2022 22:41:08 GMT
cache-control: public, max-age=7200
age: 1582
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j98&a=972923465&t=pageview&_s=1&dl=https%3A%2F%2Fwww.p30day.ir%2Fgame%2F%25D8%25A8%25D8%25A7%25D8%25B2%25DB%258C-ps3&ul=en-us&de=UTF-8&dt=Page%20Not%20Found%20-%20%D9%BE%DB%8C%20%D8%B3%DB%8C%20%D8%AF%DB%8C&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1868442156&gjid=1341440065&cid=1831397556.1670533650&tid=UA-15659274-1&_gid=387766825.1670533650&_r=1>m=2oubu0&z=1809257527
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=972923465&t=pageview&_s=1&dl=https%3A%2F%2Fwww.p30day.ir%2Fgame%2F%25D8%25A8%25D8%25A7%25D8%25B2%25DB%258C-ps3&ul=en-us&de=UTF-8&dt=Page%20Not%20Found%20-%20%D9%BE%DB%8C%20%D8%B3%DB%8C%20%D8%AF%DB%8C&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1868442156&gjid=1341440065&cid=1831397556.1670533650&tid=UA-15659274-1&_gid=387766825.1670533650&_r=1>m=2oubu0&z=1809257527
IP
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j98&a=972923465&t=pageview&_s=1&dl=https%3A%2F%2Fwww.p30day.ir%2Fgame%2F%25D8%25A8%25D8%25A7%25D8%25B2%25DB%258C-ps3&ul=en-us&de=UTF-8&dt=Page%20Not%20Found%20-%20%D9%BE%DB%8C%20%D8%B3%DB%8C%20%D8%AF%DB%8C&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1868442156&gjid=1341440065&cid=1831397556.1670533650&tid=UA-15659274-1&_gid=387766825.1670533650&_r=1>m=2oubu0&z=1809257527 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.p30day.ir
date: Thu, 08 Dec 2022 21:07:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c89743226644fddacbe5d50c110b950
b343ae9eb9047cf764b518083d612ffd3652b209
1bf675bb6e12e913a98cd8849c1af9a0c50b0bb8bfa670c86419b41782e06e47
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2556512b197b09798af71bea10bb4bbb
23b647aca5f8294ae82fa8cc7e2215ebe3347b60
3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-15659274-1&cid=1831397556.1670533650&jid=1868442156&gjid=1341440065&_gid=387766825.1670533650&_u=YEBAAUAAAAAAACAAI~&z=1763668356
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-15659274-1&cid=1831397556.1670533650&jid=1868442156&gjid=1341440065&_gid=387766825.1670533650&_u=YEBAAUAAAAAAACAAI~&z=1763668356
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-15659274-1&cid=1831397556.1670533650&jid=1868442156&gjid=1341440065&_gid=387766825.1670533650&_u=YEBAAUAAAAAAACAAI~&z=1763668356 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.p30day.ir
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 08 Dec 2022 21:07:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2556512b197b09798af71bea10bb4bbb
23b647aca5f8294ae82fa8cc7e2215ebe3347b60
3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5cba4e1962a1fe17c9021f3e418975a
01293d7e4084011451f7d17936ab2427504cdb1a
ecfe30d3abc32ca9f933303d75b2055642d3c7c8197af08fe2c314394699594b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 32d90ff0cc366730c3633c1201b4c058
f4175292b607197a15085e14bf69df301dff6706
b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=1831397556.1670533650&jid=1868442156&_u=YEBAAUAAAAAAACAAI~&z=915764395
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=1831397556.1670533650&jid=1868442156&_u=YEBAAUAAAAAAACAAI~&z=915764395
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=1831397556.1670533650&jid=1868442156&_u=YEBAAUAAAAAAACAAI~&z=915764395 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 21:07:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=1831397556.1670533650&jid=1868442156&_u=YEBAAUAAAAAAACAAI~&z=915764395
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=1831397556.1670533650&jid=1868442156&_u=YEBAAUAAAAAAACAAI~&z=915764395
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=1831397556.1670533650&jid=1868442156&_u=YEBAAUAAAAAAACAAI~&z=915764395 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 21:07:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0905812e8498e6c5c0a9b4b584b972f
039b784fd1e0152ec7f49a54ba027f0b2bd1e833
ee3531ef0f334dcd73a86b1e4365a020d5db69ff7b82bad136eaf1a8e9d3b47f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 32d90ff0cc366730c3633c1201b4c058
f4175292b607197a15085e14bf69df301dff6706
b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:07:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.p30day.ir/wp-content/plugins/contact-form-7/includes/swv/js/index.js
200 OK 2.8 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/contact-form-7/includes/swv/js/index.js
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (9937), with no line terminators
Hash 4317b1c024df372435f6482deadddeb3
5c8824a17e40a44ea8fc51568b98bdb1e2e7fab5
3798fb16289ba55459fb6d3b2efa915e3c019c5942759abb7bd19a0ef622b85d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:31 GMT
content-type: application/javascript
last-modified: Wed, 19 Oct 2022 18:33:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2817
date: Thu, 08 Dec 2022 21:07:31 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/contact-form-7/includes/js/index.js
200 OK 3.7 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/contact-form-7/includes/js/index.js
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document, ASCII text, with very long lines (12310), with no line terminators
Hash dc6411bfa6891b75944f0074c945752d
03c1a8b686c287068c61ab90f58d905496d65085
96abeabc9cc7b4c2b7d46579f2827c67ccd02fbaef0343ae052f71accd381b0d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:32 GMT
content-type: application/javascript
last-modified: Wed, 19 Oct 2022 18:33:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3706
date: Thu, 08 Dec 2022 21:07:31 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/9ab09e9b4aa5d113f71e8d785928edfa.js?ver=ffacb
200 OK 64 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/9ab09e9b4aa5d113f71e8d785928edfa.js?ver=ffacb
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65447)
Hash 2800a1abd374da8690f23858c416290e
13b166a50651ed0dd4088733b6d0aed3b31f110b
8f1467c5932f68335dfc852be62527f5bc2a4af78a90729c72fd918f55d7a12b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/9ab09e9b4aa5d113f71e8d785928edfa.js?ver=ffacb HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:32 GMT
content-type: application/javascript
last-modified: Mon, 05 Dec 2022 16:33:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 64000
date: Thu, 08 Dec 2022 21:07:31 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/03c8850d4ff0350767581ae20bb24694.css?ver=24694
200 OK 217 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/03c8850d4ff0350767581ae20bb24694.css?ver=24694
IP
ASN #43754 Asiatech Data Transmission company
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/03c8850d4ff0350767581ae20bb24694.css?ver=24694 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-length: 217
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/72d84f6ba4828c7b1eff74713697c0a2.css?ver=7c0a2
200 OK 129 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/72d84f6ba4828c7b1eff74713697c0a2.css?ver=7c0a2
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with no line terminators
Hash 5fa8018ed12f71dff7729f927d6e2f80
1d74e0653327b59f8a9ede182064d0425cff8801
8d74a46f5aa0083693a91b5cc42c9d44c8e0551fe1165d028a8fbeb16527ba7f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/72d84f6ba4828c7b1eff74713697c0a2.css?ver=7c0a2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-length: 129
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (3683), with no line terminators
Hash f3c166f319aea691586c1f2f4afe2118
a300f6381204e7c980b147530257244c4093df42
45eb812e6973267111387a695e662c78eeef445860ee720c8e9e623d38d05022
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: application/javascript
last-modified: Tue, 01 Nov 2022 13:47:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1167
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
200 OK 3.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 85 x 86, 8-bit colormap, non-interlaced\012- data
Hash c736084f562340b160cbb12fcdcf59e2
efdd05e9198f48aca2e530cecf5868731769b15a
0a79347b3008d5832c869fb8bc82e6e889a84048f9d2684e458df0da405c194c
GET /wp-content/themes/p30dayv7.1/data/images/logo.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/png
last-modified: Thu, 08 Jul 2021 15:50:55 GMT
accept-ranges: bytes
content-length: 2976
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/winrar.webp
200 OK 868 B URL HTTP/2 www.p30day.ir/images/fastdl/winrar.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 43x43, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 87c92fbb7d5a79faceffbf561c56bd0c
8145b4c0a0a040a5696a63a15ce26e215bf6439d
ab07ecfe46a014e8c7df29ed8d828aca0c2cffa78b1bec043bbf190fec5f293d
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/winrar.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Fri, 06 Jul 2018 12:04:56 GMT
accept-ranges: bytes
content-length: 868
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/idm.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/idm.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fb32f9bbbd50740c31723747dc5e1e5
59c219d247b2a02f9c0c908ab85f3f2d0cc1c521
cad6e35932597fb152209d206c301e5b0fb337b77c0637fd9639cda97c2781c8
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/idm.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:18 GMT
accept-ranges: bytes
content-length: 1286
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/chrome.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/chrome.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7d04c08bcdd79e30879c5d15c2806bd5
5917e971d8e243cf82d6abcdaedc9ae1fca7b7ab
d11703cc091f7177b192c810e165c5cc96d6d3517a6c6a4477dcec38f703b900
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/chrome.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1298
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ff.webp
200 OK 1.8 kB URL HTTP/2 www.p30day.ir/images/fastdl/ff.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 26635d4802f5bf01d7cde8bcb429a493
f7ba292a1d5d91e29f9a0cabf8f204c0bb73b3c4
44686b2af956e0928ed8d000e83d1ee0007223bb74b6e268503ff208f4f7dedb
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ff.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1754
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/nvidia.webp
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/nvidia.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7012172e13a625b034e882677435c7a0
98451904b87560a908d7211a06f4a73d80eb8b9f
fd7f3840bff4766d23c3ff979652e119036f484c1cb60f24ba6b0d39a037943c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/nvidia.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1202
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/adgc.webp
200 OK 1.4 kB URL HTTP/2 www.p30day.ir/images/fastdl/adgc.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 745a52e2bcca1a45f7ada2d8edc1baaa
390ec2980d7989082ee99edd4fb20cd76f85ccc6
a578633d17dd6c73af65284cf264bc25e7387325e78556f4db253cd214c8c3a8
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/adgc.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1390
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/reader.webp
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/reader.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fff23369545f680acbb06c513a551f6
5552213ae9ff2876b1f694bff383004629c55174
0bd7f6d56d8347f607373f7f0fe59bbd12218c9bd0d062fb035bdcc93173f873
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/reader.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1226
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/kmp.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/kmp.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ab2eb9b46ba51721999a1d0350bbf38
894ae30f4e29af81c60bb7502a864474dae8b626
3df5a58530b161285349a08201222fb34f760b117edd49e2ebba455b4ed52d0a
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/kmp.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1058
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/klite.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/klite.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash b3762ca2e70f1f68da4fc38f53dce6b3
62eb7b1023cf4be53c3182cc32cd794aa1fba741
b68afab14ce590f52341f15711e29511323129ae83930c61732d293fef120c9c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/klite.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1332
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/aimp.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/aimp.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 56e0584dce3543e6e8863428ae915ede
cbff7f659dc8db1b819324511aacd68b6c68f0ef
b0d948b1483456bd5fc8b4e31726442084b42419a7608d3a89acb99376e7cd47
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/aimp.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Fri, 06 Jul 2018 11:59:58 GMT
accept-ranges: bytes
content-length: 1074
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/daemon-tools.webp
200 OK 1.6 kB URL HTTP/2 www.p30day.ir/images/fastdl/daemon-tools.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash f1c4998e619d02f2c966d18cafa3ae5f
038e50d4c3f60a34e28bfa54d73d2f676a8b02f3
05df4592018b5987fbb9dec7d6b83d4c05f281621b694fb9b04538540d5f5442
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/daemon-tools.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1632
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/office.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/office.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8ba130fcea19ecd9ed5233ce0d22dd76
8bc7e1cf3869002d614f431ea39416f8bcb259f5
6b860744ee34632f6a2fbe3ceb00a29d7cf67f31f4273db9372486d0bff4abd9
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/office.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1078
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ps.webp
200 OK 656 B URL HTTP/2 www.p30day.ir/images/fastdl/ps.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash d086c0af387345300bf7a1d54ad05820
7e6b249d54a92b5ede190734e4392b70dc332f1b
2c9967c77a7ffa6ddeda076c1b90a6beda16864fa9e131e205fcdc70f49849ec
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ps.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 656
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/skype.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/skype.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2612c7b808a386c27c45c9d7a3ab05c7
a0c0acc0a9c0529df19d5ecc0aa8e66a4f3b3cf0
433be5e918c73c43f2130158730859ddcc9aa058d229feb01714d80cc3dfb324
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/skype.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1140
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/win10.webp
200 OK 516 B URL HTTP/2 www.p30day.ir/images/fastdl/win10.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3e95105787f48e97f255c054163b1ff2
bbd996c9d0de0c5d89bbcf02b5dbd9d0d0cb38c0
aef03c97b401a3b2d73fb25e0c926b8af7b4d01eaffa56e64828772b3624e5ae
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/win10.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 516
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/windows11.webp
200 OK 306 B URL HTTP/2 www.p30day.ir/images/fastdl/windows11.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash c07f514a1feb0a64d02a0f002103eacf
88bfe92c334f01ca1ee74adaa3187d15e77783b0
ba56118c3788fa3e7e8dd8b5a6d2299a00026356f98ff25138cc86215ff25bdf
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/windows11.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Sat, 19 Jun 2021 11:21:28 GMT
accept-ranges: bytes
content-length: 306
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/ab20be02f0571b098b5c6dc3faab387d.css?ver=b387d
200 OK 0 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/ab20be02f0571b098b5c6dc3faab387d.css?ver=b387d
IP
ASN #43754 Asiatech Data Transmission company
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/ab20be02f0571b098b5c6dc3faab387d.css?ver=b387d HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-length: 0
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
200 OK 836 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash b6de7641069b95fb7c051e730ecb3ab1
20e90d406e0a5d1e8e12897756d560f44ba282da
0c10e76e6ce8fe60e6d33c738a107efb9fd5a9517770ab1ca23b12ec359bda4b
GET /wp-content/themes/p30dayv7.1/fontiran.css HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: text/css
last-modified: Wed, 19 Dec 2018 18:34:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 836
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
404 Not Found 32 kB URL HTTP/2 www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26572)
Hash e3f5d031254bfc58f746e842312d9e96
572edadefdb5d58d36c6430f6478b2531f5ca020
33f0555c7f6058ad81811395cf1bc7dff15ca224d94b319304427df314958f45
Analyzer Verdict Alert fortinet Malware
GET /game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Connection: keep-alive
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
x-dns-prefetch-control: on
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
link: <https://www.p30day.ir/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: f51_HTTP.404,f51_404,f51_URL.122c062bac641192d5fbfd285cb33c83,f51_
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/ff8eed7eee11d7b3a0057a07a54d3bce.css?ver=d3bce
200 OK 15 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/ff8eed7eee11d7b3a0057a07a54d3bce.css?ver=d3bce
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8fd060c830e547b6841a92ff9e066490
14c21e9ac2b254c5cf4804d41329665be75f2e22
cd266320ce8d3000fe8c53dfe40cc57b6c9e57be063768d7f4a64d998e4b150a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/ff8eed7eee11d7b3a0057a07a54d3bce.css?ver=d3bce HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
200 OK 186 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 8x8, components 1\012- data
Hash c07b958a50276ef2335c0a97b26fba73
66951a4e8c12e80814625f90167c95a3ebabca82
e4c78d99b0c76d668d08209ec3d822c48d4b8f85d6f09eecc796e68b2cacb665
GET /wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 186
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 23x141, components 1\012- data
Hash 7d90c92e3961b8322b3335c00bc3bc87
1d4994b1397daccb185623e49e91f957cb264f3a
f063582f1f7df2931308adeff5d9239f6fe78c3476c07034cf39e0516d0410dd
GET /wp-content/themes/p30dayv7.1/data/images/adstext.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1301
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
200 OK 30 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 29820, version 1.0\012- data
Hash 9d38733b8a7b9153f2bf9bfe476ef8e3
93f8caeb96e52cd35dd24ffe8dbbc911af5b236e
b2144257a57aa398277a4977bfab616e368f4d8c8c45c79f2f128d8db537cbc8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:48 GMT
accept-ranges: bytes
content-length: 29820
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 28388, version 1.0\012- data
Hash 2f6f164c3e1f1329cc658b3c725bfd98
9e63d01d8561d79074bd8e46fbf265285ab958b7
a068d909851e4b57d0847b6c35457ab980463710e124a7e5e26b642e7f9f64fa
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:49 GMT
accept-ranges: bytes
content-length: 28388
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logobg.png
200 OK 8.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logobg.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 270 x 153, 8-bit/color RGB, non-interlaced\012- data
Hash 378fc626281e0c092602e3ac451bb582
cc2d093a754823a4fe5a3fdcda0c7c6428917c2d
17d63a6e2bcbd671e239e66155afe0630724920218447bcdf8536a61d37e1c36
GET /wp-content/themes/p30dayv7.1/data/images/logobg.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/png
last-modified: Sat, 23 Feb 2019 10:53:10 GMT
accept-ranges: bytes
content-length: 7952
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg
200 OK 9.7 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 3a1e7ba4dff14150dccc88e5f52b667f
39e6d094a15d6f25f144a8e917a2ec0e69b7621c
65f833659efc428f6518cfbff0c96079156e4e4082890dab65fe0a52a40ac3a7
GET /wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Mon, 26 Nov 2018 15:53:27 GMT
accept-ranges: bytes
content-length: 9726
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/44ee4d0839a4a04e07c9597310276dc6.css?ver=76dc6
200 OK 16 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/44ee4d0839a4a04e07c9597310276dc6.css?ver=76dc6
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (25320), with no line terminators
Hash 8b19f70d1a9deda7c003818088c0f500
f6650a3db179f1258ac1c3d9d3d18541842a76fd
e17b608d6a51c901fece08cb4e2e15a9e5bef6fff4a4fc19dd01c8e35b5fa407
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/44ee4d0839a4a04e07c9597310276dc6.css?ver=76dc6 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg
200 OK 4.5 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 6cfd2c88405e6e0c9e908f4a690975b1
7513ec40888b1edce91427375c66d51127ab7845
122413e8513d08d34485393f751b6170eb77385e7565ec2c3cf3acaa3120fb2f
GET /wp-content/uploads/2021/06/Windows-11-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Sat, 19 Jun 2021 04:10:26 GMT
accept-ranges: bytes
content-length: 4456
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg
200 OK 7.7 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 256x256, components 3\012- data
Hash 13cd832d0f976898ae96bfdf56574448
bf817b252dd9b65aeeff7ec2c29b47362b42fc93
a84947a67f8f1172beba5e432863221c0638f1852e75d18267f37713aee6c6fd
GET /wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Wed, 20 Dec 2017 13:04:44 GMT
accept-ranges: bytes
content-length: 7712
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1dda844459ad71a9d0b89ff5eadf46de
c0f435cebb2b18fc35b24d2d5fd055fc96796797
16be7e869311aa777d99a8066863eb0fb6903de667d50ca7b9e6a36c722bfac0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/webp
last-modified: Fri, 05 Nov 2021 17:11:00 GMT
accept-ranges: bytes
content-length: 21166
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/f3339baed1f9db0350f0972773eda65a.css?ver=da65a
200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/f3339baed1f9db0350f0972773eda65a.css?ver=da65a
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (744), with no line terminators
Hash 25766faa60adf2d14e0035896c4de221
3ee142b92f939db13fd26331abb0f0895b1b7a09
46d285dfaf95010175d28b19a07c090e3e8bb18007280e16e9f6b21c23296c25
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/f3339baed1f9db0350f0972773eda65a.css?ver=da65a HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/0a4c03c0b65170a860ae44a691591c7b.css?ver=91c7b
200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/0a4c03c0b65170a860ae44a691591c7b.css?ver=91c7b
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (4528), with no line terminators
Hash 707508388e080076a13d923855ac9e70
99c251b25e16ecec305930a4f27b3e1bf0fe14d7
6314e8e71fe0cb62fb30902ebb7c62fccef131da726d8ece4cb39e475566f413
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/0a4c03c0b65170a860ae44a691591c7b.css?ver=91c7b HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/7b14418837f17488895857beb9620d88.css?ver=20d88
200 OK 32 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/7b14418837f17488895857beb9620d88.css?ver=20d88
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (2328)
Hash 935ccedbe573b7409b6bc553acc7a49e
a43273a087a58fa480b425adda1c822673f681d1
0cdb886a42edcf73bdb50c918fcf7f541193d19c93b1fa582cacddcffca7da4f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/7b14418837f17488895857beb9620d88.css?ver=20d88 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 266c07d954f38debe51569c226038bc7
648c6b63a63539270ac00b8ab2df8f0ba3256356
1e065c4e9a86693f4e08c4010826da7e33d64d6b83d2d7faac55063c54eb78c0
GET /wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Fri, 05 Nov 2021 17:10:59 GMT
accept-ranges: bytes
content-length: 24922
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/Aliens-Fireteam-Elite-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 27 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/Aliens-Fireteam-Elite-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 2e7c289811031e48c1d9433e47a10667
b4a2fd40ffe98e7103521eaf3003036748fefb56
385bceed54107a0d24bb8559a780d5c76a0a5cd8e195d405f2c775a88c1f33b3
GET /wp-content/uploads/2021/08/Aliens-Fireteam-Elite-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Tue, 24 Aug 2021 16:40:39 GMT
accept-ranges: bytes
content-length: 27147
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2020/11/Call-of-Duty-Black-Ops-Cold-War-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 24 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2020/11/Call-of-Duty-Black-Ops-Cold-War-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash e3a6b63ab4927c8d92f7056e32f15b83
cf236e0b5cc225c5ddd1292a6596f146f7cf0ae6
37f0289800ef724263526231414f89204b3b37c431ffcf1e6effa0e1f470c040
GET /wp-content/uploads/2020/11/Call-of-Duty-Black-Ops-Cold-War-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Mon, 16 Nov 2020 22:31:14 GMT
accept-ranges: bytes
content-length: 24044
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
200 OK 38 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3e15a29090b42d9fd12458ee37092e41
554194b9468f9e33262cae45b6b39962dd830de2
1679ca33fdfec4ffa647e9a5dfc24b4e27910a4c272a1a10af6c491a35b94c62
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/Call-of-Duty-Warzone-Mobile-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 24 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/Call-of-Duty-Warzone-Mobile-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash b25768f673578d69392366c5673dad87
f16df20bfda1ccfcf63304604c1dd5340a81d911
5a43602bb62cbe5566d428674cb5f2f8267bcfc92425135ee9c202135c1f6144
GET /wp-content/uploads/2022/11/Call-of-Duty-Warzone-Mobile-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Wed, 30 Nov 2022 11:01:40 GMT
accept-ranges: bytes
content-length: 23790
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
200 OK 14 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash d70b4b85df7894ae52c49d6d2082e5a1
6d9cd83d5d22cc9ceb29a3f46158ef47cde6978e
c878111b78203ce81009f09637a3b9339a13a4be6399a370d10e054c91f93449
GET /wp-content/uploads/2018/08/Fortnite-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jan 2019 15:54:33 GMT
accept-ranges: bytes
content-length: 14195
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 5a8cf6d3b62188b06f86bfa8d2541406
3a83683da979322b727c69b5f43ecdebff2a5937
316c2cef65cd88c00b9c470f43708aa37b854714ab80a30a2a7af0d294912098
GET /wp-content/uploads/2022/03/trainer2.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Fri, 11 Mar 2022 21:10:15 GMT
accept-ranges: bytes
content-length: 12033
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
200 OK 9.5 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash a7c5fb47b5a2241827154e67e2063d7d
750b7e9141cc35af7da9b03f6f5ec0f5f468b397
deb2589dcf6631e013ceac516224880daa4f7970218ae3dc2c8473ce8bd75072
GET /wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Fri, 15 Dec 2017 22:16:01 GMT
accept-ranges: bytes
content-length: 9474
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
200 OK 9.8 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 4de60df9a9dd0f161ef7086529319bd4
32809468ded58d918127dc62243f6d5997f73fac
cc789bee8ec9544815531b72d475f178f3842e5536522fbe991144849bd5a444
GET /wp-content/uploads/2021/08/nvidia-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Sat, 14 Aug 2021 18:10:08 GMT
accept-ranges: bytes
content-length: 9750
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2013/01/kaspers-300x264.jpeg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2013/01/kaspers-300x264.jpeg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x264, components 3\012- data
Hash 8c9d1dec0b8cee0e8d4a3d340199bbc3
6b8b4cb6ec5f2b6ab91d01b42abe57ff64b3edb3
7051a3e408acc1ec6290d2039d9e16fb8d5a9a2cc7d4d27971a3126e32381a91
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2013/01/kaspers-300x264.jpeg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Sun, 22 Apr 2018 23:12:08 GMT
accept-ranges: bytes
content-length: 11927
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 17d7f8f05769b4c612baaf104a938457
e03f6cc0f577b8489adce4992270c2207a1b2d47
6c02051060327c956a79e836091fc937b469ff04d559bb86a7f03c72255839ee
GET /wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Sun, 14 Jan 2018 12:58:38 GMT
accept-ranges: bytes
content-length: 12336
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2012/06/Telewebion-logo.png
200 OK 15 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2012/06/Telewebion-logo.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 1350e6ebde75e48a0a6f0637227e69fc
842fd619acb59e824074140b15aefd30866ba6d3
a95fc52118e8ea0f3192d0615ac7fb5e7ed9aa6675a0766d4d2fdb8511d911b5
GET /wp-content/uploads/2012/06/Telewebion-logo.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/png
last-modified: Fri, 12 Jan 2018 19:02:21 GMT
accept-ranges: bytes
content-length: 15158
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/12/ELDEN-RING-Ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/12/ELDEN-RING-Ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 3146ff24c6fe2d2c70062628faa397bc
991f1951593f3a140b64971081ff9ff60417fb1c
707cf4cf4f51203b21d6e7b00c81dd85502e816a3c57d54511604c2fd2b90362
GET /wp-content/uploads/2021/12/ELDEN-RING-Ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Wed, 15 Dec 2021 19:10:23 GMT
accept-ranges: bytes
content-length: 20912
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/06/Rocket-League-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 32 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/06/Rocket-League-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 34b09eae05db99094172cc45404ab755
489232ad42b71bfa7f98e31a8165e1c111e9662e
24c94f52c8da445a1cf4aca46c05c72f1cd0f9d12140e71e4c1d31231c05092e
GET /wp-content/uploads/2022/06/Rocket-League-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Wed, 15 Jun 2022 14:10:15 GMT
accept-ranges: bytes
content-length: 32269
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/07/F1-22-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 27 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/07/F1-22-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 00e582a9b2582728f8751a1690b11a19
72a3061408f60e44b6fc8fd3e766c3e4453db487
626ce29155ec951df8a4a57730a8ce845382edc0799d368780547762ec6b174b
GET /wp-content/uploads/2022/07/F1-22-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Tue, 05 Jul 2022 07:40:17 GMT
accept-ranges: bytes
content-length: 27084
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/07/F1-22-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/07/F1-22-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 3043553741d0d38aeb7ddc04304bbfbb
b22f77c142b88777f045ea3540262ef618d8cb61
93853b94a97cd8553e9f97b24ddc921c1aec7ab374ff7032d0fb8e1171ceba5e
GET /wp-content/uploads/2022/07/F1-22-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Sat, 09 Jul 2022 14:10:51 GMT
accept-ranges: bytes
content-length: 24593
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/d5bd7ba53955ea45cdde76ae13483e21.css?ver=83e21
200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/d5bd7ba53955ea45cdde76ae13483e21.css?ver=83e21
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (2216), with no line terminators
Hash 6c790d154e05ce84a5bca61e81adec3f
7527be4bfde53c565054acd5b1f23b200166c9a6
cb76ea905fb57c3976e6e106311784f7206e145db570e1c4f1487df55b4b7939
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/d5bd7ba53955ea45cdde76ae13483e21.css?ver=83e21 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 04800cc8299476f9ffdd0fb9c4e46c7b
89ebcfda8cab223733b7a8f9b85408c2cff9aaba
16ca7625901b216dc43a51319400eac8e6b8716a4e8e669d64ac45c36e41741e
GET /wp-content/uploads/2022/05/pubg-mobil.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Fri, 13 May 2022 22:40:24 GMT
accept-ranges: bytes
content-length: 25225
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 6439adca635d68a4903139b773a037df
37ea4e385cc38a7b0b7ef5ece59c8c42471c2690
dc5bac1e0f414a15e14b46a0cb4edfa95db7a906edb79df61ebb8958be914dd7
GET /wp-content/uploads/2019/05/cod-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Fri, 24 May 2019 19:25:58 GMT
accept-ranges: bytes
content-length: 28142
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
200 OK 40 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 282ab4960a3218179243add97e98d1bb
f3f55b81949c9c10f6e7c7b7fdd150fc0256d7c0
b4eeca569cb6f2401e2645fdf01d952240276ca6bd21d21c3f358f8314ef77d0
GET /wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Mon, 26 Sep 2022 19:29:35 GMT
accept-ranges: bytes
content-length: 39795
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
200 OK 23 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash c59c5894ca56da620457ac4f3d675ab7
4b2d5bd0680aa6fbfae98fefac9270831b447e35
6989b43e56daa13a2702b1baba2f2220eb2f54af4d0c32cb613776b90ebc058d
GET /wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Tue, 20 Sep 2022 09:45:30 GMT
accept-ranges: bytes
content-length: 22630
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 080d36f5a29083af1b095fa12aa3f8ab
c809e9cc01c78fbb315899b038532e2bad0ac2fb
50864ff8ca4ba1ba0fdb31fb21e0d6d5c962f97235e84ac2600ce144e418bc98
GET /wp-content/uploads/2022/07/elden-ring-game.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/jpeg
last-modified: Wed, 20 Jul 2022 11:10:18 GMT
accept-ranges: bytes
content-length: 20052
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2015/09/km-player-th-400x400.png
200 OK 51 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2015/09/km-player-th-400x400.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash 205e12f75385cafb75b912e46db54b65
d43c5de6d53e09cd11bc7543939c96f2c6c48b28
cf5eea7524bd31057d0ced2b870245a9c43328dad273de28a70fe4295741498d
GET /wp-content/uploads/2015/09/km-player-th-400x400.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/png
last-modified: Thu, 22 Sep 2016 23:22:28 GMT
accept-ranges: bytes
content-length: 50688
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
200 OK 455 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 21x21, components 1\012- data
Hash ef487d89559d14481fe71408729115ed
1287c52488f6fff71fe0c16b441e650198bd0a74
d274862bd1bc6b81df11f8a26506d6b01800f5b5a5350f66bea78a57a3a758ec
GET /wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 455
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2011/09/Background-Remover-logo7.png
200 OK 155 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2011/09/Background-Remover-logo7.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 155 kB (155259 bytes)
Hash 1d033432c9ac3fee7a4ffbc4de309cd1
431c31bba217ad86cd581b05a875e6ddc6d6f56a
7c3937ef30c9a71ceaf9b81a9da41f8fa46f833ad30acdadfa38cca87f6474ed
GET /wp-content/uploads/2011/09/Background-Remover-logo7.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:34 GMT
content-type: image/png
last-modified: Tue, 26 Dec 2017 10:24:11 GMT
accept-ranges: bytes
content-length: 155259
date: Thu, 08 Dec 2022 21:07:34 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 270x64, components 3\012- data
Hash 733f3ccb8e1f56ce42bc4dbdcb97487f
2090588bc395bb2a6ac2b614dc7122beb088646e
8560e5600d8636cffb075c9d774e594aeaf84e1405608d8a93bf246d11646480
GET /wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1162
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
200 OK 170 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x2, components 1\012- data
Hash 204ccbc677cdc87675467ffe8c9129a0
9ea29e505de3e97d6f6b9638a4b379f21a0def7b
109936adfb4a38a446b3ffa75836a002b241ea538f1b9727546d431761a889f4
GET /wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 170
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/category_icon.jpg
200 OK 599 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/category_icon.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 15x14, components 3\012- data
Hash 32ab43edb43c80f4084ed7818a36f029
fb4422a9be5226f1cde126ff4744c30fd4d45fc8
8956e0239a3313ccbd33cef0c9879921e91cef1b8c7372bb7c21c560672349c2
GET /wp-content/themes/p30dayv7.1/data/images/category_icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 599
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
200 OK 177 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x38, components 1\012- data
Hash 909e83f543a3bc1d93cbc088b6c4db0d
9e4988299811f5854420d28598c521ec405844e4
4d1c24eda2bfa81daf6efa53831e2b65eda16945d4e087960c83c3d6b5ef4756
GET /wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 177
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg
200 OK 343 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x28, components 3\012- data
Hash 575e419ed841227e17b3ff68601ebad7
ab05132fb073e59fc9ba4bd28e29be6585aadf90
b00f625e73941ed1350b7661d37f53f728e0bda561e22443ef2a6b4b3a812590
GET /wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 343
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg
200 OK 184 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x28, components 1\012- data
Hash 29a713549baf2b7a8d3c98386876f918
d18b936322da10fb3e0e7c156ba117e6f2489f40
53345b3b9a6cd850c85cd62ef2936de688d5779c8b670e7a65782b245f0bcb58
GET /wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 184
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
200 OK 102 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 8 x 5, 2-bit colormap, non-interlaced\012- data
Hash e83c058adc9ac1ea2966138ddc28c83f
a7210bf381afb33535d4e55667f473bcaad195a9
f797a59c0d0c69ed3a140b2651b786583e372708de82b22e7bdbf6588199677f
GET /wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: image/gif
last-modified: Sat, 23 Feb 2019 10:56:42 GMT
accept-ranges: bytes
content-length: 102
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
200 OK 8.9 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 8900, version 1.0\012- data
Hash 6427d2890332acaa1a4cd0102a7f64d1
2dbca84994471c8cfd3944f3e1df902fbed726fd
6bce3d5ade75e6533bf17697cff7f66cfb51955ec9d158aeface37363b5ff754
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: font/woff
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 8900
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/3f5b6fdcc852bc0a1759e69461c21975.js?ver=21975
200 OK 30 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/3f5b6fdcc852bc0a1759e69461c21975.js?ver=21975
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65447)
Hash ad336903a21635830a4d7c1ab7ca4671
191aff59df4c9605c13c24402256eb6153a8e16a
c026de76715d26c31de282f37cdc97b10444499d9ae8ad1e37afdec9c455d20d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/3f5b6fdcc852bc0a1759e69461c21975.js?ver=21975 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30337
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Medium.woff2
200 OK 27 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Medium.woff2
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 26888, version 1.0\012- data
Hash 7c1c84da23760b0d3f59f8de58c47605
930dfe28990dff55c8b4761fefb2e7c25fa2f093
dffcd153f60fc90d1c519c2c468757f93035798bbf986544b1bf1a3f4d1c5cb2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb_Medium.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:49 GMT
accept-ranges: bytes
content-length: 26888
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom
200 OK 1.4 kB URL HTTP/2 www.p30day.ir/images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Hash 18338610fc7ba56c3f87260b87f27cfe
43864a2ff3d5bbd42860428a15fbeb90e726c418
04d5ad9e848d70709b580b07dad89c012f6bbb46622b871fc1a278a96c48eb4b
GET /images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 1372
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/favicon_new.ico
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/favicon_new.ico
IP
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 20150782a6ad1e6082f82fc53588af43
eaf8e21e158c5783e2d38ba268d2ca73de6b64c3
122e9e80ae6f9bc3446bee8d631819d93a4e83d71b046b59f88930f8126a4aa9
Analyzer Verdict Alert fortinet Malware
GET /images/favicon_new.ico HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: image/x-icon
last-modified: Thu, 22 Sep 2016 09:58:52 GMT
accept-ranges: bytes
content-length: 1150
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/73cf842437aaa442c306024520a834ae.js?ver=834ae
200 OK 4.8 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/73cf842437aaa442c306024520a834ae.js?ver=834ae
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (2313)
Hash 2ae9891d73f6322a02c6800f53c13e9a
6112bfb08f227cc055015962102b78d1d5412c94
7506269ef1b4a8045d9eecc52c7b9877c93c7d5f18075e1266519d83a01b849a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/73cf842437aaa442c306024520a834ae.js?ver=834ae HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1; PHPSESSID=4eccb2913a7114c643772ed4558ce1e4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 09 Dec 2023 03:07:35 GMT
content-type: application/javascript
last-modified: Thu, 08 Dec 2022 21:07:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4840
date: Thu, 08 Dec 2022 21:07:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-admin/admin-ajax.php
200 OK 0 B URL HTTP/2 www.p30day.ir/wp-admin/admin-ajax.php
IP
ASN #43754 Asiatech Data Transmission company
Analyzer Verdict Alert fortinet Malware
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/game/%D8%A8%D8%A7%D8%B2%DB%8C-ps3
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; _ga=GA1.2.1831397556.1670533650; _gid=GA1.2.387766825.1670533650; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.p30day.ir
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
set-cookie: PHPSESSID=4eccb2913a7114c643772ed4558ce1e4; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
x-litespeed-cache-control: no-cache
date: Thu, 08 Dec 2022 21:07:33 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
79.127.127.32
216.58.211.3
93.184.220.29
23.33.119.27
0.0.0.0