www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
200 OK 946 B URL HTTP/1.1 www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 56781600f3610a0c3aee4400a041688e
38fd980c6ff335f41e64d59a2d9950fcbc26ca5b
dff76a2659379fb8fac5aeb38ef8a5272fd2d4d6ea9766eacea21f040b07c67a
Analyzer Verdict Alert fortinet Malware
GET /tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 946
content-encoding: gzip
vary: Accept-Encoding
date: Tue, 29 Nov 2022 12:48:16 GMT
server: LiteSpeed
cache-control: no-cache,no-store
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9243
Expires: Tue, 29 Nov 2022 15:22:19 GMT
Date: Tue, 29 Nov 2022 12:48:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11655
Expires: Tue, 29 Nov 2022 16:02:31 GMT
Date: Tue, 29 Nov 2022 12:48:16 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4ed065cb23b5fca1a179dd73b3c5b7b2
4422eb24688f5e056fc1b18b127c7f63b1dbf5e0
b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4579
Cache-Control: max-age=169154
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:16 GMT
Etag: "6385df6f-1d7"
Expires: Thu, 01 Dec 2022 11:47:30 GMT
Last-Modified: Tue, 29 Nov 2022 10:31:11 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: F3TSF83kPztikgQnXaX33GTaMi3pFjnqkhwDaWTwlcEEXLS/KAfwLd+Zg0YfEBIpG1/HYdINXbM=
x-amz-request-id: 2HWVT0K64XYWRWC8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 12:42:30 GMT
age: 346
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 12:17:54 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1822
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 12:48:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.p30day.ir/favicon.ico
301 Moved Permanently 707 B URL HTTP/1.1 www.p30day.ir/favicon.ico
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /favicon.ico HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Tue, 29 Nov 2022 12:48:16 GMT
server: LiteSpeed
location: https://www.p30day.ir/favicon.ico
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c011abf0440a81185b7dfd0a868d57c
30524f56f8e8a10796040164166ec0de08108f2c
55f931495b3f021f804ac96a0e79c8ff350a47b9200b82b6bec70aeb87cad6b4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.recaptcha.net/recaptcha/api.js?onload=onloadCallback&render=explicit
200 OK 580 B URL HTTP/2 www.recaptcha.net/recaptcha/api.js?onload=onloadCallback&render=explicit
IP
File type ASCII text, with very long lines (912), with no line terminators
Hash 4fb3a68840a7c654a0f7422fec954003
47a1bd1343b7cea8143c9c44098320a25562ec28
4ee7379b939b77b7f49819ba6a7174c397f6dd076a4ae46a371f756459afcd44
GET /recaptcha/api.js?onload=onloadCallback&render=explicit HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 29 Nov 2022 12:48:16 GMT
date: Tue, 29 Nov 2022 12:48:16 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 580
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c011abf0440a81185b7dfd0a868d57c
30524f56f8e8a10796040164166ec0de08108f2c
55f931495b3f021f804ac96a0e79c8ff350a47b9200b82b6bec70aeb87cad6b4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.p30day.ir
Connection: keep-alive
Referer: http://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 21:26:04 GMT
expires: Sun, 26 Nov 2023 21:26:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 228132
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.p30day.ir/favicon.ico
200 OK 15 kB URL HTTP/2 www.p30day.ir/favicon.ico
IP
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 26e511556c4a83b0f712b1de5eb858e5
72ffda4d53534a27869b2a89dee605f24ae168b9
87fbebcd24b46ab646e62dd65be350ff1ce80d9e23c1dc197207a32d8cd097d5
GET /favicon.ico HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.p30day.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:16 GMT
content-type: image/x-icon
last-modified: Tue, 15 Jun 2021 13:52:21 GMT
accept-ranges: bytes
content-length: 15406
date: Tue, 29 Nov 2022 12:48:16 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 12:11:13 GMT
cache-control: public,max-age=3600
age: 2223
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6190
Cache-Control: max-age=165701
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:17 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 10:49:58 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 12:31:58 GMT
expires: Sun, 26 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 260179
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:46:16 GMT
expires: Fri, 24 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 399721
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XsLRErd9tDrESVGjadrDQA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wcyJT4HFQlq0iXMOe8dvwn7DM8U=
www.p30day.ir/.lsrecap/recaptcha?
301 Moved Permanently 0 B URL HTTP/2 www.p30day.ir/.lsrecap/recaptcha?
IP
ASN #43754 Asiatech Data Transmission company
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /.lsrecap/recaptcha? HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1251
Referer: http://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Origin: http://www.p30day.ir
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: /tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
content-type: text/html; charset=utf-8
content-length: 0
date: Tue, 29 Nov 2022 12:48:18 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8001
Expires: Tue, 29 Nov 2022 15:01:39 GMT
Date: Tue, 29 Nov 2022 12:48:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8001
Expires: Tue, 29 Nov 2022 15:01:39 GMT
Date: Tue, 29 Nov 2022 12:48:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8001
Expires: Tue, 29 Nov 2022 15:01:39 GMT
Date: Tue, 29 Nov 2022 12:48:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8001
Expires: Tue, 29 Nov 2022 15:01:39 GMT
Date: Tue, 29 Nov 2022 12:48:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8001
Expires: Tue, 29 Nov 2022 15:01:39 GMT
Date: Tue, 29 Nov 2022 12:48:18 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 83c1fedec73299637cc7dc47c48af758
2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 03:18:11 GMT
age: 34207
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NMMuQ1NNks65LJK_HDAK69MfCJ3pS0Y6VzBs8_5Oku64v4FSWADCdw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 22:01:55 GMT
age: 53183
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMo3oHpSoAMF5Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uGocx-Lv8ieJVvICjnTGQZyzaQzjVdICX2RZaNyBTQvUKeIcNxaCJQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:49:50 GMT
age: 28708
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faee65fe0-e370-42e3-be13-065dcb4d76e1.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faee65fe0-e370-42e3-be13-065dcb4d76e1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 748366131b496e41f92e15ce7d1cd0e0
a6c7a59a6599ece2cf0e76c778c920dea94ff469
b9ea2d419742c67e2b14536379e7383524f22645b1af988d5bd72154647fc602
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faee65fe0-e370-42e3-be13-065dcb4d76e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4862
x-amzn-requestid: 17c6fb35-2dc8-45e4-a226-a74ba94323b3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYlHXxIAMFcpg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5d0-5a0f4f667a3747166eb2b338;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2ImCYNlZ1ri4mMpJhMnoucEoQPgKly8gj7KvMPFYb6WpsoJ18WyFog==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 13:28:25 GMT
age: 83993
etag: "a6c7a59a6599ece2cf0e76c778c920dea94ff469"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a2a5c8d4113d282600462749315f2c4f
e2b4d2e15bb7c086333c0da438873e4c139ba931
9b5d0e5dd11d4cbf1c78a71730cd63544170c91ab635bf3cf917827ac84874e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4417
x-amzn-requestid: 01de83c2-51d2-4329-98f6-09a0edf46942
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnGEcRIAMFaXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852960-34583b6c588a0e937fcfaa46;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wqEe45jzMOryT-E-vThc39-cLiZudKF4gn6cS3LBmeaJ2amJF5GPIA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:54 GMT
age: 54084
etag: "e2b4d2e15bb7c086333c0da438873e4c139ba931"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8d05305-0dee-4dad-a256-3b4083be8394.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8d05305-0dee-4dad-a256-3b4083be8394.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 73001f7390ae3a80bbbaa9d9bacbe488
f0410522b6dad8ebcbc2a64ff2193bafcfdc862e
49c02723bab596584abe2dd3dcb11c660538516587911ee033dd0e6e8ea5889f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8d05305-0dee-4dad-a256-3b4083be8394.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6716
x-amzn-requestid: 51e9f59e-558e-4bb4-8db5-741e0272f1fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cV3cHHwqIAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63856c4d-48ecac9a4da2995b41abec49;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 02:19:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1qxn5KqRfOJpUJWSblkCo1wwwAkdJrW1JJ8unESfiuDCs-EZlwRKeg==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 02:25:43 GMT
age: 37355
etag: "f0410522b6dad8ebcbc2a64ff2193bafcfdc862e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
200 OK 30 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8ae8c48601d555e7b5178c263e4d45aa
49ffb3f1eeb3df85c1b90925ef527e0ee31710b1
ae512287111e88212e1b1ac6b5a785381f86d0e733e811e9971907580d0d347c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: text/css
last-modified: Mon, 28 Nov 2022 18:41:49 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30353
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
200 OK 3.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 85 x 86, 8-bit colormap, non-interlaced\012- data
Hash c736084f562340b160cbb12fcdcf59e2
efdd05e9198f48aca2e530cecf5868731769b15a
0a79347b3008d5832c869fb8bc82e6e889a84048f9d2684e458df0da405c194c
GET /wp-content/themes/p30dayv7.1/data/images/logo.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/png
last-modified: Thu, 08 Jul 2021 15:50:55 GMT
accept-ranges: bytes
content-length: 2976
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/winrar.webp
200 OK 868 B URL HTTP/2 www.p30day.ir/images/fastdl/winrar.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 43x43, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 87c92fbb7d5a79faceffbf561c56bd0c
8145b4c0a0a040a5696a63a15ce26e215bf6439d
ab07ecfe46a014e8c7df29ed8d828aca0c2cffa78b1bec043bbf190fec5f293d
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/winrar.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Fri, 06 Jul 2018 12:04:56 GMT
accept-ranges: bytes
content-length: 868
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/idm.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/idm.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fb32f9bbbd50740c31723747dc5e1e5
59c219d247b2a02f9c0c908ab85f3f2d0cc1c521
cad6e35932597fb152209d206c301e5b0fb337b77c0637fd9639cda97c2781c8
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/idm.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:18 GMT
accept-ranges: bytes
content-length: 1286
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/chrome.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/chrome.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7d04c08bcdd79e30879c5d15c2806bd5
5917e971d8e243cf82d6abcdaedc9ae1fca7b7ab
d11703cc091f7177b192c810e165c5cc96d6d3517a6c6a4477dcec38f703b900
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/chrome.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1298
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ff.webp
200 OK 1.8 kB URL HTTP/2 www.p30day.ir/images/fastdl/ff.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 26635d4802f5bf01d7cde8bcb429a493
f7ba292a1d5d91e29f9a0cabf8f204c0bb73b3c4
44686b2af956e0928ed8d000e83d1ee0007223bb74b6e268503ff208f4f7dedb
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ff.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1754
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/nvidia.webp
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/nvidia.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7012172e13a625b034e882677435c7a0
98451904b87560a908d7211a06f4a73d80eb8b9f
fd7f3840bff4766d23c3ff979652e119036f484c1cb60f24ba6b0d39a037943c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/nvidia.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1202
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/adgc.webp
200 OK 1.4 kB URL HTTP/2 www.p30day.ir/images/fastdl/adgc.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 745a52e2bcca1a45f7ada2d8edc1baaa
390ec2980d7989082ee99edd4fb20cd76f85ccc6
a578633d17dd6c73af65284cf264bc25e7387325e78556f4db253cd214c8c3a8
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/adgc.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1390
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/reader.webp
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/reader.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fff23369545f680acbb06c513a551f6
5552213ae9ff2876b1f694bff383004629c55174
0bd7f6d56d8347f607373f7f0fe59bbd12218c9bd0d062fb035bdcc93173f873
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/reader.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1226
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/kmp.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/kmp.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ab2eb9b46ba51721999a1d0350bbf38
894ae30f4e29af81c60bb7502a864474dae8b626
3df5a58530b161285349a08201222fb34f760b117edd49e2ebba455b4ed52d0a
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/kmp.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1058
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (3683), with no line terminators
Hash f3c166f319aea691586c1f2f4afe2118
a300f6381204e7c980b147530257244c4093df42
45eb812e6973267111387a695e662c78eeef445860ee720c8e9e623d38d05022
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: application/javascript
last-modified: Tue, 01 Nov 2022 13:47:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1167
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tabligh/cdkeyshare270.webm
206 Partial Content 34 kB URL HTTP/2 www.p30day.ir/images/tabligh/cdkeyshare270.webm
IP
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 38f15843970f1fa7d76fad78b988ee08
cbebe6f42ee44f06a843d5caac682a36b54ed42e
bb5d619ead452b1feba0e7c654f2a5d05086fad43c9e04a9c19db01a27dc5045
Analyzer Verdict Alert fortinet Malware
GET /images/tabligh/cdkeyshare270.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: video/webm
last-modified: Sun, 19 Jun 2022 10:43:45 GMT
content-range: bytes 0-34370/34371
content-length: 34371
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tabligh/gift11.webm
206 Partial Content 39 kB URL HTTP/2 www.p30day.ir/images/tabligh/gift11.webm
IP
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Hash af0ddd2b6fefee24e4183f51648c11c9
667feac1697012dcf2666a1129cb333468612fb5
88239934567ce74587ac82a31e3b77479ef1c8cb67e3f9f33baacfbbf47ea859
Analyzer Verdict Alert fortinet Malware
GET /images/tabligh/gift11.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: video/webm
last-modified: Fri, 09 Sep 2022 21:10:07 GMT
content-range: bytes 0-38866/38867
content-length: 38867
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tablighat/faradars970.webm
206 Partial Content 104 kB URL HTTP/2 www.p30day.ir/images/tablighat/faradars970.webm
IP
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Size 104 kB (104427 bytes)
Hash c55d384a87daca4533daf2ffa189fd17
1d9b2d0a32ec5070435c14b99da8ed5d7d6109be
ead160ef9c494503ff00dbd6c84eb27d4857fe140d3387105742d1694d0b28bb
Analyzer Verdict Alert fortinet Malware
GET /images/tablighat/faradars970.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: video/webm
last-modified: Sun, 16 Oct 2022 10:36:12 GMT
content-range: bytes 0-104426/104427
content-length: 104427
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tablighat/animeongif.webm
206 Partial Content 47 kB URL HTTP/2 www.p30day.ir/images/tablighat/animeongif.webm
IP
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 28aa7d1f52ec5ebeb47acbabda32e578
53ad8749ce9287382a29d535b57e2c4069cf2bbb
f3f51b0c0c64c201f999c25a8cfeeebe4cc2961fb5114bab05acf050dc64c3c7
Analyzer Verdict Alert fortinet Malware
GET /images/tablighat/animeongif.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: video/webm
last-modified: Wed, 24 Aug 2022 09:20:55 GMT
content-range: bytes 0-47091/47092
content-length: 47092
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tablighat/pcgamebanner.webm
206 Partial Content 156 kB URL HTTP/2 www.p30day.ir/images/tablighat/pcgamebanner.webm
IP
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Size 156 kB (156122 bytes)
Hash f212bf7e0a69e1cf8e167679d438f52d
766427c965b4b3ca8fe5eb23097c3d23057cf672
b780218c7eaba88ab5e3ced7c7459a59091627357c1bbd638de7b794f347aaaf
Analyzer Verdict Alert fortinet Malware
GET /images/tablighat/pcgamebanner.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: video/webm
last-modified: Wed, 12 Oct 2022 10:08:41 GMT
content-range: bytes 0-156121/156122
content-length: 156122
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/klite.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/klite.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash b3762ca2e70f1f68da4fc38f53dce6b3
62eb7b1023cf4be53c3182cc32cd794aa1fba741
b68afab14ce590f52341f15711e29511323129ae83930c61732d293fef120c9c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/klite.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1332
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
404 Not Found 25 kB URL HTTP/2 www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (27170)
Hash c7e251c2af0c4ca47b7c967250bd576d
49c94d2f0c6aadfebfc7c66e2288cd87e6b3eefd
d8baa24180e493705deef7a95a411c320f965bc3ee1eef38389d6d7e00c1cfac
Analyzer Verdict Alert fortinet Malware
GET /tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.p30day.ir/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
x-dns-prefetch-control: on
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
link: <https://www.p30day.ir/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: f51_HTTP.404,f51_404,f51_URL.5b0df45d1cadff37052e2ce97f7c604c,f51_guest,f51_,f51_MIN.8de6feeb5b8fcc14d9cf514a7b9f9473.css,f51_MIN.9ab09e9b4aa5d113f71e8d785928edfa.js
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/daemon-tools.webp
200 OK 1.6 kB URL HTTP/2 www.p30day.ir/images/fastdl/daemon-tools.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash f1c4998e619d02f2c966d18cafa3ae5f
038e50d4c3f60a34e28bfa54d73d2f676a8b02f3
05df4592018b5987fbb9dec7d6b83d4c05f281621b694fb9b04538540d5f5442
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/daemon-tools.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1632
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/office.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/office.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8ba130fcea19ecd9ed5233ce0d22dd76
8bc7e1cf3869002d614f431ea39416f8bcb259f5
6b860744ee34632f6a2fbe3ceb00a29d7cf67f31f4273db9372486d0bff4abd9
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/office.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1078
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ps.webp
200 OK 656 B URL HTTP/2 www.p30day.ir/images/fastdl/ps.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash d086c0af387345300bf7a1d54ad05820
7e6b249d54a92b5ede190734e4392b70dc332f1b
2c9967c77a7ffa6ddeda076c1b90a6beda16864fa9e131e205fcdc70f49849ec
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ps.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 656
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/skype.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/skype.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2612c7b808a386c27c45c9d7a3ab05c7
a0c0acc0a9c0529df19d5ecc0aa8e66a4f3b3cf0
433be5e918c73c43f2130158730859ddcc9aa058d229feb01714d80cc3dfb324
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/skype.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1140
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/win10.webp
200 OK 516 B URL HTTP/2 www.p30day.ir/images/fastdl/win10.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3e95105787f48e97f255c054163b1ff2
bbd996c9d0de0c5d89bbcf02b5dbd9d0d0cb38c0
aef03c97b401a3b2d73fb25e0c926b8af7b4d01eaffa56e64828772b3624e5ae
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/win10.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 516
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/windows11.webp
200 OK 306 B URL HTTP/2 www.p30day.ir/images/fastdl/windows11.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash c07f514a1feb0a64d02a0f002103eacf
88bfe92c334f01ca1ee74adaa3187d15e77783b0
ba56118c3788fa3e7e8dd8b5a6d2299a00026356f98ff25138cc86215ff25bdf
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/windows11.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Sat, 19 Jun 2021 11:21:28 GMT
accept-ranges: bytes
content-length: 306
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
200 OK 836 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash b6de7641069b95fb7c051e730ecb3ab1
20e90d406e0a5d1e8e12897756d560f44ba282da
0c10e76e6ce8fe60e6d33c738a107efb9fd5a9517770ab1ca23b12ec359bda4b
GET /wp-content/themes/p30dayv7.1/fontiran.css HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: text/css
last-modified: Wed, 19 Dec 2018 18:34:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 836
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg
200 OK 193 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x38, components 1\012- data
Hash bd79e4f635621819a0f871f71828313c
7cca8338395407917aa037a2ac64c965e81b17d8
d7c3581c0769f58151379bbbc5a34fc8f46caf00c05298f90b6639e349b2e59d
GET /wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 193
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logohead.jpg
200 OK 2.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logohead.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 284x38, components 3\012- data
Hash 4dd2b75ea3ab31ba5a8e6319244abca5
9a968b99721ac4f1dd311cf29bbbe04f229c4e21
13b88e24a117d01c8010505955530b45e2d5087dc2d377f6760eecf26fc28ede
GET /wp-content/themes/p30dayv7.1/data/images/logohead.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1980
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logobg.png
200 OK 8.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logobg.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 270 x 153, 8-bit/color RGB, non-interlaced\012- data
Hash 378fc626281e0c092602e3ac451bb582
cc2d093a754823a4fe5a3fdcda0c7c6428917c2d
17d63a6e2bcbd671e239e66155afe0630724920218447bcdf8536a61d37e1c36
GET /wp-content/themes/p30dayv7.1/data/images/logobg.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/png
last-modified: Sat, 23 Feb 2019 10:53:10 GMT
accept-ranges: bytes
content-length: 7952
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/10/Need-for-Speed-Unbound-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
200 OK 32 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/10/Need-for-Speed-Unbound-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b0b95fd637a75b18db269bf3e8a98fa6
2c81aad444bd2d14dadbdb11f3584faaff09612e
7539e0ad5bf9eb92800dcea73dcbc855892b36db44fbc643c094fd5d06e9f471
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/10/Need-for-Speed-Unbound-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Fri, 07 Oct 2022 10:47:44 GMT
accept-ranges: bytes
content-length: 31460
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/09/Kena-Bridge-of-Spirits-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
200 OK 16 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/09/Kena-Bridge-of-Spirits-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9e961853894ee6789cbd3aae99e12ca4
25159b50ad12e7af658822b0ec0e3df6c5ced4c1
89fa22d279515ffbce4359413a21b70ebc253781ca45a3399ecadfbe03164291
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/09/Kena-Bridge-of-Spirits-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Tue, 21 Sep 2021 07:11:37 GMT
accept-ranges: bytes
content-length: 15504
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/NBA-2K23-PS5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
200 OK 22 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/NBA-2K23-PS5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f81cbc0731d8523d7dc503be5ea60171
684b2406df3e918b417b96dcd87f2e9cd788800f
bb3adc6d4c9ecb95656a7361e0ea4cc4be40c0d66644ac4beebea7cd55b20326
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/09/NBA-2K23-PS5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Thu, 08 Sep 2022 07:11:54 GMT
accept-ranges: bytes
content-length: 21888
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg.webp
200 OK 3.4 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 844567fa0aebc18d4540cfba6efb7caf
6abecba54c4f738179588f9e430e36141904d24f
d026e97527d35be6f6d72a062e460b6d651df6e688355d3c433a9c782029407e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Wed, 20 Dec 2017 13:04:43 GMT
accept-ranges: bytes
content-length: 3368
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2017/05/Planet-Earth-2-logo.jpg.webp
200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2017/05/Planet-Earth-2-logo.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9bb18a9006ab4a45163f44ee25a60c9a
90164c057fb0eeb1dda00e338d31af4026a233cf
1d555552d17e08722ce6450e8a3ccccd0b9d02110461685f848ebd3ec7a643ce
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2017/05/Planet-Earth-2-logo.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/webp
last-modified: Tue, 26 Dec 2017 10:21:30 GMT
accept-ranges: bytes
content-length: 20190
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/10/Need-for-Speed-Unbound-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 35 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/10/Need-for-Speed-Unbound-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 145df76924d1f53e76173e55a3161700
2e3b4f51deb6e0b515c6872263f463fd2a8764ec
caea59d2cc97c42c207cc49819af7253ea926afbee02c63942bcc56b639410dc
GET /wp-content/uploads/2022/10/Need-for-Speed-Unbound-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Fri, 07 Oct 2022 10:47:44 GMT
accept-ranges: bytes
content-length: 35042
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/09/Kena-Bridge-of-Spirits-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 19 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/09/Kena-Bridge-of-Spirits-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash bf245ca5eda8c7726d3909691152f47b
aeadc2fc9e4bb51be37ecfcd29d0e4b65bce1159
34a9add415645cc3289196020e8b68b000a3644f21c268049517b65256cbe845
GET /wp-content/uploads/2021/09/Kena-Bridge-of-Spirits-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Tue, 21 Sep 2021 07:11:36 GMT
accept-ranges: bytes
content-length: 19435
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg
200 OK 7.7 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 256x256, components 3\012- data
Hash 13cd832d0f976898ae96bfdf56574448
bf817b252dd9b65aeeff7ec2c29b47362b42fc93
a84947a67f8f1172beba5e432863221c0638f1852e75d18267f37713aee6c6fd
GET /wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Wed, 20 Dec 2017 13:04:44 GMT
accept-ranges: bytes
content-length: 7712
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg
200 OK 4.5 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 6cfd2c88405e6e0c9e908f4a690975b1
7513ec40888b1edce91427375c66d51127ab7845
122413e8513d08d34485393f751b6170eb77385e7565ec2c3cf3acaa3120fb2f
GET /wp-content/uploads/2021/06/Windows-11-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sat, 19 Jun 2021 04:10:26 GMT
accept-ranges: bytes
content-length: 4456
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2019/04/Windows-10-logo-300x300.jpg
200 OK 6.4 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2019/04/Windows-10-logo-300x300.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 7bf80ff9273023112a4d0b53651d6fbc
560fb66124f1a9155b005fa11227a5ed7e57a15c
fbfffe7ea6fa1f98d458717c46cf362ab78ad4e75afeeb374e4e28d3b14ccdee
GET /wp-content/uploads/2019/04/Windows-10-logo-300x300.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Fri, 24 May 2019 19:10:41 GMT
accept-ranges: bytes
content-length: 6439
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg
200 OK 9.7 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 3a1e7ba4dff14150dccc88e5f52b667f
39e6d094a15d6f25f144a8e917a2ec0e69b7621c
65f833659efc428f6518cfbff0c96079156e4e4082890dab65fe0a52a40ac3a7
GET /wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Mon, 26 Nov 2018 15:53:27 GMT
accept-ranges: bytes
content-length: 9726
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
200 OK 14 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash d70b4b85df7894ae52c49d6d2082e5a1
6d9cd83d5d22cc9ceb29a3f46158ef47cde6978e
c878111b78203ce81009f09637a3b9339a13a4be6399a370d10e054c91f93449
GET /wp-content/uploads/2018/08/Fortnite-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jan 2019 15:54:33 GMT
accept-ranges: bytes
content-length: 14195
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 5a8cf6d3b62188b06f86bfa8d2541406
3a83683da979322b727c69b5f43ecdebff2a5937
316c2cef65cd88c00b9c470f43708aa37b854714ab80a30a2a7af0d294912098
GET /wp-content/uploads/2022/03/trainer2.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Fri, 11 Mar 2022 21:10:15 GMT
accept-ranges: bytes
content-length: 12033
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
200 OK 186 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 8x8, components 1\012- data
Hash c07b958a50276ef2335c0a97b26fba73
66951a4e8c12e80814625f90167c95a3ebabca82
e4c78d99b0c76d668d08209ec3d822c48d4b8f85d6f09eecc796e68b2cacb665
GET /wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 186
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
200 OK 9.5 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash a7c5fb47b5a2241827154e67e2063d7d
750b7e9141cc35af7da9b03f6f5ec0f5f468b397
deb2589dcf6631e013ceac516224880daa4f7970218ae3dc2c8473ce8bd75072
GET /wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Fri, 15 Dec 2017 22:16:01 GMT
accept-ranges: bytes
content-length: 9474
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
200 OK 9.8 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 4de60df9a9dd0f161ef7086529319bd4
32809468ded58d918127dc62243f6d5997f73fac
cc789bee8ec9544815531b72d475f178f3842e5536522fbe991144849bd5a444
GET /wp-content/uploads/2021/08/nvidia-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sat, 14 Aug 2021 18:10:08 GMT
accept-ranges: bytes
content-length: 9750
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2013/01/kaspers-300x264.jpeg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2013/01/kaspers-300x264.jpeg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x264, components 3\012- data
Hash 8c9d1dec0b8cee0e8d4a3d340199bbc3
6b8b4cb6ec5f2b6ab91d01b42abe57ff64b3edb3
7051a3e408acc1ec6290d2039d9e16fb8d5a9a2cc7d4d27971a3126e32381a91
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2013/01/kaspers-300x264.jpeg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sun, 22 Apr 2018 23:12:08 GMT
accept-ranges: bytes
content-length: 11927
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 17d7f8f05769b4c612baaf104a938457
e03f6cc0f577b8489adce4992270c2207a1b2d47
6c02051060327c956a79e836091fc937b469ff04d559bb86a7f03c72255839ee
GET /wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sun, 14 Jan 2018 12:58:38 GMT
accept-ranges: bytes
content-length: 12336
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2012/06/Telewebion-logo.png
200 OK 15 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2012/06/Telewebion-logo.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 1350e6ebde75e48a0a6f0637227e69fc
842fd619acb59e824074140b15aefd30866ba6d3
a95fc52118e8ea0f3192d0615ac7fb5e7ed9aa6675a0766d4d2fdb8511d911b5
GET /wp-content/uploads/2012/06/Telewebion-logo.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/png
last-modified: Fri, 12 Jan 2018 19:02:21 GMT
accept-ranges: bytes
content-length: 15158
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg
200 OK 15 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 683234bfc2826c1e05e983a4ff71e2ae
7e08159a55f3291fdd1482b35b3b68fae9d27045
096824d67a19cd9497a98c84125eae96262f1ee31f3c9f20e54dc28cb5b0b1a2
GET /wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Mon, 26 Nov 2018 11:52:54 GMT
accept-ranges: bytes
content-length: 15167
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg
200 OK 8.9 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash bd4470d56aafb57fffe946b787fbe614
3229781e256f3767f1337e17b74cc32630525bd0
2c20fae862b4307e32c5cdd069a481ad7525789014d9d946e9647c6f5e5a02c8
GET /wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Thu, 22 Sep 2016 23:21:55 GMT
accept-ranges: bytes
content-length: 8926
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 23x141, components 1\012- data
Hash 7d90c92e3961b8322b3335c00bc3bc87
1d4994b1397daccb185623e49e91f957cb264f3a
f063582f1f7df2931308adeff5d9239f6fe78c3476c07034cf39e0516d0410dd
GET /wp-content/themes/p30dayv7.1/data/images/adstext.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1301
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
200 OK 455 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 21x21, components 1\012- data
Hash ef487d89559d14481fe71408729115ed
1287c52488f6fff71fe0c16b441e650198bd0a74
d274862bd1bc6b81df11f8a26506d6b01800f5b5a5350f66bea78a57a3a758ec
GET /wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 455
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 270x64, components 3\012- data
Hash 733f3ccb8e1f56ce42bc4dbdcb97487f
2090588bc395bb2a6ac2b614dc7122beb088646e
8560e5600d8636cffb075c9d774e594aeaf84e1405608d8a93bf246d11646480
GET /wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1162
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
200 OK 30 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 29820, version 1.0\012- data
Hash 9d38733b8a7b9153f2bf9bfe476ef8e3
93f8caeb96e52cd35dd24ffe8dbbc911af5b236e
b2144257a57aa398277a4977bfab616e368f4d8c8c45c79f2f128d8db537cbc8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:48 GMT
accept-ranges: bytes
content-length: 29820
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
200 OK 8.9 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 8900, version 1.0\012- data
Hash 6427d2890332acaa1a4cd0102a7f64d1
2dbca84994471c8cfd3944f3e1df902fbed726fd
6bce3d5ade75e6533bf17697cff7f66cfb51955ec9d158aeface37363b5ff754
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: font/woff
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 8900
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/NBA-2K23-PS5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 27 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/NBA-2K23-PS5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 31d323de6d5075150ea19c07167521bb
d5c72a89a7c50c3296d901653b1634c75ec47bff
829f475d524056c426530c8c7899ab7e9f9b03477c045c4338c2d848ce4dee57
GET /wp-content/uploads/2022/09/NBA-2K23-PS5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Thu, 08 Sep 2022 07:11:53 GMT
accept-ranges: bytes
content-length: 27217
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/Car-Mechanic-Simulator-2021-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 38 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/Car-Mechanic-Simulator-2021-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 959b2463d06eba6a2c8ab9419655ba61
88b356a0d320cb9d47a0f9e0f7cc0d38ffb9c265
72a0ab7c5f42e073874700030f78e78d09acd7e06bf550d2f303cc284b41797d
GET /wp-content/uploads/2021/08/Car-Mechanic-Simulator-2021-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Fri, 13 Aug 2021 01:18:20 GMT
accept-ranges: bytes
content-length: 38465
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 04800cc8299476f9ffdd0fb9c4e46c7b
89ebcfda8cab223733b7a8f9b85408c2cff9aaba
16ca7625901b216dc43a51319400eac8e6b8716a4e8e669d64ac45c36e41741e
GET /wp-content/uploads/2022/05/pubg-mobil.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Fri, 13 May 2022 22:40:24 GMT
accept-ranges: bytes
content-length: 25225
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 6439adca635d68a4903139b773a037df
37ea4e385cc38a7b0b7ef5ece59c8c42471c2690
dc5bac1e0f414a15e14b46a0cb4edfa95db7a906edb79df61ebb8958be914dd7
GET /wp-content/uploads/2019/05/cod-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Fri, 24 May 2019 19:25:58 GMT
accept-ranges: bytes
content-length: 28142
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2016/06/WhatsApp-icon.jpg
200 OK 37 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2016/06/WhatsApp-icon.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2016:06:27 20:19:34], baseline, precision 8, 300x300, components 3\012- data
Hash 2e0b3e7bc8c209a22e720dbcb7b50a73
5c8b95e2c364bcd5400a70c3a77008afa9251bf9
b2132586793157280e95b63e040d15106c5f1da1a067f70769147697fcd8da35
GET /wp-content/uploads/2016/06/WhatsApp-icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sun, 07 Jan 2018 12:19:54 GMT
accept-ranges: bytes
content-length: 37331
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
200 OK 40 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 282ab4960a3218179243add97e98d1bb
f3f55b81949c9c10f6e7c7b7fdd150fc0256d7c0
b4eeca569cb6f2401e2645fdf01d952240276ca6bd21d21c3f358f8314ef77d0
GET /wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Mon, 26 Sep 2022 19:29:35 GMT
accept-ranges: bytes
content-length: 39795
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
200 OK 23 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash c59c5894ca56da620457ac4f3d675ab7
4b2d5bd0680aa6fbfae98fefac9270831b447e35
6989b43e56daa13a2702b1baba2f2220eb2f54af4d0c32cb613776b90ebc058d
GET /wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Tue, 20 Sep 2022 09:45:30 GMT
accept-ranges: bytes
content-length: 22630
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 080d36f5a29083af1b095fa12aa3f8ab
c809e9cc01c78fbb315899b038532e2bad0ac2fb
50864ff8ca4ba1ba0fdb31fb21e0d6d5c962f97235e84ac2600ce144e418bc98
GET /wp-content/uploads/2022/07/elden-ring-game.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Wed, 20 Jul 2022 11:10:18 GMT
accept-ranges: bytes
content-length: 20052
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2015/09/km-player-th-400x400.png
200 OK 51 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2015/09/km-player-th-400x400.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash 205e12f75385cafb75b912e46db54b65
d43c5de6d53e09cd11bc7543939c96f2c6c48b28
cf5eea7524bd31057d0ced2b870245a9c43328dad273de28a70fe4295741498d
GET /wp-content/uploads/2015/09/km-player-th-400x400.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/png
last-modified: Thu, 22 Sep 2016 23:22:28 GMT
accept-ranges: bytes
content-length: 50688
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
200 OK 102 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 8 x 5, 2-bit colormap, non-interlaced\012- data
Hash e83c058adc9ac1ea2966138ddc28c83f
a7210bf381afb33535d4e55667f473bcaad195a9
f797a59c0d0c69ed3a140b2651b786583e372708de82b22e7bdbf6588199677f
GET /wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/gif
last-modified: Sat, 23 Feb 2019 10:56:42 GMT
accept-ranges: bytes
content-length: 102
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/Need-for-Speed-Unbound-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 32 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/Need-for-Speed-Unbound-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 5b7519258ae21b2dd0e9aae62bbe4b29
e92721a0d174cd6cf207cc1b620bff9dd7a45190
2a5fa2245326782b3860bbc4a48bd8ec5e84fb5eb5f91f0c83fa9ff2cb1f61b6
GET /wp-content/uploads/2022/11/Need-for-Speed-Unbound-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Tue, 29 Nov 2022 08:46:40 GMT
accept-ranges: bytes
content-length: 32426
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/PUPPETEERS.jpg
200 OK 7.7 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/PUPPETEERS.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 146152e7d07b1ad26779084089042eb0
395f262a8b3cfc0695a1edb98261fae29ab7f06f
76ddb9f900a9d92506c074ddfb7e8cc18663b80bff186b052660c6cbafd96b59
GET /wp-content/uploads/2022/11/PUPPETEERS.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Mon, 28 Nov 2022 20:49:41 GMT
accept-ranges: bytes
content-length: 7652
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/hololive-ERROR.jpg
200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/hololive-ERROR.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 92dcb9b7bd421aa4bf21e6c506f64fe8
dc4dd67f030b84f3da2bb9813a527f4f4c420b65
0b6731d61a048d2b220f35b3468fc467eda06731e69c5446aab55561c84a1f90
GET /wp-content/uploads/2022/11/hololive-ERROR.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Mon, 28 Nov 2022 20:30:47 GMT
accept-ranges: bytes
content-length: 28414
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/The-Dark-Pictures-Anthology-The-Devil-in-Me300.png
200 OK 84 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/The-Dark-Pictures-Anthology-The-Devil-in-Me300.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced\012- data
Hash 46b110fb1f0c88705164ebe91f51fde9
5bab9e85523da51eb07f3b72ff137800a024b6d8
95c30a741c999deb0f194c5979a97b9fe724a57e604c7ba030f2c6b7cc57d199
GET /wp-content/uploads/2022/11/The-Dark-Pictures-Anthology-The-Devil-in-Me300.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/png
last-modified: Sat, 19 Nov 2022 20:18:49 GMT
accept-ranges: bytes
content-length: 83883
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
200 OK 170 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x2, components 1\012- data
Hash 204ccbc677cdc87675467ffe8c9129a0
9ea29e505de3e97d6f6b9638a4b379f21a0def7b
109936adfb4a38a446b3ffa75836a002b241ea538f1b9727546d431761a889f4
GET /wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 170
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
200 OK 177 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x38, components 1\012- data
Hash 909e83f543a3bc1d93cbc088b6c4db0d
9e4988299811f5854420d28598c521ec405844e4
4d1c24eda2bfa81daf6efa53831e2b65eda16945d4e087960c83c3d6b5ef4756
GET /wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=2d2bf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 177
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 28388, version 1.0\012- data
Hash 2f6f164c3e1f1329cc658b3c725bfd98
9e63d01d8561d79074bd8e46fbf265285ab958b7
a068d909851e4b57d0847b6c35457ab980463710e124a7e5e26b642e7f9f64fa
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:20 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:49 GMT
accept-ranges: bytes
content-length: 28388
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/litespeed-cache/guest.vary.php
200 OK 20 B URL HTTP/2 www.p30day.ir/wp-content/plugins/litespeed-cache/guest.vary.php
IP
ASN #43754 Asiatech Data Transmission company
File type JSON data\012- , ASCII text, with no line terminators
Hash 6983d6b2ea353ce0b2b3d2477674219d
d1b7a9df890d2bf30ce03ee569b28d5c3226debe
0056a5d09750d683c893ec741a9c08940a19439d1c67b3de820c31cdfd15eb02
Analyzer Verdict Alert fortinet Malware
POST /wp-content/plugins/litespeed-cache/guest.vary.php HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Origin: https://www.p30day.ir
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
x-litespeed-cache-control: no-cache
set-cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; expires=Thu, 01-Dec-2022 12:48:20 GMT; Max-Age=172800; path=/; secure; HttpOnly
content-type: text/html; charset=UTF-8
content-length: 20
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 12:48:20 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/contact-form-7/includes/swv/js/index.js
200 OK 2.8 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/contact-form-7/includes/swv/js/index.js
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (9937), with no line terminators
Hash 4317b1c024df372435f6482deadddeb3
5c8824a17e40a44ea8fc51568b98bdb1e2e7fab5
3798fb16289ba55459fb6d3b2efa915e3c019c5942759abb7bd19a0ef622b85d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:21 GMT
content-type: application/javascript
last-modified: Wed, 19 Oct 2022 18:33:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2817
date: Tue, 29 Nov 2022 12:48:21 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/contact-form-7/includes/js/index.js
200 OK 3.7 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/contact-form-7/includes/js/index.js
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document, ASCII text, with very long lines (12310), with no line terminators
Hash dc6411bfa6891b75944f0074c945752d
03c1a8b686c287068c61ab90f58d905496d65085
96abeabc9cc7b4c2b7d46579f2827c67ccd02fbaef0343ae052f71accd381b0d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:21 GMT
content-type: application/javascript
last-modified: Wed, 19 Oct 2022 18:33:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3706
date: Tue, 29 Nov 2022 12:48:21 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/9ab09e9b4aa5d113f71e8d785928edfa.js?ver=2d2bf
200 OK 64 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/9ab09e9b4aa5d113f71e8d785928edfa.js?ver=2d2bf
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65447)
Hash 2800a1abd374da8690f23858c416290e
13b166a50651ed0dd4088733b6d0aed3b31f110b
8f1467c5932f68335dfc852be62527f5bc2a4af78a90729c72fd918f55d7a12b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/9ab09e9b4aa5d113f71e8d785928edfa.js?ver=2d2bf HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:21 GMT
content-type: application/javascript
last-modified: Mon, 28 Nov 2022 18:41:49 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 64000
date: Tue, 29 Nov 2022 12:48:21 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/najva-messaging-sw.js
200 OK 136 B URL HTTP/2 www.p30day.ir/najva-messaging-sw.js
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with no line terminators
Hash 9218a636fc5e0b49519686a6299d6943
2e08c4c763401c5649ce36eba374297fda1b9fab
df564b4a28ef8a5475e079616bb3e4ddf5de65b55204c5f7737a17565a540c5b
Analyzer Verdict Alert fortinet Malware
GET /najva-messaging-sw.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:21 GMT
content-type: application/javascript
last-modified: Thu, 20 Jan 2022 13:50:53 GMT
accept-ranges: bytes
content-length: 136
date: Tue, 29 Nov 2022 12:48:21 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4fc92ffc3cdc999e36409c41671de66d
26dc35b9a2909afe28e978c381a39cdfe677d50f
02cbcd0a606d3c0874655a74f63d727f3289a6c0910a9c0a9a31813c22680fd5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CBCD0A606D3C0874655A74F63D727F3289A6C0910A9C0A9A31813C22680FD5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6553
Expires: Tue, 29 Nov 2022 14:37:35 GMT
Date: Tue, 29 Nov 2022 12:48:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4fc92ffc3cdc999e36409c41671de66d
26dc35b9a2909afe28e978c381a39cdfe677d50f
02cbcd0a606d3c0874655a74f63d727f3289a6c0910a9c0a9a31813c22680fd5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CBCD0A606D3C0874655A74F63D727F3289A6C0910A9C0A9A31813C22680FD5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6553
Expires: Tue, 29 Nov 2022 14:37:35 GMT
Date: Tue, 29 Nov 2022 12:48:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4fc92ffc3cdc999e36409c41671de66d
26dc35b9a2909afe28e978c381a39cdfe677d50f
02cbcd0a606d3c0874655a74f63d727f3289a6c0910a9c0a9a31813c22680fd5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CBCD0A606D3C0874655A74F63D727F3289A6C0910A9C0A9A31813C22680FD5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6553
Expires: Tue, 29 Nov 2022 14:37:35 GMT
Date: Tue, 29 Nov 2022 12:48:22 GMT
Connection: keep-alive
van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.json?v=2022-11-29T12
200 OK 1.8 kB URL HTTP/2 van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.json?v=2022-11-29T12
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
File type JSON data\012- , ASCII text, with very long lines (3029), with no line terminators
Hash e535a9fb39e4e8e203d021f4ae571d52
196847c473d4def05c90178ff7afdd20f21b4068
5688df2566e6d92fba6b210e88452eab0354518ed677af5357d4763aa2005f68
GET /static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.json?v=2022-11-29T12 HTTP/1.1
Host: van.najva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.p30day.ir/
Origin: https://www.p30day.ir
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Nov 2022 12:48:21 GMT
content-type: application/json
last-modified: Sat, 22 Jan 2022 08:30:42 GMT
x-rgw-object-type: Normal
etag: W/"b41df856fe319fe27d0486735290558a"
x-amz-request-id: tx0000000000000004a3ee9-006385f453-4d4cf31-default
vary: Accept-Encoding, Origin, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-zrk-us: 206
cache-control: public, max-age=300
access-control-allow-origin: https://www.p30day.ir
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
access-control-max-age: 60
strict-transport-security: max-age=0
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4fc92ffc3cdc999e36409c41671de66d
26dc35b9a2909afe28e978c381a39cdfe677d50f
02cbcd0a606d3c0874655a74f63d727f3289a6c0910a9c0a9a31813c22680fd5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CBCD0A606D3C0874655A74F63D727F3289A6C0910A9C0A9A31813C22680FD5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6553
Expires: Tue, 29 Nov 2022 14:37:35 GMT
Date: Tue, 29 Nov 2022 12:48:22 GMT
Connection: keep-alive
www.p30day.ir/wp-content/litespeed/css/03c8850d4ff0350767581ae20bb24694.css?ver=24694
200 OK 217 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/03c8850d4ff0350767581ae20bb24694.css?ver=24694
IP
ASN #43754 Asiatech Data Transmission company
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/03c8850d4ff0350767581ae20bb24694.css?ver=24694 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 12:48:21 GMT
accept-ranges: bytes
content-length: 217
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/ff8eed7eee11d7b3a0057a07a54d3bce.css?ver=d3bce
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/ff8eed7eee11d7b3a0057a07a54d3bce.css?ver=d3bce
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8425ecbecee44b5e056bb4f707dc7601
e10594d845d194b286e73095cbb2c91c668d38f1
7c35d6888a2803592733e450b2a43b972ac2397359a271c618eedb249284f9d3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/ff8eed7eee11d7b3a0057a07a54d3bce.css?ver=d3bce HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 12:48:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11576
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/d5bd7ba53955ea45cdde76ae13483e21.css?ver=83e21
200 OK 722 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/d5bd7ba53955ea45cdde76ae13483e21.css?ver=83e21
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (2216), with no line terminators
Hash da973d6cccde48c7e9bd27371b685450
7ea63b41304e6c06a214157a5319e7808be3bd16
1f058f3196d5334eb949208572591dc4f9c3e6b8349aee1838e51600f575fd36
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/d5bd7ba53955ea45cdde76ae13483e21.css?ver=83e21 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 12:48:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 722
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/72d84f6ba4828c7b1eff74713697c0a2.css?ver=7c0a2
200 OK 129 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/72d84f6ba4828c7b1eff74713697c0a2.css?ver=7c0a2
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with no line terminators
Hash 5fa8018ed12f71dff7729f927d6e2f80
1d74e0653327b59f8a9ede182064d0425cff8801
8d74a46f5aa0083693a91b5cc42c9d44c8e0551fe1165d028a8fbeb16527ba7f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/72d84f6ba4828c7b1eff74713697c0a2.css?ver=7c0a2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 12:48:21 GMT
accept-ranges: bytes
content-length: 129
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/f3339baed1f9db0350f0972773eda65a.css?ver=da65a
200 OK 259 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/f3339baed1f9db0350f0972773eda65a.css?ver=da65a
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (744), with no line terminators
Hash 4eb68e6efa5b6982b0ca7c2ac3ef1b46
33c53739d50b36aaf0de5e8a23ddd9d1b6be172c
3eddf85b5561efbd90ea609e6b7b8c47aa00237142505371db9b00571e090e60
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/f3339baed1f9db0350f0972773eda65a.css?ver=da65a HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 12:48:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 259
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/0a4c03c0b65170a860ae44a691591c7b.css?ver=91c7b
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/0a4c03c0b65170a860ae44a691591c7b.css?ver=91c7b
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (4528), with no line terminators
Hash cd7cf46b649573206e8a58808f8b1d4b
b8cff11990ff8cd7aa4240e582466af625c2135e
07aa0cfa975827bb04604f22bf0e6ffc2c310977b2c2324aaac7744de388576a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/0a4c03c0b65170a860ae44a691591c7b.css?ver=91c7b HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 12:48:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1149
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/7b14418837f17488895857beb9620d88.css?ver=20d88
200 OK 528 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/7b14418837f17488895857beb9620d88.css?ver=20d88
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (2328)
Hash ff730c269d07bfdf625d19ad0c784c2a
756809ea5283280a0d549c6a1845ff714eb0ce18
9ebb18527c556ea3e775ecb7d6e4c4afe075d4a714daf5b768a88505d27ea794
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/7b14418837f17488895857beb9620d88.css?ver=20d88 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 12:48:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 528
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/44ee4d0839a4a04e07c9597310276dc6.css?ver=76dc6
200 OK 2.7 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/44ee4d0839a4a04e07c9597310276dc6.css?ver=76dc6
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (25320), with no line terminators
Hash 8b66b963f0be179b88077cef9d737578
bc381bf413a1ae51ed7f801a13b4fbde7c5b0c5c
6397706dc9f1ab2b7faff3262ed104e10752383084ba198cd2421d2f818d4333
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/44ee4d0839a4a04e07c9597310276dc6.css?ver=76dc6 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 12:48:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2660
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (3683), with no line terminators
Hash f3c166f319aea691586c1f2f4afe2118
a300f6381204e7c980b147530257244c4093df42
45eb812e6973267111387a695e662c78eeef445860ee720c8e9e623d38d05022
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: application/javascript
last-modified: Tue, 01 Nov 2022 13:47:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1167
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
200 OK 3.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 85 x 86, 8-bit colormap, non-interlaced\012- data
Hash c736084f562340b160cbb12fcdcf59e2
efdd05e9198f48aca2e530cecf5868731769b15a
0a79347b3008d5832c869fb8bc82e6e889a84048f9d2684e458df0da405c194c
GET /wp-content/themes/p30dayv7.1/data/images/logo.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/png
last-modified: Thu, 08 Jul 2021 15:50:55 GMT
accept-ranges: bytes
content-length: 2976
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/winrar.webp
200 OK 868 B URL HTTP/2 www.p30day.ir/images/fastdl/winrar.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 43x43, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 87c92fbb7d5a79faceffbf561c56bd0c
8145b4c0a0a040a5696a63a15ce26e215bf6439d
ab07ecfe46a014e8c7df29ed8d828aca0c2cffa78b1bec043bbf190fec5f293d
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/winrar.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Fri, 06 Jul 2018 12:04:56 GMT
accept-ranges: bytes
content-length: 868
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/idm.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/idm.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fb32f9bbbd50740c31723747dc5e1e5
59c219d247b2a02f9c0c908ab85f3f2d0cc1c521
cad6e35932597fb152209d206c301e5b0fb337b77c0637fd9639cda97c2781c8
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/idm.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:18 GMT
accept-ranges: bytes
content-length: 1286
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/chrome.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/chrome.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7d04c08bcdd79e30879c5d15c2806bd5
5917e971d8e243cf82d6abcdaedc9ae1fca7b7ab
d11703cc091f7177b192c810e165c5cc96d6d3517a6c6a4477dcec38f703b900
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/chrome.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1298
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ff.webp
200 OK 1.8 kB URL HTTP/2 www.p30day.ir/images/fastdl/ff.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 26635d4802f5bf01d7cde8bcb429a493
f7ba292a1d5d91e29f9a0cabf8f204c0bb73b3c4
44686b2af956e0928ed8d000e83d1ee0007223bb74b6e268503ff208f4f7dedb
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ff.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1754
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/nvidia.webp
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/nvidia.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7012172e13a625b034e882677435c7a0
98451904b87560a908d7211a06f4a73d80eb8b9f
fd7f3840bff4766d23c3ff979652e119036f484c1cb60f24ba6b0d39a037943c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/nvidia.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1202
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/adgc.webp
200 OK 1.4 kB URL HTTP/2 www.p30day.ir/images/fastdl/adgc.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 745a52e2bcca1a45f7ada2d8edc1baaa
390ec2980d7989082ee99edd4fb20cd76f85ccc6
a578633d17dd6c73af65284cf264bc25e7387325e78556f4db253cd214c8c3a8
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/adgc.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1390
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/reader.webp
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/reader.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fff23369545f680acbb06c513a551f6
5552213ae9ff2876b1f694bff383004629c55174
0bd7f6d56d8347f607373f7f0fe59bbd12218c9bd0d062fb035bdcc93173f873
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/reader.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1226
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/kmp.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/kmp.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ab2eb9b46ba51721999a1d0350bbf38
894ae30f4e29af81c60bb7502a864474dae8b626
3df5a58530b161285349a08201222fb34f760b117edd49e2ebba455b4ed52d0a
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/kmp.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1058
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/klite.webp
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/klite.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash b3762ca2e70f1f68da4fc38f53dce6b3
62eb7b1023cf4be53c3182cc32cd794aa1fba741
b68afab14ce590f52341f15711e29511323129ae83930c61732d293fef120c9c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/klite.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1332
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/aimp.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/aimp.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 56e0584dce3543e6e8863428ae915ede
cbff7f659dc8db1b819324511aacd68b6c68f0ef
b0d948b1483456bd5fc8b4e31726442084b42419a7608d3a89acb99376e7cd47
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/aimp.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Fri, 06 Jul 2018 11:59:58 GMT
accept-ranges: bytes
content-length: 1074
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/daemon-tools.webp
200 OK 1.6 kB URL HTTP/2 www.p30day.ir/images/fastdl/daemon-tools.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash f1c4998e619d02f2c966d18cafa3ae5f
038e50d4c3f60a34e28bfa54d73d2f676a8b02f3
05df4592018b5987fbb9dec7d6b83d4c05f281621b694fb9b04538540d5f5442
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/daemon-tools.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1632
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/office.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/office.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8ba130fcea19ecd9ed5233ce0d22dd76
8bc7e1cf3869002d614f431ea39416f8bcb259f5
6b860744ee34632f6a2fbe3ceb00a29d7cf67f31f4273db9372486d0bff4abd9
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/office.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1078
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ps.webp
200 OK 656 B URL HTTP/2 www.p30day.ir/images/fastdl/ps.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash d086c0af387345300bf7a1d54ad05820
7e6b249d54a92b5ede190734e4392b70dc332f1b
2c9967c77a7ffa6ddeda076c1b90a6beda16864fa9e131e205fcdc70f49849ec
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ps.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 656
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/skype.webp
200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/skype.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2612c7b808a386c27c45c9d7a3ab05c7
a0c0acc0a9c0529df19d5ecc0aa8e66a4f3b3cf0
433be5e918c73c43f2130158730859ddcc9aa058d229feb01714d80cc3dfb324
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/skype.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1140
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/win10.webp
200 OK 516 B URL HTTP/2 www.p30day.ir/images/fastdl/win10.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3e95105787f48e97f255c054163b1ff2
bbd996c9d0de0c5d89bbcf02b5dbd9d0d0cb38c0
aef03c97b401a3b2d73fb25e0c926b8af7b4d01eaffa56e64828772b3624e5ae
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/win10.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 516
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/windows11.webp
200 OK 306 B URL HTTP/2 www.p30day.ir/images/fastdl/windows11.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash c07f514a1feb0a64d02a0f002103eacf
88bfe92c334f01ca1ee74adaa3187d15e77783b0
ba56118c3788fa3e7e8dd8b5a6d2299a00026356f98ff25138cc86215ff25bdf
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/windows11.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Sat, 19 Jun 2021 11:21:28 GMT
accept-ranges: bytes
content-length: 306
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/ab20be02f0571b098b5c6dc3faab387d.css?ver=b387d
200 OK 0 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/ab20be02f0571b098b5c6dc3faab387d.css?ver=b387d
IP
ASN #43754 Asiatech Data Transmission company
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/ab20be02f0571b098b5c6dc3faab387d.css?ver=b387d HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 12:48:22 GMT
accept-ranges: bytes
content-length: 0
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
200 OK 836 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash b6de7641069b95fb7c051e730ecb3ab1
20e90d406e0a5d1e8e12897756d560f44ba282da
0c10e76e6ce8fe60e6d33c738a107efb9fd5a9517770ab1ca23b12ec359bda4b
GET /wp-content/themes/p30dayv7.1/fontiran.css HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: text/css
last-modified: Wed, 19 Dec 2018 18:34:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 836
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg
200 OK 193 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x38, components 1\012- data
Hash bd79e4f635621819a0f871f71828313c
7cca8338395407917aa037a2ac64c965e81b17d8
d7c3581c0769f58151379bbbc5a34fc8f46caf00c05298f90b6639e349b2e59d
GET /wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 193
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logohead.jpg
200 OK 2.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logohead.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 284x38, components 3\012- data
Hash 4dd2b75ea3ab31ba5a8e6319244abca5
9a968b99721ac4f1dd311cf29bbbe04f229c4e21
13b88e24a117d01c8010505955530b45e2d5087dc2d377f6760eecf26fc28ede
GET /wp-content/themes/p30dayv7.1/data/images/logohead.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1980
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b-service-worker.js
200 OK 30 kB URL HTTP/2 van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b-service-worker.js
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
File type Unicode text, UTF-8 text, with very long lines (28945)
Hash 891a61b18b5a448fd940904c7074d8ce
1e2a063cb8b25c9797b40dfe24f998124efc4b6b
0359bbb1a17c3c594e834083a3f6abc3d5ac290366d7599be35cc130a4bbe57d
GET /static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b-service-worker.js HTTP/1.1
Host: van.najva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 12:48:21 GMT
content-type: application/javascript
last-modified: Sat, 22 Jan 2022 08:30:43 GMT
x-rgw-object-type: Normal
etag: W/"b6f5831e34dedbeb9ca892f30e654f32"
x-amz-request-id: tx0000000000000014de028-00636a179e-4707a72-default
x-zrk-us: 206
cache-control: public, max-age=300
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
access-control-max-age: 60
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=0
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/10/Need-for-Speed-Unbound-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
200 OK 32 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/10/Need-for-Speed-Unbound-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b0b95fd637a75b18db269bf3e8a98fa6
2c81aad444bd2d14dadbdb11f3584faaff09612e
7539e0ad5bf9eb92800dcea73dcbc855892b36db44fbc643c094fd5d06e9f471
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/10/Need-for-Speed-Unbound-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Fri, 07 Oct 2022 10:47:44 GMT
accept-ranges: bytes
content-length: 31460
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/09/Kena-Bridge-of-Spirits-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
200 OK 16 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/09/Kena-Bridge-of-Spirits-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9e961853894ee6789cbd3aae99e12ca4
25159b50ad12e7af658822b0ec0e3df6c5ced4c1
89fa22d279515ffbce4359413a21b70ebc253781ca45a3399ecadfbe03164291
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/09/Kena-Bridge-of-Spirits-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Tue, 21 Sep 2021 07:11:37 GMT
accept-ranges: bytes
content-length: 15504
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.yektanet.com/rg_woebegone/scripts_v4/VwsLBz1w/complete.js?v=2022-11-29T12
200 OK 48 kB URL HTTP/2 cdn.yektanet.com/rg_woebegone/scripts_v4/VwsLBz1w/complete.js?v=2022-11-29T12
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
File type ASCII text, with very long lines (30522)
Hash f5ec38543728f5f5657f9cf457e3eeb2
aabfa18a918500ff7dec4b8a7b8cab2033062052
8a5967755df5c4dca392527a28e6a0357c6fa7fea09fd9b95a252b837375b172
GET /rg_woebegone/scripts_v4/VwsLBz1w/complete.js?v=2022-11-29T12 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Nov 2022 12:48:21 GMT
content-type: application/javascript; charset=utf-8
cache-tag: ua_VwsLBz1w,ua
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Tue, 18 Oct 2022 11:27:11 GMT
x-rgw-object-type: Normal
etag: W/"b9453f68a712e7c36bf65287ce78a022"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg.webp
200 OK 3.4 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 844567fa0aebc18d4540cfba6efb7caf
6abecba54c4f738179588f9e430e36141904d24f
d026e97527d35be6f6d72a062e460b6d651df6e688355d3c433a9c782029407e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Wed, 20 Dec 2017 13:04:43 GMT
accept-ranges: bytes
content-length: 3368
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2017/05/Planet-Earth-2-logo.jpg.webp
200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2017/05/Planet-Earth-2-logo.jpg.webp
IP
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9bb18a9006ab4a45163f44ee25a60c9a
90164c057fb0eeb1dda00e338d31af4026a233cf
1d555552d17e08722ce6450e8a3ccccd0b9d02110461685f848ebd3ec7a643ce
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2017/05/Planet-Earth-2-logo.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/webp
last-modified: Tue, 26 Dec 2017 10:21:30 GMT
accept-ranges: bytes
content-length: 20190
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
404 Not Found 60 kB URL HTTP/2 www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26572)
Hash a7e2b01e147b4824dae9dc27c59d5b2b
22e067fe58647d6fa4b53995932f89133dd9ec68
7ef09fc2752e1a4212525534da1ec9f37813a24cc4955e0b952b7217917e4713
Analyzer Verdict Alert fortinet Malware
GET /tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.p30day.ir/
Connection: keep-alive
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
x-dns-prefetch-control: on
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
link: <https://www.p30day.ir/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: f51_HTTP.404,f51_404,f51_URL.5b0df45d1cadff37052e2ce97f7c604c,f51_
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
app.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=2022010029012
301 Moved Permanently 25 kB URL HTTP/2 app.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=2022010029012
IP
Hash 54be3791c40422ed1f012ffb2093164b
df82555f6599d64c1d72b9e457e1f86080bdcb59
46be5126b875824af3fcd5f577d24a9d1e6194cc446c9ae2f1f6c1d046db1c34
GET /static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=2022010029012 HTTP/1.1
Host: app.najva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 29 Nov 2022 12:48:20 GMT
content-type: text/html
location: https://van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=2022010029012
cache-control: max-age=16070400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D96bXxEIkGIKCIWmXLIyjVVjURrBxJW5kuJrPTz0X9ExyMTdJ5vnTFOZTl4%2FhQM5w6JFeBvkZ8lNHJYUwSgUHzL2WQlMWH%2BelueT2Hdeq8GUeMWG0Z20Mt1jBpyiD3gE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771b7502d8db71d5-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/NBA-2K23-PS5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 27 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/NBA-2K23-PS5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 31d323de6d5075150ea19c07167521bb
d5c72a89a7c50c3296d901653b1634c75ec47bff
829f475d524056c426530c8c7899ab7e9f9b03477c045c4338c2d848ce4dee57
GET /wp-content/uploads/2022/09/NBA-2K23-PS5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Thu, 08 Sep 2022 07:11:53 GMT
accept-ranges: bytes
content-length: 27217
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg
200 OK 7.7 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 256x256, components 3\012- data
Hash 13cd832d0f976898ae96bfdf56574448
bf817b252dd9b65aeeff7ec2c29b47362b42fc93
a84947a67f8f1172beba5e432863221c0638f1852e75d18267f37713aee6c6fd
GET /wp-content/uploads/2016/03/Bitdefender-Total-Security-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Wed, 20 Dec 2017 13:04:44 GMT
accept-ranges: bytes
content-length: 7712
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ua.yektanet.com/__fake.gif/
200 OK 42 B URL HTTP/2 ua.yektanet.com/__fake.gif/
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /__fake.gif/ HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 467
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Tue, 29 Nov 2022 12:48:22 GMT
content-type: image/gif
content-length: 42
set-cookie: gearbox_ad_token=58a4f09e-fd24-4a23-9b93-f35b44b9c16a; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Fri, 26-Nov-32 12:48:22 GMT
analytics_global_token=58a4f09e-fd24-4a23-9b93-f35b44b9c16a; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Fri, 26-Nov-32 12:48:22 GMT
last-modified: Tuesday, 29-Nov-2022 12:48:22 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2061
ar-atime: 0.198
ar-request-id: da165701225c35d7e3f36e1ef70b61bd
accept-ranges: bytes
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9091a031ec54f0e40013cb6c5daef749
46275667a5d2f972cdde231b5c169364b7244569
c3f9396b21d159ff21bb68e865822508c1af8bd9b41499b4d0fe692cd224d30e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 12:48:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2019/04/Windows-10-logo-300x300.jpg
200 OK 6.4 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2019/04/Windows-10-logo-300x300.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 7bf80ff9273023112a4d0b53651d6fbc
560fb66124f1a9155b005fa11227a5ed7e57a15c
fbfffe7ea6fa1f98d458717c46cf362ab78ad4e75afeeb374e4e28d3b14ccdee
GET /wp-content/uploads/2019/04/Windows-10-logo-300x300.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Fri, 24 May 2019 19:10:41 GMT
accept-ranges: bytes
content-length: 6439
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg
200 OK 9.7 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 3a1e7ba4dff14150dccc88e5f52b667f
39e6d094a15d6f25f144a8e917a2ec0e69b7621c
65f833659efc428f6518cfbff0c96079156e4e4082890dab65fe0a52a40ac3a7
GET /wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Mon, 26 Nov 2018 15:53:27 GMT
accept-ranges: bytes
content-length: 9726
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
200 OK 14 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash d70b4b85df7894ae52c49d6d2082e5a1
6d9cd83d5d22cc9ceb29a3f46158ef47cde6978e
c878111b78203ce81009f09637a3b9339a13a4be6399a370d10e054c91f93449
GET /wp-content/uploads/2018/08/Fortnite-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jan 2019 15:54:33 GMT
accept-ranges: bytes
content-length: 14195
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 5a8cf6d3b62188b06f86bfa8d2541406
3a83683da979322b727c69b5f43ecdebff2a5937
316c2cef65cd88c00b9c470f43708aa37b854714ab80a30a2a7af0d294912098
GET /wp-content/uploads/2022/03/trainer2.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Fri, 11 Mar 2022 21:10:15 GMT
accept-ranges: bytes
content-length: 12033
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
200 OK 186 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 8x8, components 1\012- data
Hash c07b958a50276ef2335c0a97b26fba73
66951a4e8c12e80814625f90167c95a3ebabca82
e4c78d99b0c76d668d08209ec3d822c48d4b8f85d6f09eecc796e68b2cacb665
GET /wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 186
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
200 OK 9.5 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash a7c5fb47b5a2241827154e67e2063d7d
750b7e9141cc35af7da9b03f6f5ec0f5f468b397
deb2589dcf6631e013ceac516224880daa4f7970218ae3dc2c8473ce8bd75072
GET /wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Fri, 15 Dec 2017 22:16:01 GMT
accept-ranges: bytes
content-length: 9474
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
200 OK 9.8 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 4de60df9a9dd0f161ef7086529319bd4
32809468ded58d918127dc62243f6d5997f73fac
cc789bee8ec9544815531b72d475f178f3842e5536522fbe991144849bd5a444
GET /wp-content/uploads/2021/08/nvidia-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sat, 14 Aug 2021 18:10:08 GMT
accept-ranges: bytes
content-length: 9750
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2013/01/kaspers-300x264.jpeg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2013/01/kaspers-300x264.jpeg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x264, components 3\012- data
Hash 8c9d1dec0b8cee0e8d4a3d340199bbc3
6b8b4cb6ec5f2b6ab91d01b42abe57ff64b3edb3
7051a3e408acc1ec6290d2039d9e16fb8d5a9a2cc7d4d27971a3126e32381a91
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2013/01/kaspers-300x264.jpeg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sun, 22 Apr 2018 23:12:08 GMT
accept-ranges: bytes
content-length: 11927
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg
200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 17d7f8f05769b4c612baaf104a938457
e03f6cc0f577b8489adce4992270c2207a1b2d47
6c02051060327c956a79e836091fc937b469ff04d559bb86a7f03c72255839ee
GET /wp-content/uploads/2012/01/Scanner-Radio-Pro-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sun, 14 Jan 2018 12:58:38 GMT
accept-ranges: bytes
content-length: 12336
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2012/06/Telewebion-logo.png
200 OK 15 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2012/06/Telewebion-logo.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 1350e6ebde75e48a0a6f0637227e69fc
842fd619acb59e824074140b15aefd30866ba6d3
a95fc52118e8ea0f3192d0615ac7fb5e7ed9aa6675a0766d4d2fdb8511d911b5
GET /wp-content/uploads/2012/06/Telewebion-logo.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/png
last-modified: Fri, 12 Jan 2018 19:02:21 GMT
accept-ranges: bytes
content-length: 15158
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg
200 OK 15 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 683234bfc2826c1e05e983a4ff71e2ae
7e08159a55f3291fdd1482b35b3b68fae9d27045
096824d67a19cd9497a98c84125eae96262f1ee31f3c9f20e54dc28cb5b0b1a2
GET /wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Mon, 26 Nov 2018 11:52:54 GMT
accept-ranges: bytes
content-length: 15167
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg
200 OK 8.9 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash bd4470d56aafb57fffe946b787fbe614
3229781e256f3767f1337e17b74cc32630525bd0
2c20fae862b4307e32c5cdd069a481ad7525789014d9d946e9647c6f5e5a02c8
GET /wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Thu, 22 Sep 2016 23:21:55 GMT
accept-ranges: bytes
content-length: 8926
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 23x141, components 1\012- data
Hash 7d90c92e3961b8322b3335c00bc3bc87
1d4994b1397daccb185623e49e91f957cb264f3a
f063582f1f7df2931308adeff5d9239f6fe78c3476c07034cf39e0516d0410dd
GET /wp-content/themes/p30dayv7.1/data/images/adstext.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1301
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
200 OK 177 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x38, components 1\012- data
Hash 909e83f543a3bc1d93cbc088b6c4db0d
9e4988299811f5854420d28598c521ec405844e4
4d1c24eda2bfa81daf6efa53831e2b65eda16945d4e087960c83c3d6b5ef4756
GET /wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 177
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
200 OK 455 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 21x21, components 1\012- data
Hash ef487d89559d14481fe71408729115ed
1287c52488f6fff71fe0c16b441e650198bd0a74
d274862bd1bc6b81df11f8a26506d6b01800f5b5a5350f66bea78a57a3a758ec
GET /wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 455
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 270x64, components 3\012- data
Hash 733f3ccb8e1f56ce42bc4dbdcb97487f
2090588bc395bb2a6ac2b614dc7122beb088646e
8560e5600d8636cffb075c9d774e594aeaf84e1405608d8a93bf246d11646480
GET /wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1162
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
200 OK 102 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 8 x 5, 2-bit colormap, non-interlaced\012- data
Hash e83c058adc9ac1ea2966138ddc28c83f
a7210bf381afb33535d4e55667f473bcaad195a9
f797a59c0d0c69ed3a140b2651b786583e372708de82b22e7bdbf6588199677f
GET /wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/gif
last-modified: Sat, 23 Feb 2019 10:56:42 GMT
accept-ranges: bytes
content-length: 102
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/PUPPETEERS.jpg
200 OK 7.7 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/PUPPETEERS.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 146152e7d07b1ad26779084089042eb0
395f262a8b3cfc0695a1edb98261fae29ab7f06f
76ddb9f900a9d92506c074ddfb7e8cc18663b80bff186b052660c6cbafd96b59
GET /wp-content/uploads/2022/11/PUPPETEERS.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Mon, 28 Nov 2022 20:49:41 GMT
accept-ranges: bytes
content-length: 7652
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/hololive-ERROR.jpg
200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/hololive-ERROR.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 92dcb9b7bd421aa4bf21e6c506f64fe8
dc4dd67f030b84f3da2bb9813a527f4f4c420b65
0b6731d61a048d2b220f35b3468fc467eda06731e69c5446aab55561c84a1f90
GET /wp-content/uploads/2022/11/hololive-ERROR.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Mon, 28 Nov 2022 20:30:47 GMT
accept-ranges: bytes
content-length: 28414
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/Need-for-Speed-Unbound-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 32 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/Need-for-Speed-Unbound-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 5b7519258ae21b2dd0e9aae62bbe4b29
e92721a0d174cd6cf207cc1b620bff9dd7a45190
2a5fa2245326782b3860bbc4a48bd8ec5e84fb5eb5f91f0c83fa9ff2cb1f61b6
GET /wp-content/uploads/2022/11/Need-for-Speed-Unbound-ps5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Tue, 29 Nov 2022 08:46:40 GMT
accept-ranges: bytes
content-length: 32426
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/6.6.2/firebase-app.js
200 OK 3.9 kB URL HTTP/2 www.gstatic.com/firebasejs/6.6.2/firebase-app.js
IP
File type ASCII text, with very long lines (11452)
Hash 63d27db05d5c9a63dc57643f37960d40
08e8fbc1c812e54e4a29fb31f8e6d731c49e9c16
f0e6023ad6184830d6463a199ac0ca9aff28faae5ae2bd0ac612d60daaedec09
GET /firebasejs/6.6.2/firebase-app.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 3945
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 17:24:46 GMT
expires: Fri, 24 Nov 2023 17:24:46 GMT
cache-control: public, max-age=31536000
age: 415416
last-modified: Thu, 19 Sep 2019 21:11:52 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/Car-Mechanic-Simulator-2021-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
200 OK 38 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/Car-Mechanic-Simulator-2021-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 959b2463d06eba6a2c8ab9419655ba61
88b356a0d320cb9d47a0f9e0f7cc0d38ffb9c265
72a0ab7c5f42e073874700030f78e78d09acd7e06bf550d2f303cc284b41797d
GET /wp-content/uploads/2021/08/Car-Mechanic-Simulator-2021-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Fri, 13 Aug 2021 01:18:20 GMT
accept-ranges: bytes
content-length: 38465
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 04800cc8299476f9ffdd0fb9c4e46c7b
89ebcfda8cab223733b7a8f9b85408c2cff9aaba
16ca7625901b216dc43a51319400eac8e6b8716a4e8e669d64ac45c36e41741e
GET /wp-content/uploads/2022/05/pubg-mobil.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Fri, 13 May 2022 22:40:24 GMT
accept-ranges: bytes
content-length: 25225
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 6439adca635d68a4903139b773a037df
37ea4e385cc38a7b0b7ef5ece59c8c42471c2690
dc5bac1e0f414a15e14b46a0cb4edfa95db7a906edb79df61ebb8958be914dd7
GET /wp-content/uploads/2019/05/cod-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Fri, 24 May 2019 19:25:58 GMT
accept-ranges: bytes
content-length: 28142
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2016/06/WhatsApp-icon.jpg
200 OK 37 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2016/06/WhatsApp-icon.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2016:06:27 20:19:34], baseline, precision 8, 300x300, components 3\012- data
Hash 2e0b3e7bc8c209a22e720dbcb7b50a73
5c8b95e2c364bcd5400a70c3a77008afa9251bf9
b2132586793157280e95b63e040d15106c5f1da1a067f70769147697fcd8da35
GET /wp-content/uploads/2016/06/WhatsApp-icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sun, 07 Jan 2018 12:19:54 GMT
accept-ranges: bytes
content-length: 37331
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
200 OK 40 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 282ab4960a3218179243add97e98d1bb
f3f55b81949c9c10f6e7c7b7fdd150fc0256d7c0
b4eeca569cb6f2401e2645fdf01d952240276ca6bd21d21c3f358f8314ef77d0
GET /wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Mon, 26 Sep 2022 19:29:35 GMT
accept-ranges: bytes
content-length: 39795
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
200 OK 23 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash c59c5894ca56da620457ac4f3d675ab7
4b2d5bd0680aa6fbfae98fefac9270831b447e35
6989b43e56daa13a2702b1baba2f2220eb2f54af4d0c32cb613776b90ebc058d
GET /wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Tue, 20 Sep 2022 09:45:30 GMT
accept-ranges: bytes
content-length: 22630
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 080d36f5a29083af1b095fa12aa3f8ab
c809e9cc01c78fbb315899b038532e2bad0ac2fb
50864ff8ca4ba1ba0fdb31fb21e0d6d5c962f97235e84ac2600ce144e418bc98
GET /wp-content/uploads/2022/07/elden-ring-game.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Wed, 20 Jul 2022 11:10:18 GMT
accept-ranges: bytes
content-length: 20052
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2015/09/km-player-th-400x400.png
200 OK 51 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2015/09/km-player-th-400x400.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash 205e12f75385cafb75b912e46db54b65
d43c5de6d53e09cd11bc7543939c96f2c6c48b28
cf5eea7524bd31057d0ced2b870245a9c43328dad273de28a70fe4295741498d
GET /wp-content/uploads/2015/09/km-player-th-400x400.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/png
last-modified: Thu, 22 Sep 2016 23:22:28 GMT
accept-ranges: bytes
content-length: 50688
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/The-Dark-Pictures-Anthology-The-Devil-in-Me300.png
200 OK 84 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/The-Dark-Pictures-Anthology-The-Devil-in-Me300.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced\012- data
Hash 46b110fb1f0c88705164ebe91f51fde9
5bab9e85523da51eb07f3b72ff137800a024b6d8
95c30a741c999deb0f194c5979a97b9fe724a57e604c7ba030f2c6b7cc57d199
GET /wp-content/uploads/2022/11/The-Dark-Pictures-Anthology-The-Devil-in-Me300.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/png
last-modified: Sat, 19 Nov 2022 20:18:49 GMT
accept-ranges: bytes
content-length: 83883
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
200 OK 170 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x2, components 1\012- data
Hash 204ccbc677cdc87675467ffe8c9129a0
9ea29e505de3e97d6f6b9638a4b379f21a0def7b
109936adfb4a38a446b3ffa75836a002b241ea538f1b9727546d431761a889f4
GET /wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 170
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
200 OK 30 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 29820, version 1.0\012- data
Hash 9d38733b8a7b9153f2bf9bfe476ef8e3
93f8caeb96e52cd35dd24ffe8dbbc911af5b236e
b2144257a57aa398277a4977bfab616e368f4d8c8c45c79f2f128d8db537cbc8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:48 GMT
accept-ranges: bytes
content-length: 29820
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
200 OK 8.9 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 8900, version 1.0\012- data
Hash 6427d2890332acaa1a4cd0102a7f64d1
2dbca84994471c8cfd3944f3e1df902fbed726fd
6bce3d5ade75e6533bf17697cff7f66cfb51955ec9d158aeface37363b5ff754
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: font/woff
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 8900
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 28388, version 1.0\012- data
Hash 2f6f164c3e1f1329cc658b3c725bfd98
9e63d01d8561d79074bd8e46fbf265285ab958b7
a068d909851e4b57d0847b6c35457ab980463710e124a7e5e26b642e7f9f64fa
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:49 GMT
accept-ranges: bytes
content-length: 28388
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/favicon_new.ico
200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/favicon_new.ico
IP
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 20150782a6ad1e6082f82fc53588af43
eaf8e21e158c5783e2d38ba268d2ca73de6b64c3
122e9e80ae6f9bc3446bee8d631819d93a4e83d71b046b59f88930f8126a4aa9
Analyzer Verdict Alert fortinet Malware
GET /images/favicon_new.ico HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/x-icon
last-modified: Thu, 22 Sep 2016 09:58:52 GMT
accept-ranges: bytes
content-length: 1150
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tabligh/tarhdokan.gif
200 OK 43 kB URL HTTP/2 www.p30day.ir/images/tabligh/tarhdokan.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 120 x 240\012- data
Hash 38200c9031feb328f3dcabc34b4e0842
8972e0bfaeb580fa889732b4d2167681e875b36f
1a2c8762ce06f294680e8250c2613c1b2aa394cb766cb2e87475dedb3c9d98ae
GET /images/tabligh/tarhdokan.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/gif
last-modified: Thu, 31 Oct 2019 19:17:22 GMT
accept-ranges: bytes
content-length: 42594
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tabligh/aseman120.gif
200 OK 6.1 kB URL HTTP/2 www.p30day.ir/images/tabligh/aseman120.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 120 x 240\012- data
Hash d8296e1015c23e5cdf59f3074323e5b4
b23d9c5ae89e5181ac0438be11f5d5ff02425ac0
172197d1ecb53fe25409bdbf947e48c6d0cc74597d0be7e88ef872b8f52f90cd
GET /images/tabligh/aseman120.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/gif
last-modified: Sun, 23 Feb 2020 09:55:41 GMT
accept-ranges: bytes
content-length: 6149
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tabligh/468-120.gif
200 OK 8.4 kB URL HTTP/2 www.p30day.ir/images/tabligh/468-120.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 468 x 120\012- data
Hash fd1205589c92257410497e0f38f397c0
0c8ef50cf6c3ad28799e32c06d224bb22844847b
67b890678024e50bc97cdef677d3a79996019cdae56e74727fd7bcc184c2b6aa
GET /images/tabligh/468-120.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/gif
last-modified: Tue, 14 Nov 2017 15:59:13 GMT
accept-ranges: bytes
content-length: 8415
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tabligh/468-60.gif
200 OK 7.5 kB URL HTTP/2 www.p30day.ir/images/tabligh/468-60.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 468 x 60\012- data
Hash 1ef90523e8694c5444b1c8affd111bab
4baa20a9da693e9fc7e3ecca75e7e033cd75f9f8
9c6c6d0211079fcb6ef4f271cbfcba344ec8dbe22fb793d84de73558f79f28b4
GET /images/tabligh/468-60.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/gif
last-modified: Tue, 14 Nov 2017 15:59:13 GMT
accept-ranges: bytes
content-length: 7515
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/advanced-floating-content-lite/public/images/close.png
200 OK 2.4 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/advanced-floating-content-lite/public/images/close.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash 525c837d809c56cf4374b8ae8c8c1d2e
a5d82ed71cc507878ddb1db38b504d04ec91c07b
10b48a1ec522abd18c5f62d7282433ff88b0a15af5351d0103fb78ea07b85693
GET /wp-content/plugins/advanced-floating-content-lite/public/images/close.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/png
last-modified: Thu, 10 Nov 2022 13:26:27 GMT
accept-ranges: bytes
content-length: 2407
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/venka150.gif
200 OK 10 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/venka150.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 150 x 150\012- data
Hash 0935a2c8e008a93bfc879bcb8fbead13
2a8d31114fa4f80d0003db7ba8048a54cfa969ab
94014d278bf589453339144d2977291755e6a99abd1c9e1f76c8b98b733d43bf
GET /wp-content/uploads/2022/09/venka150.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: image/gif
last-modified: Thu, 15 Sep 2022 13:34:58 GMT
accept-ranges: bytes
content-length: 10159
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom
200 OK 1.4 kB URL HTTP/2 www.p30day.ir/images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Hash d4a8ea670a25c4e17d9aa54ba40f7aad
80827bc7abd9dcad6e964ddc3b0be68bf3562716
46390cda62a8c1f863b306ccdb50fcb1eca9aa0aebf066184a3ad9bb491bd7ad
GET /images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 1423
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/3f5b6fdcc852bc0a1759e69461c21975.js?ver=21975
200 OK 42 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/3f5b6fdcc852bc0a1759e69461c21975.js?ver=21975
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65447)
Hash 4e6e222e4bc9b10f886c0bf9617578f5
e7bbaa7a4ba0f6c3e5ec99c1a4a8e15e56abcd60
ca6c970647ff7c4b4f2549487c5bd47976db700f5975198731e2e5535f62e2b3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/3f5b6fdcc852bc0a1759e69461c21975.js?ver=21975 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:22 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 12:48:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 12:48:22 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/91d8113e1357109604fbae004b14115c.js?ver=4115c
200 OK 6.5 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/91d8113e1357109604fbae004b14115c.js?ver=4115c
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (17748)
Hash b81e7f68b42eadf702fa167b5e11fec6
7926f0614d1878b2cf5206e0a3be6d52afadd88b
96e779f268be55bcfb3d276a7aed8f62e56c0442853866582567d1ec3dca42ab
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/91d8113e1357109604fbae004b14115c.js?ver=4115c HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:23 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 12:48:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6490
date: Tue, 29 Nov 2022 12:48:23 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/b6dec492cce28342c6208c8df54ce4c7.js?ver=ce4c7
200 OK 264 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/b6dec492cce28342c6208c8df54ce4c7.js?ver=ce4c7
IP
ASN #43754 Asiatech Data Transmission company
Hash e9a1404aaafab314c96539da542baa2b
203abe0346753c5d86797c0606500b31b1f87958
3a704bc0d245d9e20a26d1ab9a15862c37593708a23464dcb693dc451b130fd2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/b6dec492cce28342c6208c8df54ce4c7.js?ver=ce4c7 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:23 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 12:48:22 GMT
accept-ranges: bytes
content-length: 264
date: Tue, 29 Nov 2022 12:48:23 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-15659274-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-15659274-1
IP
File type ASCII text, with very long lines (1921)
Hash 671cc86b128f9ed65986c24e7e251636
5c8df3333605a9feeda216cb429f02b9a83a0e52
bf43b2ac0715136a6890003cdf0fbc5cd38c01e1d6be1d7388979f20b16d30e9
GET /gtag/js?id=UA-15659274-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 12:48:23 GMT
expires: Tue, 29 Nov 2022 12:48:23 GMT
cache-control: private, max-age=900
last-modified: Tue, 29 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43725
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.p30day.ir/wp-content/litespeed/js/ceb2015a4b72da8597dedd7751c129fd.js?ver=129fd
200 OK 1.3 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/ceb2015a4b72da8597dedd7751c129fd.js?ver=129fd
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 text, with very long lines (1725)
Hash 6f3e175e2d3a9e2273cb02296ef1d802
d98112391356f6c61f80db8cea237d239bb186ec
b0845a45016bef4ae1a9c16cefa08389fda26a4f91b6ec3d26d9a7f2fe8ed567
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/ceb2015a4b72da8597dedd7751c129fd.js?ver=129fd HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:23 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 12:48:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1289
date: Tue, 29 Nov 2022 12:48:23 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 29 Nov 2022 12:41:08 GMT
expires: Tue, 29 Nov 2022 14:41:08 GMT
cache-control: public, max-age=7200
age: 435
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/640736c56d74085b9fb02efb76bb2f3e.js?ver=b2f3e
200 OK 639 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/640736c56d74085b9fb02efb76bb2f3e.js?ver=b2f3e
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (1287)
Hash 4100c6ad2089cfc1825a57867147eff9
d86c2c252c2f2782c326130e2405bfae8f12bf3f
16e989f0161f33ba73aa36264416635ab93cf67ec0bf79af9f1b4117b2516638
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/640736c56d74085b9fb02efb76bb2f3e.js?ver=b2f3e HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:23 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 12:48:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 639
date: Tue, 29 Nov 2022 12:48:23 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/120e635100d057112aed3306e8fa4135.js?ver=a4135
200 OK 5.7 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/120e635100d057112aed3306e8fa4135.js?ver=a4135
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document, ASCII text, with very long lines (22869)
Hash 35baa0fce050e4476e8a5b0e96ad9067
baef913b6851565785d3a376ee4e351bd14a8c9b
2c6c6c9108216a7306164109b14332f9f2ea6a0c386ae2f4d87c811e90889956
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/120e635100d057112aed3306e8fa4135.js?ver=a4135 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554; _ga=GA1.2.1725819392.1669726103; _gid=GA1.2.707554368.1669726103; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:23 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 12:48:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5715
date: Tue, 29 Nov 2022 12:48:23 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/1ea23faa87881db2a9f69eb83d000ca7.js?ver=00ca7
200 OK 7.2 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/1ea23faa87881db2a9f69eb83d000ca7.js?ver=00ca7
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (18798)
Hash fc190db3af01f454dc661d17f8221783
08ec8c7538494d1d04032f6a84980eb8a81629f5
396fa7c01067d27dbf0393e3112d22ae899176566c6248a16f5bb5740f6c1e77
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/1ea23faa87881db2a9f69eb83d000ca7.js?ver=00ca7 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554; _ga=GA1.2.1725819392.1669726103; _gid=GA1.2.707554368.1669726103; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:24 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 12:48:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7181
date: Tue, 29 Nov 2022 12:48:24 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=VwsLBz1w
200 OK 5 B URL HTTP/2 audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=VwsLBz1w
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type ASCII text, with no line terminators
Hash 68934a3e9455fa72420237eb05902327
7cb6efb98ba5972a9b5090dc2e517fe14d12cb04
fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
GET /api/v1/scripts/preview/validate/?app_id=VwsLBz1w HTTP/1.1
Host: audience.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/
Cookie: gearbox_ad_token=58a4f09e-fd24-4a23-9b93-f35b44b9c16a; analytics_global_token=58a4f09e-fd24-4a23-9b93-f35b44b9c16a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Tue, 29 Nov 2022 12:48:23 GMT
content-type: application/json
content-length: 5
access-control-allow-origin: https://www.p30day.ir
allow: GET, OPTIONS
access-control-allow-methods: GET, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Authorization
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2060
ar-atime: 0.170
ar-cache: BYPASS
ar-request-id: 07d1cb31c9ca025d32b48f87ddb8d88d
accept-ranges: bytes
X-Firefox-Spdy: h2
ua.yektanet.com/__fake.gif/
200 OK 42 B URL HTTP/2 ua.yektanet.com/__fake.gif/
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /__fake.gif/ HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 536
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/
Cookie: gearbox_ad_token=58a4f09e-fd24-4a23-9b93-f35b44b9c16a; analytics_global_token=58a4f09e-fd24-4a23-9b93-f35b44b9c16a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Tue, 29 Nov 2022 12:48:23 GMT
content-type: image/gif
content-length: 42
set-cookie: gearbox_ad_token=58a4f09e-fd24-4a23-9b93-f35b44b9c16a; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Fri, 26-Nov-32 12:48:23 GMT
analytics_global_token=58a4f09e-fd24-4a23-9b93-f35b44b9c16a; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Fri, 26-Nov-32 12:48:23 GMT
last-modified: Tuesday, 29-Nov-2022 12:48:23 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2061
ar-atime: 0.182
ar-request-id: 68fa74a2d5a86c3896e868c0466f0f8b
accept-ranges: bytes
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/5c50ac4e16c25f6c2c7438307c19b903.js?ver=9b903
200 OK 4.3 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/5c50ac4e16c25f6c2c7438307c19b903.js?ver=9b903
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 text, with very long lines (2184)
Hash 38d9f45b685ba52290e2f7f2f2795012
439e578b53496f09061d06bec5f539ad146ab39e
1e946c34b977e68c68e5a676a15d068dbcfef382760a570c90431965cd592b3b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/5c50ac4e16c25f6c2c7438307c19b903.js?ver=9b903 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554; _ga=GA1.2.1725819392.1669726103; _gid=GA1.2.707554368.1669726103; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:24 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 12:48:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4294
date: Tue, 29 Nov 2022 12:48:24 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/4eb854e754a8cb296ce1954c215443e5.js?ver=443e5
200 OK 37 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/4eb854e754a8cb296ce1954c215443e5.js?ver=443e5
IP
ASN #43754 Asiatech Data Transmission company
Hash 622812d1045068a5a6791e30a38eacbe
d7917d9bc45a7909c5944d0138bbff75e8e59419
3b018ba3fd44409b43ce623cbd7b69a94aedb00a35882ef3c2c754df3e9c7dca
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/4eb854e754a8cb296ce1954c215443e5.js?ver=443e5 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554; _ga=GA1.2.1725819392.1669726103; _gid=GA1.2.707554368.1669726103; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:24 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 12:48:24 GMT
accept-ranges: bytes
content-length: 37
date: Tue, 29 Nov 2022 12:48:24 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-15659274-1&cid=1725819392.1669726103&jid=1931438271&gjid=1434021192&_gid=707554368.1669726103&_u=YEBAAUAAAAAAACAAI~&z=50257353
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-15659274-1&cid=1725819392.1669726103&jid=1931438271&gjid=1434021192&_gid=707554368.1669726103&_u=YEBAAUAAAAAAACAAI~&z=50257353
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-15659274-1&cid=1725819392.1669726103&jid=1931438271&gjid=1434021192&_gid=707554368.1669726103&_u=YEBAAUAAAAAAACAAI~&z=50257353 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.p30day.ir
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 29 Nov 2022 12:48:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 798c6088f000b3a2464e23a92271c24d
2a53b3d3bd4a9104c79595f664276db5b32b9bad
dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0fe20d41a043db700a84924cd9793f3
c0da481fef6cd00558f6e68b074acb34bef8292f
03caeb65ab9e22f6d6fe0d344d327950d20ee9ed144e2da0e5e062943a03fc56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.p30day.ir/wp-admin/admin-ajax.php
200 OK 5.9 kB URL HTTP/2 www.p30day.ir/wp-admin/admin-ajax.php
IP
ASN #43754 Asiatech Data Transmission company
Hash adaf931ecfe7d731412c4fd59892d5e9
1fff8f06ed0d90f21efe768f30b7b6bd8c6e92a0
e6cdd8830bc6bef5eb1943a729836370c0721c3450fef58f3773a85721b278af
Analyzer Verdict Alert fortinet Malware
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.p30day.ir
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
x-litespeed-cache-control: no-cache
date: Tue, 29 Nov 2022 12:48:24 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=1725819392.1669726103&jid=1931438271&_u=YEBAAUAAAAAAACAAI~&z=296241112
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=1725819392.1669726103&jid=1931438271&_u=YEBAAUAAAAAAACAAI~&z=296241112
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=1725819392.1669726103&jid=1931438271&_u=YEBAAUAAAAAAACAAI~&z=296241112 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 12:48:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 798c6088f000b3a2464e23a92271c24d
2a53b3d3bd4a9104c79595f664276db5b32b9bad
dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash abd55ecd24d357a9f02612558f723a90
6a1e6963864f0b53ddc6205d35225e6cf0bcbeec
195fa531e0462be58d5c62ebbe6060e147c94bdb1d38ff46c341c74e0ab2671a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 12:48:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=2022010029012
200 OK 0 B URL HTTP/2 van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=2022010029012
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=2022010029012 HTTP/1.1
Host: van.najva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.p30day.ir/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Nov 2022 12:48:21 GMT
content-type: application/javascript
last-modified: Sat, 22 Jan 2022 08:30:41 GMT
x-rgw-object-type: Normal
etag: W/"b4aa3c98a23075f78be6c2800538c908"
x-amz-request-id: tx0000000000000004140fe-006385a9ab-4d4c08f-default
x-zrk-us: 206
cache-control: public, max-age=300
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
access-control-max-age: 60
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=0
server: Delivery
x-zrk-cs: REVALIDATED
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/2c7e8414a5d94e253a15de8131679036.js?ver=79036
200 OK 0 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/2c7e8414a5d94e253a15de8131679036.js?ver=79036
IP
ASN #43754 Asiatech Data Transmission company
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/2c7e8414a5d94e253a15de8131679036.js?ver=79036 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/tag/%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF-nero.html
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=f307ae05-2ae7-4122-616c-a7f1715f3019; analytics_token=f5f1d575-e168-07ae-7e70-34968ce8c770; yektanet_session_last_activity=11/29/2022; _yngt_iframe=1; PHPSESSID=921143b4604029844656b5ed0cbaf554; _ga=GA1.2.1725819392.1669726103; _gid=GA1.2.707554368.1669726103; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Wed, 29 Nov 2023 18:48:24 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 12:48:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 12:48:24 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
app.najva.com/static/css/local-messaging.css?v=2022010029012
200 OK 0 B URL HTTP/2 app.najva.com/static/css/local-messaging.css?v=2022010029012
IP
GET /static/css/local-messaging.css?v=2022010029012 HTTP/1.1
Host: app.najva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Nov 2022 12:48:20 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 15:49:24 GMT
vary: Accept-Encoding
etag: W/"636fc084-29de"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: max-age=16070400
cf-cache-status: HIT
age: 6023
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QExOfJn3BgH3XT7LGiPCZ4Yiw3NUvJVMgdXNCyPg%2F%2FkJs7JrtKP1EtRbb0Ay%2FL3y8ae%2BvPEh4cYnWuz3ghGoWeWRcpp8nEu7YSXH1intpBOZ0L5hVzTEi2gVhlCo%2FGzd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771b7502c8d271d5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
79.127.127.32
216.58.207.195
23.36.77.32
93.184.220.29
0.0.0.0