r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6172
Expires: Thu, 24 Nov 2022 00:13:46 GMT
Date: Wed, 23 Nov 2022 22:30:54 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5313
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 22:30:54 GMT
Last-Modified: Wed, 23 Nov 2022 21:02:21 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 22:18:51 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 723
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8a6c553d89cb6fd1de4787fee2a0e0dc
b974e022ea8675c0a09f58864cc99df05b5b1241
a62ecedcb0953814f982237818a3d902fdca501f82b675629d28b5d476e0fbfa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A62ECEDCB0953814F982237818A3D902FDCA501F82B675629D28B5D476E0FBFA"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10867
Expires: Thu, 24 Nov 2022 01:32:01 GMT
Date: Wed, 23 Nov 2022 22:30:54 GMT
Connection: keep-alive
www.mashhad-film.rozblog.com/post/802
301 Moved Permanently 707 B URL HTTP/1.1 www.mashhad-film.rozblog.com/post/802
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /post/802 HTTP/1.1
Host: www.mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 23 Nov 2022 22:30:54 GMT
server: LiteSpeed
location: http://mashhad-film.rozblog.com/post/802
strict-transport-security: max-age=0;
vary: User-Agent
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nkvTzxD2dfDQjb7J20xJGRE03urvgII2dTUFBPuAuYLoC7LNCL5Wy+9j00+XSSLgaKaFjv/2uyo=
x-amz-request-id: 5TYBF3MY6EJAWG4H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 23 Nov 2022 21:43:08 GMT
age: 2866
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 22:30:54 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 22:08:53 GMT
cache-control: public,max-age=3600
age: 1322
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4559
Cache-Control: max-age=129117
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 22:30:55 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 10:22:52 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
mashhad-film.rozblog.com/post/802
200 OK 10 kB URL HTTP/1.1 mashhad-film.rozblog.com/post/802
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2753), with CRLF, LF line terminators
Hash eabc3b1aca21facc58ee2f29e8d9bce9
70a1eec0cf4d0582f0f9554843041a65eda14d25
6e01ba46829fd96ea498ce7d93eed095115fc271ee4dde6ae6cfbcf39bb2b4af
GET /post/802 HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-language: fa
content-type: text/html; charset=utf-8
set-cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea; path=/
visit_mashhad-film_802=91.90.42.154; expires=Thu, 24-Nov-2022 22:30:55 GMT; Max-Age=86400
vary: Accept-Encoding,User-Agent
transfer-encoding: chunked
content-encoding: gzip
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
mashhad-film.rozblog.com/temp/site.css?22
200 OK 3.9 kB URL HTTP/1.1 mashhad-film.rozblog.com/temp/site.css?22
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (860)
Hash 787a6674aa05de4919a7c90cdbb150c9
2159cc3ec669621f05f361bd91b956e573faef9a
e234a5881c33e5ff75519381140d07f15611e92efbb0bb45ecf73437048d376c
GET /temp/site.css?22 HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 23 Dec 2022 22:30:55 GMT
content-type: text/css
last-modified: Wed, 02 Mar 2022 08:28:27 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 3945
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
mashhad-film.rozblog.com/js/site.js?7
200 OK 9.4 kB URL HTTP/1.1 mashhad-film.rozblog.com/js/site.js?7
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text, with very long lines (5730)
Hash 3a9e608b97ff4d23f8a1649f24b6ed66
794e50a615ef78e2f2bd7616c7d9e033fc4bbe9d
82faf31dfa45299d23061f2c05579901ca592090ce35f1dc48a6ff61f24ac28a
GET /js/site.js?7 HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 30 Nov 2022 22:30:55 GMT
content-type: application/javascript
last-modified: Sat, 14 May 2022 01:34:44 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 9422
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uTVyAlkjeYHyRLCjcCqCSQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3LiTl+d+hiinLePnOS2epOAjDEM=
mashhad-film.rozblog.com/code/popup
200 OK 1.2 kB URL HTTP/1.1 mashhad-film.rozblog.com/code/popup
IP
ASN #43754 Asiatech Data Transmission company
Hash 5fed6ad82f7de73859acee6c67e77836
c885b724b013bca0c2b4c1b59497330d7438220a
9436f41abdd2b882d5898c83e008ae62e0ef98f7f4ca5a5b24d4d48d51c1f25d
Analyzer Verdict Alert fortinet Malware
GET /code/popup HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-language: fa
content-type: text/html; charset=charset
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Wed, 23 Nov 2022 22:30:55 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: pop_id=10824%2C; expires=Thu, 24-Nov-2022 10:30:55 GMT; Max-Age=43200; path=/
c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; expires=Thu, 24-Nov-2022 22:30:55 GMT; Max-Age=86400; path=/
c_t=4300637e9f1fb60c5317913134535267620; expires=Thu, 24-Nov-2022 22:30:55 GMT; Max-Age=86400; path=/
vary: Accept-Encoding,User-Agent
content-length: 1185
content-encoding: gzip
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
mashhad-film.rozblog.com/temp/tarahi/styles.css
200 OK 6.1 kB URL HTTP/1.1 mashhad-film.rozblog.com/temp/tarahi/styles.css
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash 28cf21c53411f845b0888677cbc74828
25bf3bc9920ad37a3f81d88e46001cab51eea3f6
d18ec6839084bfa3a36008f9f5f03cf0de9c8c656677aac9a5a62c2b6890f5ab
GET /temp/tarahi/styles.css HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 23 Dec 2022 22:30:55 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 00:08:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6091
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
mashhad-film.rozblog.com/temp/default/script.js
200 OK 302 B URL HTTP/1.1 mashhad-film.rozblog.com/temp/default/script.js
IP
ASN #43754 Asiatech Data Transmission company
Hash f63434fb5b29fa6044b1a1e30e6c1162
2e7ada06c79c670f0dff3bd7d0474d07c49104e0
a9396929db33b5a927292dc2e2f33891c594811b1b37dd993abbc9db9afbb7cb
GET /temp/default/script.js HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 30 Nov 2022 22:30:55 GMT
content-type: application/javascript
last-modified: Wed, 18 Jul 2018 10:51:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 302
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
www.yekmobile.com/main-pictures/dl.gif
403 Forbidden 110 B URL HTTP/1.1 www.yekmobile.com/main-pictures/dl.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash a91ee3cb35185cccc15e68e9c76c5441
59ae4770e2c926731d216c4aae03130d66fef18f
da14c9f38411534fa596d36202c22c26f146b9d814a1d4e52e7fad08c9a2dbce
GET /main-pictures/dl.gif HTTP/1.1
Host: www.yekmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
HTTP/1.1 403 Forbidden
date: Wed, 23 Nov 2022 22:30:55 GMT
content-type: text/html
transfer-encoding: chunked
vary: Accept-Encoding
server: NginX
content-encoding: gzip
www.yekmobile.com/main-pictures/size.gif
403 Forbidden 110 B URL HTTP/1.1 www.yekmobile.com/main-pictures/size.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash a91ee3cb35185cccc15e68e9c76c5441
59ae4770e2c926731d216c4aae03130d66fef18f
da14c9f38411534fa596d36202c22c26f146b9d814a1d4e52e7fad08c9a2dbce
GET /main-pictures/size.gif HTTP/1.1
Host: www.yekmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
HTTP/1.1 403 Forbidden
date: Wed, 23 Nov 2022 22:30:55 GMT
content-type: text/html
transfer-encoding: chunked
vary: Accept-Encoding
server: NginX
content-encoding: gzip
rozblog.com/temp/pro/ads_468.jpg
200 OK 6.3 kB URL HTTP/1.1 rozblog.com/temp/pro/ads_468.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 468x60, components 3\012- data
Hash db8cac5e50e0f1be65a3ec0756ea6612
3053609e1039ab6d0d0be6adefeaf7ba7a243cf6
8f10f1e719bda34ecfc3af6b50f8273e9c9676d10612eff12aad2382d458ef1d
GET /temp/pro/ads_468.jpg HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:55 GMT
content-type: image/jpeg
last-modified: Fri, 20 Feb 2015 09:52:01 GMT
accept-ranges: bytes
content-length: 6286
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(24).gif
200 OK 987 B URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(24).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash da4b1372525e9bd4e81ed3083d1ade99
dfbd8b83029c88fab8bdd502e94c1e2cdb5f1e78
020b97e1fda4344e87cc91aaa96f7015d913e697a4169f066d37449e54b59633
GET /images/smilies/smile%20(24).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:55 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 987
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(8).gif
200 OK 1.3 kB URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(8).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 8fe036e92e61161e89bafcafcb07b87c
dee722bfa2cf1c506114abbcee0e0a7408392cec
69408195af42830e24e6bfab42b211bee01636d6e3dc26c96e253fc8e2fe85ea
GET /images/smilies/smile%20(8).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:55 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1317
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(27).gif
200 OK 263 B URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(27).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash f621e45da725a0a64059734c278af763
59350efa657a24a2657f567301de8e1fc946c74d
3e6b4357f238814c69d03ed27f302e6fbdf2df35587e93ecb9fd9576d7355972
GET /images/smilies/smile%20(27).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:55 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 263
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(9).gif
200 OK 2.3 kB URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(9).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash e9dfcd8a0b7e8380af7d46101afcbb20
f85300a499338903fb81eb1b216a5828e02c2460
4e625176b1d0db2c3303c1c04dbb67ffdb1447cbc55d080bb439b2fedd8fa7ef
GET /images/smilies/smile%20(9).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:55 GMT
content-type: image/gif
last-modified: Mon, 25 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 2318
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/include/captcha/cap9.php?name_sess=0fd55b5b0f78d925501bdad47189ab04
200 OK 2.9 kB URL HTTP/1.1 mashhad-film.rozblog.com/include/captcha/cap9.php?name_sess=0fd55b5b0f78d925501bdad47189ab04
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 4ed958a3f83387cafef18342f4f0325e
057d5d64ddc59726b2e6a40563452ad385da542b
2944b347bf5575bd789aa4e5f4059683c184f00038789c574eeebffac76b74a0
GET /include/captcha/cap9.php?name_sess=0fd55b5b0f78d925501bdad47189ab04 HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
content-length: 2901
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/rang/like.png
200 OK 2.3 kB URL HTTP/1.1 rozblog.com/temp/rang/like.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 22 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash dd370ffbcd679da0d5c8547f34c6e2fb
6df3b9ec0e82b1a6ef41bc83041d2b2e16200077
2f14531974b17d9fd89de532694faf69ed7aa61b04ea990108b138d772ba96f7
GET /temp/rang/like.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:55 GMT
content-type: image/png
last-modified: Sat, 14 Feb 2015 11:52:19 GMT
accept-ranges: bytes
content-length: 2272
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/temp/tarahi/fonts/wdtv.woff
200 OK 15 kB URL HTTP/1.1 mashhad-film.rozblog.com/temp/tarahi/fonts/wdtv.woff
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 14648, version 1.0\012- data
Hash 259c4490256daceb6a5f275cee137627
5c0eae14870f1ec6527aa64f3f675cb9063034ee
bd4bdb99aa4a1cf56a05d7a913dce42b23b4cb021148b0a0f22d836105d98fc5
GET /temp/tarahi/fonts/wdtv.woff HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea; pop_id=10824%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=4300637e9f1fb60c5317913134535267620
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 25 Nov 2022 22:30:55 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:22 GMT
etag: "3938-54ef6d46-daf654b8921ad10f;;;"
accept-ranges: bytes
content-length: 14648
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(10).gif
200 OK 1.7 kB URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(10).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 99f42d956240d0bbcfd3df166ba7b42d
7470e40e21b3c9e319d0ec7cc279655f63d66b0c
9589d448636d9b6ee869497ec60e3a2d60239287d1b74b5b1d0f22156e80041c
GET /images/smilies/smile%20(10).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1668
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/no_image.png
200 OK 6.3 kB URL HTTP/1.1 mashhad-film.rozblog.com/images/no_image.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c675d607343c154f0ef074dc145988a
2f3713c21ed04a225f16439b200e2b2a6062454e
2e8f7285f7325ed8db6a0d253158db2c8962125173a1e6973e8fcb39a325a7ba
GET /images/no_image.png HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/png
last-modified: Sat, 12 Jan 2013 13:14:07 GMT
accept-ranges: bytes
content-length: 6278
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/temp/tarahi/fonts/yekanregular.woff
200 OK 22 kB URL HTTP/1.1 mashhad-film.rozblog.com/temp/tarahi/fonts/yekanregular.woff
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, CFF, length 21500, version 2.0\012- data
Hash 05727d32400b2008acbf7fc49251ede0
b6c1a82539a2531eb1aad7d1cf05554d5a999154
da78e001fab6f5d7b1c68e17d00fb1595c9b10085d6769a86aeb6a39dc7e43d6
GET /temp/tarahi/fonts/yekanregular.woff HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea; pop_id=10824%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=4300637e9f1fb60c5317913134535267620
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 25 Nov 2022 22:30:55 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:25 GMT
etag: "53fc-54ef6d49-80b982f1d7ce7ee2;;;"
accept-ranges: bytes
content-length: 21500
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(13).gif
200 OK 1.2 kB URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(13).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 514e1cfa8f84c79da4d96d8cb5e93aeb
516bbc4f4ac1a1765cb45e9d67d300656ac5e0cc
a06f503e9559e46ea4dea87cd1bce2854a3c2c6897f239407d774cab36f843a4
GET /images/smilies/smile%20(13).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1203
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/refresh2.svg
200 OK 276 B URL HTTP/1.1 mashhad-film.rozblog.com/images/refresh2.svg
IP
ASN #43754 Asiatech Data Transmission company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 7082e86e2a3c9646fa1aa922b8e3a2d6
7f704127e872b5b94b8e2dd7959e2d5c9b9379a8
d1254b0bb9112500f8f39e1130f0a6c8dca1037d416e7f7d6524894b31b06b00
GET /images/refresh2.svg HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 30 Nov 2022 22:30:56 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Apr 2021 22:57:34 GMT
etag: "114-6089e85e-9f2e18d89b796b95;;;"
accept-ranges: bytes
content-length: 276
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
200 OK 66 kB URL HTTP/1.1 mashhad-film.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Hash d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
GET /temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea; pop_id=10824%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=4300637e9f1fb60c5317913134535267620
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 25 Nov 2022 22:30:55 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:20 GMT
etag: "ffac-54ef6d44-11fea27943efc11b;;;"
accept-ranges: bytes
content-length: 65452
date: Wed, 23 Nov 2022 22:30:55 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(3).gif
200 OK 536 B URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(3).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash f1e05c82c7d3af8df68c934bb4ca5f37
93ee757596b622f23eda97fe2c43a038e96034e2
90444038b976c070a1e5a423a84d6c6cd8d9d08b60ec58fff377ffcd74549b92
GET /images/smilies/smile%20(3).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/gif
last-modified: Mon, 25 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 536
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(1).gif
200 OK 1.0 kB URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(1).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 8ff7886d573e7ce876fafe18e38256c0
69285dcb190e5d8fb419bf682cd67fea32095fbf
929f0885478c8f10c7b60e0a6f5a520f7f7055a994ab31a12cf95fd8ab8b2973
GET /images/smilies/smile%20(1).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1001
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(12).gif
200 OK 1.0 kB URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(12).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 26e1a5a12b7cc8ab49ef0358618f0e6f
3a005a05a0aa8dae61d8ac9d8e114585ee797e5b
1d424977e57e0895a86a6b8368bcc5bc9acfe389a3f7708cc92997c05219ec21
GET /images/smilies/smile%20(12).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1017
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/include/captcha/cap9.php
200 OK 2.0 kB URL HTTP/1.1 mashhad-film.rozblog.com/include/captcha/cap9.php
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash a872ecb0ae0adbb211a3fc72f0e97bda
b2b02a9048208a84c3cfc65c96ff849bf1fc6680
915deaeffefe4df7c939be3bf45a2ef1c1cd53d122cd81140595945872d3e925
GET /include/captcha/cap9.php HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
content-length: 2044
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(0).gif
200 OK 1.2 kB URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(0).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 7acab697005b42df765344852bb92543
8ecda921e08e3da132042ad4d0d737180e2bc011
e80814ecc035b9c8d9bb98c6acdcd2b9452d99d57f57c885b7ed722cbfbe5b07
GET /images/smilies/smile%20(0).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/gif
last-modified: Mon, 25 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1197
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/weblog/file/loading/88.gif
200 OK 6.0 kB URL HTTP/1.1 mashhad-film.rozblog.com/weblog/file/loading/88.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 50 x 50\012- data
Hash 093445ee241c72e6dca01dc570c230dc
32adb71ec06b5d29ec62c5511328d5970228b86d
d40495f2a0e830c47fe4cd50574c68e206292f63545a0684516db0cd8716ee0e
GET /weblog/file/loading/88.gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/gif
last-modified: Thu, 02 Feb 2012 21:52:24 GMT
accept-ranges: bytes
content-length: 5972
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(7).gif
200 OK 845 B URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(7).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 03719bd2e66d16ac9166413e9874fabc
e660b1316e52d5d43e5d9d1a9cfe8ebdccfe2afb
4743fc126b332eeef5d8615a74678aae3291a8c9cc68fe7db1d09a46a7e8c243
GET /images/smilies/smile%20(7).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 845
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(29).gif
200 OK 3.9 kB URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(29).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 20b1b66758da1d25ffc010878c85dfe9
813b390b37cd2a0eca90a481b08cee612b400147
93803a1e9f9c1fcd2835ff9da87c0d8557a50cf1fa09bb8ea5181a75b5a1649c
GET /images/smilies/smile%20(29).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 3870
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(5).gif
200 OK 2.3 kB URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(5).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash fa1910d94b83caa6e9a61dfe2e04103f
34c3ed6096db71d86b84b6ecaf3e444acb20ebfd
4063598ee349698a6e8ac7fcea8f46a3d949a05aa3c46033313033104dd809ed
GET /images/smilies/smile%20(5).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 2323
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.rozblog.com/images/smilies/smile%20(2).gif
200 OK 1.0 kB URL HTTP/1.1 mashhad-film.rozblog.com/images/smilies/smile%20(2).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 4bc8e6787527cdf7bb61efc409d49168
04dce5fb45dc3945fd87984d804cd9e6fa6defea
6c799bdee0667cbaecc9db6160e76df91dd615800a797b1c63ec14c9fb013c32
GET /images/smilies/smile%20(2).gif HTTP/1.1
Host: mashhad-film.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/post/802
Cookie: PHPSESSID=9e0bdcc79b3ac7486df55be438a0f1ea
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1001
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4e4e39546cb22d1365c0a987c7d5b3ec
6facb4461b3279891b0498b73f1881630a0b6356
1a82765b5241803c0fa360f8b9828e5d337d8dc7a48ea2b17a4fa413972493d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1A82765B5241803C0FA360F8B9828E5D337D8DC7A48EA2B17A4FA413972493D8"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16896
Expires: Thu, 24 Nov 2022 03:12:32 GMT
Date: Wed, 23 Nov 2022 22:30:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4e4e39546cb22d1365c0a987c7d5b3ec
6facb4461b3279891b0498b73f1881630a0b6356
1a82765b5241803c0fa360f8b9828e5d337d8dc7a48ea2b17a4fa413972493d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1A82765B5241803C0FA360F8B9828E5D337D8DC7A48EA2B17A4FA413972493D8"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16896
Expires: Thu, 24 Nov 2022 03:12:32 GMT
Date: Wed, 23 Nov 2022 22:30:56 GMT
Connection: keep-alive
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 35585dfc6ca9b5a1ba9a46584c263c86
d06f53280621a081449c3606de153c88c0795963
7f939a121500ea832cd86ef7108fc2f3dfd5d68564d26f51d9b97dfbc378bc46
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: STALE
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=243
Date: Wed, 23 Nov 2022 22:30:56 GMT
Connection: keep-alive
X-N: S
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10185
Expires: Thu, 24 Nov 2022 01:20:41 GMT
Date: Wed, 23 Nov 2022 22:30:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10185
Expires: Thu, 24 Nov 2022 01:20:41 GMT
Date: Wed, 23 Nov 2022 22:30:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10185
Expires: Thu, 24 Nov 2022 01:20:41 GMT
Date: Wed, 23 Nov 2022 22:30:56 GMT
Connection: keep-alive
www.rozblog.com/theme/rozblog_v4/favi1.ico
200 OK 1.2 kB URL HTTP/1.1 www.rozblog.com/theme/rozblog_v4/favi1.ico
IP
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 129e0e4681906fae60ea32d066a7b4c5
33c024415db44baa3aba0f13df1399d9b81ac9e6
0a14eb14e53df8201b78084ab9a276a1f4ca01e55a20c3b8b0b6f3b660ee3ff0
GET /theme/rozblog_v4/favi1.ico HTTP/1.1
Host: www.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
Cookie: analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 22:30:56 GMT
content-type: image/x-icon
last-modified: Tue, 18 Nov 2014 15:12:07 GMT
accept-ranges: bytes
content-length: 1150
date: Wed, 23 Nov 2022 22:30:56 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb94ecb5881a7e49d964e4287d11e7a4
4b131a189db1b615e2519a28cad83d78297ab67f
f3693e29eb7b72361093434142e3f18969c1a0b02350fab430fa29c7c127bd1a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11401
x-amzn-requestid: 3bc374eb-7d70-4b95-94a7-2ad06cae4726
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtHcmoAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-333793987245ff9e741b9aed;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: K4A6bdVv0gauO3YWTEPWMS6fhuB9CZ6o5dUL-O6G5-NzqOGQRzQLUw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:04 GMT
age: 2512
etag: "4b131a189db1b615e2519a28cad83d78297ab67f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.yektanet.com/fp/fingerprint.js?v=umd
200 OK 13 kB URL HTTP/2 cdn.yektanet.com/fp/fingerprint.js?v=umd
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
File type Unicode text, UTF-8 text, with very long lines (31515)
Hash 391b3ffd9af8ccd1082bf76a10e16944
c3aeff81f9d813e1ee0e3269dfe0825da5f8c69c
94cd831d9b1930d8e740ea06651f7ebe86aa5a4ae8f3c8e61398def98be9cca0
GET /fp/fingerprint.js?v=umd HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 22:30:56 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 20 Sep 2022 08:24:54 GMT
vary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
etag: W/"632978d6-7c6a"
x-zrk-us: 206
cache-control: public, max-age=3600
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64d79191f005c9876b952c5f948aa0f7
1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a
00fb36c3d322e8302c5ce202d6d4119d637510cd6f3b63e1347781ec3bb9d7fc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13882
x-amzn-requestid: 9022b0b3-31d5-4149-a969-02514f11b95a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvzNHjMoAMFWMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9347-0e8354a02bef623644714e31;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DYBcunpyI0FBJsJGh1kKpFI3X8kzCkO3mCxzUtWnaMKBT-Bv-zkq3Q==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:59:18 GMT
age: 1898
etag: "1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bda37a1-533d-48a6-bc76-7ecc9fe2dfc8.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bda37a1-533d-48a6-bc76-7ecc9fe2dfc8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eeac5ead5ce62f0d9e2d4bcefa946208
c2430d901f2b4e4a463e90c540294f334553a246
850a89160f840d7509806c5becd6b074a92613920474195f63d7e7a9cf18d908
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bda37a1-533d-48a6-bc76-7ecc9fe2dfc8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6426
x-amzn-requestid: 6f27f360-dd76-4aee-a9bc-cbd52cd80def
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvx8GtpIAMFvQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e933f-69fa8ba571cc62036406e6bf;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wm_pBVCoReupun-_glC47ejuxaRJ6ViGPKClLnWkDrmT-SewUOXexw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:06:01 GMT
age: 1495
etag: "c2430d901f2b4e4a463e90c540294f334553a246"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65d6aa89-922d-4c2b-9601-956358f8ac22.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65d6aa89-922d-4c2b-9601-956358f8ac22.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1234c13159d1531a698ece38a3bd7ff6
6bd60504d4450a090e6f82d15f2f28b371e4dfcc
488a827d4d2074371860dd556b3611c56a19502d3348e0a7d35c4f7556f63b3a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65d6aa89-922d-4c2b-9601-956358f8ac22.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11969
x-amzn-requestid: e7ab6bb2-9bc5-4862-901b-32f18322db46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwBJFkUoAMFRFA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e93a0-56d902c0481eef0932dad57c;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:41:52 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zluh8EkvyvbxVT_lmb1uh3eLph9eMUrsuLlwPYAOmP9-sWAhGyxeMw==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:45:09 GMT
age: 2747
etag: "6bd60504d4450a090e6f82d15f2f28b371e4dfcc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06c6e720bc9900b38e88cd72f739603e
22884cbc78622d6f78c1c3397c9b440946144a99
8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZtjzvMh_vqVaOqm8xPfZ2EWGGl0X7Iv8GK40Z32EbKM4wk6tGPnlYA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:27:21 GMT
age: 215
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F697d6334-d8f8-4a7f-9401-63ad6bab8f38.jpeg
200 OK 3.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F697d6334-d8f8-4a7f-9401-63ad6bab8f38.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3a939ef79a2ad8614e7d3362de0cfbd8
51e1751527dff72955ba62b2d9a2b92199dca31a
564e58dc2e0b2ea0fd67faa30cbf622c9271c1d1f26ae14eacb24c20b1473786
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F697d6334-d8f8-4a7f-9401-63ad6bab8f38.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3805
x-amzn-requestid: 629cde59-1260-40ff-923e-a1d91c6b7a5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvynGq5IAMFgoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9343-162460086ad3b77c4bccd4f2;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: P2ppp0JJ91WlYtnebk5DmqJ7oSc1ZVMlIHWBu657Xsr-AxKjusqN1g==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:50:57 GMT
age: 2399
etag: "51e1751527dff72955ba62b2d9a2b92199dca31a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
plus.sabavision.com/csync/3P/pixel?id=yektanet
200 OK 597 B URL HTTP/2 plus.sabavision.com/csync/3P/pixel?id=yektanet
IP
ASN #44932 Fannavaran-e Idea Pardaz-e Saba PJSC
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash 91c97a3dd65bdf0bcd2fa45d5b1c1b86
68cf099726f6e1cc8f3b31ff481a1d2479fc682d
af64a6f3ffc388b91cd70eae25893f7bea7e8e7d84d2c2b41c378cfbe13651ff
GET /csync/3P/pixel?id=yektanet HTTP/1.1
Host: plus.sabavision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 22:30:57 GMT
content-type: image/jpeg
content-length: 597
cache-control: no-cache
cache-directive: no-cache
expires: 0
pragma: no-cache
pragma-directive: no-cache
server: nginx
x-upstream-ct: 0.000
x-upstream-ht: 0.283
x-upstream: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 32b50587b0f405d66c769716d4685116
5158338e67958768994a23210232820793c70149
d3a1b015f9d51ff63f9a665af1b5e03277cd06a2bc6910c1cdd719990bd3294c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3A1B015F9D51FF63F9A665AF1B5E03277CD06A2BC6910C1CDD719990BD3294C"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2768
Expires: Wed, 23 Nov 2022 23:17:05 GMT
Date: Wed, 23 Nov 2022 22:30:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 32b50587b0f405d66c769716d4685116
5158338e67958768994a23210232820793c70149
d3a1b015f9d51ff63f9a665af1b5e03277cd06a2bc6910c1cdd719990bd3294c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3A1B015F9D51FF63F9A665AF1B5E03277CD06A2BC6910C1CDD719990BD3294C"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2768
Expires: Wed, 23 Nov 2022 23:17:05 GMT
Date: Wed, 23 Nov 2022 22:30:57 GMT
Connection: keep-alive
audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
200 OK 5 B URL HTTP/2 audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type ASCII text, with no line terminators
Hash 68934a3e9455fa72420237eb05902327
7cb6efb98ba5972a9b5090dc2e517fe14d12cb04
fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
GET /api/v1/scripts/preview/validate/?app_id=xywHAyqU HTTP/1.1
Host: audience.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mashhad-film.rozblog.com
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 23 Nov 2022 22:30:57 GMT
content-type: application/json
content-length: 5
access-control-allow-origin: http://mashhad-film.rozblog.com
allow: GET, OPTIONS
access-control-allow-methods: GET, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Authorization
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2021
ar-atime: 0.170
ar-cache: BYPASS
ar-request-id: b693a60cf1b4d032b6b2961eea701395
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09131df19e84cdcdf6d84e289b2076f8
f3f479af8e0aa799c24b3fb77a073c9b58fde4b3
d865894bc8f63e9b0f0435fda2d37f90b8e228b19edf4afebd584648d9e73558
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D865894BC8F63E9B0F0435FDA2D37F90B8E228B19EDF4AFEBD584648D9E73558"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17313
Expires: Thu, 24 Nov 2022 03:19:30 GMT
Date: Wed, 23 Nov 2022 22:30:57 GMT
Connection: keep-alive
ua.yektanet.com/cookie/iframe/
200 OK 924 B URL HTTP/2 ua.yektanet.com/cookie/iframe/
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash efe041bd8442d2347a984e19966dff84
176c5b8395b9e453ba102ba5c476e037bc452641
d940a2cf0ac810f9a1ed3e63c51ff3252f1dd4a990d7dd3432c9a6930418060c
GET /cookie/iframe/ HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 23 Nov 2022 22:30:56 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Wednesday, 23-Nov-2022 22:30:56 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2021
ar-atime: 0.194
ar-cache: BYPASS
ar-request-id: 96eefaead2c957242588ae495d37ea8d
content-encoding: br
X-Firefox-Spdy: h2
nfetch.yektanet.com/api/v2/load
200 OK 1.4 kB URL HTTP/2 nfetch.yektanet.com/api/v2/load
IP
ASN #204544 Dade Pardazi Mobinhost Co LTD
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1313), with no line terminators
Hash 6bd632d9502348a58ffa41b821ea3847
432710536439b730da0d12b96c7e0107c10c1705
ccf63f15e84716ca139b8627f898b06646dd108708a9b6b7bad46d03aaad635d
POST /api/v2/load HTTP/1.1
Host: nfetch.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 414
Origin: http://mashhad-film.rozblog.com
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
Cookie: gearbox_ad_token=4752e28e-e1562-27391-16fc1-1d49151a017ca; analytics_global_token=4752e28e-e1562-27391-16fc1-1d49151a017ca
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 22:30:57 GMT
content-type: application/json; charset=utf-8
content-length: 1369
vary: Origin
access-control-allow-origin: http://mashhad-film.rozblog.com
access-control-allow-credentials: true
set-cookie: yn_unrgc=AAAAAAE%3D.tgC%2BbEVBiF7VtzC4kwpdz8ztAkKcVgdH6sZb7jgUFy4; Max-Age=1800; Domain=.nfetch.yektanet.com; HttpOnly; Secure; SameSite=None
yn_unrgv=AAAAAAAAAAAB.VfARxt0W5dWgo6pR3PzoEbPCZem%2FKav1e%2Ft8%2FZOvQpQ; Domain=.nfetch.yektanet.com; Expires=Thu, 24 Nov 2022 20:29:59 GMT; HttpOnly; Secure; SameSite=None
yn_usg=AAAAAAAAAAAB.VfARxt0W5dWgo6pR3PzoEbPCZem%2FKav1e%2Ft8%2FZOvQpQ; Max-Age=3600; Domain=.yektanet.com; HttpOnly; Secure; SameSite=None
yn_urgn=RU1QVFk%3D.YEt9APuXRsH6lxmBnnF0%2FJXh7TcUvIiy6allyYrAbMo; Max-Age=604800; Domain=.yektanet.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/footer.fffc95f803a170216edf.js
200 OK 13 kB URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/footer.fffc95f803a170216edf.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type Unicode text, UTF-8 text, with very long lines (23059), with no line terminators
Hash 4c27e1d09d86a2d1820d928f208dc098
b45f089444af77214c35b77bba2ec3bb06ed2c31
859197d438f80d6aa2121480d4b54a25648a7019c559ce44808d68abc6042fbe
GET /public/chunk/minified/footer.fffc95f803a170216edf.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
Cookie: gearbox_ad_token=4752e28e-e1562-27391-16fc1-1d49151a017ca; analytics_global_token=4752e28e-e1562-27391-16fc1-1d49151a017ca
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 23 Nov 2022 22:30:57 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Tue, 15 Nov 2022 11:03:35 GMT
x-rgw-object-type: Normal
etag: W/"33cd532130f60bdeffd688686e4c8bdc"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Wed, 23 Nov 2022 23:30:57 GMT
x-xss-protection: 1; mode=block
ar-sid: 2021
ar-atime: 0.000
ar-cache: HIT
ar-request-id: b3f56a15530ee7c63385c102eed55e35
content-encoding: br
X-Firefox-Spdy: h2
native-removal.triboon.net/?hash=696419689,6784648,535529212,72105784,819137023
200 OK 0 B URL HTTP/2 native-removal.triboon.net/?hash=696419689,6784648,535529212,72105784,819137023
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
OPTIONS /?hash=696419689,6784648,535529212,72105784,819137023 HTTP/1.1
Host: native-removal.triboon.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: href
Referer: http://mashhad-film.rozblog.com/
Origin: http://mashhad-film.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 23 Nov 2022 22:30:57 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: http://mashhad-film.rozblog.com
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2024
ar-atime: 0.179
ar-request-id: 9b35aa650b172cecc288d06a5e016c63
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=2022010023022
200 OK 0 B URL HTTP/2 cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=2022010023022
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /js/rozblog.com/native-rozblog.com-23662.js?v=2022010023022 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 22:30:56 GMT
content-type: application/javascript; charset=utf-8
cache-tag: native_rozblog.com,native
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Tue, 01 Nov 2022 15:08:10 GMT
x-rgw-object-type: Normal
etag: W/"3002a2f3567924d4814b78bb369a605b"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=2022010023022
200 OK 0 B URL HTTP/2 cdn.yektanet.com/rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=2022010023022
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=2022010023022 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mashhad-film.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 22:30:56 GMT
content-type: application/javascript; charset=utf-8
cache-tag: ua_D138M2Bm,ua
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Tue, 18 Oct 2022 09:48:05 GMT
x-rgw-object-type: Normal
etag: W/"483e3c65d46da98a641fddb5d5ec97c5"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
ua.yektanet.com/cookie/set
200 OK 0 B URL HTTP/2 ua.yektanet.com/cookie/set
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /cookie/set HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ua.yektanet.com/cookie/iframe/
Cookie: gearbox_ad_token=4752e28e-e1562-27391-16fc1-1d49151a017ca; analytics_global_token=4752e28e-e1562-27391-16fc1-1d49151a017ca
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 23 Nov 2022 22:30:57 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-credentials: true
set-cookie: gearbox_ad_token=4752e28e-e1562-27391-16fc1-1d49151a017ca; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 20-Nov-32 22:30:57 GMT
analytics_global_token=4752e28e-e1562-27391-16fc1-1d49151a017ca; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 20-Nov-32 22:30:57 GMT
last-modified: Wednesday, 23-Nov-2022 22:30:57 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2021
ar-atime: 0.234
ar-cache: BYPASS
ar-request-id: 397241f2ee152d21193073aa31468cd0
content-encoding: br
X-Firefox-Spdy: h2
79.127.127.68
23.36.76.226
34.120.237.76
93.184.220.29
91.195.240.12
0.0.0.0