Overview

URLwww.javooneirani.rozblog.com/Cat/51
IP 79.127.127.68 (Iran)
ASN#43754 Asiatech Data Transmission company
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-03 21:24:27 UTC
StatusLoading report..
IDS alerts0
Blocklist alert10
urlquery alerts No alerts detected
Tags None

Domain Summary (28)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
r3.o.lencr.org (12) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 4056 10639 23.36.76.226
static3.thcdn.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 356 154 8.248.183.252
www.ozgameshop.com (1) 188377 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 388 877 172.67.216.154
www.javooneirani.rozblog.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 366 1004 79.127.127.68
ocsp.usertrust.com (1) 899 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 342 1012 172.64.155.188
blog.jeux.video.free.fr (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 359 223 212.27.63.153
ocsp.digicert.com (2) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1594 93.184.220.29
cdn.inthegame.nl (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 391 64864 149.210.170.170
dl4.downloadha.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 724 336 185.141.214.27
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 42566 34.120.237.76
www.rozblog.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 326 1549 79.127.127.68
nfetch.yektanet.com (2) 42439 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 977 2321 87.107.144.247
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2372 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
stwot.motortrend.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 786 533 104.84.152.241
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
3.daxgamer.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 662 1155 50.87.150.176
rozblog.com (2) 202745 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 630 9351 79.127.127.68
img3.downloadha.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 328 54709 185.141.214.27
javooneirani.rozblog.com (14) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 5835 167384 79.127.127.68
www.uplooder.net (6) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2346 55264 144.76.120.25
img4.downloadha.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 361 168 185.141.214.27
rozup.ir (1) 399364 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 391 35397 79.127.127.67
native-removal.triboon.net (2) 44323 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1062 1652 185.143.233.120
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 35.162.52.254
image.jeuxvideo.com (2) 416296 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 868 212138 104.18.19.203
cdn.yektanet.com (2) 33652 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 851 37532 185.166.104.3
native-scripts.yektanet.com (3) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1263 10645 185.143.234.120

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-03 medium www.javooneirani.rozblog.com/Cat/51 Malware
2022-12-03 medium javooneirani.rozblog.com/cat/51 Malware
2022-12-03 medium javooneirani.rozblog.com/code/popup Malware
2022-12-03 medium javooneirani.rozblog.com/temp/default/script.js Malware
2022-12-03 medium javooneirani.rozblog.com/include/captcha/cap9.php Malware
2022-12-03 medium javooneirani.rozblog.com/images/refresh2.svg Malware
2022-12-03 medium javooneirani.rozblog.com/temp/tarahi/fonts/wdtv.woff Malware
2022-12-03 medium javooneirani.rozblog.com/temp/tarahi/fonts/yekanregular.woff Malware
2022-12-03 medium javooneirani.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0 Malware
2022-12-03 medium javooneirani.rozblog.com/Cat/51 Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 79.127.127.68
Date UQ / IDS / BL URL IP
2023-06-04 07:29:24 UTC 0 - 0 - 1 persepolis6taii.rozblog.com/post/93 79.127.127.68
2023-06-03 19:44:43 UTC 0 - 4 - 4 milanchampion.rozblog.com/post/2590 79.127.127.68
2023-06-03 17:50:13 UTC 0 - 0 - 3 www.bartarinha021.rozblog.com/ 79.127.127.68
2023-06-03 08:00:07 UTC 0 - 1 - 3 perspolisah.rozblog.com/post/119/%C3%98%C2%AC (...) 79.127.127.68
2023-06-01 11:05:56 UTC 0 - 0 - 1 tablloravan.rozblog.com/1393/03/03/45 79.127.127.68


Last 5 reports on ASN: Asiatech Data Transmission company
Date UQ / IDS / BL URL IP
2023-06-04 07:29:24 UTC 0 - 0 - 1 persepolis6taii.rozblog.com/post/93 79.127.127.68
2023-06-03 22:26:02 UTC 0 - 2 - 0 neginweb.rzb.ir/cat/139 178.216.251.232
2023-06-03 19:44:43 UTC 0 - 4 - 4 milanchampion.rozblog.com/post/2590 79.127.127.68
2023-06-03 17:50:13 UTC 0 - 0 - 3 www.bartarinha021.rozblog.com/ 79.127.127.68
2023-06-03 15:50:19 UTC 0 - 0 - 1 peter.rzb.ir/ 178.216.251.232


Last 5 reports on domain: rozblog.com
Date UQ / IDS / BL URL IP
2023-06-04 07:29:24 UTC 0 - 0 - 1 persepolis6taii.rozblog.com/post/93 79.127.127.68
2023-06-03 19:44:43 UTC 0 - 4 - 4 milanchampion.rozblog.com/post/2590 79.127.127.68
2023-06-03 17:50:13 UTC 0 - 0 - 3 www.bartarinha021.rozblog.com/ 79.127.127.68
2023-06-03 08:00:07 UTC 0 - 1 - 3 perspolisah.rozblog.com/post/119/%C3%98%C2%AC (...) 79.127.127.68
2023-06-01 11:05:56 UTC 0 - 0 - 1 tablloravan.rozblog.com/1393/03/03/45 79.127.127.68


No other reports with similar screenshot

JavaScript

Executed Scripts (11)

Executed Evals (5)
#1 JavaScript::Eval (size: 3074) - SHA256: 98c2ea69de2b0ea6e68b052239f45dc9f290822601ba7ac54831c347296a8428
function load_ajax(b, c) {
    var a = document.createElement("iframe");
    a.setAttribute("id", "RB_Reg_iframe");
    a.setAttribute("name", "RB_Reg_iframe");
    a.setAttribute("width", "0");
    a.setAttribute("height", "0");
    a.setAttribute("border", "0");
    a.setAttribute("style", "width: 0; height: 0; border: none;");
    b.parentNode.appendChild(a);
    window.frames.RB_Reg_iframe.name = "RB_Reg_iframe";
    iframeId = document.getElementById("RB_Reg_iframe");
    var d = function() {
        iframeId.detachEvent ? iframeId.detachEvent("onload", d) : iframeId.removeEventListener("load", d, !1);
        iframeId.contentDocument ? content = iframeId.contentDocument.body.innerHTML : iframeId.contentWindow ? content = iframeId.contentWindow.document.body.innerHTML : iframeId.document && (content = iframeId.document.body.innerHTML);
        var a = content.split(",");
        document.getElementById("loading_t").style.padding = "0px";
        document.getElementById("loading_t").style.border = "0px";
        document.getElementById("loading_t").style.background = "none";
        "success" == a[0] && (document.getElementById("comment_form").style.display = "none");
        document.getElementById("error_a").style.display = "none";
        document.getElementById("loading_t").innerHTML = "" + a[1] + "</div>";
        setTimeout("iframeId.parentNode.removeChild(iframeId)", 250)
    };
    iframeId.addEventListener && iframeId.addEventListener("load", d, !0);
    iframeId.attachEvent && iframeId.attachEvent("onload", d);
    b.setAttribute("target", "RB_Reg_iframe");
    b.setAttribute("action", c);
    b.setAttribute("method", "post");
    b.setAttribute("enctype", "multipart/form-data");
    b.setAttribute("encoding", "multipart/form-data");
    b.submit();
    var a = window,
        e = document,
        f = e.documentElement,
        g = e.getElementsByTagName("body")[0],
        e = a.innerWidth || f.clientWidth || g.clientWidth,
        a = a.innerHeight || f.clientHeight || g.clientHeight;
    document.getElementById("error_a").style.display = "block";
    document.getElementById("error_a").innerHTML = "<center><img src=/images/load.gif></center>";
    document.getElementById("error_a").style.position = "fixed";
    document.getElementById("error_a").style.background = "#FFF";
    document.getElementById("error_a").style.padding = "10px";
    document.getElementById("error_a").style.zIndex = 1E3;
    document.getElementById("error_a").style.border = "1px solid #999";
    document.getElementById("error_a").style.top = a / 2 + "px";
    document.getElementById("error_a").style.right = e / 2 - 40 + "px"
}

function Show_Smiles() {
    $Smiles = document.getElementById("slimes").style;
    $Smiles.display = "block";
    var b = pos_div("show_smiles");
    $Smiles.left = b[0] - 7 + "px";
    $Smiles.top = b[1] + 25 + "px"
}

function pos_div(b) {
    o = document.getElementById(b);
    for (var c = o.offsetLeft, a = o.offsetTop; o = o.offsetParent;) c += o.offsetLeft;
    for (o = document.getElementById(b); o = o.offsetParent;) a += o.offsetTop;
    return [c, a]
}

function SM(b) {
    document.getElementById("message").value += b
}

function Del_Cooki() {
    document.cookie = "name_c=; expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/";
    document.cookie = "email_c=; expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/";
    document.cookie = "site_c=; expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/";
    document.getElementById("comment_n").value = "";
    document.getElementById("comment_e").value = "";
    document.getElementById("comment_s").value = "";
    alert(text_6)
};
#2 JavaScript::Eval (size: 1603) - SHA256: 32f013e30bcce20d5d76157a69ab970b290870d08c24c5a651ef5a4147f7c64d
function close_rate_m() {
    document.getElementById("resualt_mail").style.display = "none"
}

function Register_Mail(id) {
    var id;
    var ssmail = document.getElementById("smail").value;
    var sec_code_mail = document.getElementById("sec_code_mail").value;
    var xmlhttp;
    if (window.ActiveXObject) {
        xmlhttp = new ActiveXObject("Microsoft.XMLHTTP")
    } else if (window.XMLHttpRequest) {
        xmlhttp = new XMLHttpRequest()
    };
    xmlhttp.onreadystatechange = function() {
        document.getElementById("load_mail").style.display = "block";
        if (xmlhttp.readyState == 4) {
            document.getElementById("load_mail").style.display = "none";
            document.getElementById("resualt_mail").style.display = "block";
            html_ = "<div style=text-align:right;direction:rtl;><img align=absbottom style=cursor:pointer; src=/images/close.gif onclick=close_rate_m()> ";
            if (xmlhttp.responseText == 1) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt1 + "</div>"
            } else if (xmlhttp.responseText == 2) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt2 + "</div>"
            } else if (xmlhttp.responseText == 3) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt3 + " </div>"
            } else if (xmlhttp.responseText == 4) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt4 + "</div>"
            } else if (xmlhttp.responseText == 5) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt5 + "</div>"
            } else if (xmlhttp.responseText == 6) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt6 + "</div>"
            } else {
                document.getElementById("resualt_mail").innerHTML = xmlhttp.responseText
            }
        }
    };
    xmlhttp.open("GET", "?reg_mail=1&rmail=" + ssmail + "&type_mail=" + id + "&sec_code_mail=" + sec_code_mail, true);
    xmlhttp.send()
}
#3 JavaScript::Eval (size: 142) - SHA256: 818d91b37b1e996c8afdfd05018b5780ff2be46b14430eaf5a166463bfe2f0c3
function Display_smiles(id) {
    var e = document.getElementById(id);
    if (e.style.display == "block") e.style.display = "none";
    else e.style.display = "block"
}
#4 JavaScript::Eval (size: 10980) - SHA256: 031ecafe96eb132284d2dcb2f161becd7b6b2aad68de9f08b99ff0174a6aba83
function Fast_Register() {
    username_u = document.getElementById("username_f").value;
    password = document.getElementById("password_f").value;
    repassword = document.getElementById("repassword_f").value;
    email = document.getElementById("email_f").value;
    mobile = document.getElementById("mobile_f").value;
    name = document.getElementById("name_f").value;
    capt = document.getElementById("capt_f").value;
    var a;
    if (window.ActiveXObject) {
        a = new ActiveXObject("Microsoft.XMLHTTP")
    } else if (window.XMLHttpRequest) {
        a = new XMLHttpRequest
    }
    document.getElementById("loading_rate").style.display = "block";
    document.getElementById("loading_rate").innerHTML = "<img src=/images/load.gif>";
    var b = document.getElementById("fast_register").offsetWidth / 2;
    document.getElementById("loading_rate").style.position = "absolute";
    document.getElementById("loading_rate").style.background = "#FFF";
    document.getElementById("loading_rate").style.padding = "10px";
    document.getElementById("loading_rate").style.zIndex = 1e3;
    document.getElementById("loading_rate").style.border = "1px solid #999";
    document.getElementById("loading_rate").style.top = getElementPosition("fast_register").top + 60 + "px";
    document.getElementById("loading_rate").style.left = getElementPosition("fast_register").left + 10 + "px";
    a.onreadystatechange = function() {
        if (a.readyState == 4 && a.status == 200) {
            document.getElementById("loading_rate").style.padding = "0px";
            document.getElementById("loading_rate").style.border = "0px";
            if (window.ActiveXObject) {} else {
                document.getElementById("loading_rate").style.background = "none"
            }
            document.getElementById("loading_rate").innerHTML = a.responseText
        }
    };
    a.open("GET", "/Register_Ajax?f_register=1&757365726E616D65=" + username_u + "&70617373776F7264=" + password + "&726570617373776F7264=" + repassword + "&email=" + email + "&mobile=" + mobile + "&name=" + encodeURIComponent(name) + "&capt=" + capt, true);
    a.send()
}

function close_rate() {
    document.getElementById("loading_rate").style.display = "none"
}

function getElementPosition(a) {
    var b = document.getElementById(a);
    var c = 0;
    var d = 0;
    while (b) {
        c += b.offsetLeft;
        d += b.offsetTop;
        b = b.offsetParent
    }
    if (navigator.userAgent.indexOf("Mac") != -1 && typeof document.body.leftMargin != "undefined") {
        c += document.body.leftMargin;
        d += document.body.topMargin
    }
    return {
        left: c,
        top: d
    }
}

function Link_Auto() {
    var a;
    window.ActiveXObject ? a = new ActiveXObject("Microsoft.XMLHTTP") : window.XMLHttpRequest && (a = new XMLHttpRequest);
    var c = document.getElementById("linktitle").value,
        d = document.getElementById("linkurl").value,
        e = document.getElementById("capt_link").value,
        b = document.getElementById("loading_rate").style;
    b.display = "block";
    document.getElementById("loading_rate").innerHTML = "<img src=/images/load.gif>";
    var f = document.getElementById("rate_link").offsetWidth / 2;
    b.position = "absolute";
    b.background = "#FFF";
    b.padding = "5px";
    b.zIndex = 1E3;
    b.border = "1px solid #999";
    b.top = getElementPosition("rate_link").top + "px";
    b.left = getElementPosition("rate_link").left + f + "px";
    a.onreadystatechange = function() {
        4 == a.readyState && 200 == a.status && (html_ = "<div style=text-align:right;direction:rtl><img align=absbottom style=cursor:pointer; src=/images/close.gif onclick=close_rate()> ", document.getElementById("loading_rate").innerHTML = html_ + a.responseText + "</div>")
    };
    a.open("GET", "?Send_Link=1&ajax_link=1&linktitle=" + c + "&linkurl=" + d + "&capt_link=" + e, !0);
    a.send();
    return !1
};

function Login_Ajax() {
    rbuser_hh = document.getElementById("rbuser_hh").value;
    password = document.getElementById("password_hh").value;
    sec_code_5 = document.getElementById("sec_code_5").value;
    login = document.getElementById("login").value;
    var a;
    window.ActiveXObject ? a = new ActiveXObject("Microsoft.XMLHTTP") : window.XMLHttpRequest && (a = new XMLHttpRequest);
    load_rate = document.getElementById("loading_rate");
    load_rate.style.display = "block";
    load_rate.innerHTML = "<img src=/images/load.gif>";
    document.getElementById("login_ajax");
    load_rate.style.position = "absolute";
    load_rate.style.background = "#FFF";
    load_rate.style.padding = "5px";
    load_rate.style.zIndex = 1E3;
    load_rate.style.border = "1px solid #999";
    load_rate.style.top = getElementPosition("login_ajax").top + 10 + "px";
    load_rate.style.left = getElementPosition("login_ajax").left + 20 + "px";
    a.onreadystatechange = function() {
        if (4 == a.readyState && 200 == a.status) {
            if (a.responseText.indexOf("<ok>") > 0) {
                load_rate.style.padding = "0px";
                load_rate.style.border = "0px";
                document.getElementById("loading_rate").innerHTML = a.responseText;
                window.location.reload(), !0
            } else {
                load_rate.style.padding = "0px";
                load_rate.style.border = "0px";
                document.getElementById("loading_rate").innerHTML = a.responseText;
                return !1
            }
        }
    };
    a.open("GET", "/login_ajax?login_ajax=1&username=" + rbuser_hh + "&password=" + password + "&do=1" + "&sec_code_5=" + sec_code_5 + "&login=" + login, !0);
    a.send();
    return !1
};

function close_rate() {
    document.getElementById("loading_rate").style.display = "none"
}

function getElementPosition(a) {
    var b = document.getElementById(a);
    var c = 0;
    var d = 0;
    while (b) {
        c += b.offsetLeft;
        d += b.offsetTop;
        b = b.offsetParent
    }
    if (navigator.userAgent.indexOf("Mac") != -1 && typeof document.body.leftMargin != "undefined") {
        c += document.body.leftMargin;
        d += document.body.topMargin
    }
    return {
        left: c,
        top: d
    }
}

function RB_Register(a) {
    var b = document.createElement("iframe");
    b.setAttribute("id", "RB_Reg_iframe");
    b.setAttribute("name", "RB_Reg_iframe");
    b.setAttribute("width", "0");
    b.setAttribute("height", "0");
    b.setAttribute("border", "0");
    b.setAttribute("style", "width: 0; height: 0; border: none;");
    a.parentNode.appendChild(b);
    window.frames.RB_Reg_iframe.name = "RB_Reg_iframe";
    iframeId = document.getElementById("RB_Reg_iframe");
    var c = function() {
        iframeId.detachEvent ? iframeId.detachEvent("onload", c) : iframeId.removeEventListener("load", c, !1);
        iframeId.contentDocument ? content = iframeId.contentDocument.body.innerHTML : iframeId.contentWindow ? content = iframeId.contentWindow.document.body.innerHTML : iframeId.document && (content = iframeId.document.body.innerHTML);
        var a = content;
        document.getElementById("loading_rate").style.padding = "0px";
        document.getElementById("loading_rate").style.border = "0px";
        window.ActiveXObject || (document.getElementById("loading_rate").style.background = "none");
        document.getElementById("loading_rate").style.display = "none";
        document.getElementById("Error_Register").innerHTML = a;
        setTimeout("iframeId.parentNode.removeChild(iframeId)", 250)
    };
    iframeId.addEventListener && iframeId.addEventListener("load", c, !0);
    iframeId.attachEvent && iframeId.attachEvent("onload", c);
    a.setAttribute("target", "RB_Reg_iframe");
    a.setAttribute("action", "/register_ajax?f_register=1");
    a.setAttribute("method", "post");
    a.setAttribute("enctype", "multipart/form-data");
    a.setAttribute("encoding", "multipart/form-data");
    a.submit();
    document.getElementById("loading_rate").style.display = "block";
    document.getElementById("loading_rate").innerHTML = "<img src=/images/load.gif>";
    a = document.getElementById("Reg_weblog").offsetWidth / 2;
    document.getElementById("loading_rate").style.position = "absolute";
    document.getElementById("loading_rate").style.background = "#FFF";
    document.getElementById("loading_rate").style.padding = "10px";
    document.getElementById("loading_rate").style.zIndex = 1E3;
    document.getElementById("loading_rate").style.border = "1px solid #999";
    document.getElementById("loading_rate").style.top = getElementPosition("Reg_weblog").top + 60 + "px";
    document.getElementById("loading_rate").style.left = getElementPosition("Reg_weblog").left + a - 40 + "px"
};

function Comment_Ajax() {
    comment_n = document.getElementById("comment_n").value;
    comment_e = document.getElementById("comment_e").value;
    comment_s = document.getElementById("comment_s").value;
    comment_m = document.getElementById("message").value;
    comment_cp = document.getElementById("comment_cp");
    comment_cap = document.getElementById("comment_cap").value;
    p_b = document.getElementById("p_b").value;
    if (comment_cp.checked == true) {
        comment_cp = "on"
    } else {
        comment_cp = ""
    }
    var a;
    if (window.ActiveXObject) {
        a = new ActiveXObject("Microsoft.XMLHTTP")
    } else if (window.XMLHttpRequest) {
        a = new XMLHttpRequest
    }
    document.getElementById("comment_error").style.display = "block";
    document.getElementById("comment_error").innerHTML = "<center><img src=/images/load.gif></center><br />";
    a.onreadystatechange = function() {
        if (a.readyState == 4 && a.status == 200) {
            if (window.ActiveXObject) {} else {
                document.getElementById("loading_rate").style.background = "none"
            }
            document.getElementById("comment_error").innerHTML = a.responseText
        }
    };
    a.open("GET", "/comment_ajax?do_comment=1&name=" + encodeURIComponent(comment_n) + "&email=" + comment_e + "&site=" + comment_s + "&message=" + encodeURIComponent(comment_m) + "&cp=" + comment_cp + "&captcha=" + comment_cap + "&p_b=" + p_b, true);
    a.send();
    return false
}

function close_rate() {
    document.getElementById("loading_rate").style.display = "none"
}

function getElementPosition(a) {
    var b = document.getElementById(a);
    var c = 0;
    var d = 0;
    while (b) {
        c += b.offsetLeft;
        d += b.offsetTop;
        b = b.offsetParent
    }
    if (navigator.userAgent.indexOf("Mac") != -1 && typeof document.body.leftMargin != "undefined") {
        c += document.body.leftMargin;
        d += document.body.topMargin
    }
    return {
        left: c,
        top: d
    }
}

function RB_Contact(a) {
    var b = document.createElement("iframe");
    b.setAttribute("id", "RB_Reg_iframe");
    b.setAttribute("name", "RB_Reg_iframe");
    b.setAttribute("width", "0");
    b.setAttribute("height", "0");
    b.setAttribute("border", "0");
    b.setAttribute("style", "width: 0; height: 0; border: none;");
    a.parentNode.appendChild(b);
    window.frames.RB_Reg_iframe.name = "RB_Reg_iframe";
    iframeId = document.getElementById("RB_Reg_iframe");
    var c = function() {
        iframeId.detachEvent ? iframeId.detachEvent("onload", c) : iframeId.removeEventListener("load", c, !1);
        iframeId.contentDocument ? content = iframeId.contentDocument.body.innerHTML : iframeId.contentWindow ? content = iframeId.contentWindow.document.body.innerHTML : iframeId.document && (content = iframeId.document.body.innerHTML);
        var a = content;
        document.getElementById("loading_rate").style.padding = "0px";
        document.getElementById("loading_rate").style.border = "0px";
        window.ActiveXObject || (document.getElementById("loading_rate").style.background = "none");
        document.getElementById("loading_rate").style.display = "none";
        document.getElementById("error_contact").innerHTML = a;
        setTimeout("iframeId.parentNode.removeChild(iframeId)", 250)
    };
    iframeId.addEventListener && iframeId.addEventListener("load", c, !0);
    iframeId.attachEvent && iframeId.attachEvent("onload", c);
    a.setAttribute("target", "RB_Reg_iframe");
    a.setAttribute("action", "/?ajax_contact=1");
    a.setAttribute("method", "post");
    a.setAttribute("enctype", "multipart/form-data");
    a.setAttribute("encoding", "multipart/form-data");
    a.submit();
    document.getElementById("loading_rate").style.display = "block";
    document.getElementById("loading_rate").innerHTML = "<img src=/images/load.gif>";
    a = document.getElementById("Contact_Site").offsetWidth / 2;
    document.getElementById("loading_rate").style.position = "absolute";
    document.getElementById("loading_rate").style.background = "#FFF";
    document.getElementById("loading_rate").style.padding = "10px";
    document.getElementById("loading_rate").style.zIndex = 1E3;
    document.getElementById("loading_rate").style.border = "1px solid #999";
    document.getElementById("loading_rate").style.top = getElementPosition("Contact_Site").top + 60 + "px";
    document.getElementById("loading_rate").style.left = getElementPosition("Contact_Site").left + a - 40 + "px"
};
#5 JavaScript::Eval (size: 1075) - SHA256: 40c9e9a1616f3e08ffcf70b1397aee92d79f93c497c564d1dec8a6ad3c2cf08f
function getElementPosition(a) {
    a = document.getElementById(a);
    for (var b = 0, c = 0; a;) b += a.offsetLeft, c += a.offsetTop, a = a.offsetParent; - 1 != navigator.userAgent.indexOf("Mac") && "undefined" != typeof document.body.leftMargin && (b += document.body.leftMargin, c += document.body.topMargin);
    return {
        left: b,
        top: c
    }
}

function Forum_Page(a) {
    var b = document.getElementById("forum_post_block").offsetWidth / 2,
        c = document.getElementById("forum_post_block").offsetHeight / 2;
    document.getElementById("loading").style.position = "absolute";
    document.getElementById("loading").style.top = getElementPosition("forum_post_block").top + c - 40;
    document.getElementById("loading").style.left = getElementPosition("forum_post_block").left + b - 40;
    document.getElementById("loading").style.display = "block";
    var d;
    d = window.XMLHttpRequest ? new XMLHttpRequest : new ActiveXObject("Microsoft.XMLHTTP");
    d.onreadystatechange = function() {
        4 == d.readyState && 200 == d.status && (document.getElementById("loading").style.display = "none", document.getElementById("forum_post_block").innerHTML = d.responseText)
    };
    d.open("GET", "/Fm_Page/" + a, !0);
    d.send();
    return !1
};

Executed Writes (0)


HTTP Transactions (74)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14977
Expires: Sun, 04 Dec 2022 01:33:53 GMT
Date: Sat, 03 Dec 2022 21:24:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3738
Cache-Control: max-age=137354
Date: Sat, 03 Dec 2022 21:24:16 GMT
Etag: "638b2570-1d7"
Expires: Mon, 05 Dec 2022 11:33:30 GMT
Last-Modified: Sat, 03 Dec 2022 10:31:12 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3094
Expires: Sat, 03 Dec 2022 22:15:50 GMT
Date: Sat, 03 Dec 2022 21:24:16 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 21:18:17 GMT
cache-control: public,max-age=3600
age: 359
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: 1mOrevUCHzwHbII6jVWZxvUiDSslq/JfKiewNFrrapOGtogvqPmD73UGDlRwxKGIcryEL7vYOrM=
x-amz-request-id: FENH9G9BE0XGHGCN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 20:46:42 GMT
age: 2254
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sat, 03 Dec 2022 21:24:16 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /Cat/51 HTTP/1.1 
Host: www.javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             79.127.127.68
HTTP/1.1 301 Moved Permanently
content-type: text/html
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-length: 707
date: Sat, 03 Dec 2022 21:24:16 GMT
server: LiteSpeed
location: http://javooneirani.rozblog.com/Cat/51
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   707
Md5:    1304294c0823ca486542ba408ed761e3
Sha1:   b2a70fb2d810ca13985882e6981f33998823e83e
Sha256: 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982

Blocklists:
  - fortinet: Malware
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 21:08:58 GMT
cache-control: public,max-age=3600
age: 918
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3725
Cache-Control: max-age=132279
Date: Sat, 03 Dec 2022 21:24:17 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 10:08:56 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lngJjvn6KvsoVsn97cMaQw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             35.162.52.254
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: buPn4Uol98NO3LCRha1jUJB+Jgk=

                                        
                                            GET /cat/51 HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498
Upgrade-Insecure-Requests: 1

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-language: fa
vary: Accept-Encoding,User-Agent
transfer-encoding: chunked
content-encoding: gzip
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1548), with CRLF, LF line terminators
Size:   23516
Md5:    e42bce71c347bfa6fe72822d12d0be91
Sha1:   384ac8ec13229803b5e29f56ccadca35706a9882
Sha256: cdd6f791b94681b7184e899fdc324976487d2456db550e50b2748a35f071434c

Blocklists:
  - fortinet: Malware
                                        
                                            GET /temp/site.css?22 HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/cat/51
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: text/css
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Mon, 02 Jan 2023 21:24:17 GMT
last-modified: Wed, 02 Mar 2022 08:28:27 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 3945
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  ASCII text, with very long lines (860)
Size:   3945
Md5:    787a6674aa05de4919a7c90cdbb150c9
Sha1:   2159cc3ec669621f05f361bd91b956e573faef9a
Sha256: e234a5881c33e5ff75519381140d07f15611e92efbb0bb45ecf73437048d376c
                                        
                                            GET /code/popup HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/cat/51
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: text/html; charset=charset
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-language: fa
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Sat, 03 Dec 2022 21:24:17 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: pop_id=11122%2C; expires=Sun, 04-Dec-2022 09:24:17 GMT; Max-Age=43200; path=/ c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; expires=Sun, 04-Dec-2022 21:24:17 GMT; Max-Age=86400; path=/ c_t=67061638bbe81aef65979826319477720327; expires=Sun, 04-Dec-2022 21:24:17 GMT; Max-Age=86400; path=/
vary: Accept-Encoding,User-Agent
content-length: 1184
content-encoding: gzip
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  ASCII text
Size:   1184
Md5:    952dba4cf1ae8073b30f56b2cf64e268
Sha1:   b40f08c6879732a1c9c0f1e7bb39a186bb5482a0
Sha256: 740410e13c5c7adc85bf773be8a1671fc740fe2a8640abefa26a05725727479c

Blocklists:
  - fortinet: Malware
                                        
                                            GET /temp/tarahi/styles.css HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/cat/51
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: text/css
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Mon, 02 Jan 2023 21:24:17 GMT
last-modified: Tue, 15 Feb 2022 00:08:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6091
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text
Size:   6091
Md5:    28cf21c53411f845b0888677cbc74828
Sha1:   25bf3bc9920ad37a3f81d88e46001cab51eea3f6
Sha256: d18ec6839084bfa3a36008f9f5f03cf0de9c8c656677aac9a5a62c2b6890f5ab
                                        
                                            GET /js/site.js?7 HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/cat/51
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: application/javascript
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 10 Dec 2022 21:24:17 GMT
last-modified: Sat, 14 May 2022 01:34:44 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 9422
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (5730)
Size:   9422
Md5:    3a9e608b97ff4d23f8a1649f24b6ed66
Sha1:   794e50a615ef78e2f2bd7616c7d9e033fc4bbe9d
Sha256: 82faf31dfa45299d23061f2c05579901ca592090ce35f1dc48a6ff61f24ac28a
                                        
                                            GET /temp/default/script.js HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/cat/51
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: application/javascript
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 10 Dec 2022 21:24:17 GMT
last-modified: Wed, 18 Jul 2018 10:51:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 302
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  ASCII text
Size:   302
Md5:    f63434fb5b29fa6044b1a1e30e6c1162
Sha1:   2e7ada06c79c670f0dff3bd7d0474d07c49104e0
Sha256: a9396929db33b5a927292dc2e2f33891c594811b1b37dd993abbc9db9afbb7cb

Blocklists:
  - fortinet: Malware
                                        
                                            GET /images/no_image.png HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/cat/51
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: image/png
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 03 Dec 2023 21:24:17 GMT
last-modified: Sat, 12 Jan 2013 13:14:07 GMT
accept-ranges: bytes
content-length: 6278
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   6278
Md5:    5c675d607343c154f0ef074dc145988a
Sha1:   2f3713c21ed04a225f16439b200e2b2a6062454e
Sha256: 2e8f7285f7325ed8db6a0d253158db2c8962125173a1e6973e8fcb39a325a7ba
                                        
                                            GET /weblog/file/loading/88.gif HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/cat/51
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: image/gif
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 03 Dec 2023 21:24:17 GMT
last-modified: Thu, 02 Feb 2012 21:52:24 GMT
accept-ranges: bytes
content-length: 5972
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  GIF image data, version 89a, 50 x 50\012- data
Size:   5972
Md5:    093445ee241c72e6dca01dc570c230dc
Sha1:   32adb71ec06b5d29ec62c5511328d5970228b86d
Sha256: d40495f2a0e830c47fe4cd50574c68e206292f63545a0684516db0cd8716ee0e
                                        
                                            GET /temp/pro/ads_468.jpg HTTP/1.1 
Host: rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: image/jpeg
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 03 Dec 2023 21:24:17 GMT
last-modified: Fri, 20 Feb 2015 09:52:01 GMT
accept-ranges: bytes
content-length: 6286
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 468x60, components 3\012- data
Size:   6286
Md5:    db8cac5e50e0f1be65a3ec0756ea6612
Sha1:   3053609e1039ab6d0d0be6adefeaf7ba7a243cf6
Sha256: 8f10f1e719bda34ecfc3af6b50f8273e9c9676d10612eff12aad2382d458ef1d
                                        
                                            GET /include/captcha/cap9.php HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/cat/51
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: image/png
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-length: 2365
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced\012- data
Size:   2365
Md5:    22b8c634e8fbd18efef3d66010c11e32
Sha1:   dbe1ee9f1da893467cb0770fec541ad96c42f42a
Sha256: fae0f9263b476d04ac599dab78c85cc6081a417a2059f6dfb31c872100daeecb

Blocklists:
  - fortinet: Malware
                                        
                                            GET /images/refresh2.svg HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/cat/51
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: image/svg+xml
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 10 Dec 2022 21:24:17 GMT
last-modified: Wed, 28 Apr 2021 22:57:34 GMT
etag: "114-6089e85e-9f2e18d89b796b95;;;"
accept-ranges: bytes
content-length: 276
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size:   276
Md5:    7082e86e2a3c9646fa1aa922b8e3a2d6
Sha1:   7f704127e872b5b94b8e2dd7959e2d5c9b9379a8
Sha256: d1254b0bb9112500f8f39e1130f0a6c8dca1037d416e7f7d6524894b31b06b00

Blocklists:
  - fortinet: Malware
                                        
                                            GET /img/image/e11b7c7ac6edb83066991e2cd4edb293/Tomb-Raider.jpg HTTP/1.1 
Host: www.uplooder.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             144.76.120.25
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx/1.21.4
Date: Sat, 03 Dec 2022 21:24:17 GMT
Content-Length: 169
Connection: keep-alive
Location: https://www.uplooder.net/img/image/e11b7c7ac6edb83066991e2cd4edb293/Tomb-Raider.jpg


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   169
Md5:    c5d032bb218722c5d2420a7b8cf679e2
Sha1:   bac41d77b6ee9bad9b4c1bc35c59c1f8c4447510
Sha256: e747b55d811ed8e20cf82a6e8084b4affbb475bb279a7bcbbcc36e4fb431477a
                                        
                                            GET /img/image/de0f4a3f35d34ef53d843efc426437f5/Gears-of-War-Judgment.jpg HTTP/1.1 
Host: www.uplooder.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             144.76.120.25
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx/1.21.4
Date: Sat, 03 Dec 2022 21:24:17 GMT
Content-Length: 169
Connection: keep-alive
Location: https://www.uplooder.net/img/image/de0f4a3f35d34ef53d843efc426437f5/Gears-of-War-Judgment.jpg


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   169
Md5:    c5d032bb218722c5d2420a7b8cf679e2
Sha1:   bac41d77b6ee9bad9b4c1bc35c59c1f8c4447510
Sha256: e747b55d811ed8e20cf82a6e8084b4affbb475bb279a7bcbbcc36e4fb431477a
                                        
                                            GET /wp-content/uploads/2013/01/The-Walking-Dead-Survival-Instinct-Box-art-Xbox-360-595x840.jpg HTTP/1.1 
Host: cdn.inthegame.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             149.210.170.170
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Date: Sat, 03 Dec 2022 21:24:17 GMT
Server: Apache
Transfer-Encoding: chunked
X-TransIP-Backend: web864
X-TransIP-Balancer: balancer2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (929)
Size:   64668
Md5:    44b405d49b383fcf8e3a21d6f3816f29
Sha1:   9f0a8b51945c04a29a8f46a09f8ea1c21fd6d83f
Sha256: 02aa0e9f00e4c2a6159061cc994a10c330869514cb7b77ae1a32069649d9c8bc
                                        
                                            GET /images/jaquettes/00023288/jaquette-bioshock-infinite-xbox-360-cover-avant-g-1354632788.jpg HTTP/1.1 
Host: image.jeuxvideo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             104.18.19.203
HTTP/1.1 301 Moved Permanently
                                            
Date: Sat, 03 Dec 2022 21:24:17 GMT
Content-Length: 0
Connection: keep-alive
location: https://image.jeuxvideo.com/images/jaquettes/00023288/jaquette-bioshock-infinite-xbox-360-cover-avant-g-1354632788.jpg
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=oxBU_WH5AAwCOE.KxtjOFM4MY9ZOKL6KTustqF7W9.Q-1670102657-0-AfkojRfffqqkGsrVqfRFXtiTpi5OnFyp+fY0+KaoFJCPULj7ympUcfJARA8Lleen7YZePFfWtl8nq+PXGvpPSDXmyzTDmsEdXpRz/Rmz2UGi; path=/; expires=Sat, 03-Dec-22 21:54:17 GMT; domain=.jeuxvideo.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 773f5e4b2fc3b4ee-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            GET /mohsen/Game/XBOX360/Dead%20Island%20Riptide/Dead-Island-Riptide-cover.jpg HTTP/1.1 
Host: dl4.downloadha.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             185.141.214.27
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Server: nginx
Date: Sat, 03 Dec 2022 21:24:16 GMT
Content-Length: 4
Connection: keep-alive
ETag: "55bcd8e3-4"


--- Additional Info ---
Magic:  ASCII text
Size:   4
Md5:    c87363ba121297b063e83344e122b6d3
Sha1:   b2201302e129a4396a323cb56283cddeef11bbe8
Sha256: f8bf41177a5f5e808a7ccb648b51080b031f15ca8018d91a576263d6cc626eb6
                                        
                                            GET /mohsen/Game/XBOX360/FUSE/FUSE-cover-small.jpg HTTP/1.1 
Host: dl4.downloadha.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             185.141.214.27
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Server: nginx
Date: Sat, 03 Dec 2022 21:24:16 GMT
Content-Length: 4
Connection: keep-alive
ETag: "55bcd8e3-4"


--- Additional Info ---
Magic:  ASCII text
Size:   4
Md5:    c87363ba121297b063e83344e122b6d3
Sha1:   b2201302e129a4396a323cb56283cddeef11bbe8
Sha256: f8bf41177a5f5e808a7ccb648b51080b031f15ca8018d91a576263d6cc626eb6
                                        
                                            GET /mohsen/Game/XBOX360/Star%20Trek/Star-Trek-cover-small.jpg HTTP/1.1 
Host: img4.downloadha.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             185.141.214.27
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Server: nginx
Date: Sat, 03 Dec 2022 21:24:16 GMT
Content-Length: 4
Connection: keep-alive
ETag: "55bcd8e3-4"


--- Additional Info ---
Magic:  ASCII text
Size:   4
Md5:    c87363ba121297b063e83344e122b6d3
Sha1:   b2201302e129a4396a323cb56283cddeef11bbe8
Sha256: f8bf41177a5f5e808a7ccb648b51080b031f15ca8018d91a576263d6cc626eb6
                                        
                                            GET /files/2013/02/Grid-2-Xbox-360-Cover-770x1024.jpg HTTP/1.1 
Host: stwot.motortrend.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             104.84.152.241
HTTP/1.1 301 Moved Permanently
                                            
Server: AkamaiGHost
Content-Length: 0
Location: https://stwot.motortrend.com/files/2013/02/Grid-2-Xbox-360-Cover-770x1024.jpg
Cache-Control: max-age=0
Expires: Sat, 03 Dec 2022 21:24:17 GMT
Date: Sat, 03 Dec 2022 21:24:17 GMT
Connection: keep-alive

                                        
                                            GET /temp/rang/like.png HTTP/1.1 
Host: rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: image/png
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 03 Dec 2023 21:24:17 GMT
last-modified: Sat, 14 Feb 2015 11:52:19 GMT
accept-ranges: bytes
content-length: 2272
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  PNG image data, 22 x 42, 8-bit/color RGBA, non-interlaced\012- data
Size:   2272
Md5:    dd370ffbcd679da0d5c8547f34c6e2fb
Sha1:   6df3b9ec0e82b1a6ef41bc83041d2b2e16200077
Sha256: 2f14531974b17d9fd89de532694faf69ed7aa61b04ea990108b138d772ba96f7
                                        
                                            GET /temp/tarahi/fonts/wdtv.woff HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498; pop_id=11122%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=67061638bbe81aef65979826319477720327

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: font/woff
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Mon, 05 Dec 2022 21:24:17 GMT
last-modified: Thu, 26 Feb 2015 19:00:22 GMT
etag: "3938-54ef6d46-daf654b8921ad10f;;;"
accept-ranges: bytes
content-length: 14648
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 14648, version 1.0\012- data
Size:   14648
Md5:    259c4490256daceb6a5f275cee137627
Sha1:   5c0eae14870f1ec6527aa64f3f675cb9063034ee
Sha256: bd4bdb99aa4a1cf56a05d7a913dce42b23b4cb021148b0a0f22d836105d98fc5

Blocklists:
  - fortinet: Malware
                                        
                                            GET /js/rozblog.com/native-rozblog.com-23662.js?v=202201103021 HTTP/1.1 
Host: cdn.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.166.104.3
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Sat, 03 Dec 2022 21:24:17 GMT
cache-tag: native_rozblog.com,native
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Wed, 30 Nov 2022 12:19:39 GMT
x-rgw-object-type: Normal
etag: W/"1d1c4277fd7a4a4dcb0a0002681edd5f"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65454), with no line terminators
Size:   22376
Md5:    49a347be083d655aa69e39cd30b5c61f
Sha1:   7c6224024493833a1812cabab962acc1cdb80661
Sha256: 48b50e11366e2c28d8e91c70e85e7b4d5c466c1fe56469ed443a59e042247d4b
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A5BD0B60743CC4C78C43088B408E3EC52D06E5DF321048BBC41A7FEDF297BF17"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15200
Expires: Sun, 04 Dec 2022 01:37:38 GMT
Date: Sat, 03 Dec 2022 21:24:18 GMT
Connection: keep-alive

                                        
                                            GET /temp/tarahi/fonts/yekanregular.woff HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498; pop_id=11122%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=67061638bbe81aef65979826319477720327

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: font/woff
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Mon, 05 Dec 2022 21:24:17 GMT
last-modified: Thu, 26 Feb 2015 19:00:25 GMT
etag: "53fc-54ef6d49-80b982f1d7ce7ee2;;;"
accept-ranges: bytes
content-length: 21500
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 21500, version 2.0\012- data
Size:   21500
Md5:    05727d32400b2008acbf7fc49251ede0
Sha1:   b6c1a82539a2531eb1aad7d1cf05554d5a999154
Sha256: da78e001fab6f5d7b1c68e17d00fb1595c9b10085d6769a86aeb6a39dc7e43d6

Blocklists:
  - fortinet: Malware
                                        
                                            GET /productimg/0/600/600/48/10623748-1361539214-392194.jpg HTTP/1.1 
Host: static3.thcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             8.248.183.252
HTTP/1.1 404 Not Found
Content-Type: text/plain
                                            
Date: Sat, 03 Dec 2022 21:24:18 GMT
Content-Length: 0
Connection: keep-alive
Server: FP6.1.3311.145

                                        
                                            GET /rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202201103021 HTTP/1.1 
Host: cdn.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.166.104.3
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Sat, 03 Dec 2022 21:24:18 GMT
cache-tag: ua_D138M2Bm,ua
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Tue, 18 Oct 2022 09:48:05 GMT
x-rgw-object-type: Normal
etag: W/"483e3c65d46da98a641fddb5d5ec97c5"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (37795)
Size:   12851
Md5:    52ebe75c3cf3c169ce5e7556d15ff28c
Sha1:   570c20ee555ec4e7a152213ca2d0cd29d95c80bd
Sha256: 26bbd77cf73d8aa53fb39bc10ca6ed6e1ef8432fde2758b301a86fd60672f8e0
                                        
                                            GET /images/jaquettes/00023288/jaquette-bioshock-infinite-xbox-360-cover-avant-g-1354632788.jpg HTTP/1.1 
Host: image.jeuxvideo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://javooneirani.rozblog.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.18.19.203
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sat, 03 Dec 2022 21:24:18 GMT
content-length: 210810
etag: "50be0e54-3377a"
expires: Mon, 05 Dec 2022 10:55:09 GMT
accept-ranges: bytes
cache-control: max-age=604800, s-maxage=10
vary: Origin
x-jv-lb-name: lb6
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=6d2DZx59flf102YrbGxQwGzDJsL65K8qJfoL7X5PppA-1670102658-0-Acww0mdgvXZ1sO8G+Y/Zqm2FSN8On3PBE5YAGGVxFfVXOAw9Yvis1LNy7CCeijZZPfP93I+/pSWE3fHJdFGDCKSc45q0NUywucnWhnUkZ5be; path=/; expires=Sat, 03-Dec-22 21:54:18 GMT; domain=.jeuxvideo.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 773f5e4cec260af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1280x1809, components 3\012- data
Size:   210810
Md5:    379a54d73cb60f825251b3a2736fbb59
Sha1:   6895c10f02f5d7b1100dbbecd184625f922d5def
Sha256: d36484022d9ff858264b02aa370c55c9599324ccc64231b389ebf7c70fcb0cd8
                                        
                                            GET /product_images/pc_and_video_games/games/xbox_360/ninja_gaiden_3_razors_edge_2_raw.jpg HTTP/1.1 
Host: www.ozgameshop.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             172.67.216.154
HTTP/1.1 404 Not Found
Content-Type: text/plain;charset=UTF-8
                                            
Date: Sat, 03 Dec 2022 21:24:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=300
x-request-id: 89d830306137cd98de907ac022dc2a8a
content-encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f%2BcVNJUlH90DdNznPekHfS1GEY8UVEvGYb%2BxVdWwZSxzwCig%2B6ZQ%2BeOxSd1a%2Fp87uoYuBbqbljBfMOHeO4Iir0rbzIFjeTAK0r8lkuJMHQFEGab4Lw0mH0HcMyhyK9ge%2BLcY3w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 773f5e4b2e6d0b59-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   42
Md5:    7dd36cd51006e4baff11028c3f0257d9
Sha1:   e65442361928fc0f9fea705ccaaf629926ade07b
Sha256: f67a8acd9683c5d976ab4ef7b32b730d017e2b3e13ee36959bce9f6677843ca0
                                        
                                            GET /temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498; pop_id=11122%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=67061638bbe81aef65979826319477720327

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: font/woff
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Mon, 05 Dec 2022 21:24:17 GMT
last-modified: Thu, 26 Feb 2015 19:00:20 GMT
etag: "ffac-54ef6d44-11fea27943efc11b;;;"
accept-ranges: bytes
content-length: 65452
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Size:   65452
Md5:    d95d6f5d5ab7cfefd09651800b69bd54
Sha1:   7d65e0227d0d7cdc1718119cd2a7dce0638f151c
Sha256: 199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F94AC006982D31C1456DAA13D57B25717E06F8E0B69DE30728AE24A6AE73364C"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17167
Expires: Sun, 04 Dec 2022 02:10:25 GMT
Date: Sat, 03 Dec 2022 21:24:18 GMT
Connection: keep-alive

                                        
                                            GET /Hosein/Pic/MGR-cover.jpg HTTP/1.1 
Host: img3.downloadha.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             185.141.214.27
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx
Date: Sat, 03 Dec 2022 21:24:16 GMT
Content-Length: 54476
Last-Modified: Sun, 14 Jul 2013 06:29:51 GMT
Connection: keep-alive
ETag: "51e2455f-d4cc"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 350x473, components 3\012- data
Size:   54476
Md5:    5075878c4a6f587920099496bb2fc471
Sha1:   d72c28b354ae3a8c7e2575e82c48aed6219deaaa
Sha256: 0115d5ff25804dad364d1ac91f9173044e0a7590957b1a2f8460c99591216690
                                        
                                            GET /wp-content/uploads/2012/04/Crysis-3-Box-Art-Xbox-360.jpg HTTP/1.1 
Host: 3.daxgamer.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             50.87.150.176
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                            
Date: Sat, 03 Dec 2022 21:24:18 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: /404.html
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked

                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 21:24:18 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 19:50:42 GMT
Expires: Fri, 09 Dec 2022 19:50:41 GMT
Etag: "a7631cfb9de5886dde5c40f01a999d955724b731"
Cache-Control: max-age=541334,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 773f5e4e8811b529-OSL

                                        
                                            GET /img/image/e11b7c7ac6edb83066991e2cd4edb293/Tomb-Raider.jpg HTTP/1.1 
Host: www.uplooder.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://javooneirani.rozblog.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             144.76.120.25
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx/1.21.4
Date: Sat, 03 Dec 2022 21:24:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.uplooder.net/images/uplooder_loss.png


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5510)
Size:   8254
Md5:    cd62a4da201fd7d1687b7ee06c37182b
Sha1:   cf66f04aa34157dcd68edbd34819615660a8fda6
Sha256: 853abb80bda70ef73b2d1ac3dc3b62c417db8e8dc47f8b53f93db37f53cc40cd
                                        
                                            GET /images/uplooder_loss.png HTTP/1.1 
Host: www.uplooder.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://javooneirani.rozblog.com/
Connection: keep-alive

                                        
                                             144.76.120.25
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx/1.21.4
Date: Sat, 03 Dec 2022 21:24:18 GMT
Content-Length: 169
Connection: keep-alive
Location: https://www.uplooder.net/images/uplooder_loss.png


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   169
Md5:    c5d032bb218722c5d2420a7b8cf679e2
Sha1:   bac41d77b6ee9bad9b4c1bc35c59c1f8c4447510
Sha256: e747b55d811ed8e20cf82a6e8084b4affbb475bb279a7bcbbcc36e4fb431477a
                                        
                                            GET /img/image/de0f4a3f35d34ef53d843efc426437f5/Gears-of-War-Judgment.jpg HTTP/1.1 
Host: www.uplooder.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://javooneirani.rozblog.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             144.76.120.25
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx/1.21.4
Date: Sat, 03 Dec 2022 21:24:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.uplooder.net/images/uplooder_loss.png


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5510)
Size:   8254
Md5:    cd62a4da201fd7d1687b7ee06c37182b
Sha1:   cf66f04aa34157dcd68edbd34819615660a8fda6
Sha256: 853abb80bda70ef73b2d1ac3dc3b62c417db8e8dc47f8b53f93db37f53cc40cd
                                        
                                            GET /404.html HTTP/1.1 
Host: 3.daxgamer.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://javooneirani.rozblog.com/
Connection: keep-alive

                                        
                                             50.87.150.176
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Date: Sat, 03 Dec 2022 21:24:18 GMT
Server: Apache
Last-Modified: Fri, 01 May 2020 01:13:54 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 462
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   462
Md5:    3b58a4197a90ce28f053f853e9f5201a
Sha1:   1764aa95ccf139706beb229625b9d6d6f154bd5d
Sha256: e63cc6fceab87ebcfc2e83b5d9354ef92bd45c582ac8202ff6d141f39ec17648
                                        
                                            GET /view/1820908/1.jpg HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Server: nginx/1.14.0
Date: Sat, 03 Dec 2022 21:24:18 GMT
Content-Length: 35084
Last-Modified: Thu, 08 Sep 2016 10:36:57 GMT
Connection: keep-alive
ETag: "57d13f49-890c"
Expires: Sun, 03 Dec 2023 21:24:18 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:09:08 14:31:13], progressive, precision 8, 120x240, components 3\012- data
Size:   35084
Md5:    e8b976a12a471340cde4481f59bbbb19
Sha1:   ceb38256a220573e2a38a21b1134d4b623a2fef0
Sha256: faec5db4bf8605c8cf6d48771909bf62e1891fb5c52408dd8436e951862f48f4
                                        
                                            GET /images/uplooder_loss.png HTTP/1.1 
Host: www.uplooder.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://javooneirani.rozblog.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             144.76.120.25
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx/1.21.4
Date: Sat, 03 Dec 2022 21:24:18 GMT
Content-Length: 36775
Connection: keep-alive
Last-Modified: Mon, 06 Feb 2017 19:52:32 GMT
ETag: "8fa7-547e1f8dd0000"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Size:   36775
Md5:    c81a5c5c1a766fb0e1da835d34abc2fa
Sha1:   f250a15f34edd8d82c53fb5242a98427d3512e9f
Sha256: 0c314ae0f0dbf17a02fd84c1256a29ab936ac1e2be75693e563984d5386797f7
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17517
Expires: Sun, 04 Dec 2022 02:16:15 GMT
Date: Sat, 03 Dec 2022 21:24:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17517
Expires: Sun, 04 Dec 2022 02:16:15 GMT
Date: Sat, 03 Dec 2022 21:24:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16049
Expires: Sun, 04 Dec 2022 01:51:47 GMT
Date: Sat, 03 Dec 2022 21:24:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17517
Expires: Sun, 04 Dec 2022 02:16:15 GMT
Date: Sat, 03 Dec 2022 21:24:18 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 00:57:24 GMT
age: 73614
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6174
Md5:    b986f9fcbeca91ed5c8d58fbfaf47d19
Sha1:   6e6c8bd2bce144cc4da1cd7be375b046b60dca79
Sha256: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XvG2dAUeB914GQ1qJwQRHovAtra8OSjG-CsXeR8UOBq5r8qVjEbPBQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 05:02:08 GMT
age: 58930
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2942
Md5:    b47431190f34eccf0a6efb98e2a32b7d
Sha1:   9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
Sha256: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9715
x-amzn-requestid: c8102cfa-78dc-4d81-ad6a-e16b9132e238
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZO2HQKIAMF8IA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2b-350c586b568e6565763376bd;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0QkVKyYm9UwlF5FEeli9UsRAQwEi3-c3bMR-QSJxIKRQe7WWT76dGQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:51:06 GMT
age: 84792
etag: "d4b3052021ff3ad1dc4134fa25eb12a98e7c17da"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9715
Md5:    45182367fd4f8b6dd234eef1022acdb1
Sha1:   d4b3052021ff3ad1dc4134fa25eb12a98e7c17da
Sha256: a57fadaf74db2fb457cfe761314d56f021d22146f5bdb6a8bf11b6519e8a558d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4309
x-amzn-requestid: c824c317-e6e3-4006-9f9d-ea54e8170a4c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cf2_tGErIAMF8_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63896b97-7fc523296afea4dd4b5d1de8;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 03:05:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bd85z5A6C0nxpDjeSEPp1NHJxXFO5sy1OgTLz7KpdWz61TNrfyQ47Q==
via: 1.1 40b967aa4aa18637c4b91214147f3cb4.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 03:53:20 GMT
age: 63058
etag: "544428cdad754b1bb7be3cd46a79bf078fd5b450"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4309
Md5:    fcb89ca25035b2bbb71ae5dd175fcd40
Sha1:   544428cdad754b1bb7be3cd46a79bf078fd5b450
Sha256: 36dcbbe6cd2710ee502776b4bcf32053e92b750a55e2bd4cdeadbc694c7c2699
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5354
x-amzn-requestid: 3d58ffea-3433-4c5c-a60b-17f6de3a33e5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cSsnvG44oAMFfyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638427ca-63b375f04189b7ce7d84cd5d;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 03:15:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -AurmlKwF0QgfsWBsV3ZN9ZyDhw1Zo82zUqrpkBbvbCfh0j7evV2Tg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 11:01:04 GMT
age: 37394
etag: "65c8b4abf957f9b54d99d0f78559e639adb29efb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5354
Md5:    1e74254b3fdce7d6b84a71a7aff43789
Sha1:   65c8b4abf957f9b54d99d0f78559e639adb29efb
Sha256: f278c3cc6734da7188862a8c651c803e7ac1fda82234e191761453cb1359d3ee
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7732
x-amzn-requestid: 3781c2b7-082a-468a-a186-f7483494e749
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoEq3IAMFnKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-679fe9f905e07abf4e6a812c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: V4Z3TZtTDMjnyxZx7VdJrKtZ-PbZkWnsQ0-1eFDem4TVyRGvk0dc7A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:39:57 GMT
age: 85461
etag: "d45dceb3dc58a07197aa5077582b5b1cd2ff791a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7732
Md5:    379a4a1b95d3aa3c5a4f8e7f9abb030f
Sha1:   d45dceb3dc58a07197aa5077582b5b1cd2ff791a
Sha256: 1b92dec5bf90beffbcd9060052b8788f08645dd4ba34219f7ddb2d40bbd2d151
                                        
                                            GET /files/2013/02/Grid-2-Xbox-360-Cover-770x1024.jpg HTTP/1.1 
Host: stwot.motortrend.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://javooneirani.rozblog.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.84.152.241
HTTP/2 404 Not Found
content-type: text/html; charset=iso-8859-1
                                            
content-length: 14
server: Apache
cache-control: max-age=604787
expires: Sat, 10 Dec 2022 21:24:05 GMT
date: Sat, 03 Dec 2022 21:24:18 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   14
Md5:    3218cbbd69118d6976e91ebb8693de5f
Sha1:   e637d9faea1e24d9196c254461fefa8d2932e5a1
Sha256: cb2f00d1e554baf96001ddb5e22ee63a8053fd3f8b6cad8acd74504af0dadb52
                                        
                                            GET /theme/rozblog_v4/favi1.ico HTTP/1.1 
Host: www.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             79.127.127.68
HTTP/1.1 200 OK
content-type: image/x-icon
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 03 Dec 2023 21:24:19 GMT
last-modified: Tue, 18 Nov 2014 15:12:07 GMT
accept-ranges: bytes
content-length: 1150
date: Sat, 03 Dec 2022 21:24:19 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    129e0e4681906fae60ea32d066a7b4c5
Sha1:   33c024415db44baa3aba0f13df1399d9b81ac9e6
Sha256: 0a14eb14e53df8201b78084ab9a276a1f4ca01e55a20c3b8b0b6f3b660ee3ff0
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CAEB672E4FB8DF55636E455B0C99CB1C4382B66FBD171EAE4079AF97B936C5EC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2534
Expires: Sat, 03 Dec 2022 22:06:33 GMT
Date: Sat, 03 Dec 2022 21:24:19 GMT
Connection: keep-alive

                                        
                                            GET /?hash=563246594,664952708,355519645,497033291,492353958 HTTP/1.1 
Host: native-removal.triboon.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
href: http://javooneirani.rozblog.com/cat/51
Origin: http://javooneirani.rozblog.com
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.143.233.120
HTTP/2 200 OK
content-type: application/json
                                            
server: ArvanCloud
date: Sat, 03 Dec 2022 21:24:18 GMT
vary: Accept-Encoding
access-control-allow-origin: http://javooneirani.rozblog.com
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2025
ar-atime: 0.184
ar-cache: BYPASS
ar-request-id: e967b34139f0d52e339b98017972ad74
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   522
Md5:    d60ff3487a20713fd6eeb52d2523a6f9
Sha1:   18e3f20e2b39c7195a2cd293927c3673c4da4951
Sha256: 03b3b5036d38302ebbefddcad75be407dd736d63fdc17ae87fd3a5362c3c8b6d
                                        
                                            OPTIONS /api/v2/load HTTP/1.1 
Host: nfetch.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://javooneirani.rozblog.com/
Origin: http://javooneirani.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             87.107.144.247
HTTP/2 204 No Content
                                            
date: Sat, 03 Dec 2022 21:24:19 GMT
vary: Origin, Access-Control-Request-Headers
access-control-allow-origin: http://javooneirani.rozblog.com
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2

                                        
                                            POST /api/v2/load HTTP/1.1 
Host: nfetch.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 252
Origin: http://javooneirani.rozblog.com
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             87.107.144.247
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
date: Sat, 03 Dec 2022 21:24:19 GMT
content-length: 1380
vary: Origin
access-control-allow-origin: http://javooneirani.rozblog.com
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (1313), with no line terminators
Size:   1380
Md5:    6fc4a0b6a1146183b5d183e5bf15fe27
Sha1:   1fae1bf7d412886aea4b2ca6c5b0fa4e210f0639
Sha256: f7a39cb7eba2b380ebda3e2ecaed5b39b1e5101359282be31d3a4982e68c41c0
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "77219ED967FFDC719763E78EF23F9F71700A0C5C24199673EA9176784919FB1A"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8581
Expires: Sat, 03 Dec 2022 23:47:20 GMT
Date: Sat, 03 Dec 2022 21:24:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "77219ED967FFDC719763E78EF23F9F71700A0C5C24199673EA9176784919FB1A"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3190
Expires: Sat, 03 Dec 2022 22:17:29 GMT
Date: Sat, 03 Dec 2022 21:24:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "77219ED967FFDC719763E78EF23F9F71700A0C5C24199673EA9176784919FB1A"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8581
Expires: Sat, 03 Dec 2022 23:47:20 GMT
Date: Sat, 03 Dec 2022 21:24:19 GMT
Connection: keep-alive

                                        
                                            GET /public/chunk/minified/929.9891672dd3947978da68.js HTTP/1.1 
Host: native-scripts.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.143.234.120
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
server: ArvanCloud
date: Sat, 03 Dec 2022 21:24:19 GMT
vary: Accept-Encoding
last-modified: Wed, 30 Nov 2022 08:34:54 GMT
x-rgw-object-type: Normal
etag: W/"cf17456fe0401ed248dda555f4021356"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Sat, 03 Dec 2022 22:24:19 GMT
x-xss-protection: 1; mode=block
ar-sid: 2024
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 3e16befa8346fdd6a301687f98927573
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11351), with no line terminators
Size:   7585
Md5:    95ef4e1bbf8d1deaef8ef332990ddc98
Sha1:   0cb4225edca749beaa3258d79cde65b7c52f5dea
Sha256: 063756dda045a103d78f523e1ee65a664869655794c38c497e95d0eb00c35bf2
                                        
                                            GET /Cat/51 HTTP/1.1 
Host: javooneirani.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             79.127.127.68
HTTP/1.1 302 Found
content-type: text/html; charset=utf-8
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
set-cookie: PHPSESSID=998f3289e48d78d814c179ddad99f498; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-language: fa
location: http://javooneirani.rozblog.com/cat/51
vary: Accept-Encoding,User-Agent
transfer-encoding: chunked
content-encoding: gzip
date: Sat, 03 Dec 2022 21:24:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - fortinet: Malware
                                        
                                            GET /public/chunk/minified/105.f36f6d25fc7e25189ab2.js HTTP/1.1 
Host: native-scripts.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.143.234.120
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
server: ArvanCloud
date: Sat, 03 Dec 2022 21:24:19 GMT
vary: Accept-Encoding
last-modified: Wed, 30 Nov 2022 08:34:54 GMT
x-rgw-object-type: Normal
etag: W/"6f410aa994e04b66a6e45c56a85e4e9b"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Sat, 03 Dec 2022 22:24:19 GMT
x-xss-protection: 1; mode=block
ar-sid: 2024
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 419f4bd8ae964dbb5de3355539d402e1
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /wp-content/defiance_trion.worlds_SyFy_xbox.360_.jpg HTTP/1.1 
Host: blog.jeux.video.free.fr
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/

                                        
                                             212.27.63.153
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Sat, 03 Dec 2022 21:24:09 GMT
Server: Apache/ProXad [Jan 23 2019 20:05:46]
Connection: close
Cache-Control: no-cache, no-store, must-revalidate


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            OPTIONS /?hash=563246594,664952708,355519645,497033291,492353958 HTTP/1.1 
Host: native-removal.triboon.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: href
Referer: http://javooneirani.rozblog.com/
Origin: http://javooneirani.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             185.143.233.120
HTTP/2 200 OK
content-type: application/json
                                            
server: ArvanCloud
date: Sat, 03 Dec 2022 21:24:18 GMT
vary: Accept-Encoding
access-control-allow-origin: http://javooneirani.rozblog.com
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2025
ar-atime: 0.198
ar-request-id: a9917bc993ce4a7c4d8585d07d12c835
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /public/chunk/minified/footer.bfd8764144380485185d.js HTTP/1.1 
Host: native-scripts.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://javooneirani.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.143.234.120
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
server: ArvanCloud
date: Sat, 03 Dec 2022 21:24:19 GMT
vary: Accept-Encoding
last-modified: Wed, 30 Nov 2022 08:34:54 GMT
x-rgw-object-type: Normal
etag: W/"df720023140bf329daee625d31687072"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Sat, 03 Dec 2022 22:24:19 GMT
x-xss-protection: 1; mode=block
ar-sid: 2024
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 8a8d729059423c0402a225c75ffb5319
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: