{"report_id":"6b2bedc9-4a57-4fba-9bf6-95d6c3ea9d46","version":6,"status":"done","tags":[],"date":"2026-01-28T12:15:52Z","url":{"schema":"http","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":0,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"title":"Telegram 6.4.2 Win/Linux/macOS+Portable تلگرام، پیام رسان سریع و امن","dom":{"size":9366,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"69f38d3f2cf08bdefdb3514e5f991b46","sha1":"47c2ec749433a48af0070f7f51759a329133d8ef","sha256":"abef4bca44c8f623b45651f0e521b3ecc3ec38013e0be4e8d433363335a5d707","sha512":"563b6a4cdf99a66491cc90b9a00f5f7288f746322e61b378608e46a627d6070badaadfa42b57bd124a00fdf31fde2ed72c93cbfeb49f16eafcd1913e7f280add","ssdeep":"192:6ictmRA8khVHIqRRX4HRVVR7wg1v14PxMcufd/3kfUyd3ydn:6NtmRA8khVHIgRXaRVVR7Tv14PxMcufz","tlshash":"88129572ad8e4c3b00464286a464fee8751f2c77ea678cc1b9f357384794da314af86c","dom_hash":"domhashe47582f4897edb607de7748bd97aed3f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":0,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T12:15:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"img.p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"img.p30download.ir","ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-05-29T06:43:48Z","last_seen":"2026-01-02T22:49:51.886252Z","alert_count":6,"request_count":6,"received_data":32056,"sent_data":2868,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"native-scripts.yektanet.com","ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2017-03-11","domain_rank":776658,"first_seen":"2022-02-02T12:12:24Z","last_seen":"2026-01-01T18:00:02.322649Z","alert_count":0,"request_count":5,"received_data":68111,"sent_data":2867,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"panel-cdn.yektanet.com","ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2017-03-11","domain_rank":745014,"first_seen":"2024-11-13T15:33:24Z","last_seen":"2026-01-05T04:52:47.350764Z","alert_count":0,"request_count":4,"received_data":78772,"sent_data":2572,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ua.yektanet.com","ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2017-03-11","domain_rank":478492,"first_seen":"2018-05-19T12:52:10Z","last_seen":"2026-01-05T10:36:18.282548Z","alert_count":0,"request_count":4,"received_data":5700,"sent_data":3833,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"jamssp.yektanet.com","ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2017-03-11","domain_rank":0,"first_seen":"2025-12-13T08:40:17.150416Z","last_seen":"2025-12-28T12:07:34.089043Z","alert_count":0,"request_count":2,"received_data":12693,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-25T22:20:32.726712Z","alert_count":0,"request_count":1,"received_data":434940,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.yektanet.com","ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2017-03-11","domain_rank":520716,"first_seen":"2017-04-17T04:51:03Z","last_seen":"2026-01-18T03:08:45.644098Z","alert_count":0,"request_count":14,"received_data":424229,"sent_data":7298,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"p30download.ir","ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"domain_registered":"unknown","domain_rank":166652,"first_seen":"2012-10-31T12:26:33Z","last_seen":"2026-01-03T17:52:15.174163Z","alert_count":45,"request_count":45,"received_data":1540999,"sent_data":23429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"panel.kaprila.com","ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2013-08-26","domain_rank":5693092,"first_seen":"2022-05-23T06:47:03Z","last_seen":"2025-12-25T17:20:26.796385Z","alert_count":0,"request_count":6,"received_data":259155,"sent_data":3071,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"audience.yektanet.com","ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2017-03-11","domain_rank":489602,"first_seen":"2019-05-31T01:44:29Z","last_seen":"2026-01-05T04:52:47.387454Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"van.najva.com","ip":{"addr":"185.166.104.7","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2005-05-01","domain_rank":824731,"first_seen":"2021-04-07T11:30:35Z","last_seen":"2026-01-06T14:39:03.098885Z","alert_count":0,"request_count":3,"received_data":76898,"sent_data":1378,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"native-removal.triboon.net","ip":{"addr":"185.166.104.3","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2020-04-21","domain_rank":642827,"first_seen":"2021-11-03T09:51:11Z","last_seen":"2026-01-01T18:00:02.275825Z","alert_count":0,"request_count":2,"received_data":1090,"sent_data":1124,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"beta.kaprila.com","ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2013-08-26","domain_rank":1968290,"first_seen":"2017-08-15T20:49:11Z","last_seen":"2026-01-05T10:36:18.432638Z","alert_count":20,"request_count":20,"received_data":245354,"sent_data":12344,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026background=ffffff\u0026cid=2998050,2997105,2997157,2997898,2997525,2997538\u0026wr=rent,special,random,random,random,random\u0026pid=125","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d51f39e06e479c16ac2bc9622eebe6ca","sha1":"cc676b600d56f96ff61177179c8e15588042a4dc","sha256":"176142167bca279328b05a39a80ba305d17175b6f0c1423a505ae60bca6267d6","sha512":"5bdf07c38dbd52db423cbdfbae40b031fb48b39de45924dd4ceecb70031fe39aee5fa3f88373e04bb2a20b955e4c4e86bf1b62c5f40401604d50fb70cdf0a767","ssdeep":"","tlshash":"9ff0dd30fd3466f0c4fa32ad5f2afa4a35788540f0016f069c4b7ca808a4e3822769e6","size":638,"data":"","first_seen":"2025-02-06T20:25:05.792091Z","last_seen":"2026-02-13T21:59:16.952424Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"2554d93e300141114fc64617a660d2b3","sha1":"729de63be1e626450eb2c3512770b0f3c61e55d4","sha256":"0842fae5a0e4f94c9cb4277b2a917e55351be37e07eb61402567379fc8abffc1","sha512":"6e10cd9c99ac755611c71ed9dfb57144614602664b464d63e24f5419e805c22a7892c36efeef9c3a931ae8edcecf3690c2d818bf6b54684c79940b9c322a3e56","ssdeep":"","tlshash":"5c01245a9ca3c4786e66108ade7bc119a3d2122b3074e016b8cecc5d1f10aca186aee0","size":809,"data":"","first_seen":"2025-02-06T20:25:05.793797Z","last_seen":"2026-02-13T21:59:16.95316Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"native-scripts.yektanet.com/public/chunk/124-3d91c98869f8e7334774.js","fqdn":"native-scripts.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2da526844900a7485a25bc72ad91719","sha1":"fab780ec8aef0667f1ed935eee1f03c42d41bbfd","sha256":"c420e77a1eda5ad8b47f3ca7240ee75a9b24bd8a4a1d84e1d28ed3b895fc5a02","sha512":"49ececdcac939359fbb0894e64bd6b9002fe5614e4e577dd385717aafe56a7cd757018801980ecd669a9524caffaa836107a7cb29c1c02ba4eaa7aaf5192b841","ssdeep":"96:rL/q1o7LVJhhcWiK+yHT40ewYsxAbaSH17t7R+G4SJ3P6u+u:re1mHT49wYsGbamhBRLSu","tlshash":"64d1c6887296b1a4036226f0413b450ad33f773c584d6c75f394f0d2ad7926e475abb8","size":6522,"data":"","first_seen":"2026-01-28T12:16:03.39151Z","last_seen":"2026-06-13T23:40:04.931026Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=inline\u0026t=inline\u0026notitle=1\u0026w=100%\u0026h=115\u0026theme=billboard\u0026hover=000000\u0026background=ffffff\u0026cid=2997106,2997532,2997813\u0026wr=special,random,random\u0026pid=124","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"79cc405c003cc1f4dd5b914a71310113","sha1":"26a544a51b81b15fcaaf8fc95c88822c3b97ef2d","sha256":"cc9fd5b4442f04a5e2bcf659cd650c0fdeed5381521e922e0d53ddc9f5da2b83","sha512":"cd87db55c9850697c293fbb96b2deace11772aa2494a570b25d246b2fae2ce4e3719599b74e1107d321018cb58d59e69f9f67b66c9b502cf81033dd1f6c5b750","ssdeep":"","tlshash":"5bf059af5c1b48b89256401b1bbd94797a78140a4150e100b40c95125f50e60184aa94","size":495,"data":"","first_seen":"2024-08-19T20:30:42.215271Z","last_seen":"2026-02-13T21:59:16.957419Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/sandbox%20eval%20code","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"64fe6fe97a487c82c5be70158b71aa87","sha1":"b93ba17d1796e404b0ca1ef6f262bbbb0c427366","sha256":"3ec8a12103cf9c2e91b9be1329d1e9f1c53043e38a641070650d1b8d07dbbcd2","sha512":"1a52d609a0d5b1688f664612d6fc98846ffc6d0899444651d29b0c076fdc4c6d4ea87a1ea3b97d816c166f3d91bac5e421f7160c6a00872cccb5aa126bcf7ba5","ssdeep":"","tlshash":"85c08cb3a790156b9a1267b1b8106013bbd6571047a78012b047011b1180ea659b8098","size":148,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-06-07T08:17:54.127875Z","times_seen":75321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d51f39e06e479c16ac2bc9622eebe6ca","sha1":"cc676b600d56f96ff61177179c8e15588042a4dc","sha256":"176142167bca279328b05a39a80ba305d17175b6f0c1423a505ae60bca6267d6","sha512":"5bdf07c38dbd52db423cbdfbae40b031fb48b39de45924dd4ceecb70031fe39aee5fa3f88373e04bb2a20b955e4c4e86bf1b62c5f40401604d50fb70cdf0a767","ssdeep":"","tlshash":"9ff0dd30fd3466f0c4fa32ad5f2afa4a35788540f0016f069c4b7ca808a4e3822769e6","size":638,"data":"","first_seen":"2025-02-06T20:25:05.792091Z","last_seen":"2026-02-13T21:59:16.952424Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026background=ffffff\u0026cid=2998050,2997105,2997157,2997898,2997525,2997538\u0026wr=rent,special,random,random,random,random\u0026pid=125","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"79cc405c003cc1f4dd5b914a71310113","sha1":"26a544a51b81b15fcaaf8fc95c88822c3b97ef2d","sha256":"cc9fd5b4442f04a5e2bcf659cd650c0fdeed5381521e922e0d53ddc9f5da2b83","sha512":"cd87db55c9850697c293fbb96b2deace11772aa2494a570b25d246b2fae2ce4e3719599b74e1107d321018cb58d59e69f9f67b66c9b502cf81033dd1f6c5b750","ssdeep":"","tlshash":"5bf059af5c1b48b89256401b1bbd94797a78140a4150e100b40c95125f50e60184aa94","size":495,"data":"","first_seen":"2024-08-19T20:30:42.215271Z","last_seen":"2026-02-13T21:59:16.957419Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.google-analytics.com/ga.js","fqdn":"ssl.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f6d7efd99960ab916ee096e061f2e7","sha1":"e21f1b5b99444ed4e4f62308cf616edd93ee852e","sha256":"bbb1ca9c206e0ed72478ea72f3ca038cf739fd540d5d1c2da19620c942e4c4f4","sha512":"1a6172d7bd59e113fb23d09bed6e42141e198709e59442972a15bc6445de0a5d5713611269ffc5fdda04f5cd2bbd81e52cb15bd19ee5fa0b6f163880ed2a34de","ssdeep":"","tlshash":"bb615045e8bf3cf11151200a097b8137632e8813ef5db454bafa52139f6e4de24b2fa9","size":3362,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:44:17.39255Z","times_seen":75922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.google-analytics.com/ga.js","fqdn":"ssl.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f6d7efd99960ab916ee096e061f2e7","sha1":"e21f1b5b99444ed4e4f62308cf616edd93ee852e","sha256":"bbb1ca9c206e0ed72478ea72f3ca038cf739fd540d5d1c2da19620c942e4c4f4","sha512":"1a6172d7bd59e113fb23d09bed6e42141e198709e59442972a15bc6445de0a5d5713611269ffc5fdda04f5cd2bbd81e52cb15bd19ee5fa0b6f163880ed2a34de","ssdeep":"","tlshash":"bb615045e8bf3cf11151200a097b8137632e8813ef5db454bafa52139f6e4de24b2fa9","size":3362,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:44:17.39255Z","times_seen":75922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/js/6.0.0/p30download.com/article.v1.js?v=71a743376ddc2f691058671ac5ad56fd","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"32efb071aa8673e8de9bb54970eb9919","sha1":"a69929738c7895c37b888e977c6ae09cd3ec9506","sha256":"bfdf9af0aae2de32c008adbec68be8f261a3c28f64ab7045449c7aa53522a200","sha512":"af2827094f367b96459b471c9e4992bc2a94ed3324a64a54153fd79e6db92023ad1e67a2bc0af4fd6ae670b71201467f595bf83ea133ad62836dcffc565269ca","ssdeep":"1536:GmOyJ2FCJJ42HnILmgzbRnIxTZ+A63E42J2Akc5+MaZSXvRb8FGV6BXH7rLQYVLN:pOCrJ42HCztyb03YWl7rVqXBqfrhL","tlshash":"fde3819cb2c2b46243a37078506f240af37b2995648d8490f739d8e5bdb994e6133fbd","size":155207,"data":"","first_seen":"2026-01-28T12:16:03.388749Z","last_seen":"2026-01-28T12:16:03.388749Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.google-analytics.com/ga.js","fqdn":"ssl.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f6d7efd99960ab916ee096e061f2e7","sha1":"e21f1b5b99444ed4e4f62308cf616edd93ee852e","sha256":"bbb1ca9c206e0ed72478ea72f3ca038cf739fd540d5d1c2da19620c942e4c4f4","sha512":"1a6172d7bd59e113fb23d09bed6e42141e198709e59442972a15bc6445de0a5d5713611269ffc5fdda04f5cd2bbd81e52cb15bd19ee5fa0b6f163880ed2a34de","ssdeep":"","tlshash":"bb615045e8bf3cf11151200a097b8137632e8813ef5db454bafa52139f6e4de24b2fa9","size":3362,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:44:17.39255Z","times_seen":75922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026background=ffffff\u0026cid=2998050,2997105,2997157,2997898,2997525,2997538\u0026wr=rent,special,random,random,random,random\u0026pid=125","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ed7a61d0e92054fb8c38e1e0c30ce48","sha1":"bb7b81cc96ea5e158fe59b4a21e8ef8267df0732","sha256":"864a46849b5ca96a33fde013c8eba79fef0f4c94b4ef1983ccd5719c350ac0cd","sha512":"e6796d611293a5fdf5dce254cea59467fe7aa773215b5e472bc17dc6268f2ca1f0bb64fc516085ec74af9fc38ed867310cc1a0a438f45b0fb97de2b317ea713c","ssdeep":"","tlshash":"6d1148a6f95c143f40ef67082c6ec1c8b92c18779e0d3492b939fd500061e592217afd","size":857,"data":"","first_seen":"2024-08-19T20:30:42.215884Z","last_seen":"2026-02-13T21:59:16.958557Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/sandbox%20eval%20code","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"64fe6fe97a487c82c5be70158b71aa87","sha1":"b93ba17d1796e404b0ca1ef6f262bbbb0c427366","sha256":"3ec8a12103cf9c2e91b9be1329d1e9f1c53043e38a641070650d1b8d07dbbcd2","sha512":"1a52d609a0d5b1688f664612d6fc98846ffc6d0899444651d29b0c076fdc4c6d4ea87a1ea3b97d816c166f3d91bac5e421f7160c6a00872cccb5aa126bcf7ba5","ssdeep":"","tlshash":"85c08cb3a790156b9a1267b1b8106013bbd6571047a78012b047011b1180ea659b8098","size":148,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-06-07T08:17:54.127875Z","times_seen":75321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/rg_woebegone/scripts_v4/8GH7A9sZ/complete.js?v=71a743376ddc2f691058671ac5ad56fd","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"30d54e28fb2b39cc12d5899ba817f550","sha1":"c1eebc82462e49a105c90fb6d33a0b96efa6dc35","sha256":"c764f85e373e2bdf2dd05b02fce8aea2789aaf21054b1279e8d80a7635497ca1","sha512":"4810a662c61cbc8717382a9f8491d46021a4807b54ba80025f2f42e7ec73b3850a1ba5b6d6e475d5003db144854ab3e2dc0b99703b6121036e51c9d73c00e635","ssdeep":"1536:1nCNSL5yqid5ICZMVqfyzU5zHzq+Q5DUQ7vEsxhU/M:ZrL5gI0hyzU5z4zEq","tlshash":"6f33079d74d6f0b207eb65b6903f620af23a25592c4dd8509115cce07c78e9b8263fae","size":55115,"data":"","first_seen":"2026-01-28T12:16:03.421686Z","last_seen":"2026-06-13T23:40:04.975444Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/superscript/8GH7A9sZ/article.v1/yn_pub.js?v=202600028012","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"07b5897fa6bf31be3652c581c33965cd","sha1":"a026b5afc2d69b17694c651dd27bad0e7db54e10","sha256":"9f398586115c824ca80404e108185ef599daf3ba47eaf5bca0907735707cbffb","sha512":"4be04b3102bcc5a655a8d3dda46bc1dac49afb91207c3209469c8ccc95478da679e75be9bd185032910e93f3fd217102db4bc39ced461efe3dd9d362a9c587fa","ssdeep":"384:A7aK8RGbFCjWqfSMCBulE4vzF29I98U6ATC4y4tt4:AONwcvaMCglE4wMTC4y4tt4","tlshash":"9d72e928f190b4b9536504a08d3f690ef33d25529449d4f8e36ac8e5bd74e8eb312fad","size":16057,"data":"","first_seen":"2026-01-28T12:16:03.360159Z","last_seen":"2026-01-28T12:16:03.360159Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/js/jsx-packed.v1.6.min.js","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"68aec6897903bc72853929f17e3ee5e1","sha1":"d4cc53ac7e1a18f47e9c80dc43c260bdc8b448e3","sha256":"9241ffcd3d2661a4c50ca06f5c60f7613ec5180c4670354aee28de6640c5f57d","sha512":"4193351440809bc4289793ba458c0fdce9644d2dba5523f8980f51b11c9eee5ce20a0da7dece8c9f3a96986cb77ba02617ba9eb09e7f01e6070a782e8c776bd2","ssdeep":"","tlshash":"cad022b72cb2c53c4e84089ef1f6e674ab82312cd829c00a80c9cc2e2010fd78ca9d4c","size":223,"data":"","first_seen":"2025-02-06T20:25:05.665594Z","last_seen":"2026-06-13T23:40:04.972831Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PPV7HFGGT3\u0026l=dataLayer_kaprila","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cfba04b242a026c274ed31cb417a679","sha1":"ce6b2ea404e8339c50f3778407671b0d7b6b1ab7","sha256":"ad2c7cca3dc166a5db711f1756546b8a569c3a369c844cb5244623b3c8715711","sha512":"0e367475a606fa3309b3758428b4e9ee42315ce2687805e8c72a336994bd975cd8f59eb180ec0948685bca2e8fcf31b8653f12d0bbfbe7723c6fabfc4fac451d","ssdeep":"6144:jmLJewv27xUAxJ509KFTety4pl9FlbzyB8Y1SekgcQBx1D:j8ewu7xUAxJ509KFYyEy1SGD","tlshash":"b3941ace73d674269396f478502f118ba57b29a2b45cc89af1c9cce01e34a9a4137f7c","size":434336,"data":"","first_seen":"2026-01-28T12:16:03.420156Z","last_seen":"2026-01-28T12:16:03.420156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"native-scripts.yektanet.com/public/chunk/template.6.1.2.js","fqdn":"native-scripts.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e38a7bf5f8f06def3235dee70438ace","sha1":"c623745d861662b6cf10565428e9b085c064ff87","sha256":"b18314b2976e48e024ff9ce6804739c7e5de3456a4a1c06ba8501753d04f3bb2","sha512":"a720df97b823ae743ff21ecac8ea1b709913fb4dc02d86cf21131627cfa11953a1f753144be6d26787585db255d5dc36f8e98bd78d539a554acdbecdd9b72fd9","ssdeep":"768:rngws1yDCcgws1y9a7ala1aVa7f35vB5O12WtUZkTvVfCe3UrUCUM7X/B:rngws1yDHgws1yomQgA7pzRWnT9fCe3k","tlshash":"ddd2c532b0e4633846324158a6b70bfef236a31653db4978b97d7a38c38cb452932f55","size":30504,"data":"","first_seen":"2026-01-28T12:16:03.448889Z","last_seen":"2026-01-28T12:16:03.448889Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a96bce7d05e671757d2e263888e91a1","sha1":"2897731b424815e65713cabda94fdec333a97b6c","sha256":"a2648794c56085e987377389bd194340a1d3a99f33d12ed53b322306772a25af","sha512":"59e608684b78426345412643f6ca056e03cb90c25f34f841901e4d91379e49818a57fd89ee8dcc9a87d7de145096eb1c6e9f45934f06ac5ced45a01f7ad1d6a4","ssdeep":"","tlshash":"91f0976e28a049f8071d15de20fbdb7cd6d120166da1dca17c8dec0dab72ecf41da924","size":504,"data":"","first_seen":"2025-06-24T06:37:40.383847Z","last_seen":"2026-02-13T21:59:16.95368Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e26f027f82ad2be365b316be07445043","sha1":"5a5173c16740c7dd147a73f7182aff12d1a7054f","sha256":"5e339d88d6af89230aac9295ea975d21ae6b9874b13e3c8d4643941ac46b218b","sha512":"3e4a05f71e3af171593f44c4ddc75f782ed8d3637eb9d43bebdf5869618ff8e915ad9bad5480010230dd0fff3648cd5549dd071a11cc3bafb15a2876846ecaab","ssdeep":"","tlshash":"34b0122ce60055320efdf576c29a8306312e008b3302008094554cf84fe0fb498330c0","size":100,"data":"","first_seen":"2026-01-28T12:16:03.455684Z","last_seen":"2026-01-28T12:16:03.455684Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/rg_woebegone/scripts_v3/GozmmRqi/publisher.js?v=202600028012","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd5f4303220dab7338cafe852359448","sha1":"6cb6eed5d4786f70ef330c12cdafd86e726a47b5","sha256":"e48e1d6ab34d5552feda4408c79e7a0d8bcdd744412e6172f14698ade7fc3419","sha512":"7d46233ef2fb8aebdb9912fb7ef2c779aaf25ef1fffbd680339fdc56d2956807a66ef9cf1edbd9d73492bda36d1f2520955e2982cf602da1345cc788306ecfc8","ssdeep":"1536:8nCNSL5yqid5IaZMVqfyzU5zHzq+Q5DUQ7vEO:0rL5gIshyzU5z4zEO","tlshash":"6033f7d974d2f0b207eb65ba903f520af23a25596c4dd8509115cce07c78e9b8363fae","size":53535,"data":"","first_seen":"2026-01-28T12:16:03.361056Z","last_seen":"2026-06-13T23:40:04.970967Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"7731650e547cd5f601109cd6e52a3e24a036246b6e1930acf248e2246f3e04ff0ffae9","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-06-15T01:03:00.657796Z","times_seen":77507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"79cc405c003cc1f4dd5b914a71310113","sha1":"26a544a51b81b15fcaaf8fc95c88822c3b97ef2d","sha256":"cc9fd5b4442f04a5e2bcf659cd650c0fdeed5381521e922e0d53ddc9f5da2b83","sha512":"cd87db55c9850697c293fbb96b2deace11772aa2494a570b25d246b2fae2ce4e3719599b74e1107d321018cb58d59e69f9f67b66c9b502cf81033dd1f6c5b750","ssdeep":"","tlshash":"5bf059af5c1b48b89256401b1bbd94797a78140a4150e100b40c95125f50e60184aa94","size":495,"data":"","first_seen":"2024-08-19T20:30:42.215271Z","last_seen":"2026-02-13T21:59:16.957419Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5cf6e45061b6ecfdf09b758ff1b3aa1f","sha1":"75b12b22d02dffcb0d37149aedd62c9436b55404","sha256":"e36c9f36a78a3f92df8afb520c358792818bca19c99d288a19b99742f6d70298","sha512":"b01a2d938db535492e4f06472fd8a072e40ebc683e4705c42ab19cb26449a1b1b7be59a4c8573c34a66e20f08f91c3b7bfdd603ffd42dd816c3d176fb01070f1","ssdeep":"","tlshash":"33e0f1edd51cb93e67736f18017eb67501bf73031182c156366e1af0cb64a0c3003a9a","size":407,"data":"","first_seen":"2026-01-28T12:16:03.456976Z","last_seen":"2026-01-28T12:16:03.456976Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"21908ed41da958d138847d1f153f2bc8","sha1":"2afc8c9d6fba4e5d2df632e4ac2cb72994971f69","sha256":"2d8ca9f07bd94d48f8cd444ac9d43486b449ac117c0af4130725a53e4d005870","sha512":"21312b4a8eb3e638cbcc03452b6c5b01423d93f2aa0f1752a2040767a219f8ff042b857f0f08bb3f72cd84c25069a8d41bf05f16643498e41f09b5111f789cea","ssdeep":"","tlshash":"2e11af9517695372a7d5c81740e32030c7b3ee21f205f802ad520b7555f8e566a9fa37","size":981,"data":"","first_seen":"2026-01-28T12:16:03.457818Z","last_seen":"2026-01-28T12:16:03.457818Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"van.najva.com/static/js/scripts/p30download-893-8a83f6b7-68a8-42f6-88c9-cd402ff203aa.js?v=202600028012","fqdn":"van.najva.com","domain":"najva.com","tld":"com"},"ip":{"addr":"185.166.104.7","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbbedafee0e650860b0adf356283c8ed","sha1":"1cacd59307bb40db51da65171a578bf38d444717","sha256":"b24bbfed2c989d23cd08877d1e18e1ca0c5baff68c2336d0d208cfc60bbb2e26","sha512":"ce0d00e199436d2407484852d128478a3e48ea761c23ea7a7b79285b4a3c3e3e23a023d052ee775e2a17aa955640811c66688995c5c4a377dffa9ee4a5d44f87","ssdeep":"","tlshash":"82d02e2eae10c8322e6800da30bae654abe5b2226469ed4900cecc189b80ce55ed0894","size":266,"data":"","first_seen":"2025-06-24T06:37:40.283407Z","last_seen":"2026-06-13T23:40:04.953104Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ua.yektanet.com/cookie/iframe/","fqdn":"ua.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"a527ca2b32d42e675cebc8170892f116","sha1":"1839e2c2753250083bb2c15594801b96f9c9c22e","sha256":"f85e1f8999603b19d827c5b0660b3e5b5847e49c428ac865bdb3ba9a51fba8a8","sha512":"fef0c4e8b3063148e8e3bf7971daaf8fb578b97dac1760dc388ac41371e6f31812c56c18a39e9447ee6d0a2a877f4a4ff746edfdb491cef37520589aeb1f2d7e","ssdeep":"","tlshash":"c851ac7e18e611a5602b30799b9f5214b531d02723b8cf643c0cd3a2af944794baa7ed","size":2664,"data":"","first_seen":"2025-03-03T12:57:54.748906Z","last_seen":"2026-06-04T13:21:44.917213Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"5b305be649af0101865a903adc66ebbf","sha1":"151be7eb306b15579b6eb8d677f22661feb8ba30","sha256":"78e29e0f650c196e652d7b5d3416fcf4bf5148dfc7750e197ccb952e958bb739","sha512":"81a1eba23be1e6dd5970981ed36d5a25aecce3a57bbc1043d43a42875298679e430ea2ed0fbe2783e2e96c9781f64042581a12258f59d6e635920e8fb80b09cf","ssdeep":"","tlshash":"804104f3e1a64d1c7def00b7d0e51b54d421780aa9228ea4b470bb39b07424234fd59e","size":2086,"data":"","first_seen":"2026-01-28T12:16:03.396763Z","last_seen":"2026-01-28T12:16:03.396763Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"native-scripts.yektanet.com/public/chunk/public.js?v=6.1.0","fqdn":"native-scripts.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"426f43a97409e06f989c56b393a40213","sha1":"98236609fb725bdcc04ed6305f73a8b082146ef6","sha256":"9e094cae2b775a4d9fc4dc2b434b1ebe6deb94f79ee19379d38b7e0e0857ca51","sha512":"6036cc0c4fc305186c8813e8cccce6aea7ded681d5fc40e9bbff408d5913ead9e373fdc7753648e05df4d805150ff02bd9f757e2106c3dad79f0ea20f92432b5","ssdeep":"192:h5f2oVZ/FXh8u1K24B4Wx/5/6QJym96YLSTwtjZbrnm:z2g/FRn1K2M4O8OyeSTwJc","tlshash":"4fe1947cb346707541cb3168631f2206bb79699199d7ccc0a03edc95af78dcea193e19","size":6848,"data":"","first_seen":"2026-01-28T12:16:03.406821Z","last_seen":"2026-01-28T12:16:03.406821Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"native-scripts.yektanet.com/public/chunk/public.js?v=6.1.0","fqdn":"native-scripts.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"426f43a97409e06f989c56b393a40213","sha1":"98236609fb725bdcc04ed6305f73a8b082146ef6","sha256":"9e094cae2b775a4d9fc4dc2b434b1ebe6deb94f79ee19379d38b7e0e0857ca51","sha512":"6036cc0c4fc305186c8813e8cccce6aea7ded681d5fc40e9bbff408d5913ead9e373fdc7753648e05df4d805150ff02bd9f757e2106c3dad79f0ea20f92432b5","ssdeep":"192:h5f2oVZ/FXh8u1K24B4Wx/5/6QJym96YLSTwtjZbrnm:z2g/FRn1K2M4O8OyeSTwJc","tlshash":"4fe1947cb346707541cb3168631f2206bb79699199d7ccc0a03edc95af78dcea193e19","size":6848,"data":"","first_seen":"2026-01-28T12:16:03.406821Z","last_seen":"2026-01-28T12:16:03.406821Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/sandbox%20eval%20code","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"64fe6fe97a487c82c5be70158b71aa87","sha1":"b93ba17d1796e404b0ca1ef6f262bbbb0c427366","sha256":"3ec8a12103cf9c2e91b9be1329d1e9f1c53043e38a641070650d1b8d07dbbcd2","sha512":"1a52d609a0d5b1688f664612d6fc98846ffc6d0899444651d29b0c076fdc4c6d4ea87a1ea3b97d816c166f3d91bac5e421f7160c6a00872cccb5aa126bcf7ba5","ssdeep":"","tlshash":"85c08cb3a790156b9a1267b1b8106013bbd6571047a78012b047011b1180ea659b8098","size":148,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-06-07T08:17:54.127875Z","times_seen":75321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"van.najva.com/static/js/main-script.js","fqdn":"van.najva.com","domain":"najva.com","tld":"com"},"ip":{"addr":"185.166.104.7","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d2a3f336fbcf76cdb9fb3b814f83039","sha1":"18d02cfb712de59ea3102dccbdfac25dc637bbab","sha256":"347f8dfc8a6a0c7df25b13da87131539d3665472a9fd88e9925e220e4f9bfcf4","sha512":"a70bfa78d9db0b36c8f3dd2212038328c4b9dba9d777cd27290ac056ac97bc74d811cb5be9acfe3d0a45321797170ac7f85245451cc247c059b92dd36eaa9582","ssdeep":"768:zRDL4glZe7Tgs2VbxvNFgMgw4P7smFUWtcQpx06AfLznKdeGIjvX4Ho2UcQiaQAZ:9e7IFZV82nKM9vX4H8iaQbg","tlshash":"35532b9577f7b52647eb10b9a0bb2102b77d8944448c047cf29ce9de2e9840a96f7f38","size":63670,"data":"","first_seen":"2025-12-23T09:58:34.192828Z","last_seen":"2026-02-13T21:59:16.915259Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/js/js-packed.v1.5.13.min.js","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e16f7850046df9b275a7acbf9438a4","sha1":"99928e6c9c389878dead7fa162b1e811a5d64e7b","sha256":"d9242d8ad490294143e05bef926d7aa2d7c53a1bddfab1fbc174ed159bc81d30","sha512":"98eb2ef0265836817307e4b3903e1b52944dbd614a29992534895573e4c8d964345cd184f1fac03aee925d7a151119aa7486c3bf99f26c05a639c7193139ad1f","ssdeep":"3072:DIh8GgP3hujzwbhd3XvSiDQ47GK0ZJaJYoIxzc:Dy8G6RujcHX6MQ47GK0g","tlshash":"8bd318cdb286712657b731b9007f520bb237195d680e8018b129d9e6bcbca0e527bf7d","size":137313,"data":"","first_seen":"2025-06-24T06:37:40.356095Z","last_seen":"2026-06-13T23:40:04.983067Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/loader.js","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"abacca91404684b3a2096c14efa2ef11","sha1":"78f9849df0368f79accf3f70933f43f2d5284a8f","sha256":"236b2602218a64cd4ea7f88350689d33965332e56d9af6f52767d80328736aa9","sha512":"7ce258e5e53a9bf180171f332cf4c5b1358c2d609d5f2fa5559de69954166a756fd280bbd94163e0396480a67cd3e4d040d93d8722e1fe0f0d4af3261156484a","ssdeep":"96:TTJT/w3tIOHUjTnbNhllQgSEaN9kxQak7BZSwcbiMcSoQEGv:5cF0jTbNyAaOQak7NIiIbnv","tlshash":"68a163a97d90a0f407629a6b653fe35a753361c92e064450e03dbab83f68b4bd513e88","size":5082,"data":"","first_seen":"2025-11-16T09:52:56.198656Z","last_seen":"2026-06-13T23:40:04.893844Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d3710c0dffd1851c472432276772be4","sha1":"22dbaad8b1565f4a3d6b7bd9fcd773855802a152","sha256":"44ae42a7cd653e04871a22faa6ed581f4cd66a35f16da717673b19502503a342","sha512":"2d9a89cd60014720040f9af913b1eebcdba66e24cc116fb3648c5d8ac10b3b2f43c01b50855e788ea95d65969a2a6f0fddf7f3227f042f60233e86bbbca7318a","ssdeep":"","tlshash":"adf0dca385882e37026681dba174f1b1f1725817ee91e482dee407998278ed62323071","size":462,"data":"","first_seen":"2026-01-28T12:16:03.459132Z","last_seen":"2026-01-28T12:16:03.459132Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f7ad5190dae5f0073af98096b046374","sha1":"6d5984ecf7329fd067fe197a2a23c5d4cdf6c184","sha256":"519dc9a1bb4801ff80d17addeccd69c3667046f77fcbca170a43282f9c93775c","sha512":"f9c2a64967be20190af91e453b0b74cf94d92d46adbc9d61b1bca534a39fec74fb88b231763f6f07a633a8b95aa6e62a9b66c7376cc0cc856181e6e4c623ea0f","ssdeep":"","tlshash":"2eb012001add57322201e031c030f5fc94baee02c301fd714f0658740ee1a47ba4fc26","size":108,"data":"","first_seen":"2025-10-10T05:59:39.84539Z","last_seen":"2026-06-09T04:50:45.043827Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d64ad640157a9a9d8b01803a57ea9d2","sha1":"eebc6a6c770496c2a6b3f7b921905b7f99ed4cb8","sha256":"30e4ea4a54887da6166a9b5c49b0a6d15e996c24e17678405685c6af3d814130","sha512":"0b54cb396eaae1ff444fe9a0ae68cf3aadce9d5b1e068e0982bef6cc40e1227e6a6df0c0a93e986c9c50b7d98238973caac7d5908e12a3137e36c9ba43aceb36","ssdeep":"","tlshash":"bdf05c628a982e370294c2d74044f274e7b5b6a6d5415561dde603791168e457316464","size":444,"data":"","first_seen":"2026-01-28T12:16:03.460931Z","last_seen":"2026-01-28T12:16:03.460931Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/sandbox%20eval%20code","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"d1b09b13a650156d3f1166b1b951a003a1d977055fb75501f006005b1440ea559dc194","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-06-07T08:08:41.456567Z","times_seen":79430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"native-scripts.yektanet.com/public/chunk/105-139f05c022b7604a2911.js","fqdn":"native-scripts.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"49aa4b6636db3216664e3a88cb3da9e3","sha1":"473cee06cb86f786d3fefe016e56a8a40796aa87","sha256":"6e65c6e492905a26efa0ec225b2732524e103bc20e1a471d4cfe4a4ebcb22e55","sha512":"dfd46b35e3d9c5d5a75a7bec2e99b550c5e66fa97ea4fa702e907e0b6e8b9c8b942988ba61216e7e11d8ab5658da27ea1bdebb8f390799de5dcccc301143d167","ssdeep":"192:22ItLgvXHyjswYjMilrQ4cC9qBet3Z3lfIhJGB7k5w3Va5R8lprnI7Z:2Mw6Q4l9qB63lghwVcw3Vsqp7IF","tlshash":"7b52a668f3f7a17545a62079902f2206b276655426cdc045b03fe8e51f2ce0f6a72fbe","size":13427,"data":"","first_seen":"2026-01-28T12:16:03.370249Z","last_seen":"2026-01-28T12:16:03.370249Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ed7a61d0e92054fb8c38e1e0c30ce48","sha1":"bb7b81cc96ea5e158fe59b4a21e8ef8267df0732","sha256":"864a46849b5ca96a33fde013c8eba79fef0f4c94b4ef1983ccd5719c350ac0cd","sha512":"e6796d611293a5fdf5dce254cea59467fe7aa773215b5e472bc17dc6268f2ca1f0bb64fc516085ec74af9fc38ed867310cc1a0a438f45b0fb97de2b317ea713c","ssdeep":"","tlshash":"6d1148a6f95c143f40ef67082c6ec1c8b92c18779e0d3492b939fd500061e592217afd","size":857,"data":"","first_seen":"2024-08-19T20:30:42.215884Z","last_seen":"2026-02-13T21:59:16.958557Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"590f52802add601f0425d062facf5819","sha1":"2edd1bdbcfbbf0e30de54b5f18b81b5adbb92fd9","sha256":"df28e42d915260c267292a9b8ad70bc568ebfe860f7d58248865c6074c65ee8b","sha512":"0c48f6a31343cb31be833aea8007e1176ec215e9b0bf90b26858ccdda85e94fc2c8b2cd4ffbeef7c7915ce13b233911befee92664554464638b31d4bdbdbbd2c","ssdeep":"","tlshash":"0fe0c073c0ec6b270157c6f742edbae5f171040b7ce09459eeb107dd8258fe8652208a","size":378,"data":"","first_seen":"2026-01-28T12:16:03.462578Z","last_seen":"2026-01-28T12:16:03.462578Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1b961e0d14864516f9810cc9abcd0b6e","sha1":"cff3fe402fa95f9c045003933d684d2b61ac5597","sha256":"84130560b96712c27927ef146d2c54143b72ec026b9220473749bbd821a66736","sha512":"a707028486cae85d7a2640465d531ffc7a2aa18ac8c3bccec5bbdf9b75aea551e228098ba7267a191f6c61a3c97e92b53bcb7585f70c8f7a097403df6e03f73f","ssdeep":"","tlshash":"f6a02208ca0b220c0208020323202e3800c8c20c3ccbbe00fcf228002080e0208002c0","size":66,"data":"","first_seen":"2025-10-10T05:59:39.852828Z","last_seen":"2026-01-28T12:16:03.463454Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2147925e934fdc61c5a43766cd531ab7","sha1":"1d92086dd126656c5e32b8413fffa2471383f28a","sha256":"e0619a2d9b46d999316136678a340e0902e747012e7cf5a7ed1fd499949a9abd","sha512":"a6f1a119e89be724e00b24a07c8bfd9d4fe4053be58e647f385e3c46476277ff868a92cd756ff321cd2e092d5c481a1953071090386632ebbf033bd17542db13","ssdeep":"","tlshash":"ede0c030c6cc6b37028cd2c701c93358f2f55086b0810574d9b107ee116cd585600489","size":350,"data":"","first_seen":"2026-01-28T12:16:03.473269Z","last_seen":"2026-01-28T12:16:03.473269Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"cdn.yektanet.com/superscript/8GH7A9sZ/article.v1/yn_pub.js?v=202600028012","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /superscript/8GH7A9sZ/article.v1/yn_pub.js?v=202600028012 HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 27 Jan 2026 15:29:54 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"07b5897fa6bf31be3652c581c33965cd\"\r\nx-amz-request-id: tx00000c991d44ae3cd1ded-006979ec46-6fbefe04-default\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\nstrict-transport-security: max-age=0\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16057,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16045), with no line terminators","md5":"07b5897fa6bf31be3652c581c33965cd","sha1":"a026b5afc2d69b17694c651dd27bad0e7db54e10","sha256":"9f398586115c824ca80404e108185ef599daf3ba47eaf5bca0907735707cbffb","sha512":"4be04b3102bcc5a655a8d3dda46bc1dac49afb91207c3209469c8ccc95478da679e75be9bd185032910e93f3fd217102db4bc39ced461efe3dd9d362a9c587fa","ssdeep":"384:A7aK8RGbFCjWqfSMCBulE4vzF29I98U6ATC4y4tt4:AONwcvaMCglE4wMTC4y4tt4","tlshash":"9d72e928f190b4b9536504a08d3f690ef33d25529449d4f8e36ac8e5bd74e8eb312fad","first_seen":"2026-01-28T12:16:03.360159Z","last_seen":"2026-01-28T12:16:03.360159Z","times_seen":1,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":77,"dns":25,"connect":19,"send":0,"wait":19,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/rg_woebegone/scripts_v3/GozmmRqi/publisher.js?v=202600028012","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /rg_woebegone/scripts_v3/GozmmRqi/publisher.js?v=202600028012 HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 14:13:58 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"4cd5f4303220dab7338cafe852359448\"\r\nx-amz-request-id: tx00000cdfb0faa0399e8e9-006979ec46-6f285eda-default\r\nx-zrk-us: 200\r\ncache-control: public, max-age=10800\r\nstrict-transport-security: max-age=0\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53535,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32326)","md5":"4cd5f4303220dab7338cafe852359448","sha1":"6cb6eed5d4786f70ef330c12cdafd86e726a47b5","sha256":"e48e1d6ab34d5552feda4408c79e7a0d8bcdd744412e6172f14698ade7fc3419","sha512":"7d46233ef2fb8aebdb9912fb7ef2c779aaf25ef1fffbd680339fdc56d2956807a66ef9cf1edbd9d73492bda36d1f2520955e2982cf602da1345cc788306ecfc8","ssdeep":"1536:8nCNSL5yqid5IaZMVqfyzU5zHzq+Q5DUQ7vEO:0rL5gIshyzU5z4zEO","tlshash":"6033f7d974d2f0b207eb65ba903f520af23a25596c4dd8509115cce07c78e9b8363fae","first_seen":"2026-01-28T12:16:03.361056Z","last_seen":"2026-06-13T23:40:04.970967Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/colorbox/border.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/colorbox/border.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 112\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Sat, 29 Oct 2011 14:54:21 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 50, 1-bit colormap, non-interlaced","md5":"7ca8a1d2eb0763b35c266cd54bee2fa5","sha1":"cf8f732ac25ebdb16915cf5f64f23d51ab1aa9fd","sha256":"11bd83f6446a1b41b0d88ddb2e271fcc9912b210d77f40e34e5e31e1a9af174a","sha512":"d30cc82052cc3dabac7b8af4826cf550ef5488e7a7576d8198d62c47d462872224b2a39d38bdaf147d0c2f84ee32b4d53057d99d7a6f218851c27186d9c3d3c8","ssdeep":"","tlshash":"8bb012ebb390dc31f953587b55656043ee51c30c0d01410e87498429ab2132c5dc0687","first_seen":"2023-05-01T19:39:13Z","last_seen":"2026-06-14T09:41:10.402498Z","times_seen":481,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":305,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/img/logo/touch-icon-iphone-retina.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /img/logo/touch-icon-iphone-retina.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nCookie: analytics_session_token=734bb731-9110-67d0-6af3-196a1585a5a9; analytics_token=eaf039a4-7723-92c5-eb3b-0d3d5c9210f1; yektanet_session_last_activity=1/28/2026; _yngt_iframe=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 14460\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:31 GMT\r\nLast-Modified: Fri, 09 Apr 2021 20:21:35 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"d222c9b3a45b9c92bc6fa8b90b159200","sha1":"3c4ce95e2867d0b555ea29ac0c039f03d651c388","sha256":"6c912446e6703ce7af6a1129f79c554c9dec3e24b1f82929ea009effe1c9e86f","sha512":"5e66ccc89911344fcdd5733efc9e19b9e691a05755bf80017b6455ead832b3619876478d730dd1950c6c6f3a287534e0a99186a27c93d565543128100a32d2d0","ssdeep":"384:iOA7HYMEvVK2q/0hCZWVpJHRwya3e2mxhsn0O:bsHbOVK2q/G/duyau250O","tlshash":"4352c0829073fcc8d315386e80d65b4b9ce3d7d1d8d92be3ae60d46728a6ef90560267","first_seen":"2025-02-06T20:25:05.728089Z","last_seen":"2026-06-13T23:40:04.980551Z","times_seen":13,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/images/refresh32.png","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/images/refresh32.png HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2120\r\nlast-modified: Sun, 26 Jun 2022 08:34:03 GMT\r\netag: \"62b819fb-848\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"85e3485a7e09dc9369e67cc1ad61978b","sha1":"e04dde9542805fa06a54571117f06e671550f118","sha256":"e9ec01af29f4a0a04e153c6d072c663ef6360b5eb55f99f68ca8d2c7f91f7e84","sha512":"715abb63111742e85e83475c5d252178fa5b473ae9f87c2aa1bbf65ebff8440126f3ee6d7b5ea2a625e54972f29f36c0201c6e42e048f2c711120be5f46e5cd4","ssdeep":"","tlshash":"0741fa01ef51189065dee80474eee53fc2765ed0daf4dda479ebc81217a0266094e4cd","first_seen":"2023-11-27T16:58:27Z","last_seen":"2026-06-13T23:40:04.912767Z","times_seen":415,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"panel.kaprila.com/storage/upload/02eda71923de30a69cfaadbb1457ea0c61cef2d0/2025/07/20/687ce4637e8fa.webp","fqdn":"panel.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /storage/upload/02eda71923de30a69cfaadbb1457ea0c61cef2d0/2025/07/20/687ce4637e8fa.webp HTTP/1.1\r\nHost: panel.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19900\r\nlast-modified: Sun, 20 Jul 2025 12:43:15 GMT\r\netag: \"687ce463-4dbc\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"be0d07d8fb96cdad7e0e7536c8bb727a","sha1":"8cce23bcf61faf0e10323bc2b3a1f9454c83997a","sha256":"0c36b01b0ce164b57194dd9a2b2db783b158de8736d4e2aa18fdd50f27896fb5","sha512":"8fdfbd33b8e13d102c986be43ad81538fc958eceb92ccf3940bda89fe0d3c2f0a21f70d2fead82ae21e3dadfebba6cbbd4b7002dd78c25be290314d5dd8a92b1","ssdeep":"384:m9ICrUnLPLCpr2M2eWwR5P+L7Tr6LNVGLecq0EpVWXLn4PgoNRaxB6OGDBU1uH7Z:JCenC12Ze3f+LAVGU0ErUcgqC699U1ut","tlshash":"6b92d0941413388723a865d4adf4575263077d9930ed22e933eb613ab4ceab40b36bdb","first_seen":"2026-01-28T12:16:03.363776Z","last_seen":"2026-01-28T12:16:03.363776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":234,"dns":35,"connect":87,"send":0,"wait":85,"receive":86,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/foxy-sprite.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/foxy-sprite.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 126847\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Wed, 10 Aug 2022 07:09:00 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126847,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3780 x 70, 8-bit/color RGBA, non-interlaced","md5":"42b3951fb86bb91eaace58d7d4a92c77","sha1":"fc53f05f28ab17140922fa14afc3334f1ee1d1c7","sha256":"58ff90f2b45a70f7a100e4286f4b55189809d665ad1b9ee55d684fe4f2e8d001","sha512":"137b63200f728f1d1a6f6c3a51c9ee29120f81fdf93557d4defffd2d98f3e2b138c4d2499a71641508898d5970902f96067d00456b6c6afe2aec5db3797c4e86","ssdeep":"3072:eSNB0ZRVCYzUj0xqsXHHdgrYis9UPvugAHYj7tbVD51VNX1YzR4+0saLY/:jAZlz5xqsXOrduaNbpjUT0sac","tlshash":"12c302d6aae2d2ae8e0cf85763d818b8d9a760cd44a112d4e241e72723b75ef1e354d0","first_seen":"2025-10-10T05:59:39.731065Z","last_seen":"2026-06-09T04:50:45.024208Z","times_seen":6,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":626,"dns":0,"connect":0,"send":0,"wait":115,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.p30download.ir/software/32x32/2019/10/1571684323_fx-browser-icon-fullcolor-48.png","fqdn":"img.p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 07:28:07 GMT","end":"Thu, 19 Mar 2026 07:28:06 GMT"},"fingerprint":{"sha1":"02:B8:46:C3:E8:35:6A:87:68:35:79:E8:F5:D9:F2:80:00:86:FF:5A","sha256":"9D:7C:54:59:6F:31:D4:21:EE:2D:AF:C1:5C:C2:5D:ED:65:E0:BB:B7:46:8F:A2:36:BF:ED:CF:4C:64:87:A3:01"}}},"request":{"raw":"GET /software/32x32/2019/10/1571684323_fx-browser-icon-fullcolor-48.png HTTP/1.1\r\nHost: img.p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 3052\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Mon, 21 Oct 2019 18:58:43 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"5464fb82214f6a5629a66b434d469bbf","sha1":"f38461e8867cf0b6b1c9ea836a140b892d55665b","sha256":"a0add6c21de5c16e7a69f63fd5b6a1ffe51454d00b2bade7a9bc5ef467ac3f13","sha512":"37e2ec9ecc3b4db594a5331ac3e0a827b39a37acb905e3cfaaca4401ed3fd507ba09dc4b8fb1ec4df7c3c42f099ce8f4e02535f3d4bb7747ce3a679aab2808ff","ssdeep":"","tlshash":"cd514c715da774ef1b3f3b21975c6269ccb43c680105a881809d653abf84c4088cc7a7","first_seen":"2025-02-06T20:25:05.698882Z","last_seen":"2026-06-13T23:40:04.968105Z","times_seen":6,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":227,"dns":60,"connect":85,"send":0,"wait":125,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"img.p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/colorbox/controls.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/colorbox/controls.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 2893\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Sat, 29 Oct 2011 14:54:23 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced","md5":"b68b9ecaae424de4862ba0d055b7a560","sha1":"9fc804be6b7ddb03729146d53c33945452078ddd","sha256":"cd0a305d6a16d28b62037fb08f9b062dd1a0a6a3b970d8f95ecebd56f74067e9","sha512":"3ffe4874114df4231c52a0249b57ea0a3203f456d2212c318fd6909b8aa658654ddf4f100d1f5bb20c6f3a16d84683d054ec71ca589349b03e1d7a4029a19915","ssdeep":"","tlshash":"39516dcbc8887eb033a1d851bc7b60338d708fd3c400ab315c13653919a1281cbfa5b1","first_seen":"2023-05-01T19:39:13Z","last_seen":"2026-06-13T23:40:04.941161Z","times_seen":124,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":306,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/icon/software/macos/48x48.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/icon/software/macos/48x48.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nCookie: analytics_session_token=734bb731-9110-67d0-6af3-196a1585a5a9; analytics_token=eaf039a4-7723-92c5-eb3b-0d3d5c9210f1; yektanet_session_last_activity=1/28/2026; _yngt_iframe=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 864\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Tue, 20 Jun 2023 07:33:32 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"8e6bb350b5cb6229dcd0547ed74c5b57","sha1":"4d4ba2541294518100caaae0279408790ba975c3","sha256":"d39efdfffc65e7d5e891f318ec77b360e6ff20866fc6aa751e9cbc2d74418305","sha512":"da0b4701cabcf7895851155df1dfb0888c7a283ffedd3b0261e7eee56d9661324dba65a49264c9e502b669fec19385136a3aa0e10e018a85ad53d1dbbcc8883f","ssdeep":"","tlshash":"f6119667a85444fefc7d101a60210f7fd7ba95541ef593185cf53b58f0128d248c204c","first_seen":"2026-01-28T12:16:03.366623Z","last_seen":"2026-01-28T12:16:03.366623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126 HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ntransfer-encoding: chunked\r\nx-powered-by: PHP/8.0.11\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9404,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (344)","md5":"21aee0949e52374f6bfcffcc563a446b","sha1":"f126e3bdc1081d67f934baf581bc5a373dc7a180","sha256":"28607d33d34a7bb56e5e1afd6de6fd9ebaff1831cc1d93bf1c95c058b79d1955","sha512":"6ca7188c12e535aa7181bf8fde01671a1e7ff7a990834c0619351f3fc568bb6779074f8f0bf6c0be699950f656a435706529e4968948e5505cb0ffcc272b18ba","ssdeep":"192:RncRe4rrRR2suYrKEboRQqwR7lg1v14PxMcufd/gkfUyd3ydV:RncRNrrRR2suYrKSoRQqwR78v14PxMcx","tlshash":"0b12b572a94d4c7a004a4287e964fe8c711f1c77da678cc1baf766384b94da208dfc9d","first_seen":"2026-01-28T12:16:03.367478Z","last_seen":"2026-01-28T12:16:03.367478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":171,"dns":3,"connect":84,"send":0,"wait":119,"receive":3,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026background=ffffff\u0026cid=2998050,2997105,2997157,2997898,2997525,2997538\u0026wr=rent,special,random,random,random,random\u0026pid=125","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026background=ffffff\u0026cid=2998050,2997105,2997157,2997898,2997525,2997538\u0026wr=rent,special,random,random,random,random\u0026pid=125 HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ntransfer-encoding: chunked\r\nx-powered-by: PHP/8.0.11\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9178,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4c5d09a83ef9df9431d64c62b1d74bed","sha1":"b45debb7ae1440c3b1eb9a672bfec7a99be57579","sha256":"4d01082babab77809f18c5a35125e0eb6b907b7b4d33a7890d73e1d9231da318","sha512":"43892db826560790064dc75e3cbb0c4c140e72a121cea72400237468ab461653801f2c513668b1eacf93e6dbac4c207d6ff642ef7231b12dd33c6f1a08fb52f6","ssdeep":"192:RedGRocks1HxKRRWYDRKZR7lg1v14PxMcufd//kfUyd3ydV:REGRocks1HxARWMRKZR78v14PxMcufVX","tlshash":"aa12d572ad4d483a00464286e965fe9c712f1cb7dd678cc0baf326384b94da314afc9d","first_seen":"2026-01-28T12:16:03.368588Z","last_seen":"2026-01-28T12:16:03.368588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":198,"dns":1,"connect":85,"send":0,"wait":126,"receive":2,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/images/kaprila-icon-32.png","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026background=ffffff\u0026cid=2998050,2997105,2997157,2997898,2997525,2997538\u0026wr=rent,special,random,random,random,random\u0026pid=125","date":"2026-01-28T12:15:31.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/images/kaprila-icon-32.png HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026background=ffffff\u0026cid=2998050,2997105,2997157,2997898,2997525,2997538\u0026wr=rent,special,random,random,random,random\u0026pid=125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3874\r\nlast-modified: Sun, 26 Jun 2022 08:34:03 GMT\r\netag: \"62b819fb-f22\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"7f0a1c5c062dd7d9a237e18a1f4363d5","sha1":"9613418357d91d3a1a29aa32b2662439055ab704","sha256":"01f7d89298dc028c7234f872e7b5e6c17080c76792bfd1122a795d563d84755b","sha512":"46a2299ec8442f6af3769bea2b6b592be2b1e93f3b018e720b23dff2f67b2c94e4812a971936f78b9558e4d026b299a840780532cbb72879d37873c4739bfd6e","ssdeep":"","tlshash":"61818e8376651b6ee0125c365016a273c591f925c6511439e49ff0b7f565f604dc7448","first_seen":"2023-11-27T16:58:27Z","last_seen":"2026-06-13T23:40:04.931753Z","times_seen":415,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"native-scripts.yektanet.com/public/chunk/105-139f05c022b7604a2911.js","fqdn":"native-scripts.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /public/chunk/105-139f05c022b7604a2911.js HTTP/1.1\r\nHost: native-scripts.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 18 Jan 2026 13:12:08 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"49aa4b6636db3216664e3a88cb3da9e3\"\r\nstrict-transport-security: max-age=0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: public, max-age=2592000\r\nx-cache-status: MISS\r\nx-zrk-us: 200\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13427,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13427), with no line terminators","md5":"49aa4b6636db3216664e3a88cb3da9e3","sha1":"473cee06cb86f786d3fefe016e56a8a40796aa87","sha256":"6e65c6e492905a26efa0ec225b2732524e103bc20e1a471d4cfe4a4ebcb22e55","sha512":"dfd46b35e3d9c5d5a75a7bec2e99b550c5e66fa97ea4fa702e907e0b6e8b9c8b942988ba61216e7e11d8ab5658da27ea1bdebb8f390799de5dcccc301143d167","ssdeep":"192:22ItLgvXHyjswYjMilrQ4cC9qBet3Z3lfIhJGB7k5w3Va5R8lprnI7Z:2Mw6Q4l9qB63lghwVcw3Vsqp7IF","tlshash":"7b52a668f3f7a17545a62079902f2206b276655426cdc045b03fe8e51f2ce0f6a72fbe","first_seen":"2026-01-28T12:16:03.370249Z","last_seen":"2026-01-28T12:16:03.370249Z","times_seen":1,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panel-cdn.yektanet.com/media/CACHE/images/assets/image/image--d3caba17-a403-4216-99cb-a8b66ce405eb/90/300x200.jpeg","fqdn":"panel-cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /media/CACHE/images/assets/image/image--d3caba17-a403-4216-99cb-a8b66ce405eb/90/300x200.jpeg HTTP/1.1\r\nHost: panel-cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18300\r\nlast-modified: Wed, 14 Jan 2026 10:41:09 GMT\r\nx-rgw-object-type: Normal\r\netag: \"60a3f077f3b2c763fbcb1fef82a59f54\"\r\nx-amz-request-id: tx00000a4111f893018ee14-00697479cc-6f1b5d59-default\r\nx-zrk-us: 200\r\ncache-control: public, max-age=216000\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18300,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"60a3f077f3b2c763fbcb1fef82a59f54","sha1":"b0acbefb83bc50ffa7c646558050e515e3f77247","sha256":"e48d9c83bf5315959b75b040bdfdbf847bdec8ee4c8b4e6a5938434480cfd430","sha512":"fa3708a8a12049948bf851a047e22cf750ba5ac565ef944fea9031d1fd08f273814479e16c9e0e242401283b55ed678ac92212d9dd31a49466ab06b2a393c91d","ssdeep":"384:lrOekE1pgvxZcjApqr36MIIIJ7scZJDnnPA7SL38dYDiJl9dWq25pPT:lif0p8ZGAUr9Q7sc7nPA7sxDij9n25pb","tlshash":"8d82e171a23666f2385841701b40afb68ef51a173efc42ef7d9c61a521c5099909b4be","first_seen":"2026-01-28T12:16:03.371296Z","last_seen":"2026-01-28T12:16:03.371296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/images/loading/loading-logo-new.gif","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/images/loading/loading-logo-new.gif HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 46776\r\nlast-modified: Sun, 26 Jun 2022 08:34:03 GMT\r\netag: \"62b819fb-b6b8\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46776,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 74 x 40","md5":"f12d9360a009c18ea9cb53f92e757080","sha1":"5eda11a4b341a162dd4ceabf70b446eeb73f8fe1","sha256":"7d0bd203eae0dd525cd47f5a08a0ba4f4685788ffa1200c6880f9b40318a38a6","sha512":"f33310533e3df1637dd55df52c9a9cd954498b8a21c5195927c2b3c6dd626674079fb1e80f71c0a7f432bb34936320e2ffaed3884677fa71609a1152148dd417","ssdeep":"768:etP5D4tBZDQvsZXgRUKLZSMvdhm5jf5h2zzZvXtPDQYZ+sZCqwucExWkO7s7ddrl:j4F+YFAmH7","tlshash":"f623e820c385d3c2c2a67733595b9a282597cd97abaf430254fc8d8d99cf6ba306d037","first_seen":"2023-07-22T00:12:00Z","last_seen":"2026-06-13T23:40:04.914983Z","times_seen":20,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":86,"receive":173,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/templates_ver2/related/libs/3.css","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/templates_ver2/related/libs/3.css HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 May 2022 11:40:02 GMT\r\netag: W/\"628a2112-1e4\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ntransfer-encoding: chunked\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":484,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"175b748323ae39cdf5634312fcab89f7","sha1":"104642d81788b85551bae2d21159073ca79636e7","sha256":"483da7025890e018abd35fbd82a0d56c9ed09073d982506d9d9b8678e99bd07b","sha512":"e4d1ba6b36199b8d83b49d74ef33c5146f3478ff10eb8f59fabd51bc91f038a2620c10d31d77e35ed5e4e8a6446f1b183cdc8f932917d5b71c2963acdc78d5e9","ssdeep":"","tlshash":"3ef0e91365602bca940b5058aca72b3e2e392213270e7399d8507430e6dd19724f8475","first_seen":"2025-02-06T20:25:05.741515Z","last_seen":"2026-06-13T23:40:04.872618Z","times_seen":10,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/icons/set1/graph.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/icons/set1/graph.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 82\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Fri, 01 Apr 2011 11:59:41 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"a9c6f04d3ef68f5674c01ffc4e277f2a","sha1":"f80032f1d00a1c55241d1b40c2819bd5e09ad642","sha256":"c9e23cfdbe120b7bd60f70549acae5ac7a8deb1ca64aff8f64ac4ed698ee343f","sha512":"6f61b59bdf3c634f724dd91ceb12b746c835ec291411bea6ed1a21a9918792d69a0d9eba3bcc9b8f5a8c8b2150280f8127e5ec8195424fbf1d585af80f88b0b6","ssdeep":"","tlshash":"59a0120242c4a931c0808d744d154000d01b18204505464926a4a1bf9f0c62000b4510","first_seen":"2025-02-06T20:25:05.712748Z","last_seen":"2026-06-13T23:40:04.987062Z","times_seen":15,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":316,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/icons/set1/open-folder.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/icons/set1/open-folder.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 79\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Fri, 01 Apr 2011 11:59:46 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"040ae0d93076b2e153a9f559a4e93b03","sha1":"8b74265b6c11c18d180ef3f37b985c6a8e5186f6","sha256":"13d39b95c57156ef3cbfcd24e5c5bfcaba43b37f8f3ae8d7d997145258b25fbd","sha512":"a164cba78694764238f2dd0b7dbe49e02763ae91125d4664af1e41f033077c19a1dc86ca16ac1e0d4e9706f426013f7225e08c5670111e72952206f5039c4f05","ssdeep":"","tlshash":"72a024034f00f530c1004f3d0414c1005c0f5434140c45c71174015ff45c3700130514","first_seen":"2025-02-06T20:25:05.714251Z","last_seen":"2026-06-13T23:40:04.967034Z","times_seen":15,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":377,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=8GH7A9sZ","fqdn":"audience.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /api/v1/scripts/preview/validate/?app_id=8GH7A9sZ HTTP/1.1\r\nHost: audience.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 5\r\nallow: GET, OPTIONS\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization\r\naccess-control-allow-origin: https://p30download.ir\r\nstrict-transport-security: max-age=0\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nx-zrk-us: 200\r\nx-zrk-cs: BYPASS\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-15T01:36:59.657201Z","times_seen":77556,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ua.yektanet.com/api/analytics-event/v1/collect?aa=event\u0026abe=L\u0026abf=0636e460-8fea-4bdc-a284-9bc51880848d\u0026abj=1\u0026aed=pub\u0026abh=\u0026sv=4\u0026st=complete.js\u0026fis=1\u0026ffu=1\u0026ac=https%3A%2F%2Fp30download.ir%2Ffa%2Fentry%2F91787%2Ftelegram\u0026ae=%7B%7D\u0026ad=p30download.ir\u0026as=Telegram%206.4.2%20Win%2FLinux%2FmacOS%2BPortable%20%D8%AA%D9%84%DA%AF%D8%B1%D8%A7%D9%85%D8%8C%20%D9%BE%DB%8C%D8%A7%D9%85%20%D8%B1%D8%B3%D8%A7%D9%86%20%D8%B3%D8%B1%DB%8C%D8%B9%20%D9%88%20%D8%A7%D9%85%D9%86\u0026aef=8GH7A9sZ\u0026aec=10702\u0026ai=734bb731-9110-67d0-6af3-196a1585a5a9\u0026abw=1280\u0026abb=5847\u0026aby=1280\u0026abz=1024\u0026al=1280\u0026am=1024\u0026abk=%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20Telegram%20v6.4.2%20x86%2Fx64%20Win%2FLinux%2FmacOS%20%2B%20Portable%0A%D8%AA%D9%84%DA%AF%D8%B1%D8%A7%D9%85%D8%8C%20%D9%86%D8%B1%D9%85%20%D8%A7%D9%81%D8%B2%D8%A7%D8%B1%20%D9%BE%DB%8C%D8%A7%D9%85%20%D8%B1%D8%B3%D8%A7%D9%86%20%D8%B3%D8%B1%DB%8C%D8%B9%20%D9%88%20%D8%A7%D9%85%D9%86","fqdn":"ua.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"POST /api/analytics-event/v1/collect?aa=event\u0026abe=L\u0026abf=0636e460-8fea-4bdc-a284-9bc51880848d\u0026abj=1\u0026aed=pub\u0026abh=\u0026sv=4\u0026st=complete.js\u0026fis=1\u0026ffu=1\u0026ac=https%3A%2F%2Fp30download.ir%2Ffa%2Fentry%2F91787%2Ftelegram\u0026ae=%7B%7D\u0026ad=p30download.ir\u0026as=Telegram%206.4.2%20Win%2FLinux%2FmacOS%2BPortable%20%D8%AA%D9%84%DA%AF%D8%B1%D8%A7%D9%85%D8%8C%20%D9%BE%DB%8C%D8%A7%D9%85%20%D8%B1%D8%B3%D8%A7%D9%86%20%D8%B3%D8%B1%DB%8C%D8%B9%20%D9%88%20%D8%A7%D9%85%D9%86\u0026aef=8GH7A9sZ\u0026aec=10702\u0026ai=734bb731-9110-67d0-6af3-196a1585a5a9\u0026abw=1280\u0026abb=5847\u0026aby=1280\u0026abz=1024\u0026al=1280\u0026am=1024\u0026abk=%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20Telegram%20v6.4.2%20x86%2Fx64%20Win%2FLinux%2FmacOS%20%2B%20Portable%0A%D8%AA%D9%84%DA%AF%D8%B1%D8%A7%D9%85%D8%8C%20%D9%86%D8%B1%D9%85%20%D8%A7%D9%81%D8%B2%D8%A7%D8%B1%20%D9%BE%DB%8C%D8%A7%D9%85%20%D8%B1%D8%B3%D8%A7%D9%86%20%D8%B3%D8%B1%DB%8C%D8%B9%20%D9%88%20%D8%A7%D9%85%D9%86 HTTP/1.1\r\nHost: ua.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-length: 0\r\nset-cookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; Path=/; Domain=yektanet.com; Max-Age=315360000; HttpOnly; Secure; SameSite=None\ngearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; Path=/; Domain=yektanet.com; Max-Age=315360000; HttpOnly; Secure; SameSite=None\n_yngt=01KG28FF8AD32ZPMYKC55SYM93; Path=/; Domain=yektanet.com; Max-Age=315360000; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=0\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nx-zrk-us: 200\r\nx-zrk-cs: BYPASS\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/icon/software/windows/48x48.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/icon/software/windows/48x48.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nCookie: analytics_session_token=734bb731-9110-67d0-6af3-196a1585a5a9; analytics_token=eaf039a4-7723-92c5-eb3b-0d3d5c9210f1; yektanet_session_last_activity=1/28/2026; _yngt_iframe=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 1740\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Tue, 09 Aug 2022 07:09:04 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"6e6329dba91b2026d0b7173c0e27832e","sha1":"d85c4cef341b8fce401afcd3018d9f9d936a4c3d","sha256":"74b6660d7704c4a1a064b1ecfdb71e853d2e13585dd855b320d05697330d108c","sha512":"12b580177d74320d60e2db2820644d8635d926cdb100b0947496974bdd6ca0e0ac9b5bb1988b49ab2fe2658f3df5b7f900342b04b69f0bfd9e1f29a4558d8c5a","ssdeep":"","tlshash":"10310b6059005dd5c0565a2fa64e107cf4abe0a09520d760304dc3d7a9674170ccb8eb","first_seen":"2026-01-28T12:16:03.376043Z","last_seen":"2026-01-28T12:16:03.376043Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/icons/set3/usb.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/icons/set3/usb.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nCookie: analytics_session_token=734bb731-9110-67d0-6af3-196a1585a5a9; analytics_token=eaf039a4-7723-92c5-eb3b-0d3d5c9210f1; yektanet_session_last_activity=1/28/2026; _yngt_iframe=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 433\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Mon, 21 Aug 2023 12:46:09 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"02a4baf6a4d3282410d713abeb2ff8fc","sha1":"f840631ad9cdb50cb2f56cd50956244d51e19cdc","sha256":"45633e948c702a2b7eb1c75c35867e9ac4e2196f1a4385ecb6d3ff884faf8392","sha512":"e99f77dbe0d260cdbd9d85216823792952b6abe4d78dd71cd0d4bd464de628dea804cd7517873bb2fe7f116c2f74413d650151e56b86c9847c433887527f1465","ssdeep":"","tlshash":"70e02be8920b0532c9e4c7a272bb01f2ee3fcb384200c0043028e1221a8a40263cd6bb","first_seen":"2026-01-28T12:16:03.376845Z","last_seen":"2026-01-28T12:16:03.376845Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/templates_ver2/inline/billboard/billboard.css?1","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=inline\u0026t=inline\u0026notitle=1\u0026w=100%\u0026h=115\u0026theme=billboard\u0026hover=000000\u0026background=ffffff\u0026cid=2997106,2997532,2997813\u0026wr=special,random,random\u0026pid=124","date":"2026-01-28T12:15:31.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/templates_ver2/inline/billboard/billboard.css?1 HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=inline\u0026t=inline\u0026notitle=1\u0026w=100%\u0026h=115\u0026theme=billboard\u0026hover=000000\u0026background=ffffff\u0026cid=2997106,2997532,2997813\u0026wr=special,random,random\u0026pid=124\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 03 Mar 2024 11:55:09 GMT\r\netag: W/\"65e4651d-2fe\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ntransfer-encoding: chunked\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":766,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"2712fa0f8cd0af83958e066b6df1a85b","sha1":"49dbec5765677dbde45627cb65dab8b22a824a8c","sha256":"5e569ddd97cc7ed2adef1fbbba44d94cf22d137aeda55339fba3221272a2dd06","sha512":"1ee5e33f5abb2abc5da57ecd332d12df3a9360cf605b69694192dff9b8d5daf24c547fd1a3e251a228eb5c7a13cad5bc1fa0ebef0e0345c16d1f5f9abc4fd359","ssdeep":"","tlshash":"3a01fd9636c12080b19ff1acad6d93ea2e7e0186ee3f0e697c66727092098d01123448","first_seen":"2025-10-10T05:59:39.819222Z","last_seen":"2026-01-28T12:16:03.377648Z","times_seen":5,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/templates_ver2/related/libs/related.css?1","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/templates_ver2/related/libs/related.css?1 HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Feb 2024 08:15:45 GMT\r\netag: W/\"65dc48b1-68a\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ntransfer-encoding: chunked\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1674,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e463d7983c46d7d99969731a05e37b06","sha1":"ea15cd042cc0440f6ef0e63727367b5f5b8ff628","sha256":"cdf9c3ac3cdf8f875bcd2754260df022728804f0e6bd45ca9bafba9018dd16af","sha512":"7b437be3c2e54d4f8e11f04411e09353597c46888f24162dc49d6bf188c74a44c7ea4e97890cd0cb37aa27ba8f5f86853b96edca23bba80d3af44f592e3d97ff","ssdeep":"","tlshash":"4431dd16299a2440bb4fa291be959bf5553d0086fd6f0e7d35a131bc974b0c881b3e9c","first_seen":"2024-04-18T14:59:39Z","last_seen":"2026-06-13T23:40:04.915963Z","times_seen":20,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/logo.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/logo.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 6183\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Thu, 14 Apr 2011 16:00:00 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 47, 8-bit/color RGB, non-interlaced","md5":"fe90e82069749acc382b79c8c5980c96","sha1":"c130cbeacb5fa12815deaedbf1a11258cfe75cc2","sha256":"d98197379b4b56a830cec5bfb5ddedcc6072709a2166176aff36e23eeced5d01","sha512":"48e10bad58ba7aa71105929fe4ce28ddd995b71731348074f1ede9d61d878eb86280b881011d89930d73277826531f52e441d99067009337e0541ce7dfa948a0","ssdeep":"96:rIsCU9FlErhHXAjlYHOzByqAI5SIi6ALK3abj8ytoiLRHTm7a2YJykXZ:Eshlqhwjl7sqAHeY7TlfXZ","tlshash":"fed18dffbe6bcb600b38201d42a970e6485fba814a0a4295d698210d7793457dfc8def","first_seen":"2025-02-06T20:25:05.681803Z","last_seen":"2026-06-13T23:40:04.922112Z","times_seen":25,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":299,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/loading.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/loading.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 3279\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Mon, 26 Sep 2022 09:16:56 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3279,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 218 x 149","md5":"197082f0cdf1760a333e3a64cdf4ce0e","sha1":"f6e5894312c40ed278aa3d704ebd1be51f0ef81e","sha256":"d924d966d44cf7973b34c92c74dc68237fec423d578f2c9497eaa0790900d71e","sha512":"fc4f162616c69f8947d088c503c7543ad968273ffc6e152781dac6ca18a9c8de1fd3f20bd3fc9d0d73aef53077e60ec2cbbaf59db9e49d20a472197eb885b98e","ssdeep":"","tlshash":"f6610a4f7c3ce61dfe97423615661fdd4a6028faa0e411d9215e748c50352be104cdb6","first_seen":"2023-04-30T22:19:50Z","last_seen":"2026-06-10T00:18:30.234451Z","times_seen":75,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":518,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/ld-bullet.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/ld-bullet.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 68\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Thu, 09 Jun 2011 10:05:39 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 13 x 7","md5":"60f94c6c85a5e967a63656ab6dfe1819","sha1":"50598408dd6d0a6419d239edcd163856167131f1","sha256":"c612de325af4f23eb95b8ccdef4f7a80cefcc6c0cca715b8f63063f15dfc5900","sha512":"85293535a1cda32d56fa0a38458d6553505f03051c3dacb7d74f3db821ae60779b877b874f318315b9f2279b19f2b4cc91d844dd80e5a7c69dfa9833443569e6","ssdeep":"","tlshash":"04a022cbc0cb2280cc0032300383080020088088c80cb283000e22caa0c8ab308c3230","first_seen":"2025-02-06T20:25:05.689533Z","last_seen":"2026-06-13T23:40:04.918551Z","times_seen":11,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":393,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/colorbox/loading.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/colorbox/loading.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 2545\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Mon, 26 Sep 2022 07:35:59 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2545,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 24 x 24","md5":"4b3afb84b2b71ef56df09997a350bd04","sha1":"accdac8a7abeab0e21c49539aad0a973addb28ef","sha256":"9034d5d34015e4b05d2c1d1a8dc9f6ec9d59bd96d305eb9e24e24e65c591a645","sha512":"d65078b5d13873adb363472b5c358f6b42c128b530f8feba9776f8e4906cc97f20ee7bf1e823336cda8049147a9c7fa5e4016f07f96ec154f3774fbde1a564b6","ssdeep":"","tlshash":"de51e743e6a9fbe3cd7c013aee3c02c9764543e8ca2c6f38952bb5672509329a056a41","first_seen":"2023-04-05T06:54:01Z","last_seen":"2026-06-15T01:14:12.995616Z","times_seen":23338,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":420,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/fonts/yekanx/woff/IRANYekanX-Medium.woff","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=inline\u0026t=inline\u0026notitle=1\u0026w=100%\u0026h=115\u0026theme=billboard\u0026hover=000000\u0026background=ffffff\u0026cid=2997106,2997532,2997813\u0026wr=special,random,random\u0026pid=124","date":"2026-01-28T12:15:31.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/fonts/yekanx/woff/IRANYekanX-Medium.woff HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a/fonts/yekanx/fontiran.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: font/woff\r\ncontent-length: 37176\r\nlast-modified: Mon, 26 Feb 2024 05:52:25 GMT\r\netag: \"65dc2719-9138\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37176,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 37176, version 0.0","md5":"033a13033851a3160d5ab80803f05843","sha1":"dfb1c6e38a6fe3b3b262ba3b5a0699fbd16b9d0f","sha256":"eb79c9827629107223985eebfd0d65a500ea3e4d4fb2afacbc6d14589d16fe97","sha512":"b319a5533a1b8cf711a0af1b59002be9d17ece0aeea6ee0961b036f93e2f0bac5ac1f4c6af741cb906488e2497c2220500aac04a9bf48d294f5a1f5b1edba990","ssdeep":"768:6gLF1+WoRHxWauPu+Bz3/WffVz64v0ourAtxCu+EyO/5+swtj:6gZ1Bo/fCbkVRv1FxCtvOXwtj","tlshash":"e5f2f1a8abcf5a1803bffb57ea48617d7549829cd378be10a7f79820617baf04d44042","first_seen":"2023-06-01T20:10:04Z","last_seen":"2026-06-13T23:40:04.925605Z","times_seen":52,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/js/js-packed.v1.5.13.min.js","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/js/js-packed.v1.5.13.min.js HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 137313\r\nConnection: keep-alive\r\nCache-Control: public, max-age=604800\r\nExpires: Wed, 04 Feb 2026 12:15:29 GMT\r\nLast-Modified: Sat, 24 May 2025 09:03:54 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137313,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"83e16f7850046df9b275a7acbf9438a4","sha1":"99928e6c9c389878dead7fa162b1e811a5d64e7b","sha256":"d9242d8ad490294143e05bef926d7aa2d7c53a1bddfab1fbc174ed159bc81d30","sha512":"98eb2ef0265836817307e4b3903e1b52944dbd614a29992534895573e4c8d964345cd184f1fac03aee925d7a151119aa7486c3bf99f26c05a639c7193139ad1f","ssdeep":"3072:DIh8GgP3hujzwbhd3XvSiDQ47GK0ZJaJYoIxzc:Dy8G6RujcHX6MQ47GK0g","tlshash":"8bd318cdb286712657b731b9007f520bb237195d680e8018b129d9e6bcbca0e527bf7d","first_seen":"2025-06-24T06:37:40.356095Z","last_seen":"2026-06-13T23:40:04.983067Z","times_seen":15,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":136,"dns":1,"connect":70,"send":0,"wait":142,"receive":185,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.p30download.ir/software/32x32/2015/08/1438424541_operating-sysytems-windows8.png","fqdn":"img.p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 07:28:07 GMT","end":"Thu, 19 Mar 2026 07:28:06 GMT"},"fingerprint":{"sha1":"02:B8:46:C3:E8:35:6A:87:68:35:79:E8:F5:D9:F2:80:00:86:FF:5A","sha256":"9D:7C:54:59:6F:31:D4:21:EE:2D:AF:C1:5C:C2:5D:ED:65:E0:BB:B7:46:8F:A2:36:BF:ED:CF:4C:64:87:A3:01"}}},"request":{"raw":"GET /software/32x32/2015/08/1438424541_operating-sysytems-windows8.png HTTP/1.1\r\nHost: img.p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 638\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Sat, 01 Aug 2015 10:22:21 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"b00b5c42ffaf67c27946e6250a0587bf","sha1":"137345f9ae096552bf0aaec8f3a5a687d859a88c","sha256":"363f594d54439cd972092c4fb215ba9fdbe2c1f5d45c82e0b18e6b25fdf32aa6","sha512":"3e0fcdcc8d533ecb57ad55e8b60c620f57b8faedfc4db744d22b5f7d4358600d5fc022499d9b358f5f1a1538a38762513a81ef242902d9bec90d71e7414a99f4","ssdeep":"","tlshash":"ccf023a6e984be04c39c92c53c739a1de8270b5536d4920c00a5673af00ca02b4cd977","first_seen":"2025-02-06T20:25:05.6909Z","last_seen":"2026-06-13T23:40:04.954153Z","times_seen":6,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":221,"dns":65,"connect":75,"send":0,"wait":120,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"img.p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/images/refresh32.png","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026background=ffffff\u0026cid=2998050,2997105,2997157,2997898,2997525,2997538\u0026wr=rent,special,random,random,random,random\u0026pid=125","date":"2026-01-28T12:15:31.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/images/refresh32.png HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026background=ffffff\u0026cid=2998050,2997105,2997157,2997898,2997525,2997538\u0026wr=rent,special,random,random,random,random\u0026pid=125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2120\r\nlast-modified: Sun, 26 Jun 2022 08:34:03 GMT\r\netag: \"62b819fb-848\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"85e3485a7e09dc9369e67cc1ad61978b","sha1":"e04dde9542805fa06a54571117f06e671550f118","sha256":"e9ec01af29f4a0a04e153c6d072c663ef6360b5eb55f99f68ca8d2c7f91f7e84","sha512":"715abb63111742e85e83475c5d252178fa5b473ae9f87c2aa1bbf65ebff8440126f3ee6d7b5ea2a625e54972f29f36c0201c6e42e048f2c711120be5f46e5cd4","ssdeep":"","tlshash":"0741fa01ef51189065dee80474eee53fc2765ed0daf4dda479ebc81217a0266094e4cd","first_seen":"2023-11-27T16:58:27Z","last_seen":"2026-06-13T23:40:04.912767Z","times_seen":415,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/telegram","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T12:15:28.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /fa/entry/91787/telegram HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=0\r\nExpires: Wed, 28 Jan 2026 12:15:29 GMT\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160849,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19811)","md5":"ee6ceacdc695ec07e904449c50d0509f","sha1":"8e1c86b60190799bddfa638234789d6acbd7ca65","sha256":"850f5c6ee733654c2fb1790ad4bb717515d78cbe60e54b8d98b75991297489b3","sha512":"1b2b759119f6e322ce3da111b4d104b30ae1bbb441ac4e6f72d5847bf2722a5833c55e9cae38c7dad68da1637510610914af46e87652ccc71d6460469cdc5b4f","ssdeep":"3072:sBn4icT4eLhM4DKV1itGBhe8tBLkJYE/Hbnc1eExbRAb/:an4icT4ea4DKritGBhjtBLkJYEI1eExw","tlshash":"a1f321e7a76c55330b25834a44c4392cd2534c0bdac2ce82fcb54f3eb566ba37a1656b","first_seen":"2026-01-28T12:16:03.383988Z","last_seen":"2026-01-28T12:16:03.383988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":214,"dns":66,"connect":69,"send":0,"wait":217,"receive":146,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/templates_ver2/libs/w3.css","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/templates_ver2/libs/w3.css HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 May 2022 11:40:02 GMT\r\netag: W/\"628a2112-76d5\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ntransfer-encoding: chunked\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30421,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"00ec3d9a9598e53645c8f719b70094ad","sha1":"9d643d24c39b40b460dc4d4e8b55a8e1994edc2e","sha256":"29a6b9e3be5edb6fb4d743bc9a0d4fe397b1ae63b1ddf949bd0d8e8a4dc58a9f","sha512":"19b4b9c5651a759bb36f8d91fef790b232aa68b606a5e7bca12fe0be092302f43c9092032533ba28d22c25b661361a2297677a3b2dcd58763ad6ab9dd371a8a3","ssdeep":"384:EHHL1VeCwIQOHCrQPrsqZ3F/AfbttUg+GK1q8Caro64Cb+dO8:EHHxr1QOHngAl1q8Caro64Cb+d1","tlshash":"10d23022fbc61138251f8675a095f7fc5b2b5581ef9b0bba7130373843864c2a797e49","first_seen":"2023-04-15T20:38:35Z","last_seen":"2026-06-13T23:40:04.970004Z","times_seen":20,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"panel.kaprila.com/storage/upload/02eda71923de30a69cfaadbb1457ea0c61cef2d0/2025/07/19/687b68bcb3b93.webp","fqdn":"panel.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /storage/upload/02eda71923de30a69cfaadbb1457ea0c61cef2d0/2025/07/19/687b68bcb3b93.webp HTTP/1.1\r\nHost: panel.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23880\r\nlast-modified: Sat, 19 Jul 2025 09:43:24 GMT\r\netag: \"687b68bc-5d48\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23880,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"57d230f807ab8d0ef7d5d10bce2decf1","sha1":"7c69809fa9a43592549e36a03c44aa693d853b09","sha256":"bb21e65be5e77565f6fe14b5629190c0643f288d0f2fb3320805da89a36ac1a4","sha512":"ce6f0eaffa426ba7b37605f4774c969c6d327c33652869eaf7cb14a80046283b3f097ef3892a77c347e3e9f1afc72a0108625058a8819f57c716372aed073f5f","ssdeep":"384:WgSaKh3nU+xCVLmlbd1dUYW0xG0JrY2+soyZFpPsbI9bi6RcPlJGxi0zSbI:jSae3JBbLdUYW+qsozI9u6RcNJ0Ss","tlshash":"36b2e194694cc6f9a2843613d37f36051337ceca42216e7d99c9de88e83b06ebe03d65","first_seen":"2026-01-28T12:16:03.38567Z","last_seen":"2026-01-28T12:16:03.38567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":237,"dns":33,"connect":87,"send":0,"wait":85,"receive":87,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.p30download.ir/software/32x32/2022/08/1660114662_48x48.png","fqdn":"img.p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 07:28:07 GMT","end":"Thu, 19 Mar 2026 07:28:06 GMT"},"fingerprint":{"sha1":"02:B8:46:C3:E8:35:6A:87:68:35:79:E8:F5:D9:F2:80:00:86:FF:5A","sha256":"9D:7C:54:59:6F:31:D4:21:EE:2D:AF:C1:5C:C2:5D:ED:65:E0:BB:B7:46:8F:A2:36:BF:ED:CF:4C:64:87:A3:01"}}},"request":{"raw":"GET /software/32x32/2022/08/1660114662_48x48.png HTTP/1.1\r\nHost: img.p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 858\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Wed, 10 Aug 2022 06:57:42 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"d816baa0e3236eb08d343002c86b37fd","sha1":"10e0852de67c89acab709e79aec97e2f0dd9b489","sha256":"857ef3dbe14b942ff4df8fc76c96d4f36cb288972eaa74227abba3b7af6101de","sha512":"2ec246f59c41b380f0e701b3bb36a9752ac34fc1a5b7497c11dde1195050d164b5b54516fbb3e8e3292bb68a3a787eaaffaaa72555feabb965ffa12f1707c506","ssdeep":"","tlshash":"3b1196b420448ba45a3963305623496e3853405ac23020c87e61a5d9671ab44654624f","first_seen":"2025-02-06T20:25:05.694692Z","last_seen":"2026-06-13T23:40:04.976826Z","times_seen":6,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":226,"dns":62,"connect":78,"send":0,"wait":123,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"img.p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/page/files/final_qi1.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /page/files/final_qi1.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 204399\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Sat, 31 May 2025 19:36:16 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204399,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"185785f8045f9b260c6b39d3aaacf3ef","sha1":"491f56146ede38843bf0e485b2ad7d4a7592d256","sha256":"d3d6c84773f59e513c0aa205d2d941db2c2f1b722427bda07df82b067f05010c","sha512":"da92534a62654d826946a60873640ab1a1633b697a6cf6021967476e15ad93909062a443704ef31aa07760a3a3b219d1d5139c2901801b523ae3c36cd2d410e6","ssdeep":"3072:nYjElAv4MgDrUetPeCtcDvp0EBQurCnzZh1zFCLnEIfFsJsy0IKKuvbA3x4u2HPR:nYQwJvpRQjZ7iEIyJHN3uUh6HkA6RI/","tlshash":"1b1412ac09158799d06d36ef71cb0e080d2ebc7311c3c9be8c15b7a66318bed3b98652","first_seen":"2025-06-24T06:37:40.288181Z","last_seen":"2026-02-13T21:59:16.900454Z","times_seen":9,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":118,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/fonts/yekanx/woff/IRANYekanX-Medium.woff","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/fonts/yekanx/woff/IRANYekanX-Medium.woff HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a/fonts/yekanx/fontiran.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: font/woff\r\ncontent-length: 37176\r\nlast-modified: Mon, 26 Feb 2024 05:52:25 GMT\r\netag: \"65dc2719-9138\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37176,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 37176, version 0.0","md5":"033a13033851a3160d5ab80803f05843","sha1":"dfb1c6e38a6fe3b3b262ba3b5a0699fbd16b9d0f","sha256":"eb79c9827629107223985eebfd0d65a500ea3e4d4fb2afacbc6d14589d16fe97","sha512":"b319a5533a1b8cf711a0af1b59002be9d17ece0aeea6ee0961b036f93e2f0bac5ac1f4c6af741cb906488e2497c2220500aac04a9bf48d294f5a1f5b1edba990","ssdeep":"768:6gLF1+WoRHxWauPu+Bz3/WffVz64v0ourAtxCu+EyO/5+swtj:6gZ1Bo/fCbkVRv1FxCtvOXwtj","tlshash":"e5f2f1a8abcf5a1803bffb57ea48617d7549829cd378be10a7f79820617baf04d44042","first_seen":"2023-06-01T20:10:04Z","last_seen":"2026-06-13T23:40:04.925605Z","times_seen":52,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/fonts/ttf/IRANSansWeb_Light.ttf","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/fonts/ttf/IRANSansWeb_Light.ttf HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: application/x-font-ttf\r\nContent-Length: 57028\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000\r\nExpires: Thu, 28 Jan 2027 12:15:29 GMT\r\nLast-Modified: Fri, 04 Jan 2019 19:06:30 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57028,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, digitally signed, 15 tables, 1st \"DSIG\", 17 names, Microsoft, language 0x409, Copyright (c) 2019 by www.fontiran.com (Moslem Ebrahimi). All rights reserved.RegularIRANSansWeb","md5":"e8ff3f7167961a35e98db2fd15bb37ca","sha1":"31028b3f6c2518fbbbb7f77443a46bd11f503c12","sha256":"a9c585e9ff0a89147f33909f5761014453ca7460e9aa7bad26951c4483ce6250","sha512":"c8d657a95e3c2d36b85dc144c554ca1111ef150580e7fe1627cc1e20a09ee986cf1c4fe061fb33d6bad6e79672d1965b393ff5c4e944df4ccd008c0e7adedf7f","ssdeep":"1536:iAw8Bmnn9c9JPXnZ3r0D47RkA3tuzLo5WEuO+H2it:FfYi9JPqDWRkAMo5WjpZt","tlshash":"3a438d0fa723eb0cd2262e74cf3a03412af69d25ef7a824fcd6f691964c34944969758","first_seen":"2025-02-06T20:25:05.670439Z","last_seen":"2026-06-13T23:40:04.927755Z","times_seen":16,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":190,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/js/6.0.0/p30download.com/article.v1.js?v=71a743376ddc2f691058671ac5ad56fd","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /js/6.0.0/p30download.com/article.v1.js?v=71a743376ddc2f691058671ac5ad56fd HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 27 Jan 2026 08:27:54 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"32efb071aa8673e8de9bb54970eb9919\"\r\nx-amz-request-id: tx00000ac293e9bdef8aae0-006979eb91-6e4f2033-default\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\nstrict-transport-security: max-age=0\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155207,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65434)","md5":"32efb071aa8673e8de9bb54970eb9919","sha1":"a69929738c7895c37b888e977c6ae09cd3ec9506","sha256":"bfdf9af0aae2de32c008adbec68be8f261a3c28f64ab7045449c7aa53522a200","sha512":"af2827094f367b96459b471c9e4992bc2a94ed3324a64a54153fd79e6db92023ad1e67a2bc0af4fd6ae670b71201467f595bf83ea133ad62836dcffc565269ca","ssdeep":"1536:GmOyJ2FCJJ42HnILmgzbRnIxTZ+A63E42J2Akc5+MaZSXvRb8FGV6BXH7rLQYVLN:pOCrJ42HCztyb03YWl7rVqXBqfrhL","tlshash":"fde3819cb2c2b46243a37078506f240af37b2995648d8490f739d8e5bdb994e6133fbd","first_seen":"2026-01-28T12:16:03.388749Z","last_seen":"2026-01-28T12:16:03.388749Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/fonts/IRANSansWeb.woff2","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /fonts/IRANSansWeb.woff2 HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31320\r\nlast-modified: Tue, 02 Sep 2025 13:54:28 GMT\r\netag: \"68b6f714-7a58\"\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=0\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31320, version 4.13107","md5":"c6f46673e2449eb071e2c098c5190c2a","sha1":"d9ba337d1d40aaeb82e51906ddaa0492239d291a","sha256":"224e0a53fcc1456dbe75f0ae0bd200131609055790eaa109222ac0d0b8045a5d","sha512":"785bb16b33546d5bb0d9b9c5cadd69c8e4016521541e1cceccf964abf3858cec6a232a42cd386f73bf513b6a549705faa4e6cc1676586f711d0ba8660cee7070","ssdeep":"768:lF7mr8mz60mCTXpVIAQfwkj3TQMfWoqClQX4A:n7mr8me7sXpV2jDQglq","tlshash":"c3e2f128f9a1c859c46a4bd26cbed642bbc90bc6c70f76e57553ce1e4c3e4c44146ed8","first_seen":"2023-05-28T22:37:43Z","last_seen":"2026-06-13T23:40:04.972181Z","times_seen":153,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/page/files/ezgif.com-optimize.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /page/files/ezgif.com-optimize.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 171074\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Mon, 29 Dec 2025 07:46:06 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171074,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"39afaa2303c4351ba003dae4b8d05b80","sha1":"6dc687df90ad0c5a2488237274e4ad7ebacda797","sha256":"1fc39069f3fba328aad014731a9d35bfaed92220c88201f6381b60d7cb39c6f7","sha512":"5db13cb74d0893a7bb9905fa6a570f6bef03760cb18087d4b66ad83655361b5434173d38c0dd0e9b6bfbf4ac7b370bf052d6ce79efda84191433e7cb445ef4c5","ssdeep":"3072:Pc5lW+r51kt3Y15BWCv2UqReoXizD5f6j4UZOY/ngZb:E5lW+VaeWCv2Ueg9fc4UIY/nmb","tlshash":"89f312bf89b9d08ce55b27b146d95ad32b067428da8e9c2671cc20e94f0477f3de025e","first_seen":"2026-01-28T12:16:03.390695Z","last_seen":"2026-02-13T21:59:16.902624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":127,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"native-scripts.yektanet.com/public/chunk/124-3d91c98869f8e7334774.js","fqdn":"native-scripts.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /public/chunk/124-3d91c98869f8e7334774.js HTTP/1.1\r\nHost: native-scripts.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 18 Jan 2026 13:12:08 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"f2da526844900a7485a25bc72ad91719\"\r\nstrict-transport-security: max-age=0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: public, max-age=2592000\r\nx-cache-status: MISS\r\nx-zrk-us: 200\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6440)","md5":"f2da526844900a7485a25bc72ad91719","sha1":"fab780ec8aef0667f1ed935eee1f03c42d41bbfd","sha256":"c420e77a1eda5ad8b47f3ca7240ee75a9b24bd8a4a1d84e1d28ed3b895fc5a02","sha512":"49ececdcac939359fbb0894e64bd6b9002fe5614e4e577dd385717aafe56a7cd757018801980ecd669a9524caffaa836107a7cb29c1c02ba4eaa7aaf5192b841","ssdeep":"96:rL/q1o7LVJhhcWiK+yHT40ewYsxAbaSH17t7R+G4SJ3P6u+u:re1mHT49wYsGbamhBRLSu","tlshash":"64d1c6887296b1a4036226f0413b450ad33f773c584d6c75f394f0d2ad7926e475abb8","first_seen":"2026-01-28T12:16:03.39151Z","last_seen":"2026-06-13T23:40:04.931026Z","times_seen":35,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ua.yektanet.com/cookie/set","fqdn":"ua.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ua.yektanet.com/cookie/iframe/","date":"2026-01-28T12:15:30.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /cookie/set HTTP/1.1\r\nHost: ua.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ua.yektanet.com/cookie/iframe/\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-credentials: true\r\nset-cookie: gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 26-Jan-36 12:15:31 GMT\nanalytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 26-Jan-36 12:15:31 GMT\r\nlast-modified: Wednesday, 28-Jan-2026 12:15:31 GMT\r\nstrict-transport-security: max-age=0\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nx-zrk-us: 200\r\nx-zrk-cs: BYPASS\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d14a648b772fa57372b9f6d6d51f5dc","sha1":"8e50c5333b7394226c6dbc4b071fccbc2dc0248c","sha256":"ec21658a90a7c853a0a9a1dade7a153d9181dbdde71f3a95668c2d533da44e58","sha512":"52a53b8a104333e4d80fc9cffdc553c4c4dc2ca04e77cbf7ced819e292e835bca5c36fa8d6fcea7f6c07905baf43bec559042a10a2d93bb6a74361c4bba83ac0","ssdeep":"","tlshash":"14a02232008a00ef0cc0e82000200c2e3c08a3080083800cab8ebfa08b280a30202000","first_seen":"2026-01-28T12:16:03.392364Z","last_seen":"2026-01-28T12:16:03.392364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":770,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/assets/images/yektanet-logo.webp","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /assets/images/yektanet-logo.webp HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1504\r\nlast-modified: Tue, 02 Sep 2025 13:54:27 GMT\r\netag: \"68b6f713-5e0\"\r\nstrict-transport-security: max-age=0\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2083a875751e9654db5284691a766fab","sha1":"af1b6c9cf21c172a577491331e8d6168d0e656cf","sha256":"da415ff94c184d90f39ae53aaa65ffa7332ed22660e17ee6988fc23da80205e5","sha512":"6450541884c2c96be95762a9e75f91692dfc103359468dad52e6bded6dd5c3f2dd633154bef2a96d0d6ba76e2e67afea5ee0a860588daa5982d6d39eb0422c0a","ssdeep":"","tlshash":"a7312c1cbdcb5d0081d2111b82d413e9970d91609abf0b7993579920001f274fdda1ba","first_seen":"2023-10-03T22:56:26Z","last_seen":"2026-06-13T23:40:04.92621Z","times_seen":37,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jamssp.yektanet.com/api/v1/ads/web","fqdn":"jamssp.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"POST /api/v1/ads/web HTTP/1.1\r\nHost: jamssp.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 682\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://p30download.ir\r\nset-cookie: analytics_global_token=01KG28FEYVEDF0F51TGFFA0TXQ; Path=/; Domain=yektanet.com; Max-Age=315360000; HttpOnly; Secure; SameSite=None\ngearbox_ad_token=01KG28FEYVEDF0F51TGFFA0TXQ; Path=/; Domain=yektanet.com; Max-Age=315360000; HttpOnly; Secure; SameSite=None\n_yngt=01KG28FEYVEDF0F51TGFFA0TXQ; Path=/; Domain=yektanet.com; Max-Age=315360000; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding, Origin\r\nstrict-transport-security: max-age=0\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nx-zrk-us: 200\r\nx-zrk-cs: BYPASS\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11415,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fb2b66cf0a2ba813ca1f7233e889d50e","sha1":"3aef48a6aa4adf169a3cde9678e7ee870c600bd0","sha256":"f4d53fcd8595ff6bd374ab5fd30bee35c342fbb61a0f85804022f56a239d3be3","sha512":"7be518d62ca456af72037fc99e4ab14f21d4d367924470424f2cb47cd2065395eaf3fb9389abf2c90af2eff7cad08a00984df6ad587ded37ece73fb6c3454573","ssdeep":"192:GQQTua56VQHx20QQTua5TV9Dgw8vD3gQTua5Id9cxgQTua5Id9eFbhuZFmi:GQ1VQHx20QsV6pgbd9cxgbd98C","tlshash":"f6321972872cb0b39b83b61238df3d9ecf0b21169460dfd8927fc91503502ad25f992a","first_seen":"2026-01-28T12:16:03.393907Z","last_seen":"2026-01-28T12:16:03.393907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":26,"connect":20,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/fonts/ttf/IRANSansWeb_Light.ttf","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/fonts/ttf/IRANSansWeb_Light.ttf HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: application/x-font-ttf\r\nContent-Length: 57028\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000\r\nExpires: Thu, 28 Jan 2027 12:15:30 GMT\r\nLast-Modified: Fri, 04 Jan 2019 19:06:30 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57028,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, digitally signed, 15 tables, 1st \"DSIG\", 17 names, Microsoft, language 0x409, Copyright (c) 2019 by www.fontiran.com (Moslem Ebrahimi). All rights reserved.RegularIRANSansWeb","md5":"e8ff3f7167961a35e98db2fd15bb37ca","sha1":"31028b3f6c2518fbbbb7f77443a46bd11f503c12","sha256":"a9c585e9ff0a89147f33909f5761014453ca7460e9aa7bad26951c4483ce6250","sha512":"c8d657a95e3c2d36b85dc144c554ca1111ef150580e7fe1627cc1e20a09ee986cf1c4fe061fb33d6bad6e79672d1965b393ff5c4e944df4ccd008c0e7adedf7f","ssdeep":"1536:iAw8Bmnn9c9JPXnZ3r0D47RkA3tuzLo5WEuO+H2it:FfYi9JPqDWRkAMo5WjpZt","tlshash":"3a438d0fa723eb0cd2262e74cf3a03412af69d25ef7a824fcd6f691964c34944969758","first_seen":"2025-02-06T20:25:05.670439Z","last_seen":"2026-06-13T23:40:04.927755Z","times_seen":16,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":120,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ua.yektanet.com/cookie/iframe/","fqdn":"ua.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /cookie/iframe/ HTTP/1.1\r\nHost: ua.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Wednesday, 28-Jan-2026 12:15:30 GMT\r\nstrict-transport-security: max-age=0\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nx-zrk-us: 200\r\nx-zrk-cs: BYPASS\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2803,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"c97cc26d56ba27b7b0a6bd4efcc4c9a4","sha1":"9149ed8c6fa7abf7eae450ca3452099eaff75885","sha256":"ec23baab8cd3483c4877e0e191853c7566fef52363c7abf347286f63a93b9c99","sha512":"e778bdc6229544f0fc6c4c0f5cf0ed0e9b53fbab5b644d8e07dd30da728dd1098aa9a43f16d8b8c5b14d99d9dd30490c35672525e2ad5aad5b683d4f5f36665d","ssdeep":"","tlshash":"09519c6e18e611a5502b70799f9f5214b531902723e8cf643c0cd392af9447a8faa7ed","first_seen":"2023-09-16T19:32:50Z","last_seen":"2026-06-14T03:51:49.381159Z","times_seen":306,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/fonts/IRANSansWeb.woff2","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /fonts/IRANSansWeb.woff2 HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31320\r\nlast-modified: Tue, 02 Sep 2025 13:54:28 GMT\r\netag: \"68b6f714-7a58\"\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=0\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31320, version 4.13107","md5":"c6f46673e2449eb071e2c098c5190c2a","sha1":"d9ba337d1d40aaeb82e51906ddaa0492239d291a","sha256":"224e0a53fcc1456dbe75f0ae0bd200131609055790eaa109222ac0d0b8045a5d","sha512":"785bb16b33546d5bb0d9b9c5cadd69c8e4016521541e1cceccf964abf3858cec6a232a42cd386f73bf513b6a549705faa4e6cc1676586f711d0ba8660cee7070","ssdeep":"768:lF7mr8mz60mCTXpVIAQfwkj3TQMfWoqClQX4A:n7mr8me7sXpV2jDQglq","tlshash":"c3e2f128f9a1c859c46a4bd26cbed642bbc90bc6c70f76e57553ce1e4c3e4c44146ed8","first_seen":"2023-05-28T22:37:43Z","last_seen":"2026-06-13T23:40:04.972181Z","times_seen":153,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.p30download.ir/software/32x32/2021/10/1633792355_win11.png","fqdn":"img.p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 07:28:07 GMT","end":"Thu, 19 Mar 2026 07:28:06 GMT"},"fingerprint":{"sha1":"02:B8:46:C3:E8:35:6A:87:68:35:79:E8:F5:D9:F2:80:00:86:FF:5A","sha256":"9D:7C:54:59:6F:31:D4:21:EE:2D:AF:C1:5C:C2:5D:ED:65:E0:BB:B7:46:8F:A2:36:BF:ED:CF:4C:64:87:A3:01"}}},"request":{"raw":"GET /software/32x32/2021/10/1633792355_win11.png HTTP/1.1\r\nHost: img.p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 2330\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Sat, 09 Oct 2021 15:12:35 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced","md5":"a974bb713a8c4a0a30a5bfdb08ecf0d7","sha1":"7b866abe3fa94b2447b1dafb50c6243948c7e76e","sha256":"fe608fc0c0e0dfec48a258c98ac493ca86ad7c164cb99ef0618553497affdc4b","sha512":"81540ba176d1b7d00a5ffdf32b2e4c8e3e58831cd4364896a9eb1f3ff3d27f05d14aab8d49228219e22276c3ec956ac34aabc5983a1e3bc53675d42f8676fd17","ssdeep":"","tlshash":"6141ea3eaac028521244e69550f9c10bfe761b817ae491b5246e992708b82b6039c0db","first_seen":"2025-02-06T20:25:05.677173Z","last_seen":"2026-06-13T23:40:04.939253Z","times_seen":6,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":215,"dns":64,"connect":71,"send":0,"wait":114,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"img.p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/fa/entry/91787/dl.php?t=1260105\u0026g=2","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /fa/entry/91787/dl.php?t=1260105\u0026g=2 HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 3526\r\nConnection: keep-alive\r\nCache-Control: public, max-age=0\r\nExpires: Wed, 28 Jan 2026 12:15:30 GMT\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3526,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (3051)","md5":"4598388e78148b4305c7394c30f3d18a","sha1":"500da7e8acf8e6666d98cb1896ca8e5e1015ae2d","sha256":"0a0308ec2c168a44712e735c625a089e746e75af481b04d0ac4a75dcc8ddaf36","sha512":"ae0095674f24fe7282c055b28678c6739e9efcb529ecd6e340855ec56ef6b92875e24e2058cc4736d4b23fccded880750efcc5359ee302adb66947e4162daaa7","ssdeep":"","tlshash":"da71ffd3d250d26f1b6287e4a259d239e027220feba1c5c5bdf043f5d125e9f203a8a7","first_seen":"2026-01-28T12:16:03.395947Z","last_seen":"2026-01-28T12:16:03.395947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/show.js.php","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"POST /a/show.js.php HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 390\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":390,"data":"ref=p30download.ir\u0026page_title=Telegram%206.4.2%20Win/Linux/macOS+Portable%20%D8%AA%D9%84%DA%AF%D8%B1%D8%A7%D9%85%D8%8C%20%D9%BE%DB%8C%D8%A7%D9%85%20%D8%B1%D8%B3%D8%A7%D9%86%20%D8%B3%D8%B1%DB%8C%D8%B9%20%D9%88%20%D8%A7%D9%85%D9%86\u0026page_url=https://p30download.ir/fa/entry/91787/telegram\u0026ids=kaprila_p30download_ir_related-top-post,kaprila_p30download_ir_inline,kaprila_p30download_ir_related"}},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ntransfer-encoding: chunked\r\nx-powered-by: PHP/8.0.11\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2086,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (2086), with no line terminators","md5":"5b305be649af0101865a903adc66ebbf","sha1":"151be7eb306b15579b6eb8d677f22661feb8ba30","sha256":"78e29e0f650c196e652d7b5d3416fcf4bf5148dfc7750e197ccb952e958bb739","sha512":"81a1eba23be1e6dd5970981ed36d5a25aecce3a57bbc1043d43a42875298679e430ea2ed0fbe2783e2e96c9781f64042581a12258f59d6e635920e8fb80b09cf","ssdeep":"","tlshash":"804104f3e1a64d1c7def00b7d0e51b54d421780aa9228ea4b470bb39b07424234fd59e","first_seen":"2026-01-28T12:16:03.396763Z","last_seen":"2026-01-28T12:16:03.396763Z","times_seen":1,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":187,"dns":1,"connect":85,"send":0,"wait":165,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=inline\u0026t=inline\u0026notitle=1\u0026w=100%\u0026h=115\u0026theme=billboard\u0026hover=000000\u0026background=ffffff\u0026cid=2997106,2997532,2997813\u0026wr=special,random,random\u0026pid=124","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a//templates_ver2/templates.php?ref=p30download.ir\u0026id=inline\u0026t=inline\u0026notitle=1\u0026w=100%\u0026h=115\u0026theme=billboard\u0026hover=000000\u0026background=ffffff\u0026cid=2997106,2997532,2997813\u0026wr=special,random,random\u0026pid=124 HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ntransfer-encoding: chunked\r\nx-powered-by: PHP/8.0.11\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4355,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (836)","md5":"f29a4895e7c7502d03bbc67196df22a1","sha1":"846c883c4cbaa234a82675e35f469e11463e2add","sha256":"5e2e891a1a7b0b0252d41667f7aae9b20d27aef6542a15fe45b1ccd8e18a1954","sha512":"50036c24a065ff07a855f530616c774117515c4bbbd68c02c892b76d0148ccd3929e510e31822fa2b0304b9862d37653dbc1f311e83be67782a420ceebc56c58","ssdeep":"96:nqC37qqKPgHif61B3hgpNV3ChLFgWTo7xMiXuJ/:775KiiSz3kNJChL9CxMcuJ/","tlshash":"61918897cd0e49360540401be1bab7ad31173f0bd951dc88f6da4a3c15bcf2611e8e9e","first_seen":"2026-01-28T12:16:03.397618Z","last_seen":"2026-01-28T12:16:03.397618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/fonts/ttf/IRANSansWeb_Bold.ttf","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/fonts/ttf/IRANSansWeb_Bold.ttf HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: application/x-font-ttf\r\nContent-Length: 60856\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000\r\nExpires: Thu, 28 Jan 2027 12:15:30 GMT\r\nLast-Modified: Fri, 04 Jan 2019 19:06:33 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60856,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, digitally signed, 15 tables, 1st \"DSIG\", 15 names, Microsoft, language 0x409, Copyright (c) 2019 by www.fontiran.com (Moslem Ebrahimi). All rights reserved.IRANSansWeb Bold:V","md5":"ebec177a9eccde9d5a4fb510ff1d1d8e","sha1":"2e27d61c271db43af8a3f1860b5d48f5be862246","sha256":"81dae4f6964f8d9bdb5674c922de896b21b1444a2da0f3bc92e26467c6094e94","sha512":"e4ce36b2a6245a86ca950409ddae711e34ea16596c91b77dcb5c8b5eca2e773a3c6777f813ad1bfbc7f4d50203876dec9b90ee88fa9d82d827d5aee630bc4e09","ssdeep":"768:pDIzMr6TwuSxa3sjBFIzPZMgyTwkpooBo7jiDjvFAVPmCfrOjCEwg1P6QRymstr:NV6suSn6zP3QTYiDjvFAVPNQ8VQRyn","tlshash":"d0538d0b6362cb09e2324f7cdbb5532237768d14eb76c32fe845a51aa8831c55af47a4","first_seen":"2023-04-15T20:38:35Z","last_seen":"2026-06-13T23:40:04.87382Z","times_seen":19,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":114,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/assets/images/yektanet-logo.webp","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /assets/images/yektanet-logo.webp HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1504\r\nlast-modified: Tue, 02 Sep 2025 13:54:27 GMT\r\netag: \"68b6f713-5e0\"\r\nstrict-transport-security: max-age=0\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2083a875751e9654db5284691a766fab","sha1":"af1b6c9cf21c172a577491331e8d6168d0e656cf","sha256":"da415ff94c184d90f39ae53aaa65ffa7332ed22660e17ee6988fc23da80205e5","sha512":"6450541884c2c96be95762a9e75f91692dfc103359468dad52e6bded6dd5c3f2dd633154bef2a96d0d6ba76e2e67afea5ee0a860588daa5982d6d39eb0422c0a","ssdeep":"","tlshash":"a7312c1cbdcb5d0081d2111b82d413e9970d91609abf0b7993579920001f274fdda1ba","first_seen":"2023-10-03T22:56:26Z","last_seen":"2026-06-13T23:40:04.92621Z","times_seen":37,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panel-cdn.yektanet.com/media/CACHE/images/assets/image/k2_14--f221136f-cb28-49d4-99b8-958a95ac664e/90/300x200.jpeg","fqdn":"panel-cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /media/CACHE/images/assets/image/k2_14--f221136f-cb28-49d4-99b8-958a95ac664e/90/300x200.jpeg HTTP/1.1\r\nHost: panel-cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19706\r\nlast-modified: Fri, 03 Oct 2025 09:12:09 GMT\r\nx-rgw-object-type: Normal\r\netag: \"172906eb68363498ef7e78cf47ac7532\"\r\nx-amz-request-id: tx0000021ed8b455cef370a-00697479fa-700d8e57-default\r\nx-zrk-us: 200\r\ncache-control: public, max-age=216000\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19706,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"172906eb68363498ef7e78cf47ac7532","sha1":"2d09def5301c1394f015bb2a5139ff183c60d2be","sha256":"7dcb6a537d6a6c0eb17784ba96e66a47bc87f0c9a618733a95edd170471ade10","sha512":"dba1319bd23143088a594d709d15af14b52312587089b82a473237d24b518f282d68c2fc02c0a0d57c5c87eb49554f7d5aefa35e1ef9e94e7901794d5f08b610","ssdeep":"384:9DT3avF8S6IA4+W6bvU1aeHzIA1Vz2fYTCVWH94lQyCSn5NLc7e0T:ZTk8S6m902tAXQyCSnnQv","tlshash":"2292e1b1798156c97b17f2f1d039afea1ac2d8605f6c1b9ea0fccea4ae085c425b40d4","first_seen":"2026-01-28T12:16:03.399441Z","last_seen":"2026-01-28T12:16:03.399441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/launcher-badge-gif.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/launcher-badge-gif.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: image/png\r\nContent-Length: 8485\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:29 GMT\r\nLast-Modified: Wed, 21 Sep 2022 12:54:33 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 140, 8-bit/color RGBA, non-interlaced","md5":"83f104b8a0ef84a20e56ab853fdffdd5","sha1":"7d227a8e48397c9e264ea55f402c28966a689baa","sha256":"0808d9b90fc3088a850e8356ea2e72a45a3d41a8e6a9889f7eecdc80dd7fcf33","sha512":"37f427b942960f62af66d59836b806a6c8249f9197da26a2fc76d08aabaa9618eef26141637e236269cf9715358282f5b4f86ae3dd71b0bbe0f899963289eaba","ssdeep":"192:fpyCPCFJp/03RtvwIGywlCSqzSj7h06X8o65lXQ20+sQ:fp7PCRovwvWSqsmHX5lH03Q","tlshash":"e2029e8ba7f22482c0aa5e6550fb2d2fce43e561ac019683cd93d1905eb70fc1d398db","first_seen":"2025-02-06T20:25:05.668687Z","last_seen":"2026-06-13T23:40:04.963174Z","times_seen":6,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":272,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/favicon.ico","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nCookie: analytics_session_token=734bb731-9110-67d0-6af3-196a1585a5a9; analytics_token=eaf039a4-7723-92c5-eb3b-0d3d5c9210f1; yektanet_session_last_activity=1/28/2026; _yngt_iframe=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:31 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 3638\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:31 GMT\r\nLast-Modified: Mon, 29 Jan 2007 20:15:05 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3638,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32x32","md5":"f6fb0f5dda9462420eaea04e7127f7aa","sha1":"86af934cf3fc9a62aa915d1f30d169a471c730ca","sha256":"d148d249dbd77d2d57bbefdb627c3d6ab81d17e8856987e5ef71c5a263010055","sha512":"8b8865bea5a062ee4d1a0b2e092eb913962d69204ebe2a74f72cf983b5ff714a143bdd676582592df09fc3a9a36e863bebd0ab4490b8f48e59bc391f5d227d67","ssdeep":"","tlshash":"b471a721b1974d20e23e4437758f739c6c9dd5155e23c63970349acccf7b196b8a0199","first_seen":"2025-02-06T20:25:05.729532Z","last_seen":"2026-06-13T23:40:04.910038Z","times_seen":16,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/colorbox/loading_background.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/colorbox/loading_background.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 157\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Sat, 29 Oct 2011 14:54:34 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"acf427e932fb9413700a4b8b58b41eec","sha1":"b2c8c248eea433dbb252ea4fac1f14ced78cc97a","sha256":"959eccc6b71befee67657392e7f22be26cab408483657fb32a218fed6ffe016b","sha512":"093a619da3f264b06b37ccd37aae6b6d2023dd4b44516088dd92a2703ac45e3b606e612956cea2f0f6ba2ffcc85324cc7ca6b4d1ae96d374fa6bbc2d21b775a1","ssdeep":"","tlshash":"a9c08cd3e30a2439c944482fe2502033e23085a62a121328a04c8fb70f7ca2d098ca8b","first_seen":"2023-04-30T16:05:00Z","last_seen":"2026-06-14T09:41:10.468883Z","times_seen":530,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":406,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/images/video-icon.gif","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=inline\u0026t=inline\u0026notitle=1\u0026w=100%\u0026h=115\u0026theme=billboard\u0026hover=000000\u0026background=ffffff\u0026cid=2997106,2997532,2997813\u0026wr=special,random,random\u0026pid=124","date":"2026-01-28T12:15:31.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/images/video-icon.gif HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=inline\u0026t=inline\u0026notitle=1\u0026w=100%\u0026h=115\u0026theme=billboard\u0026hover=000000\u0026background=ffffff\u0026cid=2997106,2997532,2997813\u0026wr=special,random,random\u0026pid=124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1232\r\nlast-modified: Sun, 26 Jun 2022 08:34:03 GMT\r\netag: \"62b819fb-4d0\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"8ed4a2b73fec89190d729d6cd6616f09","sha1":"efcd43241d79c34c921d5d75a3f374290e9009fa","sha256":"401398cc9d4251b0c9759aa8899467fd74229c32e82d3f7ae0ca88a829a1f577","sha512":"b2bf9d735397439915ceb96acc8e21fc061d014d001bdd39088bbea1b22e139ddf56440f5173c606ca296d9c15831b06f507a68a4c7cba9e6fdcd3a6d4fb57b0","ssdeep":"","tlshash":"e221ba1edd50bcc2118cd6473dfe58b71d5744c0ddf9f461e85ed40646180f68269adb","first_seen":"2025-10-10T05:59:39.788304Z","last_seen":"2026-01-28T12:16:03.402831Z","times_seen":5,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/gradients-sprite.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/gradients-sprite.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 3236\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Sun, 03 Apr 2011 16:13:36 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 1230, 8-bit/color RGB, non-interlaced","md5":"49e483456ef6cd3e173e544d20e825d1","sha1":"9bdc57995eaf5fed807ff88abc1d827436966a2e","sha256":"f5395a4a473f4fe4799e8cdfdc985182acd3b7c849116f9a84495ddfec05a62a","sha512":"73f66226b63cb54bc537a021bc01286860653cb53b0d6d3151ed5e849f3e9ec71eb84b64bc23020bbe65826932a49153b9d79febb62885c4ade4d8259ac63d47","ssdeep":"","tlshash":"ec613cf93ad175e5b011b8994d5d9c009a421f6fbec1e07c8d88194f284a5479ca6713","first_seen":"2025-02-06T20:25:05.678403Z","last_seen":"2026-06-13T23:40:04.887147Z","times_seen":16,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":284,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/fonts/ttf/IRANSansWeb.ttf","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/fonts/ttf/IRANSansWeb.ttf HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: application/x-font-ttf\r\nContent-Length: 63512\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000\r\nExpires: Thu, 28 Jan 2027 12:15:29 GMT\r\nLast-Modified: Fri, 04 Jan 2019 19:06:29 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63512,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, digitally signed, 15 tables, 1st \"DSIG\", 15 names, Microsoft, language 0x409, Copyright (c) 2019 by www.fontiran.com (Moslem Ebrahimi). All rights reserved.RegularIRANSansWeb","md5":"c26a9eb202b3ef6455281f0335cfffe9","sha1":"2942dc1eb7cc8ad4960808e635ba147534c7c815","sha256":"0b192338d9c24cbec34c5000c6e52a1365b2b4ea3b8f60dba814bd21465d6691","sha512":"36da5163e449906f0e07afda1f7e75549409f3a2d4ab07a96b9d7784a19d2de960283966fa9a409632567749c463ef5993d7c5a9dec4ed5af0a0e25ba90164f3","ssdeep":"1536:k5hM0noiRPsmSURzx/6fL92Tjz1XbiL8pdZzBVikBCwcoi:k8SoiRPsTURtCfLwnp+8pdZzBVikBCwK","tlshash":"2c539e0ba362db0ee1335eb4cf7643913efb9935eb3a835fec565919a0830d40da5294","first_seen":"2023-04-15T20:38:35Z","last_seen":"2026-06-13T23:40:04.904334Z","times_seen":20,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":205,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/assets/templates/images/arrow-left.png","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /assets/templates/images/arrow-left.png HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 4167\r\nlast-modified: Tue, 02 Sep 2025 13:54:28 GMT\r\netag: \"68b6f714-1047\"\r\nstrict-transport-security: max-age=0\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4167,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"46391ce1d25fa254f516224c73a046c7","sha1":"95329d21a757541712e4b80a9bec8956e9b73225","sha256":"786bf14fc49d5da14aa7da62d92e119c4e9c652430a071fdb77ccaf2949e640d","sha512":"e1d95d09707dcaf2ccb555aa42cf473420b666f43d4946b90cca8705a86f77227dccf54841b23fc826bc9b2aa4bf538a6e739de0c0b8086d31e588ac9ea33ead","ssdeep":"96:tbHMFGKKjnYy8QzTEPnPitmqECU8mKo3cqzgVb1QHyL6BZ:tbswYyUumq2v3cy8baSLw","tlshash":"c7815cf120526cb78908a21f7628e1d0c994d702e96ee434783fbb9c1d92cb6474f556","first_seen":"2023-09-19T12:06:39Z","last_seen":"2026-06-13T23:40:04.917245Z","times_seen":178,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"native-scripts.yektanet.com/public/chunk/public.js?v=6.1.0","fqdn":"native-scripts.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /public/chunk/public.js?v=6.1.0 HTTP/1.1\r\nHost: native-scripts.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 07:34:55 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"426f43a97409e06f989c56b393a40213\"\r\nstrict-transport-security: max-age=0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: public, max-age=2592000\r\nx-cache-status: HIT\r\nx-zrk-us: 200\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6848,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6818), with no line terminators","md5":"426f43a97409e06f989c56b393a40213","sha1":"98236609fb725bdcc04ed6305f73a8b082146ef6","sha256":"9e094cae2b775a4d9fc4dc2b434b1ebe6deb94f79ee19379d38b7e0e0857ca51","sha512":"6036cc0c4fc305186c8813e8cccce6aea7ded681d5fc40e9bbff408d5913ead9e373fdc7753648e05df4d805150ff02bd9f757e2106c3dad79f0ea20f92432b5","ssdeep":"192:h5f2oVZ/FXh8u1K24B4Wx/5/6QJym96YLSTwtjZbrnm:z2g/FRn1K2M4O8OyeSTwJc","tlshash":"4fe1947cb346707541cb3168631f2206bb79699199d7ccc0a03edc95af78dcea193e19","first_seen":"2026-01-28T12:16:03.406821Z","last_seen":"2026-01-28T12:16:03.406821Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/assets/images/yektanet-logo.webp","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /assets/images/yektanet-logo.webp HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1504\r\nlast-modified: Tue, 02 Sep 2025 13:54:27 GMT\r\netag: \"68b6f713-5e0\"\r\nstrict-transport-security: max-age=0\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2083a875751e9654db5284691a766fab","sha1":"af1b6c9cf21c172a577491331e8d6168d0e656cf","sha256":"da415ff94c184d90f39ae53aaa65ffa7332ed22660e17ee6988fc23da80205e5","sha512":"6450541884c2c96be95762a9e75f91692dfc103359468dad52e6bded6dd5c3f2dd633154bef2a96d0d6ba76e2e67afea5ee0a860588daa5982d6d39eb0422c0a","ssdeep":"","tlshash":"a7312c1cbdcb5d0081d2111b82d413e9970d91609abf0b7993579920001f274fdda1ba","first_seen":"2023-10-03T22:56:26Z","last_seen":"2026-06-13T23:40:04.92621Z","times_seen":37,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panel-cdn.yektanet.com/media/CACHE/images/assets/image/image--d3caba17-a403-4216-99cb-a8b66ce405eb/90/300x200.jpeg","fqdn":"panel-cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /media/CACHE/images/assets/image/image--d3caba17-a403-4216-99cb-a8b66ce405eb/90/300x200.jpeg HTTP/1.1\r\nHost: panel-cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18300\r\nlast-modified: Wed, 14 Jan 2026 10:41:09 GMT\r\nx-rgw-object-type: Normal\r\netag: \"60a3f077f3b2c763fbcb1fef82a59f54\"\r\nx-amz-request-id: tx00000a4111f893018ee14-00697479cc-6f1b5d59-default\r\nx-zrk-us: 200\r\ncache-control: public, max-age=216000\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18300,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"60a3f077f3b2c763fbcb1fef82a59f54","sha1":"b0acbefb83bc50ffa7c646558050e515e3f77247","sha256":"e48d9c83bf5315959b75b040bdfdbf847bdec8ee4c8b4e6a5938434480cfd430","sha512":"fa3708a8a12049948bf851a047e22cf750ba5ac565ef944fea9031d1fd08f273814479e16c9e0e242401283b55ed678ac92212d9dd31a49466ab06b2a393c91d","ssdeep":"384:lrOekE1pgvxZcjApqr36MIIIJ7scZJDnnPA7SL38dYDiJl9dWq25pPT:lif0p8ZGAUr9Q7sc7nPA7sxDij9n25pb","tlshash":"8d82e171a23666f2385841701b40afb68ef51a173efc42ef7d9c61a521c5099909b4be","first_seen":"2026-01-28T12:16:03.371296Z","last_seen":"2026-01-28T12:16:03.371296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panel.kaprila.com/storage/upload/02eda71923de30a69cfaadbb1457ea0c61cef2d0/2025/07/20/687ce3b987121.webp","fqdn":"panel.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /storage/upload/02eda71923de30a69cfaadbb1457ea0c61cef2d0/2025/07/20/687ce3b987121.webp HTTP/1.1\r\nHost: panel.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22832\r\nlast-modified: Sun, 20 Jul 2025 12:40:25 GMT\r\netag: \"687ce3b9-5930\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eddf544ac3691f8085c0092c0c4f3bf0","sha1":"2f20edf4cc582065a795da3ac90cba790437ad01","sha256":"59c5757c5aba203a1853d389e56cd2d516e29dedc4bbe10e6ed66f2176e5f146","sha512":"baf01756c6cdfda5f321f36f21f39beba897b5dec05b569263021abc3e2312d51d69568b8d148a44126e85a7675ec51ae971cbc1b002a8241b51f514d5ff3d3b","ssdeep":"384:4u/NjAJIsJPDtV9Bb6jXk0YFHPNWkRa+WfOVCqSnhk+w2a7KaEKebLPfOOX4SGsq:4uIIsJvb6j00Y/WkFahTw2W9gPGBWm/","tlshash":"d6a2e1bc8bb065853b679fe3875f27aa8161463041f47f4171f1550951db3abc8a20fe","first_seen":"2026-01-28T12:16:03.407752Z","last_seen":"2026-01-28T12:16:03.407752Z","times_seen":1,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":236,"dns":38,"connect":86,"send":0,"wait":85,"receive":86,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panel.kaprila.com/storage/upload/4aa733177ccb4b6a52888dfd05819423112be696/2025/12/31/695521d463509.webp","fqdn":"panel.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /storage/upload/4aa733177ccb4b6a52888dfd05819423112be696/2025/12/31/695521d463509.webp HTTP/1.1\r\nHost: panel.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29160\r\nlast-modified: Wed, 31 Dec 2025 13:17:01 GMT\r\netag: \"6955224d-71e8\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29160,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e7c16513902544b0772bea3a5f18e3d9","sha1":"7e0022ebff5244d557d434332e609d34528bea81","sha256":"5218fdbd704ac28640f1af013d4e568c0b1c0d587b06cadbf8fabe1c463e742f","sha512":"31d5167035e994d865b2bcb35459178779390d610c0f1adcf0995e637e3114ae28a097b4fac412143d2d0752cc5efba9c168c9e7f2a92208a9c0961746b6e815","ssdeep":"768:4JBbHmSzlXPo4yYmnVRuZUQRr6/BEd+fess9SjY0Lsxxx:SFGEZ3mzuW0W/TfOSMLD","tlshash":"57d2f1c7578266cec275ee286e355847bb778a1f2793621a4983c902dc18bc4dca5fb0","first_seen":"2026-01-28T12:16:03.408549Z","last_seen":"2026-01-28T12:16:03.408549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":235,"dns":36,"connect":87,"send":0,"wait":85,"receive":86,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.p30download.ir/software/32x32/2016/04/1461155822_office2016.png","fqdn":"img.p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 07:28:07 GMT","end":"Thu, 19 Mar 2026 07:28:06 GMT"},"fingerprint":{"sha1":"02:B8:46:C3:E8:35:6A:87:68:35:79:E8:F5:D9:F2:80:00:86:FF:5A","sha256":"9D:7C:54:59:6F:31:D4:21:EE:2D:AF:C1:5C:C2:5D:ED:65:E0:BB:B7:46:8F:A2:36:BF:ED:CF:4C:64:87:A3:01"}}},"request":{"raw":"GET /software/32x32/2016/04/1461155822_office2016.png HTTP/1.1\r\nHost: img.p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 3175\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Wed, 20 Apr 2016 12:37:02 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"de991c17115f8870b2e1336e8241ff73","sha1":"db908ada7dfc3663c5887d81a81de9ccddd8312b","sha256":"a2fbf0de4dccae9a03c592571445c055d3680ac500ae96931e510769fea82082","sha512":"9f95ba423f778179003d04f5874dd2b55bb17ec4c76c21f61f05af8deb6ce1d35a261163f9031b475692cfb1f6c1e448da131c2208207718a3b2da9704c01879","ssdeep":"","tlshash":"3661180f27e1f366440d02f792258a3481af0de32ac6c7f9b88ea5537fc73414667a62","first_seen":"2025-02-06T20:25:05.696021Z","last_seen":"2026-06-13T23:40:04.905594Z","times_seen":6,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":229,"dns":68,"connect":78,"send":0,"wait":121,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"img.p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.p30download.ir/software/32x32/2016/04/1460642485_chrome_48.png","fqdn":"img.p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 07:28:07 GMT","end":"Thu, 19 Mar 2026 07:28:06 GMT"},"fingerprint":{"sha1":"02:B8:46:C3:E8:35:6A:87:68:35:79:E8:F5:D9:F2:80:00:86:FF:5A","sha256":"9D:7C:54:59:6F:31:D4:21:EE:2D:AF:C1:5C:C2:5D:ED:65:E0:BB:B7:46:8F:A2:36:BF:ED:CF:4C:64:87:A3:01"}}},"request":{"raw":"GET /software/32x32/2016/04/1460642485_chrome_48.png HTTP/1.1\r\nHost: img.p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 19088\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Thu, 14 Apr 2016 14:01:25 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"9688eac86fec991ff8448ab36ebc4e66","sha1":"3fd8d29c64708db2d64378fa5ee9df4ef4366807","sha256":"b90a56cd83179632659c65bb8a56c49df65b8424e9e553b458989dc3d38f51ab","sha512":"8a0d2baf9094cf412261d3246042b7729c66251c0eddccefdf3907cd453c8f15ce296b25440122683b5bad1c325b4757d5a27e259ee40ced382e22ddc033606c","ssdeep":"96:SSWkEWRCxNXMr1q1nsc5pt3bZaYsvFH8mt/s5n69UEli4KTxdig:SSWktAkIxtEtH8mt0h2UEg4KX","tlshash":"d68229b8bef2b659884992766cd1180a5d330b87ca42dc817acd4d276f11bedbc0f295","first_seen":"2025-02-06T20:25:05.706294Z","last_seen":"2026-06-13T23:40:04.959508Z","times_seen":6,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":229,"dns":58,"connect":77,"send":0,"wait":154,"receive":47,"ssl":90},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"img.p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/feed32x32.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/feed32x32.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 1434\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Sun, 03 Apr 2011 16:13:35 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"09ccd3ea3c1a941daf882fcba0f99fe6","sha1":"2a8007b87338fb6c64bde7028a5c947621ffc4e3","sha256":"3d789ce0e0a5c6df0141f6d92c80fdb8fa249d4b66ccded278aff17258bbf49b","sha512":"05891f66352b08e72f18737e7e9ca522c05254216b952b5cdb27ee1cbb70fce0e2c89b632a4cefce877bf84cde0b564353ef4cebe4c72b84f23fddd8c284bc0f","ssdeep":"","tlshash":"4321e4d0ecd569a0e93a66ea313f6096a506edc3b0652e0f0a9cc3260ea08fa3150906","first_seen":"2023-05-07T18:02:25Z","last_seen":"2026-06-13T23:40:04.899492Z","times_seen":147,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":643,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/blogroll-arrow.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/blogroll-arrow.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nCookie: analytics_session_token=734bb731-9110-67d0-6af3-196a1585a5a9; analytics_token=eaf039a4-7723-92c5-eb3b-0d3d5c9210f1; yektanet_session_last_activity=1/28/2026; _yngt_iframe=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 1431\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Sun, 03 Apr 2011 16:13:41 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 54, 8-bit colormap, non-interlaced","md5":"0ad9b82203be50141716a5d2250a4593","sha1":"8c305e4576b35e088b1f6fb4a4822b6202ca57e6","sha256":"c80bc4fcf71426f0078290a62371dea022f0e25d76c7cb1e73f25caedb9f5181","sha512":"7cc479bcf89cdf5ab59d01d30b05b5067ae4150fd107bb3c1ffda840895379d41576977d1c500108e827e4fab25ef471d6b1a36a70ec11353600e84d3c453c2f","ssdeep":"","tlshash":"3621e9fa5cf60862c4c63226cb1a0335b5673d90d93673350228de4b74a97188de63dd","first_seen":"2025-02-06T20:25:05.724534Z","last_seen":"2026-06-13T23:40:04.960177Z","times_seen":11,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/icon/software/linux/48x48.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/icon/software/linux/48x48.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nCookie: analytics_session_token=734bb731-9110-67d0-6af3-196a1585a5a9; analytics_token=eaf039a4-7723-92c5-eb3b-0d3d5c9210f1; yektanet_session_last_activity=1/28/2026; _yngt_iframe=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 1628\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Tue, 09 Aug 2022 07:08:32 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1628,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"d10f45d8397710988663fb844cc2fc18","sha1":"61cb1800f79b574474b6f7ff8f4829b201fbe2a6","sha256":"87d293bf0e8ecd7cd9e4670ecd8c23efaad0789e619e1caad9dad23ecc62c984","sha512":"149a52bca4953615052106a642995d0393002c78a5f08ef1a660bbfe820ed9e794cbadb9668e3b5d52d0e6569911b69585532ccb1354a7764954af01d95d05f0","ssdeep":"","tlshash":"c031e8968206d81687fb23b844bbce036e927728616a4263d9216d7e8583714a087e7a","first_seen":"2026-01-28T12:16:03.412466Z","last_seen":"2026-01-28T12:16:03.412466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/js/jsx-packed.v1.6.min.js","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/js/jsx-packed.v1.6.min.js HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 223\r\nConnection: keep-alive\r\nCache-Control: public, max-age=604800\r\nExpires: Wed, 04 Feb 2026 12:15:29 GMT\r\nLast-Modified: Wed, 27 Sep 2023 10:54:58 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"68aec6897903bc72853929f17e3ee5e1","sha1":"d4cc53ac7e1a18f47e9c80dc43c260bdc8b448e3","sha256":"9241ffcd3d2661a4c50ca06f5c60f7613ec5180c4670354aee28de6640c5f57d","sha512":"4193351440809bc4289793ba458c0fdce9644d2dba5523f8980f51b11c9eee5ce20a0da7dece8c9f3a96986cb77ba02617ba9eb09e7f01e6070a782e8c776bd2","ssdeep":"","tlshash":"cad022b72cb2c53c4e84089ef1f6e674ab82312cd829c00a80c9cc2e2010fd78ca9d4c","first_seen":"2025-02-06T20:25:05.665594Z","last_seen":"2026-06-13T23:40:04.972831Z","times_seen":17,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":144,"dns":0,"connect":76,"send":0,"wait":119,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"van.najva.com/static/cdn/css/local-messaging.css?v=202600028012","fqdn":"van.najva.com","domain":"najva.com","tld":"com"},"ip":{"addr":"185.166.104.7","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.najva.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sat, 20 Dec 2025 16:43:11 GMT","end":"Mon, 14 Dec 2026 21:39:29 GMT"},"fingerprint":{"sha1":"F8:D1:FB:3A:AC:4B:79:89:18:93:80:EB:84:AA:09:C8:03:35:0B:14","sha256":"F8:BE:AE:EB:A5:06:75:2D:80:4F:1A:56:9B:4B:71:EF:A4:CF:28:D3:16:41:7C:03:F1:0C:A5:83:99:04:B5:B0"}}},"request":{"raw":"GET /static/cdn/css/local-messaging.css?v=202600028012 HTTP/1.1\r\nHost: van.najva.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Dec 2021 16:31:31 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"20685ae09d2ce2a080031240f15c7725\"\r\nx-amz-meta-mtime: 1623484316\r\nx-amz-request-id: tx00000f64c37a732869bb1-006979ebd8-6e438263-default\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 10\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10718), with no line terminators","md5":"20685ae09d2ce2a080031240f15c7725","sha1":"6e832e1bedab1a9bd2b8e311838451d39d58aed8","sha256":"5456146fcd0c934436c0fcb3855719e3d9bed96cb15f27dee2f11b89df20ac71","sha512":"e69507f5d7569167bb60420fb41278445e23d4d9d8e9c0064bd55275e2a4359c9c74a971c375b3b5a2a2c2c0005753ddcfb4edc855648a2528187c277b0bf3a7","ssdeep":"96:4d/fACfEQe0tlK294D1p6mwAkhcGNBejqBeXzhjKlSIE25oQ+P9cYX8PxkX+PQPi:WtK294DvkATIEXek9EyOEQ4do+ar","tlshash":"4a22326548916a0c512edb3dcfc36a8c123ad413aa390d3d62da1927cfc2afc0d5e767","first_seen":"2023-06-06T14:37:55Z","last_seen":"2026-06-13T23:40:04.938585Z","times_seen":75,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":79,"dns":32,"connect":21,"send":0,"wait":18,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"native-removal.triboon.net/?hash=190740297,816717490,587596146,945832102,53973829","fqdn":"native-removal.triboon.net","domain":"triboon.net","tld":"net"},"ip":{"addr":"185.166.104.3","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"triboon.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 17:50:31 GMT","end":"Sat, 18 Apr 2026 17:50:30 GMT"},"fingerprint":{"sha1":"F6:2E:28:CE:44:1C:27:8D:4D:55:82:D6:88:CF:48:56:A2:C6:D5:1A","sha256":"61:04:9E:7D:23:01:D2:86:FF:42:5E:B5:40:03:DA:29:ED:36:5F:97:D8:F2:88:D1:DF:9F:E3:EB:89:EF:85:60"}}},"request":{"raw":"GET /?hash=190740297,816717490,587596146,945832102,53973829 HTTP/1.1\r\nHost: native-removal.triboon.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nhref: https://p30download.ir/fa/entry/91787/telegram\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://p30download.ir\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nx-zrk-us: 200\r\nx-zrk-cs: BYPASS\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e91ec5366d3382ecc6d1bd09b1b03348","sha1":"f366c2bfc5403cdaed01df452a1923f86e04d1b5","sha256":"674bcba5c81a5a8d8b9e907dddba0d24028bea8ec9cad7deff61860ff86cc9a0","sha512":"b6a65a69bafa1822cc8e00741d697a177581253049e1daecb82c3ea0dd8722d2ca18f48d0899f2a5cb1ca62a3653d2b920fe15bb7d9aa5f85b09c4229aea0773","ssdeep":"","tlshash":"41600000c000c0000000000c00c003c0c330c0c3c30000030000cc30c30cf00303030f","first_seen":"2023-05-13T18:54:58Z","last_seen":"2026-06-12T02:28:32.073531Z","times_seen":139,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/fonts/yekanx.css","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=inline\u0026t=inline\u0026notitle=1\u0026w=100%\u0026h=115\u0026theme=billboard\u0026hover=000000\u0026background=ffffff\u0026cid=2997106,2997532,2997813\u0026wr=special,random,random\u0026pid=124","date":"2026-01-28T12:15:31.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/fonts/yekanx.css HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=inline\u0026t=inline\u0026notitle=1\u0026w=100%\u0026h=115\u0026theme=billboard\u0026hover=000000\u0026background=ffffff\u0026cid=2997106,2997532,2997813\u0026wr=special,random,random\u0026pid=124\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Feb 2024 11:05:31 GMT\r\netag: W/\"65dc707b-1dc\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ntransfer-encoding: chunked\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":476,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ddb9fc81115ddf78e0726dbbdbfb005a","sha1":"3c19447cc909baa41802549eff06de3672202c77","sha256":"948ca9822bb9fcdf742e63ea6b26864baf232400626684f403260258d63fecaf","sha512":"4933f7edb008744ed7b45783d6edec09ecd5062753941c1fd7133c3adaa0e0cbfc312579dd9f9c8e92f6f8dee2ab221eca3fdcb53cff76e0e9f318121f55d892","ssdeep":"","tlshash":"d8f0c041ff15817254d0d096b3e32fede71d0a3292e3e4642520044c43d0c36a2ee7b5","first_seen":"2024-04-18T14:59:39Z","last_seen":"2026-06-13T23:40:04.892324Z","times_seen":20,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/images/kaprila-icon-32.png","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/images/kaprila-icon-32.png HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3874\r\nlast-modified: Sun, 26 Jun 2022 08:34:03 GMT\r\netag: \"62b819fb-f22\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"7f0a1c5c062dd7d9a237e18a1f4363d5","sha1":"9613418357d91d3a1a29aa32b2662439055ab704","sha256":"01f7d89298dc028c7234f872e7b5e6c17080c76792bfd1122a795d563d84755b","sha512":"46a2299ec8442f6af3769bea2b6b592be2b1e93f3b018e720b23dff2f67b2c94e4812a971936f78b9558e4d026b299a840780532cbb72879d37873c4739bfd6e","ssdeep":"","tlshash":"61818e8376651b6ee0125c365016a273c591f925c6511439e49ff0b7f565f604dc7448","first_seen":"2023-11-27T16:58:27Z","last_seen":"2026-06-13T23:40:04.931753Z","times_seen":415,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"panel.kaprila.com/storage/upload/4aa733177ccb4b6a52888dfd05819423112be696/2026/01/25/6975d7fdb85e3.gif","fqdn":"panel.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /storage/upload/4aa733177ccb4b6a52888dfd05819423112be696/2026/01/25/6975d7fdb85e3.gif HTTP/1.1\r\nHost: panel.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 144278\r\nlast-modified: Sun, 25 Jan 2026 08:44:45 GMT\r\netag: \"6975d7fd-23396\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144278,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 340 x 227","md5":"74d7c2ee7d2977136bb33cba6e118dd2","sha1":"4668f836ba4e86878e6c1d87a7e95f1ea6adefc5","sha256":"3a30a11dcd109d75722579121acc8bec4f1d53e7f0ad3c86ed3d8d381c74daad","sha512":"e5c2d53a2180022e208269d8a1b70613daa1721050b239796f2a9281bc8c2257dbc46d6ec76113c5d8890076d01c64da71e26e5eeaadaac802b74cf52f70cc75","ssdeep":"3072:ndv0WxU5LG3o1E1wP2ycFWq9yUonUffPD7s6FcwHz:d04a1FP7cFWq9yUaUPDtLz","tlshash":"37e3123fc3b549c1c96ac2d2d45b2edb1a18e665487a7e5201c4b566b0066fe22e0ff4","first_seen":"2026-01-28T12:16:03.416724Z","last_seen":"2026-02-13T21:59:16.92679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":237,"dns":39,"connect":86,"send":0,"wait":85,"receive":257,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/related.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/related.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 66\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Sun, 03 Apr 2011 16:13:39 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 14 x 9","md5":"a4b97333acb4664c69ec087ba95416e9","sha1":"26fe6464d80892351bdff6d46e5f5ce48accc31f","sha256":"7592f6680dd0d4286590e6bc9b10d425b49c53269cff048973c60d7d7087e050","sha512":"c433a278e3d4b133939a013a766576974c1e0caeef09b3404309607b0623171325cf5a0a310ba5d3d4f678a139c009ba9dfbeb61aef9b93184092c63fdb1b742","ssdeep":"","tlshash":"e8a02228e3880208c82220320b3b03022308c308a20a0bc00c00fc0accf2030b0822c0","first_seen":"2025-02-06T20:25:05.687932Z","last_seen":"2026-06-13T23:40:04.874463Z","times_seen":12,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":633,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/assets/templates/images/arrow-left.png","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /assets/templates/images/arrow-left.png HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4167\r\nlast-modified: Tue, 02 Sep 2025 13:54:28 GMT\r\netag: \"68b6f714-1047\"\r\nstrict-transport-security: max-age=0\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4167,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"46391ce1d25fa254f516224c73a046c7","sha1":"95329d21a757541712e4b80a9bec8956e9b73225","sha256":"786bf14fc49d5da14aa7da62d92e119c4e9c652430a071fdb77ccaf2949e640d","sha512":"e1d95d09707dcaf2ccb555aa42cf473420b666f43d4946b90cca8705a86f77227dccf54841b23fc826bc9b2aa4bf538a6e739de0c0b8086d31e588ac9ea33ead","ssdeep":"96:tbHMFGKKjnYy8QzTEPnPitmqECU8mKo3cqzgVb1QHyL6BZ:tbswYyUumq2v3cy8baSLw","tlshash":"c7815cf120526cb78908a21f7628e1d0c994d702e96ee434783fbb9c1d92cb6474f556","first_seen":"2023-09-19T12:06:39Z","last_seen":"2026-06-13T23:40:04.917245Z","times_seen":178,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/fonts/yekanx/fontiran.css","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=inline\u0026t=inline\u0026notitle=1\u0026w=100%\u0026h=115\u0026theme=billboard\u0026hover=000000\u0026background=ffffff\u0026cid=2997106,2997532,2997813\u0026wr=special,random,random\u0026pid=124","date":"2026-01-28T12:15:31.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/fonts/yekanx/fontiran.css HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a/fonts/yekanx.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Feb 2024 05:52:25 GMT\r\netag: W/\"65dc2719-ce2\"\r\nexpires: Fri, 27 Feb 2026 12:15:31 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ntransfer-encoding: chunked\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3298,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"497e0c63ae95af6efaacf2237f21d06c","sha1":"5eb123000187f953e0f0bf75f5e43fceaa43d48e","sha256":"6d6f59461bedd2aaf6ef3e3164385bc273585c42d71d2cc512025f4625aba144","sha512":"6b182aa1fb8079ffa8bf1171dce2e07178dc21be2a4b87f2faf0f1ed0aa7ff7e64918c748c3a85e0ad4f1d462c3ea1a8b070a5f3fac53c686a1dde86245cf109","ssdeep":"","tlshash":"bf6128901cdaa4235652e843bfc97d3ede9b2122990349212b3e7804ddb767143eeb2d","first_seen":"2024-04-18T14:59:39Z","last_seen":"2026-06-13T23:40:04.928679Z","times_seen":20,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ua.yektanet.com/api/analytics-event/v1/collect?aa=event\u0026abe=I\u0026abf=f2a9a84c-3c18-44f8-9663-54209ce7d907\u0026abj=0\u0026aed=pub\u0026abh=\u0026sv=4\u0026st=complete.js\u0026fis=1\u0026ffu=1\u0026ac=https%3A%2F%2Fp30download.ir%2Ffa%2Fentry%2F91787%2Ftelegram\u0026ae=%7B%7D\u0026ad=p30download.ir\u0026ba=01KG28FF8AD32ZPMYKC55SYM93\u0026as=Telegram%206.4.2%20Win%2FLinux%2FmacOS%2BPortable%20%D8%AA%D9%84%DA%AF%D8%B1%D8%A7%D9%85%D8%8C%20%D9%BE%DB%8C%D8%A7%D9%85%20%D8%B1%D8%B3%D8%A7%D9%86%20%D8%B3%D8%B1%DB%8C%D8%B9%20%D9%88%20%D8%A7%D9%85%D9%86\u0026aef=8GH7A9sZ\u0026aec=10702\u0026ai=734bb731-9110-67d0-6af3-196a1585a5a9\u0026abw=1280\u0026abb=6110\u0026aby=1280\u0026abz=1024\u0026al=1280\u0026am=1024\u0026abk=%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20Telegram%20v6.4.2%20x86%2Fx64%20Win%2FLinux%2FmacOS%20%2B%20Portable%0A%D8%AA%D9%84%DA%AF%D8%B1%D8%A7%D9%85%D8%8C%20%D9%86%D8%B1%D9%85%20%D8%A7%D9%81%D8%B2%D8%A7%D8%B1%20%D9%BE%DB%8C%D8%A7%D9%85%20%D8%B1%D8%B3%D8%A7%D9%86%20%D8%B3%D8%B1%DB%8C%D8%B9%20%D9%88%20%D8%A7%D9%85%D9%86","fqdn":"ua.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:40.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"POST /api/analytics-event/v1/collect?aa=event\u0026abe=I\u0026abf=f2a9a84c-3c18-44f8-9663-54209ce7d907\u0026abj=0\u0026aed=pub\u0026abh=\u0026sv=4\u0026st=complete.js\u0026fis=1\u0026ffu=1\u0026ac=https%3A%2F%2Fp30download.ir%2Ffa%2Fentry%2F91787%2Ftelegram\u0026ae=%7B%7D\u0026ad=p30download.ir\u0026ba=01KG28FF8AD32ZPMYKC55SYM93\u0026as=Telegram%206.4.2%20Win%2FLinux%2FmacOS%2BPortable%20%D8%AA%D9%84%DA%AF%D8%B1%D8%A7%D9%85%D8%8C%20%D9%BE%DB%8C%D8%A7%D9%85%20%D8%B1%D8%B3%D8%A7%D9%86%20%D8%B3%D8%B1%DB%8C%D8%B9%20%D9%88%20%D8%A7%D9%85%D9%86\u0026aef=8GH7A9sZ\u0026aec=10702\u0026ai=734bb731-9110-67d0-6af3-196a1585a5a9\u0026abw=1280\u0026abb=6110\u0026aby=1280\u0026abz=1024\u0026al=1280\u0026am=1024\u0026abk=%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20Telegram%20v6.4.2%20x86%2Fx64%20Win%2FLinux%2FmacOS%20%2B%20Portable%0A%D8%AA%D9%84%DA%AF%D8%B1%D8%A7%D9%85%D8%8C%20%D9%86%D8%B1%D9%85%20%D8%A7%D9%81%D8%B2%D8%A7%D8%B1%20%D9%BE%DB%8C%D8%A7%D9%85%20%D8%B1%D8%B3%D8%A7%D9%86%20%D8%B3%D8%B1%DB%8C%D8%B9%20%D9%88%20%D8%A7%D9%85%D9%86 HTTP/1.1\r\nHost: ua.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:40 GMT\r\ncontent-length: 0\r\nset-cookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; Path=/; Domain=yektanet.com; Max-Age=315360000; HttpOnly; Secure; SameSite=None\ngearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; Path=/; Domain=yektanet.com; Max-Age=315360000; HttpOnly; Secure; SameSite=None\n_yngt=01KG28FF8AD32ZPMYKC55SYM93; Path=/; Domain=yektanet.com; Max-Age=315360000; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=0\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nx-zrk-us: 200\r\nx-zrk-cs: BYPASS\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/launcher.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/launcher.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 1327\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Mon, 19 Sep 2022 13:45:49 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 24, 8-bit/color RGBA, non-interlaced","md5":"52905aa6cd880455afe30432c30b99a2","sha1":"9bc568d0b41a9aa6b168de5e0acd915ab8952518","sha256":"aaa55b3dfc10d8230a0d1d25c2dd27ce8e34b6aa7f8be191c8e408713f0741b5","sha512":"6378857193f55be25661566765165d940fe6ca280a839033a1919c1ac0335974e786359c21ea32b5fcd80058fbf3ec95d18e450cf601b6c43099e4c348651dd2","ssdeep":"","tlshash":"fa21a54cf5c024809f1d945114f693ae4ba3144096c6c2bcebcac84b1d293bc4def5db","first_seen":"2025-02-06T20:25:05.683499Z","last_seen":"2026-06-13T23:40:04.890134Z","times_seen":7,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":306,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PPV7HFGGT3\u0026l=dataLayer_kaprila","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=G-PPV7HFGGT3\u0026l=dataLayer_kaprila HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\nexpires: Wed, 28 Jan 2026 12:15:30 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143960\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434336,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"1cfba04b242a026c274ed31cb417a679","sha1":"ce6b2ea404e8339c50f3778407671b0d7b6b1ab7","sha256":"ad2c7cca3dc166a5db711f1756546b8a569c3a369c844cb5244623b3c8715711","sha512":"0e367475a606fa3309b3758428b4e9ee42315ce2687805e8c72a336994bd975cd8f59eb180ec0948685bca2e8fcf31b8653f12d0bbfbe7723c6fabfc4fac451d","ssdeep":"6144:jmLJewv27xUAxJ509KFTety4pl9FlbzyB8Y1SekgcQBx1D:j8ewu7xUAxJ509KFYyEy1SGD","tlshash":"b3941ace73d674269396f478502f118ba57b29a2b45cc89af1c9cce01e34a9a4137f7c","first_seen":"2026-01-28T12:16:03.420156Z","last_seen":"2026-01-28T12:16:03.420156Z","times_seen":1,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":90,"dns":0,"connect":21,"send":0,"wait":44,"receive":59,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/page/files/green.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /page/files/green.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 4202\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Tue, 11 May 2021 14:57:58 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4202,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 240 x 90","md5":"7cf0429fac093897cd469068fdf7e760","sha1":"7d5e6ecd7684e37d78a14b0faf078da78063e6e5","sha256":"053b5928945160bddbc609706934571ae0172ebf74dc2bac11f3e935abfd57a1","sha512":"ce1f71832ccf8eb1dbab83597b8000fd12e373483ec2f1fb8810d2aa5722fde3c140b7db648188ce739474153ba44724216afa21c7b7ed7f8289c67b66239012","ssdeep":"96:VpfeyjWWb0dqwVUoLH+6eHaJf/uvRHS6mjG8Q5aCR:DWyjW9+ozJmRHSvQgCR","tlshash":"a5815dbea50d1614ac028f9695ad4cf969d9e9130209786aedf4a4b21c394d6f30436f","first_seen":"2025-02-06T20:25:05.697506Z","last_seen":"2026-01-28T12:16:03.421047Z","times_seen":6,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":232,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/fonts/yekanx/woff/IRANYekanX-Medium.woff","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026background=ffffff\u0026cid=2998050,2997105,2997157,2997898,2997525,2997538\u0026wr=rent,special,random,random,random,random\u0026pid=125","date":"2026-01-28T12:15:31.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/fonts/yekanx/woff/IRANYekanX-Medium.woff HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/a/fonts/yekanx/fontiran.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: font/woff\r\ncontent-length: 37176\r\nlast-modified: Mon, 26 Feb 2024 05:52:25 GMT\r\netag: \"65dc2719-9138\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37176,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 37176, version 0.0","md5":"033a13033851a3160d5ab80803f05843","sha1":"dfb1c6e38a6fe3b3b262ba3b5a0699fbd16b9d0f","sha256":"eb79c9827629107223985eebfd0d65a500ea3e4d4fb2afacbc6d14589d16fe97","sha512":"b319a5533a1b8cf711a0af1b59002be9d17ece0aeea6ee0961b036f93e2f0bac5ac1f4c6af741cb906488e2497c2220500aac04a9bf48d294f5a1f5b1edba990","ssdeep":"768:6gLF1+WoRHxWauPu+Bz3/WffVz64v0ourAtxCu+EyO/5+swtj:6gZ1Bo/fCbkVRv1FxCtvOXwtj","tlshash":"e5f2f1a8abcf5a1803bffb57ea48617d7549829cd378be10a7f79820617baf04d44042","first_seen":"2023-06-01T20:10:04Z","last_seen":"2026-06-13T23:40:04.925605Z","times_seen":52,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/rg_woebegone/scripts_v4/8GH7A9sZ/complete.js?v=71a743376ddc2f691058671ac5ad56fd","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /rg_woebegone/scripts_v4/8GH7A9sZ/complete.js?v=71a743376ddc2f691058671ac5ad56fd HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 14:13:58 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"30d54e28fb2b39cc12d5899ba817f550\"\r\nx-amz-request-id: tx000002ecc9bca3ade19b0-006978db51-6e43833a-default\r\nx-zrk-us: 200\r\ncache-control: public, max-age=10800\r\nstrict-transport-security: max-age=0\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":55115,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32326)","md5":"30d54e28fb2b39cc12d5899ba817f550","sha1":"c1eebc82462e49a105c90fb6d33a0b96efa6dc35","sha256":"c764f85e373e2bdf2dd05b02fce8aea2789aaf21054b1279e8d80a7635497ca1","sha512":"4810a662c61cbc8717382a9f8491d46021a4807b54ba80025f2f42e7ec73b3850a1ba5b6d6e475d5003db144854ab3e2dc0b99703b6121036e51c9d73c00e635","ssdeep":"1536:1nCNSL5yqid5ICZMVqfyzU5zHzq+Q5DUQ7vEsxhU/M:ZrL5gI0hyzU5z4zEq","tlshash":"6f33079d74d6f0b207eb65b6903f620af23a25592c4dd8509115cce07c78e9b8263fae","first_seen":"2026-01-28T12:16:03.421686Z","last_seen":"2026-06-13T23:40:04.975444Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/assets/fonts/faNum/woff2/IRANSansWeb(FaNum)_Medium.woff2","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /assets/fonts/faNum/woff2/IRANSansWeb(FaNum)_Medium.woff2 HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 29292\r\nlast-modified: Tue, 02 Sep 2025 13:54:27 GMT\r\netag: \"68b6f713-726c\"\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=0\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29292,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29292, version 4.0","md5":"9fb0429b7eec4838f2d6ca3b70b562ab","sha1":"7c7c37a88e2d32d0bbe86e2080eee3f3e6ad716a","sha256":"2a6c1bf5e0b77ac7da968c559744f1c7da0ddfd5ddd5116d565f5727ce9b1a5a","sha512":"c818d20aaf96b4426cb6e5da3c085b36933f1ee63d47720d0f4372dec7b80f93b97febdeeed9ac438b3dfaa15b681e88c79a2bd8637420cce9c8d6ecce7e36b9","ssdeep":"768:6Hab9pLFAMccCIUdOyZ/yz1EO8UzgV2YtBZ4xehPNhU:6HUpLFAhc4gdz1EOQBZ4gFhU","tlshash":"f1d2e1013be85249dc9c2c5327ef9e8a79824f04e5faa588975bb45f1ea8f4d250243a","first_seen":"2023-05-02T09:57:18Z","last_seen":"2026-06-13T23:40:04.902212Z","times_seen":54,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panel.kaprila.com/storage/upload/02eda71923de30a69cfaadbb1457ea0c61cef2d0/2025/08/04/6890c06186913.webp","fqdn":"panel.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://beta.kaprila.com/a//templates_ver2/templates.php?ref=p30download.ir\u0026id=related-top-post\u0026t=related\u0026col=3\u0026notitle=1\u0026w=850\u0026h=495\u0026hover=000000\u0026cid=2994496,2998046,2997860,2997559,2997585,2997613\u0026wr=rent,special,random,random,random,random\u0026pid=126","date":"2026-01-28T12:15:31.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /storage/upload/02eda71923de30a69cfaadbb1457ea0c61cef2d0/2025/08/04/6890c06186913.webp HTTP/1.1\r\nHost: panel.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beta.kaprila.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17508\r\nlast-modified: Mon, 04 Aug 2025 14:14:57 GMT\r\netag: \"6890c061-4464\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c11f9efa8bc600b95253b6e943df9570","sha1":"1e176a0521020a658d38106d4e3fa93adb2a8137","sha256":"5963fb6e5b0b2af1d9aa0ce9d6e79f14a10cb0bc64c5232cd19d35a9bffd94e7","sha512":"2c747403bb5d2c5d3f727237cb30fe9c7c2a4790450b3664a034e775ec3dc25326bf860669efc2bf1853caf27ba23b8d7a0a889e6e1926fb235d0ef4c9ccc812","ssdeep":"384:QLsun+Zgzg0Nro0cFnlb8ugjl2XuQCcTgg0D9ajOM3l+9A0z:csg7robaezx0pM3l+i0z","tlshash":"3272d0503e118138716bce95058518c1ed1bef784a670cd7ffc8f0c4229a9b66f8a1fa","first_seen":"2026-01-28T12:16:03.423138Z","last_seen":"2026-01-28T12:16:03.423138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":238,"dns":40,"connect":84,"send":0,"wait":84,"receive":85,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/page/files/p30download.jpg","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /page/files/p30download.jpg HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 141485\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:29 GMT\r\nLast-Modified: Wed, 14 Jan 2026 06:54:14 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141485,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 500x400, components 3","md5":"f0d402a0b49f47b7f002979ab89bdfd6","sha1":"ebb5876cd459c80a8f8b96b512d2e5e5837e7b6e","sha256":"cf6b74472c9bc0ccad83d3544f7f0ba6a0c7bfdb2b9c3340ebb1dbdb6c579b56","sha512":"c566dd848b1305d198f0a8d757ef995ce5dcd92f38865725230d1c78db353f5687dc5005f3cfd83c6634f0a3b64eaee56d6251ab36da68282f8d446015c5a278","ssdeep":"3072:xy0rBa2w6OzvGgu8kIKvENFyaQMorRQROWTIXuMddbTB/lps:xywBzw5vG2kW6avorRQscIeMvFlps","tlshash":"d1d3123589b21b11c6cc732290ea084b672b5ed6d09953c0bfceed60f396d33a97155b","first_seen":"2026-01-28T12:16:03.424531Z","last_seen":"2026-02-13T21:59:16.947501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":114,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jamssp.yektanet.com/api/v1/ads/web","fqdn":"jamssp.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"OPTIONS /api/v1/ads/web HTTP/1.1\r\nHost: jamssp.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://p30download.ir/\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://p30download.ir\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-credentials: true\r\nx-zrk-us: 204\r\nx-zrk-cs: BYPASS\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":73,"dns":23,"connect":17,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/assets/fonts/faNum/woff2/IRANSansWeb(FaNum)_Medium.woff2","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /assets/fonts/faNum/woff2/IRANSansWeb(FaNum)_Medium.woff2 HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 29292\r\nlast-modified: Tue, 02 Sep 2025 13:54:27 GMT\r\netag: \"68b6f713-726c\"\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=0\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29292,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29292, version 4.0","md5":"9fb0429b7eec4838f2d6ca3b70b562ab","sha1":"7c7c37a88e2d32d0bbe86e2080eee3f3e6ad716a","sha256":"2a6c1bf5e0b77ac7da968c559744f1c7da0ddfd5ddd5116d565f5727ce9b1a5a","sha512":"c818d20aaf96b4426cb6e5da3c085b36933f1ee63d47720d0f4372dec7b80f93b97febdeeed9ac438b3dfaa15b681e88c79a2bd8637420cce9c8d6ecce7e36b9","ssdeep":"768:6Hab9pLFAMccCIUdOyZ/yz1EO8UzgV2YtBZ4xehPNhU:6HUpLFAhc4gdz1EOQBZ4gFhU","tlshash":"f1d2e1013be85249dc9c2c5327ef9e8a79824f04e5faa588975bb45f1ea8f4d250243a","first_seen":"2023-05-02T09:57:18Z","last_seen":"2026-06-13T23:40:04.902212Z","times_seen":54,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/bullet.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/bullet.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 244\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Sun, 03 Apr 2011 16:13:42 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 11, 8-bit colormap, non-interlaced","md5":"309b8e87b544b6ddcecdbb695d1a7fcd","sha1":"5fb10b4c3448434a78830997268c7d4d4ffd2d54","sha256":"63df880c0011bb47d7760e98cce35a38b7fd648c46e427ccede646681c3a3ace","sha512":"6ae3afec2a40788e0d208ae63702750cfe2564d480715e17a69d6af1e9a4281f99477ab2da79ac43454b8e29b232ef3311b7afe75db4277a3e6e70ded19e308c","ssdeep":"","tlshash":"a1d097c2e020cea296511272f6200070f67f18500c60d3a900c11cf62fea605c4c42aa","first_seen":"2025-02-06T20:25:05.685086Z","last_seen":"2026-06-13T23:40:04.986116Z","times_seen":11,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":313,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/copy-link.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/copy-link.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 1222\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Fri, 07 Oct 2022 20:57:21 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"13803066398716d735dfab6c1afc17a1","sha1":"ba55b5e60012e418b882a8920e786de2b3e49b30","sha256":"3f4e5db070701047adfce677b8ab477bfc712c85ee5b101fd39fbe077db80384","sha512":"44cb2300c18ef13984eb0e09635dc98217d7b5ffcfc4e0ce7c07869fe8a86ae4b86be83a284c85ac5acc8e566413ee917596e6be38ac6fd06fc586a42871d4cf","ssdeep":"","tlshash":"f7217419e4806c01ccbed2d138ee41b794926bd19ad09695bacec8070ca52b98c2d9df","first_seen":"2025-10-10T05:59:39.772274Z","last_seen":"2026-06-09T04:50:44.980739Z","times_seen":6,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":602,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/rocket.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/rocket.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 45182\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:29 GMT\r\nLast-Modified: Wed, 21 Sep 2022 13:09:46 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45182,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 75 x 75","md5":"ba2d95faff44d8114ccc4184070dd2d0","sha1":"b4161c3b1d438083ad68e818fcf529282122be09","sha256":"14adae121915cea9630701b9948b4c7e6a75dd35cf2ea64b57867859c38510e7","sha512":"090e8f5d679b6935dcba8a94102c387bcf36b1e5d6331c10d0584dcf684c210b30504e652eeb106094cdbbfdde4ce91360b7f0063968b489a922c4d261e7510c","ssdeep":"768:Zdrzb7QjtC0F6LK2OepKkd6bU3xJzYpWh+583C+duV:rPWtz6W2OeM26b2Nto23u","tlshash":"5413cfe410be6597f1ab6df3f6e141122fb68fabde861a94e440f7d62201c18c491f1b","first_seen":"2025-02-06T20:25:05.675535Z","last_seen":"2026-06-13T23:40:04.904946Z","times_seen":6,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":391,"dns":0,"connect":0,"send":0,"wait":119,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/fonts/ttf/IRANSansWeb_Bold.ttf","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/fonts/ttf/IRANSansWeb_Bold.ttf HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: application/x-font-ttf\r\nContent-Length: 60856\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000\r\nExpires: Thu, 28 Jan 2027 12:15:29 GMT\r\nLast-Modified: Fri, 04 Jan 2019 19:06:33 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60856,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, digitally signed, 15 tables, 1st \"DSIG\", 15 names, Microsoft, language 0x409, Copyright (c) 2019 by www.fontiran.com (Moslem Ebrahimi). All rights reserved.IRANSansWeb Bold:V","md5":"ebec177a9eccde9d5a4fb510ff1d1d8e","sha1":"2e27d61c271db43af8a3f1860b5d48f5be862246","sha256":"81dae4f6964f8d9bdb5674c922de896b21b1444a2da0f3bc92e26467c6094e94","sha512":"e4ce36b2a6245a86ca950409ddae711e34ea16596c91b77dcb5c8b5eca2e773a3c6777f813ad1bfbc7f4d50203876dec9b90ee88fa9d82d827d5aee630bc4e09","ssdeep":"768:pDIzMr6TwuSxa3sjBFIzPZMgyTwkpooBo7jiDjvFAVPmCfrOjCEwg1P6QRymstr:NV6suSn6zP3QTYiDjvFAVPNQ8VQRyn","tlshash":"d0538d0b6362cb09e2324f7cdbb5532237768d14eb76c32fe845a51aa8831c55af47a4","first_seen":"2023-04-15T20:38:35Z","last_seen":"2026-06-13T23:40:04.87382Z","times_seen":19,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":200,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/page/files/hin2.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /page/files/hin2.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 3983\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Tue, 29 Jul 2025 08:57:05 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3983,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 90","md5":"8adfde90eb552f5b3976087b2a8dbbd1","sha1":"b549faf658e94121b9009b130a58fab070da0f88","sha256":"393f23d7b78d1d5dddd6ab00b4fb2c93dca1c1d227f2f72fd6963ac5729f36fa","sha512":"17915920958f675cf24319bb86eea00cb163a6677cc37113b7f99158fc5aa8277dd4f6883d9a004ce49218f674bb6e5c0b42e625c7115361e8bc15dfb36dc9d0","ssdeep":"","tlshash":"a2816ddd5292e4009244e0e8a4d3223b8f930ce2d5f8f466d4d89e150979c5f9e7ded3","first_seen":"2025-09-23T13:56:50.884497Z","last_seen":"2026-02-13T21:59:16.907088Z","times_seen":8,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/fonts/ttf/IRANSansWeb.ttf","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/fonts/ttf/IRANSansWeb.ttf HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: application/x-font-ttf\r\nContent-Length: 63512\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000\r\nExpires: Thu, 28 Jan 2027 12:15:30 GMT\r\nLast-Modified: Fri, 04 Jan 2019 19:06:29 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63512,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, digitally signed, 15 tables, 1st \"DSIG\", 15 names, Microsoft, language 0x409, Copyright (c) 2019 by www.fontiran.com (Moslem Ebrahimi). All rights reserved.RegularIRANSansWeb","md5":"c26a9eb202b3ef6455281f0335cfffe9","sha1":"2942dc1eb7cc8ad4960808e635ba147534c7c815","sha256":"0b192338d9c24cbec34c5000c6e52a1365b2b4ea3b8f60dba814bd21465d6691","sha512":"36da5163e449906f0e07afda1f7e75549409f3a2d4ab07a96b9d7784a19d2de960283966fa9a409632567749c463ef5993d7c5a9dec4ed5af0a0e25ba90164f3","ssdeep":"1536:k5hM0noiRPsmSURzx/6fL92Tjz1XbiL8pdZzBVikBCwcoi:k8SoiRPsTURtCfLwnp+8pdZzBVikBCwK","tlshash":"2c539e0ba362db0ee1335eb4cf7643913efb9935eb3a835fec565919a0830d40da5294","first_seen":"2023-04-15T20:38:35Z","last_seen":"2026-06-13T23:40:04.904334Z","times_seen":20,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"panel-cdn.yektanet.com/media/CACHE/images/assets/image/k2_14--f221136f-cb28-49d4-99b8-958a95ac664e/90/300x200.jpeg","fqdn":"panel-cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /media/CACHE/images/assets/image/k2_14--f221136f-cb28-49d4-99b8-958a95ac664e/90/300x200.jpeg HTTP/1.1\r\nHost: panel-cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19706\r\nlast-modified: Fri, 03 Oct 2025 09:12:09 GMT\r\nx-rgw-object-type: Normal\r\netag: \"172906eb68363498ef7e78cf47ac7532\"\r\nx-amz-request-id: tx0000021ed8b455cef370a-00697479fa-700d8e57-default\r\nx-zrk-us: 200\r\ncache-control: public, max-age=216000\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19706,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"172906eb68363498ef7e78cf47ac7532","sha1":"2d09def5301c1394f015bb2a5139ff183c60d2be","sha256":"7dcb6a537d6a6c0eb17784ba96e66a47bc87f0c9a618733a95edd170471ade10","sha512":"dba1319bd23143088a594d709d15af14b52312587089b82a473237d24b518f282d68c2fc02c0a0d57c5c87eb49554f7d5aefa35e1ef9e94e7901794d5f08b610","ssdeep":"384:9DT3avF8S6IA4+W6bvU1aeHzIA1Vz2fYTCVWH94lQyCSn5NLc7e0T:ZTk8S6m902tAXQyCSnnQv","tlshash":"2292e1b1798156c97b17f2f1d039afea1ac2d8605f6c1b9ea0fccea4ae085c425b40d4","first_seen":"2026-01-28T12:16:03.399441Z","last_seen":"2026-01-28T12:16:03.399441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/icons/set1/paper-clip2.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/icons/set1/paper-clip2.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 80\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Fri, 01 Apr 2011 11:59:47 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"c1ca2fb8005358771481bfac6ba0294b","sha1":"c2daaaf8b93170ec4fecf403af12e7a7dd25c7ae","sha256":"00082c8a72f14044d3a33758bec2d2cd460148268b1dbc5cfffde3a68b996927","sha512":"2d60172000b39a7c84923a77ca5ba628b3918984e4bd0e675cb6d54b5d0ae322c1fc37c3406a7b20e0a37045164bfbb3f64015e77ebd780609941be3365a6cce","ssdeep":"","tlshash":"f1a0110acaa0e030e8000832088a8228e00bb03080800a8822a802aebe0c3320030e00","first_seen":"2025-10-10T05:59:39.797751Z","last_seen":"2026-06-09T04:50:44.999153Z","times_seen":6,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":547,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yektanet.com/assets/templates/images/arrow-left.png","fqdn":"cdn.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.80","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:31.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /assets/templates/images/arrow-left.png HTTP/1.1\r\nHost: cdn.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4167\r\nlast-modified: Tue, 02 Sep 2025 13:54:28 GMT\r\netag: \"68b6f714-1047\"\r\nstrict-transport-security: max-age=0\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\ntiming-allow-origin: *\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4167,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"46391ce1d25fa254f516224c73a046c7","sha1":"95329d21a757541712e4b80a9bec8956e9b73225","sha256":"786bf14fc49d5da14aa7da62d92e119c4e9c652430a071fdb77ccaf2949e640d","sha512":"e1d95d09707dcaf2ccb555aa42cf473420b666f43d4946b90cca8705a86f77227dccf54841b23fc826bc9b2aa4bf538a6e739de0c0b8086d31e588ac9ea33ead","ssdeep":"96:tbHMFGKKjnYy8QzTEPnPitmqECU8mKo3cqzgVb1QHyL6BZ:tbswYyUumq2v3cy8baSLw","tlshash":"c7815cf120526cb78908a21f7628e1d0c994d702e96ee434783fbb9c1d92cb6474f556","first_seen":"2023-09-19T12:06:39Z","last_seen":"2026-06-13T23:40:04.917245Z","times_seen":178,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"van.najva.com/static/js/scripts/p30download-893-8a83f6b7-68a8-42f6-88c9-cd402ff203aa.js?v=202600028012","fqdn":"van.najva.com","domain":"najva.com","tld":"com"},"ip":{"addr":"185.166.104.7","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.najva.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sat, 20 Dec 2025 16:43:11 GMT","end":"Mon, 14 Dec 2026 21:39:29 GMT"},"fingerprint":{"sha1":"F8:D1:FB:3A:AC:4B:79:89:18:93:80:EB:84:AA:09:C8:03:35:0B:14","sha256":"F8:BE:AE:EB:A5:06:75:2D:80:4F:1A:56:9B:4B:71:EF:A4:CF:28:D3:16:41:7C:03:F1:0C:A5:83:99:04:B5:B0"}}},"request":{"raw":"GET /static/js/scripts/p30download-893-8a83f6b7-68a8-42f6-88c9-cd402ff203aa.js?v=202600028012 HTTP/1.1\r\nHost: van.najva.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 266\r\nlast-modified: Sun, 04 May 2025 17:49:40 GMT\r\nx-rgw-object-type: Normal\r\netag: \"dbbedafee0e650860b0adf356283c8ed\"\r\nx-amz-request-id: tx000002bff9e1e05cdbf19-006979ec46-700d90b9-default\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 10\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"dbbedafee0e650860b0adf356283c8ed","sha1":"1cacd59307bb40db51da65171a578bf38d444717","sha256":"b24bbfed2c989d23cd08877d1e18e1ca0c5baff68c2336d0d208cfc60bbb2e26","sha512":"ce0d00e199436d2407484852d128478a3e48ea761c23ea7a7b79285b4a3c3e3e23a023d052ee775e2a17aa955640811c66688995c5c4a377dffa9ee4a5d44f87","ssdeep":"","tlshash":"82d02e2eae10c8322e6800da30bae654abe5b2226469ed4900cecc189b80ce55ed0894","first_seen":"2025-06-24T06:37:40.283407Z","last_seen":"2026-06-13T23:40:04.953104Z","times_seen":12,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":72,"dns":30,"connect":17,"send":0,"wait":18,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/dl.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/dl.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/template/css/fa/styles.v2.7.39.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 2149\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:30 GMT\r\nLast-Modified: Fri, 05 Feb 2021 09:24:31 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"964d1873a283dc92e7e961ce59866ece","sha1":"b3e9ce7a3db41ec392522c5ffc1d080f17fd7e59","sha256":"7e57667628f1cd940cd827457baa74a168f132ae1568415aa61cc646736b9457","sha512":"608b80850131f09894af70600ed4a6cee416fa02388541c7a1092dcc2efb5f7cab90aad8d5e3549c2551aaa88a166250cdce5f33724128efea7664fa8711d465","ssdeep":"","tlshash":"6441b9dbf520a5813151fbcc20e681372b66cd115698e07666ca991bcee40bc21fd5cb","first_seen":"2025-10-10T05:59:39.725249Z","last_seen":"2026-01-28T12:16:03.444928Z","times_seen":5,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":399,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"van.najva.com/static/js/main-script.js","fqdn":"van.najva.com","domain":"najva.com","tld":"com"},"ip":{"addr":"185.166.104.7","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.najva.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sat, 20 Dec 2025 16:43:11 GMT","end":"Mon, 14 Dec 2026 21:39:29 GMT"},"fingerprint":{"sha1":"F8:D1:FB:3A:AC:4B:79:89:18:93:80:EB:84:AA:09:C8:03:35:0B:14","sha256":"F8:BE:AE:EB:A5:06:75:2D:80:4F:1A:56:9B:4B:71:EF:A4:CF:28:D3:16:41:7C:03:F1:0C:A5:83:99:04:B5:B0"}}},"request":{"raw":"GET /static/js/main-script.js HTTP/1.1\r\nHost: van.najva.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Sun, 21 Dec 2025 13:31:31 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"0d2a3f336fbcf76cdb9fb3b814f83039\"\r\nx-amz-meta-mtime: 1766323863.38612627\r\nx-amz-request-id: tx00000b38512507cd94219-0069480214-6e3222a4-default\r\nx-zrk-us: 200\r\ncache-control: public, max-age=3600\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 10\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63670,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45588)","md5":"0d2a3f336fbcf76cdb9fb3b814f83039","sha1":"18d02cfb712de59ea3102dccbdfac25dc637bbab","sha256":"347f8dfc8a6a0c7df25b13da87131539d3665472a9fd88e9925e220e4f9bfcf4","sha512":"a70bfa78d9db0b36c8f3dd2212038328c4b9dba9d777cd27290ac056ac97bc74d811cb5be9acfe3d0a45321797170ac7f85245451cc247c059b92dd36eaa9582","ssdeep":"768:zRDL4glZe7Tgs2VbxvNFgMgw4P7smFUWtcQpx06AfLznKdeGIjvX4Ho2UcQiaQAZ:9e7IFZV82nKM9vX4H8iaQbg","tlshash":"35532b9577f7b52647eb10b9a0bb2102b77d8944448c047cf29ce9de2e9840a96f7f38","first_seen":"2025-12-23T09:58:34.192828Z","last_seen":"2026-02-13T21:59:16.915259Z","times_seen":7,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"native-removal.triboon.net/?hash=190740297,816717490,587596146,945832102,53973829","fqdn":"native-removal.triboon.net","domain":"triboon.net","tld":"net"},"ip":{"addr":"185.166.104.3","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"triboon.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 17:50:31 GMT","end":"Sat, 18 Apr 2026 17:50:30 GMT"},"fingerprint":{"sha1":"F6:2E:28:CE:44:1C:27:8D:4D:55:82:D6:88:CF:48:56:A2:C6:D5:1A","sha256":"61:04:9E:7D:23:01:D2:86:FF:42:5E:B5:40:03:DA:29:ED:36:5F:97:D8:F2:88:D1:DF:9F:E3:EB:89:EF:85:60"}}},"request":{"raw":"OPTIONS /?hash=190740297,816717490,587596146,945832102,53973829 HTTP/1.1\r\nHost: native-removal.triboon.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: href\r\nReferer: https://p30download.ir/\r\nOrigin: https://p30download.ir\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://p30download.ir\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nx-zrk-us: 200\r\nx-zrk-cs: BYPASS\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e91ec5366d3382ecc6d1bd09b1b03348","sha1":"f366c2bfc5403cdaed01df452a1923f86e04d1b5","sha256":"674bcba5c81a5a8d8b9e907dddba0d24028bea8ec9cad7deff61860ff86cc9a0","sha512":"b6a65a69bafa1822cc8e00741d697a177581253049e1daecb82c3ea0dd8722d2ca18f48d0899f2a5cb1ca62a3653d2b920fe15bb7d9aa5f85b09c4229aea0773","ssdeep":"","tlshash":"41600000c000c0000000000c00c003c0c330c0c3c30000030000cc30c30cf00303030f","first_seen":"2023-05-13T18:54:58Z","last_seen":"2026-06-12T02:28:32.073531Z","times_seen":139,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":55,"dns":10,"connect":17,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/icons/set3/fastforward.gif","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/icons/set3/fastforward.gif HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 77\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:29 GMT\r\nLast-Modified: Fri, 01 Apr 2011 14:50:07 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"b688861394385f99d8215ed65f4a4d30","sha1":"f606fc348128c9cde1ffd792240dc142a461f45f","sha256":"f940ce16c1c6526797365b912ed98534866cc9480293f19dee3eac63bc124cdd","sha512":"72902418803c3bfcb80a9a1efb427761d43c8eb8b67c7afa127246291320d904ff5729eca317335a61b989521e20dce0f37e10638af9c17e48a5f0073cb28709","ssdeep":"","tlshash":"63a022038b00c030c0028b30c80cc300b30e38083288838e3ba882af880f3283332e00","first_seen":"2026-01-28T12:16:03.446843Z","last_seen":"2026-01-28T12:16:03.446843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":334,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/images/search.png","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/images/search.png HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: image/png\r\nContent-Length: 1514\r\nConnection: keep-alive\r\nCache-Control: public, max-age=2592000\r\nExpires: Fri, 27 Feb 2026 12:15:29 GMT\r\nLast-Modified: Sun, 03 Apr 2011 16:13:40 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 34, 8-bit/color RGBA, non-interlaced","md5":"59797bdf9a7c1abbfb727e9bbe4c418f","sha1":"108ad023941dc8b8319cf6e7df94bd4a3040e129","sha256":"a621c02cedff3a5fc5610344e021b615cf87675e2f2d0e4334e6a584aed220a0","sha512":"53623c095903e0d9906d3aee1d6c083663a0a08dcfd8d1f421f03be87e1b42c6f02cbd60a2581f65535fc1c8baea2e514518fd14de2d4588cfefec6c08afb4ee","ssdeep":"","tlshash":"35311cf4f5367af2bda646250509957c889912d820a30dcf9a1c83f7b040565be2df0e","first_seen":"2025-02-06T20:25:05.673974Z","last_seen":"2026-06-13T23:40:04.984582Z","times_seen":13,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beta.kaprila.com/a/loader.js","fqdn":"beta.kaprila.com","domain":"kaprila.com","tld":"com"},"ip":{"addr":"185.18.212.82","port":443,"asn":48715,"as":"Sefroyek Pardaz Engineering PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kaprila.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 19:35:39 GMT","end":"Tue, 31 Mar 2026 19:35:38 GMT"},"fingerprint":{"sha1":"86:60:CE:D8:4E:7C:72:95:21:02:16:79:DB:E8:2C:D7:D1:13:FA:E8","sha256":"23:AA:43:92:EF:57:9D:7F:3B:57:6C:87:68:82:0D:83:6E:61:C8:7E:58:4E:E8:19:F8:A8:FC:11:E6:FF:DC:1A"}}},"request":{"raw":"GET /a/loader.js HTTP/1.1\r\nHost: beta.kaprila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.21.3\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Nov 2025 08:08:38 GMT\r\netag: W/\"6912ef06-13da\"\r\nexpires: Fri, 27 Feb 2026 12:15:30 GMT\r\npragma: public\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ntransfer-encoding: chunked\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5082,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2587)","md5":"abacca91404684b3a2096c14efa2ef11","sha1":"78f9849df0368f79accf3f70933f43f2d5284a8f","sha256":"236b2602218a64cd4ea7f88350689d33965332e56d9af6f52767d80328736aa9","sha512":"7ce258e5e53a9bf180171f332cf4c5b1358c2d609d5f2fa5559de69954166a756fd280bbd94163e0396480a67cd3e4d040d93d8722e1fe0f0d4af3261156484a","ssdeep":"96:TTJT/w3tIOHUjTnbNhllQgSEaN9kxQak7BZSwcbiMcSoQEGv:5cF0jTbNyAaOQak7NIiIbnv","tlshash":"68a163a97d90a0f407629a6b653fe35a753361c92e064450e03dbab83f68b4bd513e88","first_seen":"2025-11-16T09:52:56.198656Z","last_seen":"2026-06-13T23:40:04.893844Z","times_seen":25,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":199,"dns":20,"connect":85,"send":0,"wait":94,"receive":2,"ssl":93},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"beta.kaprila.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"native-scripts.yektanet.com/public/chunk/template.6.1.2.js","fqdn":"native-scripts.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /public/chunk/template.6.1.2.js HTTP/1.1\r\nHost: native-scripts.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 14:40:20 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"8e38a7bf5f8f06def3235dee70438ace\"\r\nstrict-transport-security: max-age=0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: public, max-age=2592000\r\nx-cache-status: HIT\r\nx-zrk-us: 200\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30504,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30479), with no line terminators","md5":"8e38a7bf5f8f06def3235dee70438ace","sha1":"c623745d861662b6cf10565428e9b085c064ff87","sha256":"b18314b2976e48e024ff9ce6804739c7e5de3456a4a1c06ba8501753d04f3bb2","sha512":"a720df97b823ae743ff21ecac8ea1b709913fb4dc02d86cf21131627cfa11953a1f753144be6d26787585db255d5dc36f8e98bd78d539a554acdbecdd9b72fd9","ssdeep":"768:rngws1yDCcgws1y9a7ala1aVa7f35vB5O12WtUZkTvVfCe3UrUCUM7X/B:rngws1yDHgws1yomQgA7pzRWnT9fCe3k","tlshash":"ddd2c532b0e4633846324158a6b70bfef236a31653db4978b97d7a38c38cb452932f55","first_seen":"2026-01-28T12:16:03.448889Z","last_seen":"2026-01-28T12:16:03.448889Z","times_seen":1,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"native-scripts.yektanet.com/public/chunk/public.js?v=6.1.0","fqdn":"native-scripts.yektanet.com","domain":"yektanet.com","tld":"com"},"ip":{"addr":"185.166.104.4","port":443,"asn":202319,"as":"Avaye Hamrahe Houshmande Hezardastan PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:30.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yektanet.com","organization":"Noavaran Yekta Net"},"issuer":{"commonName":"Certum Organization Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 25 Feb 2025 09:15:09 GMT","end":"Wed, 25 Feb 2026 09:15:08 GMT"},"fingerprint":{"sha1":"88:90:3C:9A:0B:29:4D:F6:EF:6B:D0:4D:70:82:59:8D:39:79:51:DD","sha256":"23:F2:B2:4B:87:5E:5A:FC:CA:8A:37:D4:03:7F:1B:68:80:4E:90:6C:24:21:AB:7D:FA:1F:94:B0:54:8D:80:92"}}},"request":{"raw":"GET /public/chunk/public.js?v=6.1.0 HTTP/1.1\r\nHost: native-scripts.yektanet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: analytics_global_token=01KG28FF8AD32ZPMYKC55SYM93; gearbox_ad_token=01KG28FF8AD32ZPMYKC55SYM93; _yngt=01KG28FF8AD32ZPMYKC55SYM93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 12:15:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Jan 2026 07:34:55 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"426f43a97409e06f989c56b393a40213\"\r\nstrict-transport-security: max-age=0\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: public, max-age=2592000\r\nx-cache-status: HIT\r\nx-zrk-us: 200\r\nx-zrk-cs: HIT\r\nserver: Sotoon CDN\r\nx-zrk-sn: 2002\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6848,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6818), with no line terminators","md5":"426f43a97409e06f989c56b393a40213","sha1":"98236609fb725bdcc04ed6305f73a8b082146ef6","sha256":"9e094cae2b775a4d9fc4dc2b434b1ebe6deb94f79ee19379d38b7e0e0857ca51","sha512":"6036cc0c4fc305186c8813e8cccce6aea7ded681d5fc40e9bbff408d5913ead9e373fdc7753648e05df4d805150ff02bd9f757e2106c3dad79f0ea20f92432b5","ssdeep":"192:h5f2oVZ/FXh8u1K24B4Wx/5/6QJym96YLSTwtjZbrnm:z2g/FRn1K2M4O8OyeSTwJc","tlshash":"4fe1947cb346707541cb3168631f2206bb79699199d7ccc0a03edc95af78dcea193e19","first_seen":"2026-01-28T12:16:03.406821Z","last_seen":"2026-01-28T12:16:03.406821Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p30download.ir/template/css/fa/styles.v2.7.39.min.css","fqdn":"p30download.ir","domain":"p30download.ir","tld":"ir"},"ip":{"addr":"5.144.130.116","port":443,"asn":59441,"as":"NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.)","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://p30download.ir/fa/entry/91787/telegram","date":"2026-01-28T12:15:29.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.p30download.ir","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 10:26:40 GMT","end":"Thu, 19 Mar 2026 10:26:39 GMT"},"fingerprint":{"sha1":"2B:CB:71:DD:65:3A:1B:88:B8:95:96:6F:43:B8:45:75:02:27:44:47","sha256":"9A:CB:B9:77:EA:EF:74:B4:7E:9A:51:A1:29:57:A6:80:BD:4D:39:D1:79:DD:82:CD:C3:2F:5C:AE:39:9C:3A:AA"}}},"request":{"raw":"GET /template/css/fa/styles.v2.7.39.min.css HTTP/1.1\r\nHost: p30download.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p30download.ir/fa/entry/91787/telegram\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 28 Jan 2026 12:15:29 GMT\r\nContent-Type: text/css\r\nContent-Length: 97829\r\nConnection: keep-alive\r\nCache-Control: public, max-age=604800\r\nExpires: Wed, 04 Feb 2026 12:15:29 GMT\r\nLast-Modified: Fri, 05 Dec 2025 10:18:27 GMT\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97829,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (15024)","md5":"f35411238e6a5060057fa290bae6f93f","sha1":"f936599a8614c517dd923b818686d386e897631d","sha256":"af1dc7accbb57fe35a5a0396ded106505c5e24682aeed99777687f3df448d11e","sha512":"5c2e4d8ea126b325c523fe4b9a355411b509b31b7b46db5a27da7fd48b4136e8e9ddfeda4174a1aa97d757f8932da0f2e7dfe42b5ebcfd86697f741779901a8d","ssdeep":"1536:eGgkwSsIy9Pb3fFp+SsIj45U5vXN8ZiXo4JvsxQhWvs7BFEjO:eGgkwSsIy9Pb3fFp+SsIk0sQKq","tlshash":"31a3d766a290201e7123c17ef49376dd77298407eb474af9f8b6767cdb4e1e40233a4a","first_seen":"2025-12-07T14:13:08.219575Z","last_seen":"2026-01-28T12:16:03.449798Z","times_seen":4,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"p30download.ir","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}