r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358212db02ecc7c1fa088906bd2dba14
091a0688da9de609d97349215ba9e452dfc346a4
7486e512e4de8172ac07f07f47da3a96dd3ac7cb054b335f3e4929261440e672
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7486E512E4DE8172AC07F07F47DA3A96DD3AC7CB054B335F3E4929261440E672"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9545
Expires: Wed, 14 Dec 2022 02:39:13 GMT
Date: Wed, 14 Dec 2022 00:00:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 555d8608594803d49eeb9581c6b70702
d01e0201e0ba0cf751ef97226620338a853bc635
2885cdac311a30161a8ac9ef8e54c788afafd4f86ed197a651fc6d8bda077908
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2885CDAC311A30161A8AC9EF8E54C788AFAFD4F86ED197A651FC6D8BDA077908"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18727
Expires: Wed, 14 Dec 2022 05:12:15 GMT
Date: Wed, 14 Dec 2022 00:00:08 GMT
Connection: keep-alive
neyfilm.rozblog.com/cat/578
200 OK 11 kB URL HTTP/1.1 neyfilm.rozblog.com/cat/578
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1574), with CRLF, LF line terminators
Hash 8f30ccd5ce8f4db4908f302d8e47899d
c14ac4b151c449da401cb07d89cc8b94f9e7a5b0
d2cb21c77fb1321b4c3e10092258dbf5a884108f3993f85d0bc642e237640b2d
Analyzer Verdict Alert fortinet Malware
GET /cat/578 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
set-cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-language: fa
content-type: text/html; charset=utf-8
vary: Accept-Encoding,User-Agent
transfer-encoding: chunked
content-encoding: gzip
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 13 Dec 2022 23:08:48 GMT
content-type: application/json
age: 3080
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d29881eeb0456eff8cf415ad2ce64ba0
e3cfdd5f56ff88066257ec8f4726f53e3a733bd3
2cd90072f113163f976ddb8bc7017884efd3f764e7e8961b04e3ba5ec0a17d85
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CD90072F113163F976DDB8BC7017884EFD3F764E7E8961B04E3BA5EC0A17D85"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2568
Expires: Wed, 14 Dec 2022 00:42:56 GMT
Date: Wed, 14 Dec 2022 00:00:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: W1jGLXbwK+4k/oQM6VjV2ijnMgZpE/mC+NARNRnCQvB94j7T9wqswZxfTu/U4aBKF68uxkw0HoQhom86KIhrdw==
x-amz-request-id: AZ24V7ZK0YZQ7NF8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 13 Dec 2022 23:52:07 GMT
age: 481
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Dec 2022 00:00:08 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
neyfilm.rozblog.com/temp/tarahi/styles.css
200 OK 6.1 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/styles.css
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash 28cf21c53411f845b0888677cbc74828
25bf3bc9920ad37a3f81d88e46001cab51eea3f6
d18ec6839084bfa3a36008f9f5f03cf0de9c8c656677aac9a5a62c2b6890f5ab
GET /temp/tarahi/styles.css HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/578
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 13 Jan 2023 00:00:08 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 00:08:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6091
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/temp/site.css?22
200 OK 3.9 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/site.css?22
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (860)
Hash 787a6674aa05de4919a7c90cdbb150c9
2159cc3ec669621f05f361bd91b956e573faef9a
e234a5881c33e5ff75519381140d07f15611e92efbb0bb45ecf73437048d376c
Analyzer Verdict Alert fortinet Malware
GET /temp/site.css?22 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/578
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 13 Jan 2023 00:00:08 GMT
content-type: text/css
last-modified: Wed, 02 Mar 2022 08:28:27 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 3945
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/js/site.js?7
200 OK 9.4 kB URL HTTP/1.1 neyfilm.rozblog.com/js/site.js?7
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text, with very long lines (5730)
Hash 3a9e608b97ff4d23f8a1649f24b6ed66
794e50a615ef78e2f2bd7616c7d9e033fc4bbe9d
82faf31dfa45299d23061f2c05579901ca592090ce35f1dc48a6ff61f24ac28a
Analyzer Verdict Alert fortinet Malware
GET /js/site.js?7 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/578
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 21 Dec 2022 00:00:08 GMT
content-type: application/javascript
last-modified: Sat, 14 May 2022 01:34:44 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 9422
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/temp/default/script.js
200 OK 302 B URL HTTP/1.1 neyfilm.rozblog.com/temp/default/script.js
IP
ASN #43754 Asiatech Data Transmission company
Hash f63434fb5b29fa6044b1a1e30e6c1162
2e7ada06c79c670f0dff3bd7d0474d07c49104e0
a9396929db33b5a927292dc2e2f33891c594811b1b37dd993abbc9db9afbb7cb
Analyzer Verdict Alert fortinet Malware
GET /temp/default/script.js HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/578
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 21 Dec 2022 00:00:08 GMT
content-type: application/javascript
last-modified: Wed, 18 Jul 2018 10:51:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 302
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/code/popup
200 OK 1.2 kB URL HTTP/1.1 neyfilm.rozblog.com/code/popup
IP
ASN #43754 Asiatech Data Transmission company
Hash 3afa2bdb419fb28772de1f125063ccd4
800adfd503a8d265a39577746fa468cee6e35ca6
84a2ab40ed061ec0580c2cef29edc0fdee928dcc09874e8cb4d4c6009402ed81
Analyzer Verdict Alert fortinet Malware
GET /code/popup HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/578
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-language: fa
content-type: text/html; charset=charset
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Wed, 14 Dec 2022 00:00:08 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: pop_id=11273%2C; expires=Wed, 14-Dec-2022 12:00:08 GMT; Max-Age=43200; path=/
c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; expires=Thu, 15-Dec-2022 00:00:08 GMT; Max-Age=86400; path=/
c_t=7570363991208b9513401088922918784485; expires=Thu, 15-Dec-2022 00:00:08 GMT; Max-Age=86400; path=/
vary: Accept-Encoding,User-Agent
content-length: 1182
content-encoding: gzip
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/images/no_image.png
200 OK 6.3 kB URL HTTP/1.1 neyfilm.rozblog.com/images/no_image.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c675d607343c154f0ef074dc145988a
2f3713c21ed04a225f16439b200e2b2a6062454e
2e8f7285f7325ed8db6a0d253158db2c8962125173a1e6973e8fcb39a325a7ba
GET /images/no_image.png HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/578
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 14 Dec 2023 00:00:08 GMT
content-type: image/png
last-modified: Sat, 12 Jan 2013 13:14:07 GMT
accept-ranges: bytes
content-length: 6278
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/nuke/FBarrow.gif
200 OK 59 B URL HTTP/1.1 rozblog.com/temp/nuke/FBarrow.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 9 x 9\012- data
Hash 08f58683f752ec50ab890d4162cf9a03
2a0e3923b77ab35c273bf5307fc980f4d4de42fe
d8359b38e288d654bf46c6c01ea58f896a998390f848ca99eb4015900f1cdb42
GET /temp/nuke/FBarrow.gif HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 14 Dec 2023 00:00:08 GMT
content-type: image/gif
last-modified: Sat, 26 Nov 2011 12:58:49 GMT
accept-ranges: bytes
content-length: 59
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/include/captcha/cap9.php
200 OK 3.0 kB URL HTTP/1.1 neyfilm.rozblog.com/include/captcha/cap9.php
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash de0c36f5513394804b960a0b43fc3c7d
3d1c688713e7cac50f18dce0391c6b94846bdcb4
0cb3f15fd67733e2ee77839e794abac4631ab4e72562ea995ac36086e63e954a
Analyzer Verdict Alert fortinet Malware
GET /include/captcha/cap9.php HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/578
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
content-length: 2985
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/images/refresh2.svg
200 OK 276 B URL HTTP/1.1 neyfilm.rozblog.com/images/refresh2.svg
IP
ASN #43754 Asiatech Data Transmission company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 7082e86e2a3c9646fa1aa922b8e3a2d6
7f704127e872b5b94b8e2dd7959e2d5c9b9379a8
d1254b0bb9112500f8f39e1130f0a6c8dca1037d416e7f7d6524894b31b06b00
Analyzer Verdict Alert fortinet Malware
GET /images/refresh2.svg HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/578
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 21 Dec 2022 00:00:08 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Apr 2021 22:57:34 GMT
etag: "114-6089e85e-9f2e18d89b796b95;;;"
accept-ranges: bytes
content-length: 276
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/weblog/file/loading/88.gif
200 OK 6.0 kB URL HTTP/1.1 neyfilm.rozblog.com/weblog/file/loading/88.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 50 x 50\012- data
Hash 093445ee241c72e6dca01dc570c230dc
32adb71ec06b5d29ec62c5511328d5970228b86d
d40495f2a0e830c47fe4cd50574c68e206292f63545a0684516db0cd8716ee0e
GET /weblog/file/loading/88.gif HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/578
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 14 Dec 2023 00:00:08 GMT
content-type: image/gif
last-modified: Thu, 02 Feb 2012 21:52:24 GMT
accept-ranges: bytes
content-length: 5972
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/pro/ads_468.jpg
200 OK 6.3 kB URL HTTP/1.1 rozblog.com/temp/pro/ads_468.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 468x60, components 3\012- data
Hash db8cac5e50e0f1be65a3ec0756ea6612
3053609e1039ab6d0d0be6adefeaf7ba7a243cf6
8f10f1e719bda34ecfc3af6b50f8273e9c9676d10612eff12aad2382d458ef1d
GET /temp/pro/ads_468.jpg HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 14 Dec 2023 00:00:08 GMT
content-type: image/jpeg
last-modified: Fri, 20 Feb 2015 09:52:01 GMT
accept-ranges: bytes
content-length: 6286
date: Wed, 14 Dec 2022 00:00:08 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/music3/MTForumBlock_row_over.png
200 OK 139 B URL HTTP/1.1 rozblog.com/temp/music3/MTForumBlock_row_over.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 1 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 1fd885e3d0a8fc062470706ae84ea56b
f0e6c850b1794c523ca16bf087054cb843daf6fa
e0dc411ff39139fd39b2cf6d027ab2d56fbd3b51bacc0935e1ae284e65c64e40
GET /temp/music3/MTForumBlock_row_over.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 14 Dec 2023 00:00:09 GMT
content-type: image/png
last-modified: Sun, 03 Jul 2011 21:44:44 GMT
accept-ranges: bytes
content-length: 139
date: Wed, 14 Dec 2022 00:00:09 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/music3/MTForumBlock_row.png
200 OK 155 B URL HTTP/1.1 rozblog.com/temp/music3/MTForumBlock_row.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 1 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 3ae7d651d73f3b247f9737655c53e08e
476c9a585906552a1054a74f88de640142ce40f5
d5496cde5cf105a1cf8c8fe59e0efefba5859a4fbff07a4701ec4f4a7c6e5ac5
GET /temp/music3/MTForumBlock_row.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 14 Dec 2023 00:00:09 GMT
content-type: image/png
last-modified: Sun, 03 Jul 2011 21:45:04 GMT
accept-ranges: bytes
content-length: 155
date: Wed, 14 Dec 2022 00:00:09 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/temp/tarahi/fonts/wdtv.woff
200 OK 15 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/fonts/wdtv.woff
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 14648, version 1.0\012- data
Hash 259c4490256daceb6a5f275cee137627
5c0eae14870f1ec6527aa64f3f675cb9063034ee
bd4bdb99aa4a1cf56a05d7a913dce42b23b4cb021148b0a0f22d836105d98fc5
Analyzer Verdict Alert fortinet Malware
GET /temp/tarahi/fonts/wdtv.woff HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52; pop_id=11273%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=7570363991208b9513401088922918784485
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 16 Dec 2022 00:00:09 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:22 GMT
etag: "3938-54ef6d46-daf654b8921ad10f;;;"
accept-ranges: bytes
content-length: 14648
date: Wed, 14 Dec 2022 00:00:09 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/rang/like.png
200 OK 2.3 kB URL HTTP/1.1 rozblog.com/temp/rang/like.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 22 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash dd370ffbcd679da0d5c8547f34c6e2fb
6df3b9ec0e82b1a6ef41bc83041d2b2e16200077
2f14531974b17d9fd89de532694faf69ed7aa61b04ea990108b138d772ba96f7
GET /temp/rang/like.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 14 Dec 2023 00:00:09 GMT
content-type: image/png
last-modified: Sat, 14 Feb 2015 11:52:19 GMT
accept-ranges: bytes
content-length: 2272
date: Wed, 14 Dec 2022 00:00:09 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c2681ac3f9c30c2f37f0b1fd794fd909
5ddf9fb0870fc05c0331365df05ba21dbe396e43
7b7e0514c6bce8eb3a9cff301a97cd24dbacdee1c88ed8149da24ed18b9a2e26
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B7E0514C6BCE8EB3A9CFF301A97CD24DBACDEE1C88ED8149DA24ED18B9A2E26"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20505
Expires: Wed, 14 Dec 2022 05:41:54 GMT
Date: Wed, 14 Dec 2022 00:00:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c2681ac3f9c30c2f37f0b1fd794fd909
5ddf9fb0870fc05c0331365df05ba21dbe396e43
7b7e0514c6bce8eb3a9cff301a97cd24dbacdee1c88ed8149da24ed18b9a2e26
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B7E0514C6BCE8EB3A9CFF301A97CD24DBACDEE1C88ED8149DA24ED18B9A2E26"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20429
Expires: Wed, 14 Dec 2022 05:40:38 GMT
Date: Wed, 14 Dec 2022 00:00:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de67d800535c30755547a82df9891461
342829fec97d18a8bc6eb16bb576d1322ea0ed6f
57764bfb8f8a50c429573212e6c9d5058995dab4ab4a50f450de8d27be389186
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "57764BFB8F8A50C429573212E6C9D5058995DAB4AB4A50F450DE8D27BE389186"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14447
Expires: Wed, 14 Dec 2022 04:00:56 GMT
Date: Wed, 14 Dec 2022 00:00:09 GMT
Connection: keep-alive
neyfilm.rozblog.com/temp/tarahi/fonts/yekanregular.woff
200 OK 22 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/fonts/yekanregular.woff
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, CFF, length 21500, version 2.0\012- data
Hash 05727d32400b2008acbf7fc49251ede0
b6c1a82539a2531eb1aad7d1cf05554d5a999154
da78e001fab6f5d7b1c68e17d00fb1595c9b10085d6769a86aeb6a39dc7e43d6
Analyzer Verdict Alert fortinet Malware
GET /temp/tarahi/fonts/yekanregular.woff HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52; pop_id=11273%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=7570363991208b9513401088922918784485
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 16 Dec 2022 00:00:09 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:25 GMT
etag: "53fc-54ef6d49-80b982f1d7ce7ee2;;;"
accept-ranges: bytes
content-length: 21500
date: Wed, 14 Dec 2022 00:00:09 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 13 Dec 2022 23:33:18 GMT
age: 1611
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash de9e80c3bbe25e8623562110be8b8c9c
013f87db47c4ce3daf3380bc5e0ac3b1b496fe6f
792d587777c03d661a39a0593b71b3ec7611cb6e9d7a834bc79f28e6ace19692
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5853
Cache-Control: max-age=125056
Content-Type: application/ocsp-response
Date: Wed, 14 Dec 2022 00:00:09 GMT
Etag: "639840ac-1d7"
Expires: Thu, 15 Dec 2022 10:44:25 GMT
Last-Modified: Tue, 13 Dec 2022 09:06:52 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
rozup.ir/up/neyfilm/ALIZARANDI/uc_1359.png
200 OK 4.3 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_1359.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 45, 8-bit colormap, non-interlaced\012- data
Hash a82be12fddef1b066a5b6fa4b23f6069
2da26d09c759bba1f3ed9953cba6fd53daa61baa
b635f006fe79bc69a5829eca84804f0ac7bb272e12f6617a08fe1a3750da248d
GET /up/neyfilm/ALIZARANDI/uc_1359.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:08 GMT
Content-Type: image/png
Content-Length: 4265
Last-Modified: Thu, 23 Apr 2015 15:03:48 GMT
Connection: keep-alive
ETag: "553909d4-10a9"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a09dba87509b38a006bfe66b9b415c64
42068d2e4c1eeebead7f10eb093f68ab7fac596b
3aeaaa06dca468fcd163528c3957f3a7c8a1f180c2fcbd26190890c271ccf08a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3AEAAA06DCA468FCD163528C3957F3A7C8A1F180C2FCBD26190890C271CCF08A"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=245
Expires: Wed, 14 Dec 2022 00:04:14 GMT
Date: Wed, 14 Dec 2022 00:00:09 GMT
Connection: keep-alive
neyfilm.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
200 OK 66 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Hash d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
GET /temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=9d6b915cb98541cecb12604a13a1ba52; pop_id=11273%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=7570363991208b9513401088922918784485
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 16 Dec 2022 00:00:09 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:20 GMT
etag: "ffac-54ef6d44-11fea27943efc11b;;;"
accept-ranges: bytes
content-length: 65452
date: Wed, 14 Dec 2022 00:00:09 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Firefox-37-100x100.png
200 OK 16 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Firefox-37-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash ceef5adb5e29d1f961ee6664fbe09e38
b145852a8dc3ca9fbe950808c4404e97d5c0fa95
8c03ac20400e7191a57a8f5901d2a69f2a0a97cc610b6d081d0abdcff17ead5d
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Firefox-37-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:08 GMT
Content-Type: image/png
Content-Length: 16114
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-3ef2"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Internet-Download-Manager-61-100x100.png
200 OK 14 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Internet-Download-Manager-61-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash cfdbce4fe6a135178bcaee284033eeee
dd417174542ecff236d648a05e3b985f45b6cad0
6dba2fec1bf54f8caa9fba0ad7ae539ef23a5646715bf0577488f24984b746d3
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Internet-Download-Manager-61-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:08 GMT
Content-Type: image/png
Content-Length: 14493
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-389d"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 689b8cccfb326043e469f1c37fdcfe4e
6de546f4376bd04893890d67576a76c92b640d70
24ce398eb18dbe1ae6a0d96bc214abf520f6227d21e996620f40cb83c9856a96
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "24CE398EB18DBE1AE6A0D96BC214ABF520F6227D21E996620F40CB83C9856A96"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16803
Expires: Wed, 14 Dec 2022 04:40:12 GMT
Date: Wed, 14 Dec 2022 00:00:09 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: S7kdM7tQCVrYXCyz1o6owA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: v85Kb1+wuYrtPqsgqSCBWzB55eA=
rozup.ir/up/neyfilm/ALIZARANDI/uc_886.jpg
200 OK 80 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_886.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0 ME, datetime=2012:10:06 15:08:24], progressive, precision 8, 450x350, components 3\012- data
Hash 7bb099bab559328fc8d97c3c5726d8b5
21da02c63ea5568ac511063bf354e1ca0b25e69b
6674025cc2a7f9f4b338b4529f8f22927ca6fc646ceca0326808e0fbe8366df2
GET /up/neyfilm/ALIZARANDI/uc_886.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:08 GMT
Content-Type: image/jpeg
Content-Length: 79552
Last-Modified: Wed, 22 Apr 2015 17:02:20 GMT
Connection: keep-alive
ETag: "5537d41c-136c0"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 61762e424e5b9ef9457578300b1dd178
f28d68e1dee96eb7e05b8ab4676ba93277452243
93c75ca8fe6d340216ec10d2fe6b325be1a477e1cae6b2fd57dc833f10134fdb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "93C75CA8FE6D340216EC10D2FE6B325BE1A477E1CAE6B2FD57DC833F10134FDB"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5801
Expires: Wed, 14 Dec 2022 01:36:50 GMT
Date: Wed, 14 Dec 2022 00:00:09 GMT
Connection: keep-alive
rozup.ir/up/neyfilm/ALIZARANDI/uc_2215.jpg
200 OK 55 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_2215.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x350, components 3\012- data
Hash 2bbae22da0bdf6880f41662c6ba92a67
298db2ff444800bd6e193f389a4c061b00f7fac1
0801d5bb892e6fc8c84680a4301bc711566e9313dcae29439280ffd7dbc42ef6
GET /up/neyfilm/ALIZARANDI/uc_2215.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:08 GMT
Content-Type: image/jpeg
Content-Length: 55243
Last-Modified: Wed, 22 Apr 2015 16:56:41 GMT
Connection: keep-alive
ETag: "5537d2c9-d7cb"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D9%84%D8%A8%D9%88%D9%85.png
200 OK 1.5 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D9%84%D8%A8%D9%88%D9%85.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash eb09df11c673284e3303417a2e38a317
e8b564163cb716510ec812558bedce451b327ad2
0ecc84565303a256741b84151272ad7312d07ea486315565418b86912c69297f
GET /up/neyfilm/Pishnehadi/%D8%A2%D9%84%D8%A8%D9%88%D9%85.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:08 GMT
Content-Type: image/png
Content-Length: 1544
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-608"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/%D8%B4%D8%A7%D9%BE.jpg
200 OK 96 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/%D8%B4%D8%A7%D9%BE.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2015:04:22 21:18:35], baseline, precision 8, 500x200, components 3\012- data
Hash a79cd97fefcaae507b0e318118f5eca7
9ce2679f1c62daca1f42a4153897e59204a92cf8
082823c4a671332c70ceb39c1c207b1c047472fe9881141819c6d455e4ddc089
GET /up/neyfilm/ALIZARANDI/%D8%B4%D8%A7%D9%BE.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:08 GMT
Content-Type: image/jpeg
Content-Length: 96193
Last-Modified: Wed, 22 Apr 2015 16:54:41 GMT
Connection: keep-alive
ETag: "5537d251-177c1"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%AA%DA%A9-%D8%A2%D9%87%D9%86%DA%AF.png
200 OK 1.6 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%AA%DA%A9-%D8%A2%D9%87%D9%86%DA%AF.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash b75b545ac71d9dd520ea52b8927964db
173f3df176f22006216c8d04e87c11dff35c62f0
a0af35eb593109fcc4cd4427a9d4c6c159ff326c42612ae546d06cd2c9d656b7
GET /up/neyfilm/Pishnehadi/%D8%AA%DA%A9-%D8%A2%D9%87%D9%86%DA%AF.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:08 GMT
Content-Type: image/png
Content-Length: 1648
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-670"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%88%D8%B3%DB%8C%D9%82%DB%8C.png
200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%88%D8%B3%DB%8C%D9%82%DB%8C.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d3274f11b841f3746d838d3970b4f76d
a2ea2e11a47ee418787f0dae95ba2ff6544576a2
a35522b12cf4248a86c2b7183fa893c750a635a0fad8a11186084113d71e4598
GET /up/neyfilm/Pishnehadi/%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%88%D8%B3%DB%8C%D9%82%DB%8C.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:08 GMT
Content-Type: image/png
Content-Length: 1817
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-719"
Accept-Ranges: bytes
nfetch.yektanet.com/api/v2/load
204 No Content 0 B URL HTTP/2 nfetch.yektanet.com/api/v2/load
IP
ASN #204544 Dade Pardazi Mobinhost Co LTD
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/load HTTP/1.1
Host: nfetch.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://neyfilm.rozblog.com/
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 14 Dec 2022 00:00:09 GMT
vary: Origin, Access-Control-Request-Headers
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
rozup.ir/up/neyfilm/Pishnehadi/%D9%85%D9%88%D8%B2%DB%8C%DA%A9-%D9%88%DB%8C%D8%AF%DB%8C%D9%88.png
200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%85%D9%88%D8%B2%DB%8C%DA%A9-%D9%88%DB%8C%D8%AF%DB%8C%D9%88.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash c8e85fd80b37039786d675e208fbf738
a29c317df996992ceb50ac3b404c1ee78ba77b14
a22c9f1b49635541f6207fd2d548078373d980b0f0f12e833b8382df987c7e8d
GET /up/neyfilm/Pishnehadi/%D9%85%D9%88%D8%B2%DB%8C%DA%A9-%D9%88%DB%8C%D8%AF%DB%8C%D9%88.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 1823
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-71f"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c2681ac3f9c30c2f37f0b1fd794fd909
5ddf9fb0870fc05c0331365df05ba21dbe396e43
7b7e0514c6bce8eb3a9cff301a97cd24dbacdee1c88ed8149da24ed18b9a2e26
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B7E0514C6BCE8EB3A9CFF301A97CD24DBACDEE1C88ED8149DA24ED18B9A2E26"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4745
Expires: Wed, 14 Dec 2022 01:19:14 GMT
Date: Wed, 14 Dec 2022 00:00:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c2681ac3f9c30c2f37f0b1fd794fd909
5ddf9fb0870fc05c0331365df05ba21dbe396e43
7b7e0514c6bce8eb3a9cff301a97cd24dbacdee1c88ed8149da24ed18b9a2e26
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B7E0514C6BCE8EB3A9CFF301A97CD24DBACDEE1C88ED8149DA24ED18B9A2E26"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4666
Expires: Wed, 14 Dec 2022 01:17:55 GMT
Date: Wed, 14 Dec 2022 00:00:09 GMT
Connection: keep-alive
rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D8%B1%D8%B4%DB%8C%D9%88-%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
200 OK 1.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D8%B1%D8%B4%DB%8C%D9%88-%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash ed8ea3e5b5d48d4b2399e795d03a2552
edd02a3f45839dfd3ce791812101db7885dcd24b
17949d9d0af7f8b9c1b03c9ab7dd16b299eada335e0fe569770482472ee1afec
GET /up/neyfilm/Pishnehadi/%D8%A2%D8%B1%D8%B4%DB%8C%D9%88-%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 1892
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-764"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 74129318d41ce8423b398eb065ca602e
729a39c43ac02096ae498aeb81bbbc8ef6037e77
7eb0ecc1747e9764403efca2dd8ef549290722622ddf6a5698a122cc14dc2f20
GET /up/neyfilm/Pishnehadi/%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 1781
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-6f5"
Accept-Ranges: bytes
nfetch.yektanet.com/api/v2/load
200 OK 1.2 kB URL HTTP/2 nfetch.yektanet.com/api/v2/load
IP
ASN #204544 Dade Pardazi Mobinhost Co LTD
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1203), with no line terminators
Hash 860f7cc1ee57e638bdfcb55245a2c45a
deea8cabc40228e68ed2a659ca41b1c1250a9549
128d9cbe80730fa5db0cfe62a2742c7bdfe1d5a6ca88b68efd05111798edac30
POST /api/v2/load HTTP/1.1
Host: nfetch.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 240
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 00:00:09 GMT
content-type: application/json; charset=utf-8
content-length: 1239
vary: Origin
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%DB%8C.png
200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%DB%8C.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d374b5e228b80c66ab9efa2539fe77e5
4333b4566a54d5f359ff14ac6198ad87bdd494a7
f72e96a56633fc5a48ae42b41477cc82aec1a3b82d5cdbf2d83913c2cb964805
GET /up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%DB%8C.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 1837
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-72d"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%AE%D8%A7%D8%B1%D8%AC%DB%8C.png
200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%AE%D8%A7%D8%B1%D8%AC%DB%8C.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 2a02e9f195f2080b3a80b78139c02cc1
5cf949d1cc9bb726f2c1d7cfb153dbd1466385a8
0a3e637590da21a24465d1c0c0a88a5b2aada6eeb0fa321bac0eb743be44e215
GET /up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%AE%D8%A7%D8%B1%D8%AC%DB%8C.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 1757
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-6dd"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%B3-%D8%A7%D9%85-%D8%A7%D8%B3.png
200 OK 1.7 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%B3-%D8%A7%D9%85-%D8%A7%D8%B3.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 71bc0cfb0e8f19da2d7fe06928985de0
61835ad6add92d2b04c5fdef29537fc688f37ee1
bdd623adfc6ae6fce7ee6bb2f8801f1e9fbae91ab002af25bda12d7e4b93b04e
GET /up/neyfilm/Pishnehadi/%D8%A7%D8%B3-%D8%A7%D9%85-%D8%A7%D8%B3.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 1685
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-695"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%86%D8%B1%D9%85-%D8%A7%D9%81%D8%B2%D8%A7%D8%B1.png
200 OK 1.7 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%86%D8%B1%D9%85-%D8%A7%D9%81%D8%B2%D8%A7%D8%B1.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 91486a703eee1715a0e0e24a789b7667
321a4eb4aed702db0350e808b1ab4b546ea83d40
a23d0207fe8a0afc2854b6943ba59cce740d5c775c476df8c4ac3ab8947e124a
GET /up/neyfilm/Pishnehadi/%D9%86%D8%B1%D9%85-%D8%A7%D9%81%D8%B2%D8%A7%D8%B1.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 1659
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-67b"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%D8%B3%D9%84.png
200 OK 1.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%D8%B3%D9%84.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d10a8dcd31f75b6398401268901111cf
52a2051f5204351e4913171d9c84feb7aedc6292
9d3a20aa83028843d3c8638584e54615cdf9f0dcdbd838cfe3739bedcbf73de1
GET /up/neyfilm/Pishnehadi/%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%D8%B3%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 1924
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-784"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/essiKalantari/Esi%20Kalantari%20-%20Esmet%20Ro%20Labhameh%5B128%5D.jpg
200 OK 132 kB URL HTTP/1.1 rozup.ir/up/neyfilm/essiKalantari/Esi%20Kalantari%20-%20Esmet%20Ro%20Labhameh%5B128%5D.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2012:12:07 11:23:29], baseline, precision 8, 500x500, components 3\012- data
Size 132 kB (131514 bytes)
Hash 1bb9c8bb7eb083de75b5cac62d898108
0bd75fec98b1842aa099b5c5a55f9667a6dd6970
2d182161a23ccbff4d0517e06706ba3d8d637570dadeac80afb30537e3abe93d
GET /up/neyfilm/essiKalantari/Esi%20Kalantari%20-%20Esmet%20Ro%20Labhameh%5B128%5D.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:08 GMT
Content-Type: image/jpeg
Content-Length: 131514
Last-Modified: Thu, 08 Aug 2013 07:58:58 GMT
Connection: keep-alive
ETag: "52034fc2-201ba"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%87%D9%85%D8%B1%D8%A7%D9%87-%D8%A7%D9%88%D9%84.png
200 OK 1.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%87%D9%85%D8%B1%D8%A7%D9%87-%D8%A7%D9%88%D9%84.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d55010f4d04529f02c1971042c38ab3d
0242dacd41a110041687fba3470af08138bf120b
5806f844be81f3b88a52143a61704d7a22c986e3b8e56d8813208d2b1481b4cb
GET /up/neyfilm/Pishnehadi/%D9%87%D9%85%D8%B1%D8%A7%D9%87-%D8%A7%D9%88%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 1881
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-759"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/NOD32-logo2-100x100.png
200 OK 11 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/NOD32-logo2-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 7cc3630c20ae4097b1b5f504e2326a99
28fb1365a8b52995b1f90ba428a767e90a9c3aca
c6104e4261eba13131bda269fca29f9ff8da34b82ec67a89e0ae033a546b3f9e
GET /up/neyfilm/ALIZARANDI/axenarmafzar/NOD32-logo2-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 10749
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-29fd"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Nero-100x100.png
200 OK 13 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Nero-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 170f21ee06dea2afc5328b9c9dbe27e0
e6e8317b9a60ea23a0fe5ab75d0ac91c1fd72a8b
e2cd6704d1aa143d18900380dcbff71c66661695ff8fc754428ed074ce2cc9c2
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Nero-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 12912
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-3270"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/chrome-100x100.png
200 OK 6.5 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/chrome-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4cd1101c6d95e009d1299de1644be63b
e85ab709713ffb1a24949cd05d336a93a33bb7e0
91e7fa0e42c31ebfe1abf6e0a8caa813b06ff202e8e0dfd8963bbe713718deab
GET /up/neyfilm/ALIZARANDI/axenarmafzar/chrome-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 6510
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-196e"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/winrar4-100x100.png
200 OK 9.4 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/winrar4-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash da360bbf560923e761b8bc660df161b7
e50c20e56c2c08cf1d1497eee84ff7f02e4e58db
4319a0555c961ca43d107616696afd30bdd6f30fec461a37271c48731bf9fe61
GET /up/neyfilm/ALIZARANDI/axenarmafzar/winrar4-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 9364
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-2494"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/vlc-player-100x100.png
200 OK 9.6 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/vlc-player-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4ff98c2c912b58c49d9dcdd8efa7f355
ed2a816b81ac32bcb590b02679c8178e97590458
fb5ce6eefde1ab8db11311213b11bd09de4388b557f2985f70f22769de52e47e
GET /up/neyfilm/ALIZARANDI/axenarmafzar/vlc-player-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 9646
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-25ae"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Adobe-Flash-Player1-100x100.png
200 OK 6.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Adobe-Flash-Player1-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 713a59cac516394ac6d234187c50c949
cf9a0b1caf1ef51c76696ae10030589437629382
21bc08eae9a8050d2e7226e6ccfb7b5a576dc3865f3114b5856a25f139f566b8
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Adobe-Flash-Player1-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/png
Content-Length: 6918
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-1b06"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/uc_2328.jpg
200 OK 96 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_2328.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x500, components 3\012- data
Hash 77e9363d7d3ebed21e182b9d077f1c41
3244408fe2b465a9d2ca387d7f0dd34d905b05b4
33a7d4badf04654881a442dcc51c09456de998d3371416303d97c15c8f2116cd
GET /up/neyfilm/ALIZARANDI/uc_2328.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 14 Dec 2022 00:00:09 GMT
Content-Type: image/jpeg
Content-Length: 96141
Last-Modified: Wed, 22 Apr 2015 16:59:54 GMT
Connection: keep-alive
ETag: "5537d38a-1778d"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f72ba04a18788730d361d184c8fabdd1
7cad0861239072e30b151379077004f8fc57fc33
deaf78c223d605e1d6b1c78ffd9ad95c8b5974b2eec8bf86460c023d09cd3e10
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DEAF78C223D605E1D6B1C78FFD9AD95C8B5974B2EEC8BF86460C023D09CD3E10"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12322
Expires: Wed, 14 Dec 2022 03:25:32 GMT
Date: Wed, 14 Dec 2022 00:00:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ddc122f836de18a0a05325a6eee9f3a3
5a48fc65a0ec1015e68cc5859c2d0611753d2037
2f1f520cc3b56d9f0ec926bfe0ab7388b6b0031c0d3b640cf18e2123b03cc962
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F1F520CC3B56D9F0EC926BFE0AB7388B6B0031C0D3B640CF18E2123B03CC962"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13852
Expires: Wed, 14 Dec 2022 03:51:02 GMT
Date: Wed, 14 Dec 2022 00:00:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f72ba04a18788730d361d184c8fabdd1
7cad0861239072e30b151379077004f8fc57fc33
deaf78c223d605e1d6b1c78ffd9ad95c8b5974b2eec8bf86460c023d09cd3e10
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DEAF78C223D605E1D6B1C78FFD9AD95C8B5974B2EEC8BF86460C023D09CD3E10"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2818
Expires: Wed, 14 Dec 2022 00:47:08 GMT
Date: Wed, 14 Dec 2022 00:00:10 GMT
Connection: keep-alive
native-scripts.yektanet.com/public/chunk/minified/footer.bfd8764144380485185d.js
200 OK 12 kB URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/footer.bfd8764144380485185d.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type Unicode text, UTF-8 text, with very long lines (12898), with no line terminators
Hash e0ec208ef06ac1894cfa27267791ff6f
2bc3f9e8c26b440ca95179c7f7f791b74c2b60fc
13e50ebcecb014556f94f2c5f21886c1c2af37bfd4236ca808752e020b414704
GET /public/chunk/minified/footer.bfd8764144380485185d.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 14 Dec 2022 00:00:10 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 05 Dec 2022 15:22:10 GMT
x-rgw-object-type: Normal
etag: W/"df720023140bf329daee625d31687072"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Wed, 14 Dec 2022 01:00:10 GMT
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.000
ar-cache: HIT
ar-request-id: cc541006542267d0ac5bd2d5aa37ae43
content-encoding: br
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/105.f36f6d25fc7e25189ab2.js
200 OK 6.8 kB URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/105.f36f6d25fc7e25189ab2.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type Unicode text, UTF-8 text, with very long lines (19524), with no line terminators
Hash f830a3379dbefcff78e0a4ccd509ec8a
c9e7e3bcee19f421c819be45ea788007bc77cb32
90f5216bda0d7b8bf009e846f6f8101cbd855148cd2adc6725b64a8aea61862d
GET /public/chunk/minified/105.f36f6d25fc7e25189ab2.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 14 Dec 2022 00:00:10 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 05 Dec 2022 15:22:10 GMT
x-rgw-object-type: Normal
etag: W/"6f410aa994e04b66a6e45c56a85e4e9b"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Wed, 14 Dec 2022 01:00:10 GMT
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 7ae9ffdf85ae68651fa0733e1bcd1759
content-encoding: br
X-Firefox-Spdy: h2
ua.yektanet.com/__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fneyfilm.rozblog.com%2Fcat%2F578&ae=%7B%7D&ad=neyfilm.rozblog.com&as=%D8%AA%DA%A9%20%D8%A2%D9%87%D9%86%DA%AF%20%D9%87%D8%A7&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=5b546873-d4c4-dfe0-b820-38f7842abc45&abw=1268&abb=5347&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B1%D8%B3%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D8%A7%D9%86%D9%87%20%D9%86%DB%8C%D8%B4%D8%A7%D8%A8%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%88%D8%B1%20%D9%85%D9%88%D8%B2%DB%8C%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%DA%A9
200 OK 42 B URL HTTP/2 ua.yektanet.com/__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fneyfilm.rozblog.com%2Fcat%2F578&ae=%7B%7D&ad=neyfilm.rozblog.com&as=%D8%AA%DA%A9%20%D8%A2%D9%87%D9%86%DA%AF%20%D9%87%D8%A7&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=5b546873-d4c4-dfe0-b820-38f7842abc45&abw=1268&abb=5347&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B1%D8%B3%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D8%A7%D9%86%D9%87%20%D9%86%DB%8C%D8%B4%D8%A7%D8%A8%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%88%D8%B1%20%D9%85%D9%88%D8%B2%DB%8C%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%DA%A9
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fneyfilm.rozblog.com%2Fcat%2F578&ae=%7B%7D&ad=neyfilm.rozblog.com&as=%D8%AA%DA%A9%20%D8%A2%D9%87%D9%86%DA%AF%20%D9%87%D8%A7&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=5b546873-d4c4-dfe0-b820-38f7842abc45&abw=1268&abb=5347&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B1%D8%B3%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D8%A7%D9%86%D9%87%20%D9%86%DB%8C%D8%B4%D8%A7%D8%A8%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%88%D8%B1%20%D9%85%D9%88%D8%B2%DB%8C%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%DA%A9 HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 14 Dec 2022 00:00:10 GMT
content-type: image/gif
content-length: 42
set-cookie: gearbox_ad_token=e6b75017-79924-416d5-53745-5b36f0fdd9659; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 11-Dec-32 00:00:10 GMT
analytics_global_token=e6b75017-79924-416d5-53745-5b36f0fdd9659; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 11-Dec-32 00:00:10 GMT
last-modified: Wednesday, 14-Dec-2022 00:00:10 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.004
ar-cache: BYPASS
ar-request-id: 9efacf69f4d1652b24358ac98031a888
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 26c6025b12d33a0674edeef8c1491ff6
084f3e27246d3f10c36f8251034a32f71e4905be
a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5744
Expires: Wed, 14 Dec 2022 01:35:54 GMT
Date: Wed, 14 Dec 2022 00:00:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 26c6025b12d33a0674edeef8c1491ff6
084f3e27246d3f10c36f8251034a32f71e4905be
a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5744
Expires: Wed, 14 Dec 2022 01:35:54 GMT
Date: Wed, 14 Dec 2022 00:00:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 26c6025b12d33a0674edeef8c1491ff6
084f3e27246d3f10c36f8251034a32f71e4905be
a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5744
Expires: Wed, 14 Dec 2022 01:35:54 GMT
Date: Wed, 14 Dec 2022 00:00:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91bfedca-f74c-4bc0-9808-bfbd384a8508.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91bfedca-f74c-4bc0-9808-bfbd384a8508.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 52310941c29a5fa39c1f50ecad222db4
164f9c5dc80de2448be587cc9e0b6b2865be6c1c
abfaee5861e073a3448d4509137a8ae41c87810dbdc1a226870e4d67b9b372d4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91bfedca-f74c-4bc0-9808-bfbd384a8508.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7515
x-amzn-requestid: 22dd6bae-36a5-4ba0-b397-379b3d9bdc1b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dGpL9EHSIAMF5gA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6398ef19-362a6bc00c386225614a01f3;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 21:31:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: l3954iwz4TwRHMAh5kIDd9SaSiLmo65LhhJIDk4i9bfXn3k-xh34kg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 21:59:56 GMT
age: 7214
etag: "164f9c5dc80de2448be587cc9e0b6b2865be6c1c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86bce3d677c0dd541440ebf38920020d
f11e21b6ad97e07b1d7103ad40a2e158e06fda73
9e23bc16cd1402d9124ebb9e625a5580f677ca9e008d3e04dc95080072fd1df4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7104
x-amzn-requestid: b1117224-be51-4e21-8b3b-01e5485f0af0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAD2yH4loAMFuWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964cf8-1382e1a6710239ec629eedb8;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:34:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Qd7ZLBasMl-7gVScLfJ4kxx2fbcyeL21COqu3913iENoLFvK8wkEvA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 22:16:33 GMT
age: 6217
etag: "f11e21b6ad97e07b1d7103ad40a2e158e06fda73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6c898b0-0050-4b61-8c35-e7fd7c302dee.png
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6c898b0-0050-4b61-8c35-e7fd7c302dee.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5493a0b2e7355d986842b80cc9cf978b
382b098f251a31dae8a448440f7900491a149054
e5ea3d6cdffdf06f115ff25b15cf133e0fead78c6c9c0d4ca3d395cbc0903082
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6c898b0-0050-4b61-8c35-e7fd7c302dee.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13172
x-amzn-requestid: 9494d0c6-6dbb-4313-ada0-877e9d3ec38e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dEqKRG_FIAMFesA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639823db-3f4ad12b6d3ee9d57b8b1e08;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 07:03:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1KzXxtNKvxWqRP2uwcKM9jtTdAy3Wirywxql5tHMWEhCDZMQLY7sSQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 07:46:55 GMT
age: 58395
etag: "382b098f251a31dae8a448440f7900491a149054"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
200 OK 5 B URL HTTP/2 audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type ASCII text, with no line terminators
Hash 68934a3e9455fa72420237eb05902327
7cb6efb98ba5972a9b5090dc2e517fe14d12cb04
fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
GET /api/v1/scripts/preview/validate/?app_id=xywHAyqU HTTP/1.1
Host: audience.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 14 Dec 2022 00:00:10 GMT
content-type: application/json
content-length: 5
access-control-allow-origin: http://neyfilm.rozblog.com
allow: GET, OPTIONS
access-control-allow-methods: GET, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Authorization
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.188
ar-cache: BYPASS
ar-request-id: afca874226e42ba268c356b9ca9f78fd
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6b84af-02ea-400c-ab94-e7774c464de0.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6b84af-02ea-400c-ab94-e7774c464de0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eecda03470e6d1e63e4c027071b78cfd
9bbfa53c2e7467ab4a98d5a683fb9c6300443e5d
c6d5454072d8a22e511ff7d623fb4d9527011b647b7fd59cf0f2008feaea63ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6b84af-02ea-400c-ab94-e7774c464de0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10712
x-amzn-requestid: c5358650-9889-4925-b861-66a14bc5a3f7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dGp0iHrRoAMFwLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6398f01c-3b6ae94b501be25057cac868;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 21:35:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jflQ6FwFFFpVVPy-2KKQ_fs1zZcS3BEEJgwNoHdAJDy9vRoajW_4Cg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 21:45:52 GMT
age: 8058
etag: "9bbfa53c2e7467ab4a98d5a683fb9c6300443e5d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c71d244-7c6d-4318-96c7-9d3870bdb107.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c71d244-7c6d-4318-96c7-9d3870bdb107.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 903afb72719c0c84e376f6e54ef26c7c
56b6accaa1f7139d849fa1da3b9b80bb884c117b
56436a6c18a432b4cfd5aa3457242dc926d085474df97eb22254eaff7e0da2a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c71d244-7c6d-4318-96c7-9d3870bdb107.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7566
x-amzn-requestid: 7d25c770-474b-494b-90d8-755ea60b125d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dEqL9GUEIAMFt3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639823e5-4bb95eb1742d50cb41628d5c;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 07:04:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dsPbCOGmmbzGJKHkLfUQfU6Od4kgTA0mDBjwIyNLWrlHphaXgd_gRw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 07:23:12 GMT
age: 59818
etag: "56b6accaa1f7139d849fa1da3b9b80bb884c117b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf99cc35-2988-4958-a87c-f7f44e2094c7.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf99cc35-2988-4958-a87c-f7f44e2094c7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f8501112ef886bfa0aaf2239cee2d312
f07542e9312ef0b42c96f2687766fe46f57f38cb
296c8dd5bdcb6ff49fcfebe464a7baa9c22bbe8ef6fef0798e92b10e1b3b1ac9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf99cc35-2988-4958-a87c-f7f44e2094c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4294
x-amzn-requestid: a906aaed-cfa3-453a-b872-87f906f6251c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dGp1ME7aoAMFWyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6398f021-23ddca2815a10a181549c5d8;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 21:35:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2uDwp7t_YtOtwnTAUFA9n_mcS-JHhi37LnqgWhLYF6We8IQl6gfCBQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 21:55:32 GMT
age: 7478
etag: "f07542e9312ef0b42c96f2687766fe46f57f38cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 8fbef4c223565311daaac957f7255f21
155f9d60dd920080a6070dbc18ea12233dbd9852
2a23e214e5d9b834f400e92e16b30fd70e01b3054b29dcd49c171a996df9e7a8
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Wed, 14 Dec 2022 00:00:11 GMT
Connection: keep-alive
X-N: S
plus.sabavision.com/csync/3P/pixel?id=yektanet
200 OK 597 B URL HTTP/2 plus.sabavision.com/csync/3P/pixel?id=yektanet
IP
ASN #44932 Fannavaran-e Idea Pardaz-e Saba PJSC
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash 91c97a3dd65bdf0bcd2fa45d5b1c1b86
68cf099726f6e1cc8f3b31ff481a1d2479fc682d
af64a6f3ffc388b91cd70eae25893f7bea7e8e7d84d2c2b41c378cfbe13651ff
GET /csync/3P/pixel?id=yektanet HTTP/1.1
Host: plus.sabavision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Dec 2022 00:00:11 GMT
content-type: image/jpeg
content-length: 597
cache-control: no-cache
cache-directive: no-cache
expires: 0
pragma: no-cache
pragma-directive: no-cache
server: nginx
x-upstream-ct: 0.000
x-upstream-ht: 0.270
x-upstream: 0
X-Firefox-Spdy: h2
ua.yektanet.com/cookie/set
200 OK 0 B URL HTTP/2 ua.yektanet.com/cookie/set
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /cookie/set HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ua.yektanet.com/cookie/iframe/
Cookie: gearbox_ad_token=e6b75017-79924-416d5-53745-5b36f0fdd9659; analytics_global_token=e6b75017-79924-416d5-53745-5b36f0fdd9659
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 14 Dec 2022 00:00:10 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-credentials: true
set-cookie: gearbox_ad_token=e6b75017-79924-416d5-53745-5b36f0fdd9659; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 11-Dec-32 00:00:10 GMT
analytics_global_token=e6b75017-79924-416d5-53745-5b36f0fdd9659; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 11-Dec-32 00:00:10 GMT
last-modified: Wednesday, 14-Dec-2022 00:00:10 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.002
ar-cache: BYPASS
ar-request-id: 8378ea119f32456ebf1f48072e67bec6
content-encoding: br
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/929.9891672dd3947978da68.js
200 OK 0 B URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/929.9891672dd3947978da68.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /public/chunk/minified/929.9891672dd3947978da68.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 14 Dec 2022 00:00:10 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 05 Dec 2022 15:22:10 GMT
x-rgw-object-type: Normal
etag: W/"cf17456fe0401ed248dda555f4021356"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Wed, 14 Dec 2022 01:00:10 GMT
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.000
ar-cache: HIT
ar-request-id: f94eebb1d0bc7de51007d0cdb5f4bb80
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=202201101400
200 OK 0 B URL HTTP/2 cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=202201101400
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /js/rozblog.com/native-rozblog.com-23662.js?v=202201101400 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Dec 2022 00:00:09 GMT
content-type: application/javascript; charset=utf-8
cache-tag: native_rozblog.com,native
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Mon, 05 Dec 2022 13:46:41 GMT
x-rgw-object-type: Normal
etag: W/"697993e2daf0538f2a02fbaebe6b7615"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202201101400
200 OK 0 B URL HTTP/2 cdn.yektanet.com/rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202201101400
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202201101400 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 00:00:09 GMT
content-type: application/javascript; charset=utf-8
cache-tag: ua_D138M2Bm,ua
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Tue, 18 Oct 2022 09:48:05 GMT
x-rgw-object-type: Normal
etag: W/"483e3c65d46da98a641fddb5d5ec97c5"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
native-removal.triboon.net/?hash=424718227,506386311,297612423,751154399,156752236
200 OK 0 B URL HTTP/2 native-removal.triboon.net/?hash=424718227,506386311,297612423,751154399,156752236
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
OPTIONS /?hash=424718227,506386311,297612423,751154399,156752236 HTTP/1.1
Host: native-removal.triboon.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: href
Referer: http://neyfilm.rozblog.com/
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 14 Dec 2022 00:00:09 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2054
ar-atime: 0.210
ar-request-id: 1703d721e53066af720d9a52ec461c5e
content-encoding: br
X-Firefox-Spdy: h2
native-removal.triboon.net/?hash=424718227,506386311,297612423,751154399,156752236
200 OK 0 B URL HTTP/2 native-removal.triboon.net/?hash=424718227,506386311,297612423,751154399,156752236
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /?hash=424718227,506386311,297612423,751154399,156752236 HTTP/1.1
Host: native-removal.triboon.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
href: http://neyfilm.rozblog.com/cat/578
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 14 Dec 2022 00:00:09 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2054
ar-atime: 0.208
ar-cache: BYPASS
ar-request-id: 270a3559cded71a11afa5a2b31b52b76
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/fp/fingerprint.js?v=umd
200 OK 0 B URL HTTP/2 cdn.yektanet.com/fp/fingerprint.js?v=umd
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /fp/fingerprint.js?v=umd HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Dec 2022 00:00:10 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 11 Dec 2022 15:54:46 GMT
vary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
etag: W/"6395fd46-7c6a"
x-zrk-us: 206
cache-control: public, max-age=3600
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
79.127.127.68
34.160.144.191
95.101.10.107
93.184.220.29
0.0.0.0