dl80.rzb.ir/Cat/11
200 OK 8.1 kB IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2939), with CRLF, LF line terminators
Hash aea31c22fc243ac5801782cbe42e627f
8e91223b35cf8f756d42790c49f06b09b188b6f7
fe9d84522e6051a000654ecb4d3c5be0b52b32cd1f8f8cda828a95e081882e79
GET /Cat/11 HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
set-cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-language: fa
content-type: text/html; charset=utf-8
vary: Accept-Encoding,User-Agent
content-length: 8107
content-encoding: gzip
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15025
Expires: Sun, 04 Dec 2022 19:36:40 GMT
Date: Sun, 04 Dec 2022 15:26:15 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2658
Cache-Control: max-age=157760
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:26:15 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 11:15:35 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 15:18:24 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 471
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5425
Expires: Sun, 04 Dec 2022 16:56:40 GMT
Date: Sun, 04 Dec 2022 15:26:15 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZAY5tl3OXiKdhdCSzU6VfXMfbyD5DKIUt2zd1OWt7tmoIQPidFJPOf9GlYMEnhLslFuWLVydXUaW4SlFVFvMGQ==
x-amz-request-id: XR53846W1CWHM1CC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 14:47:01 GMT
age: 2354
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:26:15 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
dl80.rzb.ir/temp/site.css?22
200 OK 3.9 kB URL HTTP/1.1 dl80.rzb.ir/temp/site.css?22
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (860)
Hash 787a6674aa05de4919a7c90cdbb150c9
2159cc3ec669621f05f361bd91b956e573faef9a
e234a5881c33e5ff75519381140d07f15611e92efbb0bb45ecf73437048d376c
GET /temp/site.css?22 HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/Cat/11
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Tue, 03 Jan 2023 15:26:15 GMT
content-type: text/css
last-modified: Wed, 02 Mar 2022 08:28:27 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 3945
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
dl80.rzb.ir/temp/tarahi/styles.css
200 OK 6.1 kB URL HTTP/1.1 dl80.rzb.ir/temp/tarahi/styles.css
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash 28cf21c53411f845b0888677cbc74828
25bf3bc9920ad37a3f81d88e46001cab51eea3f6
d18ec6839084bfa3a36008f9f5f03cf0de9c8c656677aac9a5a62c2b6890f5ab
GET /temp/tarahi/styles.css HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/Cat/11
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Tue, 03 Jan 2023 15:26:15 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 00:08:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6091
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
dl80.rzb.ir/temp/default/script.js
200 OK 302 B URL HTTP/1.1 dl80.rzb.ir/temp/default/script.js
IP
ASN #43754 Asiatech Data Transmission company
Hash f63434fb5b29fa6044b1a1e30e6c1162
2e7ada06c79c670f0dff3bd7d0474d07c49104e0
a9396929db33b5a927292dc2e2f33891c594811b1b37dd993abbc9db9afbb7cb
GET /temp/default/script.js HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/Cat/11
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 11 Dec 2022 15:26:15 GMT
content-type: application/javascript
last-modified: Wed, 18 Jul 2018 10:51:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 302
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
farsiaddons.com/tools/translate/index.php?bg=1
200 OK 3.8 kB URL HTTP/1.1 farsiaddons.com/tools/translate/index.php?bg=1
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (1995)
Hash a502493f9f57500ef27a256f6d051aeb
47e4995712b4f92997919757ec09dad78c11a0dd
df044f89a3f3fe792367b8e9e0139bfa40f4261624a44078edc3d914227ef454
GET /tools/translate/index.php?bg=1 HTTP/1.1
Host: farsiaddons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 15:26:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
farsiaddons.com/tools/socialize/socializer.css
200 OK 4.1 kB URL HTTP/1.1 farsiaddons.com/tools/socialize/socializer.css
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2852)
Hash ae498c10de1a3feb73155550b2b85cb1
899e849111d04e61f4574c0541a8050695749125
91efbe1cc88a0656a14802f66569933e2d4e2756cd1a91e4089059dc14631f02
GET /tools/socialize/socializer.css HTTP/1.1
Host: farsiaddons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 15:26:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
farsiaddons.com/tools/gplus/gplus.php?bg=2&n=9
200 OK 4.2 kB URL HTTP/1.1 farsiaddons.com/tools/gplus/gplus.php?bg=2&n=9
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2942)
Hash 4bdbdb39a2d3047480ec1e92bafdace5
d37a9b8638b561fa48a0ac2830904f4b09b2e48d
180b2ec58c556ac55b3468c39a1469bdbf5078291bd4e25373f758fcc67004aa
GET /tools/gplus/gplus.php?bg=2&n=9 HTTP/1.1
Host: farsiaddons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 15:26:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
dl80.rzb.ir/code/popup
200 OK 1.2 kB IP
ASN #43754 Asiatech Data Transmission company
Hash d3a16f5a58a3b9052ff490bb54f077bf
635381b2e6984ba9416b9f999c7bf54efaa2a2ff
996f06cab0c93a7f9591efcd58168049759550d7ac0f08e2547c4065e4ffdddf
GET /code/popup HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/Cat/11
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-language: fa
content-type: text/html; charset=charset
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Sun, 04 Dec 2022 15:26:15 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: pop_id=11312%2C; expires=Mon, 05-Dec-2022 03:26:15 GMT; Max-Age=43200; path=/
c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; expires=Mon, 05-Dec-2022 15:26:15 GMT; Max-Age=86400; path=/
c_t=34849638cbc1778884709939242881289334; expires=Mon, 05-Dec-2022 15:26:15 GMT; Max-Age=86400; path=/
vary: Accept-Encoding,User-Agent
content-length: 1176
content-encoding: gzip
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
www.farsiaddons.com/tools/socialize/jquery.js
200 OK 3.9 kB URL HTTP/1.1 www.farsiaddons.com/tools/socialize/jquery.js
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2088)
Hash 1b27af065728085ac2d9aa5257804b30
64aef4ff9cb36aa2aee8deeed958af71cb36d672
c779552124ef7b88fbab9798e67b33c35f276388c5a90a06b2ad1a63cd14169b
GET /tools/socialize/jquery.js HTTP/1.1
Host: www.farsiaddons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 15:26:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
www.farsiaddons.com/tools/socialize/jquery.dimensions.js
200 OK 3.9 kB URL HTTP/1.1 www.farsiaddons.com/tools/socialize/jquery.dimensions.js
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2480)
Hash fd9136288b254dca1ba6915414a7f652
973acf5b8140179ec147c8dbcbf705dfa66e3e05
13c44e8cb62d92a8ea261bc28e2669b4269f52bcdda96f3055b18107cc784fc6
GET /tools/socialize/jquery.dimensions.js HTTP/1.1
Host: www.farsiaddons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 15:26:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
www.farsiaddons.com/tools/socialize/jSocialize.js
200 OK 4.1 kB URL HTTP/1.1 www.farsiaddons.com/tools/socialize/jSocialize.js
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2815)
Hash baa92c6e2e322ec3e3f474a500dda4a7
ea2460d2fbc4895b613937ef7a1ddc36dedac9d7
e884c2016016cee2640faf240f8e6156ca6b69d317bc1d63ca6c67d435c23a29
GET /tools/socialize/jSocialize.js HTTP/1.1
Host: www.farsiaddons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 15:26:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
www.farsiaddons.com/tools/socialize/share4.png
301 Moved Permanently 0 B URL HTTP/1.1 www.farsiaddons.com/tools/socialize/share4.png
IP
ASN #49981 WorldStream B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tools/socialize/share4.png HTTP/1.1
Host: www.farsiaddons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 15:26:15 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Location: https://sex-paradise.com.ua/frontend/assets/images/main-logo.png
dl80.rzb.ir/js/site.js?7
200 OK 9.4 kB IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text, with very long lines (5730)
Hash 3a9e608b97ff4d23f8a1649f24b6ed66
794e50a615ef78e2f2bd7616c7d9e033fc4bbe9d
82faf31dfa45299d23061f2c05579901ca592090ce35f1dc48a6ff61f24ac28a
GET /js/site.js?7 HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/Cat/11
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 11 Dec 2022 15:26:15 GMT
content-type: application/javascript
last-modified: Sat, 14 May 2022 01:34:44 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 9422
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
rozblog.com/temp/pro/ads_468.jpg
200 OK 6.3 kB URL HTTP/1.1 rozblog.com/temp/pro/ads_468.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 468x60, components 3\012- data
Hash db8cac5e50e0f1be65a3ec0756ea6612
3053609e1039ab6d0d0be6adefeaf7ba7a243cf6
8f10f1e719bda34ecfc3af6b50f8273e9c9676d10612eff12aad2382d458ef1d
GET /temp/pro/ads_468.jpg HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Mon, 04 Dec 2023 15:26:15 GMT
content-type: image/jpeg
last-modified: Fri, 20 Feb 2015 09:52:01 GMT
accept-ranges: bytes
content-length: 6286
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
dl80.rzb.ir/images/loading_.gif
200 OK 771 B URL HTTP/1.1 dl80.rzb.ir/images/loading_.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 16 x 16\012- data
Hash 00ef871b291bc03a497d608a5bd8ec99
942d8fe092c1c473af19906751c2bee5322a9b55
81a161d5793ac2a33f02ddcd64fb0dc2d028616dac084e4f64e77f4898b0c4e4
GET /images/loading_.gif HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/Cat/11
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Mon, 04 Dec 2023 15:26:15 GMT
content-type: image/gif
last-modified: Sun, 04 Mar 2012 18:03:23 GMT
accept-ranges: bytes
content-length: 771
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
patoghu.com/uploads/top_icons/ie9final.gif
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/ie9final.gif
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/ie9final.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:16 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/ie9final.gif
vary: User-Agent
x-frame-options: SAMEORIGIN
pichak.net/alexa/code.php?link=dl80.rozblog.com&bgi=9&global=1&country=1&links=1&bgc=FFFFFF&borderw=1&borderc=D6D2B4
200 OK 263 B URL HTTP/1.1 pichak.net/alexa/code.php?link=dl80.rozblog.com&bgi=9&global=1&country=1&links=1&bgc=FFFFFF&borderw=1&borderc=D6D2B4
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (341), with no line terminators
Hash f5a3a655a94d193e9463e9010adf1135
17570d9cb9b05f02d33b0d5bceae28542b003390
153f841d052a2d1c21b702311365760af7a3200258fe5dcc7c9ec84e49c0543d
GET /alexa/code.php?link=dl80.rozblog.com&bgi=9&global=1&country=1&links=1&bgc=FFFFFF&borderw=1&borderc=D6D2B4 HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 263
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 04 Dec 2022 15:26:14 GMT
server: LiteSpeed
patoghu.com/uploads/top_icons/Fire-Fox.gif
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/Fire-Fox.gif
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/Fire-Fox.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/Fire-Fox.gif
vary: User-Agent
x-frame-options: SAMEORIGIN
dl80.rzb.ir/temp/tarahi/fonts/wdtv.woff
200 OK 15 kB URL HTTP/1.1 dl80.rzb.ir/temp/tarahi/fonts/wdtv.woff
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 14648, version 1.0\012- data
Hash 259c4490256daceb6a5f275cee137627
5c0eae14870f1ec6527aa64f3f675cb9063034ee
bd4bdb99aa4a1cf56a05d7a913dce42b23b4cb021148b0a0f22d836105d98fc5
GET /temp/tarahi/fonts/wdtv.woff HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://dl80.rzb.ir/temp/tarahi/styles.css
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6; pop_id=11312%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=34849638cbc1778884709939242881289334
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Tue, 06 Dec 2022 15:26:15 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:22 GMT
etag: "3938-54ef6d46-daf654b8921ad10f;;;"
accept-ranges: bytes
content-length: 14648
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
patoghu.com/uploads/top_icons/opera.gif
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/opera.gif
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/opera.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:16 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/opera.gif
vary: User-Agent
x-frame-options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b7e86b5170572f37cb889aac2c604e7
a0bb6d40b9e62b97e8efea897721a963c6222346
fcea18b15afa337b1aefd297f190d7aae76a83b22266e905675cb79481bb7133
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCEA18B15AFA337B1AEFD297F190D7AAE76A83B22266E905675CB79481BB7133"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21071
Expires: Sun, 04 Dec 2022 21:17:26 GMT
Date: Sun, 04 Dec 2022 15:26:15 GMT
Connection: keep-alive
patoghu.com/uploads/top_icons/IDM.gif
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/IDM.gif
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/IDM.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/IDM.gif
vary: User-Agent
x-frame-options: SAMEORIGIN
dl80.rzb.ir/images/no_image.png
200 OK 6.3 kB URL HTTP/1.1 dl80.rzb.ir/images/no_image.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c675d607343c154f0ef074dc145988a
2f3713c21ed04a225f16439b200e2b2a6062454e
2e8f7285f7325ed8db6a0d253158db2c8962125173a1e6973e8fcb39a325a7ba
GET /images/no_image.png HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/Cat/11
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Mon, 04 Dec 2023 15:26:15 GMT
content-type: image/png
last-modified: Sat, 12 Jan 2013 13:14:07 GMT
accept-ranges: bytes
content-length: 6278
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
patoghu.com/uploads/top_icons/babylon.png
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/babylon.png
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/babylon.png HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/babylon.png
vary: User-Agent
x-frame-options: SAMEORIGIN
patoghu.com/uploads/top_icons/Google-Chrome.gif
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/Google-Chrome.gif
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/Google-Chrome.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/Google-Chrome.gif
vary: User-Agent
x-frame-options: SAMEORIGIN
patoghu.com/uploads/top_icons/nod32.gif
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/nod32.gif
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/nod32.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/nod32.gif
vary: User-Agent
x-frame-options: SAMEORIGIN
sex-paradise.com.ua/frontend/assets/images/main-logo.png
200 OK 14 kB URL HTTP/1.1 sex-paradise.com.ua/frontend/assets/images/main-logo.png
IP
ASN #49981 WorldStream B.V.
File type PNG image data, 160 x 69, 8-bit/color RGB, non-interlaced\012- data
Hash fd5e189c3440bc8d68c6e3ba5d782dfa
f1269b884ffcf8a6bd419ae1e92bb0e52fb755d4
3dd80a7ff6210d4c7cac5cf3d90d6155c108a6d1f3b0026d85997e8ae7e02e4a
GET /frontend/assets/images/main-logo.png HTTP/1.1
Host: sex-paradise.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sun, 04 Dec 2022 15:26:15 GMT
Content-Type: image/png
Content-Length: 14460
Last-Modified: Mon, 26 Sep 2016 15:39:01 GMT
Connection: keep-alive
ETag: "57e94115-387c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, max-age=31536000, public
Accept-Ranges: bytes
pichak.net/upper/jquery.min.js
200 OK 22 kB URL HTTP/1.1 pichak.net/upper/jquery.min.js
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (39660), with CRLF line terminators
Hash 681b98b0719114946d6de2189af23f15
226c45dbdceed84658db3a1442aac66b0b16ae07
bc1a0dbab3b4a4938b0019d480467da3a6c2cae2f6b2b5632ff2b821bf23ffeb
GET /upper/jquery.min.js HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Dec 2022 15:26:14 GMT
content-type: application/javascript
last-modified: Mon, 22 Aug 2011 14:13:19 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 22214
date: Sun, 04 Dec 2022 15:26:14 GMT
server: LiteSpeed
dl80.rzb.ir/images/refresh2.svg
200 OK 276 B URL HTTP/1.1 dl80.rzb.ir/images/refresh2.svg
IP
ASN #43754 Asiatech Data Transmission company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 7082e86e2a3c9646fa1aa922b8e3a2d6
7f704127e872b5b94b8e2dd7959e2d5c9b9379a8
d1254b0bb9112500f8f39e1130f0a6c8dca1037d416e7f7d6524894b31b06b00
GET /images/refresh2.svg HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/Cat/11
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 11 Dec 2022 15:26:15 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Apr 2021 22:57:34 GMT
etag: "114-6089e85e-9f2e18d89b796b95;;;"
accept-ranges: bytes
content-length: 276
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
pichak.net/alexa/f.php?link=dl80.rozblog.com&urlweb=&bgi=9&global=1&country=1&links=1&bgc=FFFFFF
200 OK 536 B URL HTTP/1.1 pichak.net/alexa/f.php?link=dl80.rozblog.com&urlweb=&bgi=9&global=1&country=1&links=1&bgc=FFFFFF
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- troff or preprocessor input, Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash 85a3c584045b482ed73cc674a58c8dad
a72904230634d27e959c4df443f61c64b7500ff9
c58f5e7d4e17518e8974bce1204f600536eaccabacfa9adb8ff12ff2295666cb
GET /alexa/f.php?link=dl80.rozblog.com&urlweb=&bgi=9&global=1&country=1&links=1&bgc=FFFFFF HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 536
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 04 Dec 2022 15:26:14 GMT
server: LiteSpeed
patoghu.com/uploads/top_icons/kav.png
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/kav.png
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/kav.png HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/kav.png
vary: User-Agent
x-frame-options: SAMEORIGIN
patoghu.com/uploads/top_icons/kmp.gif
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/kmp.gif
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/kmp.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/kmp.gif
vary: User-Agent
x-frame-options: SAMEORIGIN
dl80.rzb.ir/include/captcha/cap9.php
200 OK 2.1 kB URL HTTP/1.1 dl80.rzb.ir/include/captcha/cap9.php
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 7b1fe414752b4dffab17540c06804fd0
e9ea5f7a24ae68129eade6e77a9a3891548c25e5
cc2028fdc0978f9efcc41aa195aea3b67ca53ec8a2d9d93b37641eb1944ccfb2
GET /include/captcha/cap9.php HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/Cat/11
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
content-length: 2066
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
dl80.rzb.ir/temp/tarahi/fonts/yekanregular.woff
200 OK 22 kB URL HTTP/1.1 dl80.rzb.ir/temp/tarahi/fonts/yekanregular.woff
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, CFF, length 21500, version 2.0\012- data
Hash 05727d32400b2008acbf7fc49251ede0
b6c1a82539a2531eb1aad7d1cf05554d5a999154
da78e001fab6f5d7b1c68e17d00fb1595c9b10085d6769a86aeb6a39dc7e43d6
GET /temp/tarahi/fonts/yekanregular.woff HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://dl80.rzb.ir/temp/tarahi/styles.css
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6; pop_id=11312%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=34849638cbc1778884709939242881289334
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Tue, 06 Dec 2022 15:26:15 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:25 GMT
etag: "53fc-54ef6d49-80b982f1d7ce7ee2;;;"
accept-ranges: bytes
content-length: 21500
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
dl80.rzb.ir/weblog/file/loading/88.gif
200 OK 6.0 kB URL HTTP/1.1 dl80.rzb.ir/weblog/file/loading/88.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 50 x 50\012- data
Hash 093445ee241c72e6dca01dc570c230dc
32adb71ec06b5d29ec62c5511328d5970228b86d
d40495f2a0e830c47fe4cd50574c68e206292f63545a0684516db0cd8716ee0e
GET /weblog/file/loading/88.gif HTTP/1.1
Host: dl80.rzb.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/Cat/11
Cookie: PHPSESSID=00ca93ab71bf6c5dd4e09a04ec4a15d6
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Mon, 04 Dec 2023 15:26:15 GMT
content-type: image/gif
last-modified: Thu, 02 Feb 2012 21:52:24 GMT
accept-ranges: bytes
content-length: 5972
date: Sun, 04 Dec 2022 15:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
patoghu.com/uploads/top_icons/winrar.gif
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/winrar.gif
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/winrar.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/winrar.gif
vary: User-Agent
x-frame-options: SAMEORIGIN
patoghu.com/uploads/top_icons/codec.png
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/codec.png
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/codec.png HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/codec.png
vary: User-Agent
x-frame-options: SAMEORIGIN
patoghu.com/uploads/top_icons/nero2.gif
301 Moved Permanently 707 B URL HTTP/1.1 patoghu.com/uploads/top_icons/nero2.gif
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /uploads/top_icons/nero2.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
location: https://patoghu.com/uploads/top_icons/nero2.gif
vary: User-Agent
x-frame-options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 15:11:19 GMT
cache-control: public,max-age=3600
age: 896
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
farsiaddons.com/tools/socialize/socializer.css
200 OK 4.0 kB URL HTTP/1.1 farsiaddons.com/tools/socialize/socializer.css
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2707)
Hash 8eaad8004ef2aa51a895f3c53ce0c53d
b453ed5fa25d72fc944cc728acc64b3c04fd94c6
83aef070d683e9f17227be60365682d983214ca6af3ede0352dc7b1abc99f241
GET /tools/socialize/socializer.css HTTP/1.1
Host: farsiaddons.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 15:26:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4b4af9bc40acb3a758c8cb5a648fb375
26070d5fc34be8c30a9e15b0b827568df089bdfb
a6e8a7385f0661bd4ce4655fa8af71a1e88767796fef89b25f069a0eb17012a0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A6E8A7385F0661BD4CE4655FA8AF71A1E88767796FEF89B25F069A0EB17012A0"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=374
Expires: Sun, 04 Dec 2022 15:32:29 GMT
Date: Sun, 04 Dec 2022 15:26:15 GMT
Connection: keep-alive
pichak.net/alexa/ir.png
200 OK 512 B IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced\012- data
Hash 2ac099e190547501704d309d59831d2b
f027cd8ce65efc2a4432f42c7ca25c7638b4d0a8
2354a8a69f05bf7b0fcfc5ed2f89facd8bd1d692d34513acc066103417783c44
GET /alexa/ir.png HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pichak.net/alexa/f.php?link=dl80.rozblog.com&urlweb=&bgi=9&global=1&country=1&links=1&bgc=FFFFFF
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Dec 2022 15:26:14 GMT
content-type: image/png
last-modified: Sat, 06 Sep 2014 11:05:15 GMT
accept-ranges: bytes
content-length: 512
date: Sun, 04 Dec 2022 15:26:14 GMT
server: LiteSpeed
cleverjump.org/counter.js
200 OK 5.6 kB URL HTTP/1.1 cleverjump.org/counter.js
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with CRLF line terminators
Hash 83126dc4af783a2179ab362a5bbec530
b1fe91477d92ab09066f28ddda5b31a4bf0f1689
cb1ef4607e93916a5dd30beae4617069924cb5f10edb65d8f93468c3fbdc1dc4
GET /counter.js HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sun, 04 Dec 2022 15:26:16 GMT
Content-Type: application/javascript
Content-Length: 5571
Last-Modified: Wed, 20 Jan 2021 12:50:32 GMT
Connection: keep-alive
ETag: "60082718-15c3"
Expires: Mon, 05 Dec 2022 15:26:16 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash 31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2644
Cache-Control: max-age=152679
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:26:16 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 09:50:55 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
pichak.net/upper/scrolltopcontrol.php?t=26
200 OK 1.0 kB URL HTTP/1.1 pichak.net/upper/scrolltopcontrol.php?t=26
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 4cbbf854fbb04a4a7d864d5d997394ba
d1447660614c7feddf975a262802299c39bbca45
ad506601c66863c2b237753a52c88215de22a0d082b228531d625048cb525208
GET /upper/scrolltopcontrol.php?t=26 HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 1049
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 04 Dec 2022 15:26:14 GMT
server: LiteSpeed
cleverjump.org/hit?z0;s1280*1024*24;fbSfDYkUQefcnFnGWctCECqX8NZlTHH;cshb2;r;uhttp%3A%2F%2Fdl80.rzb.ir%2FCat%2F11;h%D8%A7%D9%81.%D8%AA%DB%8C.%D9%BE%DB%8C;0.19040345808467518
200 OK 0 B URL HTTP/1.1 cleverjump.org/hit?z0;s1280*1024*24;fbSfDYkUQefcnFnGWctCECqX8NZlTHH;cshb2;r;uhttp%3A%2F%2Fdl80.rzb.ir%2FCat%2F11;h%D8%A7%D9%81.%D8%AA%DB%8C.%D9%BE%DB%8C;0.19040345808467518
IP
ASN #49981 WorldStream B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hit?z0;s1280*1024*24;fbSfDYkUQefcnFnGWctCECqX8NZlTHH;cshb2;r;uhttp%3A%2F%2Fdl80.rzb.ir%2FCat%2F11;h%D8%A7%D9%81.%D8%AA%DB%8C.%D9%BE%DB%8C;0.19040345808467518 HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sun, 04 Dec 2022 15:26:16 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
P3P: CP=CleverJump
Set-Cookie: _cjuh=QPXMfOehXAlCjooD7zmuuo37BiHpJK; expires=Mon, 04-Dec-2023 15:26:16 GMT; Max-Age=31536000; path=/hit; httponly; SameSite=None; Secure
patoghu.com/uploads/top_icons/kav.png
200 OK 2.3 kB URL HTTP/2 patoghu.com/uploads/top_icons/kav.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 9f43d6ab4f9d28dbcdf4a503f097a1d5
99b3806d2c8b541ec0a7d98c98f287a0982a0d2b
3a7f90735ffdb1a8f4b47b4edf1063dc7b0124af160db9262ade76b7b4eaad75
GET /uploads/top_icons/kav.png HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31557600, public
expires: Tue, 03 Jan 2023 15:26:17 GMT
content-type: image/png
last-modified: Thu, 07 Feb 2013 02:29:57 GMT
accept-ranges: bytes
content-length: 2308
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
vary: User-Agent
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
patoghu.com/uploads/top_icons/kmp.gif
200 OK 1.6 kB URL HTTP/2 patoghu.com/uploads/top_icons/kmp.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 32 x 31\012- data
Hash 1edd4475f3972a997faaa0484a846e32
c603a87cbe3e2d220a02d236e20cb56462dc4def
9a7728d68a74ed88123f6e9009a3596f890958a2e7c08e148604ded34e96945f
GET /uploads/top_icons/kmp.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31557600, public
expires: Tue, 03 Jan 2023 15:26:17 GMT
content-type: image/gif
last-modified: Thu, 29 Sep 2011 04:35:08 GMT
accept-ranges: bytes
content-length: 1573
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
vary: User-Agent
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
patoghu.com/uploads/top_icons/Fire-Fox.gif
200 OK 1.7 kB URL HTTP/2 patoghu.com/uploads/top_icons/Fire-Fox.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 32 x 31\012- data
Hash 36eb536274c4e4c3c875167dae11afa1
f30aad5c649a7faff6ee0ce08695fcdb01f9797f
71ef1f791cbee473eca1faee74647af2b6cae53dfd84cbf0fd73455d178b375d
GET /uploads/top_icons/Fire-Fox.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=31557600, public
expires: Tue, 03 Jan 2023 15:26:17 GMT
content-type: image/gif
last-modified: Tue, 05 May 2009 17:18:20 GMT
accept-ranges: bytes
content-length: 1742
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
vary: User-Agent
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
patoghu.com/uploads/top_icons/babylon.png
200 OK 2.4 kB URL HTTP/2 patoghu.com/uploads/top_icons/babylon.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 96cf632236fd84475c3a3fb6d96bdc5a
27abfc8c1c62e05660a2bbd04628698d809d178f
46a294808c5549f8921d43f93b61e3becd39b342c8250379549b8efdd3e4d742
GET /uploads/top_icons/babylon.png HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31557600, public
expires: Tue, 03 Jan 2023 15:26:17 GMT
content-type: image/png
last-modified: Wed, 06 May 2009 07:58:29 GMT
accept-ranges: bytes
content-length: 2417
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
vary: User-Agent
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
patoghu.com/uploads/top_icons/winrar.gif
200 OK 1.8 kB URL HTTP/2 patoghu.com/uploads/top_icons/winrar.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 32 x 32\012- data
Hash 7533e81baf5417a4690a8e1317adc8a3
65f1aea78992bdaf196c1680e485b2a95dcd677c
cd0776170a5d153884dc070dd51d478a618525487ebd7d9e8a52e3ed6c4e324e
GET /uploads/top_icons/winrar.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31557600, public
expires: Tue, 03 Jan 2023 15:26:17 GMT
content-type: image/gif
last-modified: Thu, 29 Sep 2011 04:54:02 GMT
accept-ranges: bytes
content-length: 1805
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
vary: User-Agent
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
patoghu.com/uploads/top_icons/Google-Chrome.gif
200 OK 1.7 kB URL HTTP/2 patoghu.com/uploads/top_icons/Google-Chrome.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 32 x 32\012- data
Hash f967bc899cf313e1e2238c6e2b0df295
0a2dac9aed32602d123a022e02245b53d71a9703
37b62da38bbe227a0753e8f1afb5cd8618b2781e972fa26e084b6cae60f46c7c
GET /uploads/top_icons/Google-Chrome.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31557600, public
expires: Tue, 03 Jan 2023 15:26:17 GMT
content-type: image/gif
last-modified: Thu, 29 Sep 2011 04:53:49 GMT
accept-ranges: bytes
content-length: 1675
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
vary: User-Agent
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.axgig.com/images/81484950783043184984.gif
404 Not Found 1.8 kB URL HTTP/1.0 www.axgig.com/images/81484950783043184984.gif
IP
Hash 89f55855d75cca289c1aedfd51bfe51e
5e48819017e053d2af89219a1e3af67afd95e4af
6ca8e372349257d7eb5c9bb5c31d0248ad6f9921b121d6b0c66c0c013e7236f8
GET /images/81484950783043184984.gif HTTP/1.1
Host: www.axgig.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.0 404 Not Found
cache-control: no-cache
content-type: text/html
x-reason: MediaRequest
patoghu.com/uploads/top_icons/codec.png
200 OK 2.0 kB URL HTTP/2 patoghu.com/uploads/top_icons/codec.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash f8735f5970b0195f17df180071adb23a
0c78ce87ab3ed42fc4044cae411d7286179553f6
d3c0bae24915d063fc324b9dd89600f3e9949fdcc74521e3d9fcd2c109ca5aa8
GET /uploads/top_icons/codec.png HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31557600, public
expires: Tue, 03 Jan 2023 15:26:17 GMT
content-type: image/png
last-modified: Wed, 06 May 2009 07:16:00 GMT
accept-ranges: bytes
content-length: 1980
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
vary: User-Agent
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
patoghu.com/uploads/top_icons/nero2.gif
200 OK 1.8 kB URL HTTP/2 patoghu.com/uploads/top_icons/nero2.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 32 x 32\012- data
Hash 7823db1712b89503e359d5b71dc2cec8
9d0a079e86c83d89426da36ed9257f960c882a4e
73592d4f9e9c5702a9f4ccbb436e4f812342dd2731f7c1acf3d1b09e894907f0
GET /uploads/top_icons/nero2.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31557600, public
expires: Tue, 03 Jan 2023 15:26:17 GMT
content-type: image/gif
last-modified: Thu, 29 Sep 2011 04:53:55 GMT
accept-ranges: bytes
content-length: 1825
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
vary: User-Agent
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
patoghu.com/uploads/top_icons/ie9final.gif
200 OK 1.5 kB URL HTTP/2 patoghu.com/uploads/top_icons/ie9final.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 32 x 31\012- data
Hash 6b227390d6d59ac6172198116c3a23a9
9babd4d5bd9e640f547815ea948d0e2398a8e243
711b611f8c1aa3f5ffa757a3bb10066a4edb685f057c5a7215e6711251a9c6c7
GET /uploads/top_icons/ie9final.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=31557600, public
expires: Tue, 03 Jan 2023 15:26:17 GMT
content-type: image/gif
last-modified: Sun, 27 Mar 2011 03:05:32 GMT
accept-ranges: bytes
content-length: 1453
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
vary: User-Agent
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
patoghu.com/uploads/top_icons/opera.gif
200 OK 1.5 kB URL HTTP/2 patoghu.com/uploads/top_icons/opera.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 32 x 32\012- data
Hash 316c024cb7ce56e3fea328c79dedce23
98405b94f28128468695100488f7eea0a38ff69a
5ec64ec6d3a4c021782370bf28895c0f1810b7305d6bada6f6824b63d05a6a18
GET /uploads/top_icons/opera.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=31557600, public
expires: Tue, 03 Jan 2023 15:26:17 GMT
content-type: image/gif
last-modified: Thu, 29 Sep 2011 04:35:10 GMT
accept-ranges: bytes
content-length: 1462
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
vary: User-Agent
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
pichak.net/alexa/bgs/bg9.png
200 OK 13 kB URL HTTP/1.1 pichak.net/alexa/bgs/bg9.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 143 x 155, 8-bit/color RGBA, non-interlaced\012- data
Hash 5e0c3b2f7dabd75db3e14065a2cf5dc5
499eb3eee6b5c555539622697fa4004d02c26456
bc00ec8251315f5b4167373aed6d6efc6d9c5e4685c5d0ba826d42ec8f5738f9
GET /alexa/bgs/bg9.png HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pichak.net/alexa/f.php?link=dl80.rozblog.com&urlweb=&bgi=9&global=1&country=1&links=1&bgc=FFFFFF
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Dec 2022 15:26:14 GMT
content-type: image/png
last-modified: Thu, 23 Aug 2012 09:52:59 GMT
accept-ranges: bytes
content-length: 12707
date: Sun, 04 Dec 2022 15:26:14 GMT
server: LiteSpeed
pichak.net/alexa/bl.png
200 OK 18 kB IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 2888c06d170757a8c89a89244aa5f606
dd43ae3d3dbba0dae69f5280885605639f830a8f
b3f61b55a8f7eb2c4ee2527ea4f313ddf00283db4bcdf77345dd2ab139fcaadf
GET /alexa/bl.png HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pichak.net/alexa/f.php?link=dl80.rozblog.com&urlweb=&bgi=9&global=1&country=1&links=1&bgc=FFFFFF
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Dec 2022 15:26:14 GMT
content-type: image/png
last-modified: Mon, 04 Aug 2014 11:18:06 GMT
accept-ranges: bytes
content-length: 18439
date: Sun, 04 Dec 2022 15:26:14 GMT
server: LiteSpeed
patoghu.com/uploads/top_icons/IDM.gif
200 OK 709 B URL HTTP/2 patoghu.com/uploads/top_icons/IDM.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 32 x 31\012- data
Hash 10b7945fde75c94d5a12512af91eaecd
438078677f3df631b43ee8e55f306176601ca944
346d30928fff4d0db8a749d316f60a037e73c438d5a9c4679e6d054860673029
GET /uploads/top_icons/IDM.gif HTTP/1.1
Host: patoghu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dl80.rzb.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=31557600, public
expires: Tue, 03 Jan 2023 15:26:17 GMT
content-type: image/gif
last-modified: Mon, 28 Sep 2009 03:00:25 GMT
accept-ranges: bytes
content-length: 709
date: Sun, 04 Dec 2022 15:26:17 GMT
server: LiteSpeed
vary: User-Agent
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
pichak.net/upper/26.png
200 OK 5.7 kB IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 61 x 68, 8-bit/color RGBA, non-interlaced\012- data
Hash cb9ed6c5a15454c8bb974f1dc2b1b418
22306f7b420c80d030d03cb6a4c16698c2fc953b
596ec127009e9eae9ef12f95d905720e0c70a522fee972f4e341b6cba9270932
GET /upper/26.png HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dl80.rzb.ir/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Dec 2022 15:26:14 GMT
content-type: image/png
last-modified: Wed, 14 Dec 2011 14:18:25 GMT
accept-ranges: bytes
content-length: 5720
date: Sun, 04 Dec 2022 15:26:14 GMT
server: LiteSpeed
pichak.net/alexa/world.png
200 OK 18 kB URL HTTP/1.1 pichak.net/alexa/world.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 21de4eb098c759cf9578a9ae5b86d96d
ade43f3dca721ead64ac0173d87d018c953ac599
c37c1d76c518daea0082f668bd63e72414addb71b5d6f9fec7bd1633a2745760
GET /alexa/world.png HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pichak.net/alexa/f.php?link=dl80.rozblog.com&urlweb=&bgi=9&global=1&country=1&links=1&bgc=FFFFFF
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 11 Dec 2022 15:26:14 GMT
content-type: image/png
last-modified: Mon, 04 Aug 2014 11:18:05 GMT
accept-ranges: bytes
content-length: 18473
date: Sun, 04 Dec 2022 15:26:14 GMT
server: LiteSpeed
cleverjump.org/hit/get-uid.php
200 OK 30 B URL HTTP/1.1 cleverjump.org/hit/get-uid.php
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with no line terminators
Hash 97090d667c557c1dd4412377f9e9e8e1
3458a5c83d1cb377947ed57ee695d6a80adb1f2f
000768cd122dd3ca3beea96df1c4e55237c87d80f64483bf46f865053a319347
Analyzer Verdict Alert fortinet Malware
GET /hit/get-uid.php HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://dl80.rzb.ir
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Cookie: _cjuh=QPXMfOehXAlCjooD7zmuuo37BiHpJK
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sun, 04 Dec 2022 15:26:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Access-Control-Allow-Origin: http://dl80.rzb.ir
Access-Control-Allow-Credentials: true
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZVl/PP6KGWfu2OHyI+I+oQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: eUHbKPzRJ3cA8BT/CbQQvgmQiYo=
cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=202201104015
200 OK 23 kB URL HTTP/2 cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=202201104015
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
File type Unicode text, UTF-8 text, with very long lines (65454), with no line terminators
Hash 3961b4cd9c0fa4380ab69eee87f795a5
22f353c4ebb0fe5bd0b856ec137ef8562bad6968
6cd1ec91612dc66ea3d75e92dd5a61120bf36d81ddec1fd4a8bcbfefa5176f6d
GET /js/rozblog.com/native-rozblog.com-23662.js?v=202201104015 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 15:26:16 GMT
content-type: application/javascript; charset=utf-8
cache-tag: native_rozblog.com,native
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Wed, 30 Nov 2022 12:19:39 GMT
x-rgw-object-type: Normal
etag: W/"1d1c4277fd7a4a4dcb0a0002681edd5f"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cac552464d6ed6d71a69863ea252fb6a
c86d920ed76632e9b5cf631d77431056a23bb002
6a24f4606d4ffd7675de8339dd1d34f5ba05558a470e761ae457b186ef869820
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A24F4606D4FFD7675DE8339DD1D34F5BA05558A470E761AE457B186EF869820"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20907
Expires: Sun, 04 Dec 2022 21:14:43 GMT
Date: Sun, 04 Dec 2022 15:26:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cac552464d6ed6d71a69863ea252fb6a
c86d920ed76632e9b5cf631d77431056a23bb002
6a24f4606d4ffd7675de8339dd1d34f5ba05558a470e761ae457b186ef869820
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A24F4606D4FFD7675DE8339DD1D34F5BA05558A470E761AE457B186EF869820"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20907
Expires: Sun, 04 Dec 2022 21:14:43 GMT
Date: Sun, 04 Dec 2022 15:26:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6db5448041ebae1eaebb7cf36925f1f2
1656eb821b452c43f17f43f7cb7fb56d1dfcfe9a
fb96a69103b5d2682fc299369201a1b6e04ae2d1ec11defb68bfc272eb71ecb2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FB96A69103B5D2682FC299369201A1B6E04AE2D1EC11DEFB68BFC272EB71ECB2"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14333
Expires: Sun, 04 Dec 2022 19:25:09 GMT
Date: Sun, 04 Dec 2022 15:26:16 GMT
Connection: keep-alive
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash d9dace4f9e0277c17372dde71a0f93c4
bc03b4c48d603487ab2d4a18a9be8558b9d6621e
a3b50a4ce6eb3b3dd980bf4be3d8a9e8c7f2ea993a4cae3cbff6f93990089ad8
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=673
Date: Sun, 04 Dec 2022 15:26:16 GMT
Connection: keep-alive
X-N: S
ua.yektanet.com/__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fdl80.rzb.ir%2FCat%2F11&ae=%7B%7D&ad=dl80.rzb.ir&as=%D8%A7%D9%81.%D8%AA%DB%8C.%D9%BE%DB%8C&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=fc57d0a9-f01f-0106-fab0-fb500591185c&abw=1268&abb=4293&aby=1280&abz=1024&al=1280&am=939&abk=%D9%BE%DB%8C%20%D8%B3%DB%8C%20%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF
200 OK 42 B URL HTTP/2 ua.yektanet.com/__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fdl80.rzb.ir%2FCat%2F11&ae=%7B%7D&ad=dl80.rzb.ir&as=%D8%A7%D9%81.%D8%AA%DB%8C.%D9%BE%DB%8C&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=fc57d0a9-f01f-0106-fab0-fb500591185c&abw=1268&abb=4293&aby=1280&abz=1024&al=1280&am=939&abk=%D9%BE%DB%8C%20%D8%B3%DB%8C%20%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fdl80.rzb.ir%2FCat%2F11&ae=%7B%7D&ad=dl80.rzb.ir&as=%D8%A7%D9%81.%D8%AA%DB%8C.%D9%BE%DB%8C&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=fc57d0a9-f01f-0106-fab0-fb500591185c&abw=1268&abb=4293&aby=1280&abz=1024&al=1280&am=939&abk=%D9%BE%DB%8C%20%D8%B3%DB%8C%20%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Sun, 04 Dec 2022 15:26:16 GMT
content-type: image/gif
content-length: 42
set-cookie: gearbox_ad_token=4e77faec-c00ba-a121e-e9758-85addde511ce2; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Wed, 01-Dec-32 15:26:16 GMT
analytics_global_token=4e77faec-c00ba-a121e-e9758-85addde511ce2; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Wed, 01-Dec-32 15:26:16 GMT
last-modified: Sunday, 04-Dec-2022 15:26:16 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2063
ar-atime: 0.180
ar-cache: BYPASS
ar-request-id: 533d2f2d51a2b2b09c7c49a78b48f218
accept-ranges: bytes
X-Firefox-Spdy: h2
audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
200 OK 5 B URL HTTP/2 audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type ASCII text, with no line terminators
Hash 68934a3e9455fa72420237eb05902327
7cb6efb98ba5972a9b5090dc2e517fe14d12cb04
fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
GET /api/v1/scripts/preview/validate/?app_id=xywHAyqU HTTP/1.1
Host: audience.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://dl80.rzb.ir
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Sun, 04 Dec 2022 15:26:16 GMT
content-type: application/json
content-length: 5
access-control-allow-origin: http://dl80.rzb.ir
allow: GET, OPTIONS
access-control-allow-methods: GET, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Authorization
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.194
ar-cache: BYPASS
ar-request-id: e8c6e451973098c5d006f381540fc5e1
accept-ranges: bytes
X-Firefox-Spdy: h2
plus.sabavision.com/csync/3P/pixel?id=yektanet
200 OK 597 B URL HTTP/2 plus.sabavision.com/csync/3P/pixel?id=yektanet
IP
ASN #44932 Fannavaran-e Idea Pardaz-e Saba PJSC
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash 91c97a3dd65bdf0bcd2fa45d5b1c1b86
68cf099726f6e1cc8f3b31ff481a1d2479fc682d
af64a6f3ffc388b91cd70eae25893f7bea7e8e7d84d2c2b41c378cfbe13651ff
GET /csync/3P/pixel?id=yektanet HTTP/1.1
Host: plus.sabavision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 15:26:17 GMT
content-type: image/jpeg
content-length: 597
cache-control: no-cache
cache-directive: no-cache
expires: 0
pragma: no-cache
pragma-directive: no-cache
server: nginx
x-upstream-ct: 0.000
x-upstream-ht: 0.289
x-upstream: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 231fdf9745b4e6dfd3822094e04f3b39
a69c0eca5c0d1747377d808eb8af67ead302838c
154ee8d54118e93e7a017789114142bb35b0f27176879f61c4bddfc836b0e0b2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "154EE8D54118E93E7A017789114142BB35B0F27176879F61C4BDDFC836B0E0B2"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=570
Expires: Sun, 04 Dec 2022 15:35:47 GMT
Date: Sun, 04 Dec 2022 15:26:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3599
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 15:26:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3599
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 15:26:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3599
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 15:26:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2636f91bb8fa4d9bb7bef114c248a9ae
8637105f41058bc0d2b259d462b560881928adb6
3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10431
x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsCGEwxIAMF34g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PQ7xh995cd1UVi3z42EVZGjQjHLLvtAP5BBC-xLEEGr4mEiXS6fC-w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:47:06 GMT
age: 63551
etag: "8637105f41058bc0d2b259d462b560881928adb6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vNP2rQwmWTntetjJyjonO8N_YOBqvQuZUm42BWX7c1GoX7jASOIpCg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:49:42 GMT
age: 63395
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db1701b7b9d161a0c935bb6e10b17893
22a8c4bd58c729c1abcf794466e8f3231dfb034b
b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:42:39 GMT
age: 63818
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:55:20 GMT
age: 34257
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1521243a6fc065bb631bfbde22886fa2
527220e4e8cd1065ce05fcd0694d0d703d817e2e
b83ebf768bbfb34f49d5467f3dfb43ceb3ca3d30d3454e6f37db9aef72d7689a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11482
x-amzn-requestid: d1db05ab-bd5d-4ad4-96b4-8f439152e435
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clssNEeAoAMFh_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc181-0221c53842a2f5ef071e8071;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UZ5kblxfN8fkp55YeSpUA55GzDxZgsLpFZrYTsdJBihf53HLCN0hTA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 22:17:35 GMT
age: 61722
etag: "527220e4e8cd1065ce05fcd0694d0d703d817e2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 63736
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
native-removal.triboon.net/?hash=61880904,220975048,230115880,696321697,990334549
200 OK 19 B URL HTTP/2 native-removal.triboon.net/?hash=61880904,220975048,230115880,696321697,990334549
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type JSON data\012- , ASCII text
Hash e3b9c64ad768cb0789f9a59dbb2503f7
371c834ddad061176d5410bd2e6ba5d6ef5d9fc4
dac7d9e138e4dc4d37bcc15dd7fd2a281da87f1731cbfff9687cca0a83d48c92
OPTIONS /?hash=61880904,220975048,230115880,696321697,990334549 HTTP/1.1
Host: native-removal.triboon.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: href
Referer: http://dl80.rzb.ir/
Origin: http://dl80.rzb.ir
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Sun, 04 Dec 2022 15:26:17 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: http://dl80.rzb.ir
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2050
ar-atime: 0.200
ar-request-id: 8cf9f2c80b3803b96ee3fee14f4cadeb
content-encoding: br
X-Firefox-Spdy: h2
nfetch.yektanet.com/api/v2/load
200 OK 1.3 kB URL HTTP/2 nfetch.yektanet.com/api/v2/load
IP
ASN #204544 Dade Pardazi Mobinhost Co LTD
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1256), with no line terminators
Hash c254bf5511b0a2401fe462e15baa5de2
8ac80c0ba03f4e910b19c7efb721372a0beb2707
2564dee6127873b7aa9511b20688dd0c2463ce8d5966dc0189aee165ccb1e4a3
POST /api/v2/load HTTP/1.1
Host: nfetch.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 272
Origin: http://dl80.rzb.ir
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Cookie: gearbox_ad_token=4e77faec-c00ba-a121e-e9758-85addde511ce2; analytics_global_token=4e77faec-c00ba-a121e-e9758-85addde511ce2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 15:26:17 GMT
content-type: application/json; charset=utf-8
content-length: 1317
vary: Origin
access-control-allow-origin: http://dl80.rzb.ir
access-control-allow-credentials: true
set-cookie: yn_unrgc=AAAAAAE%3D.tgC%2BbEVBiF7VtzC4kwpdz8ztAkKcVgdH6sZb7jgUFy4; Max-Age=1800; Domain=.nfetch.yektanet.com; HttpOnly; Secure; SameSite=None
yn_unrgv=AAAAAAAAAAAB.VfARxt0W5dWgo6pR3PzoEbPCZem%2FKav1e%2Ft8%2FZOvQpQ; Domain=.nfetch.yektanet.com; Expires=Sun, 04 Dec 2022 20:29:59 GMT; HttpOnly; Secure; SameSite=None
yn_usg=AAAAAAAAAAAB.VfARxt0W5dWgo6pR3PzoEbPCZem%2FKav1e%2Ft8%2FZOvQpQ; Max-Age=3600; Domain=.yektanet.com; HttpOnly; Secure; SameSite=None
yn_urgn=RU1QVFk%3D.YEt9APuXRsH6lxmBnnF0%2FJXh7TcUvIiy6allyYrAbMo; Max-Age=604800; Domain=.yektanet.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/929.9891672dd3947978da68.js
200 OK 9.5 kB URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/929.9891672dd3947978da68.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type ASCII text, with very long lines (11351), with no line terminators
Hash ad7f8c43947cd3cc25dcfff9edc196ae
79afdea44fe0c9d538c070580d806ac441e56164
199c52803495eae8fe7e639a27d250194de8d9a6429b085c32817e80bfb2c4d4
GET /public/chunk/minified/929.9891672dd3947978da68.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Cookie: gearbox_ad_token=4e77faec-c00ba-a121e-e9758-85addde511ce2; analytics_global_token=4e77faec-c00ba-a121e-e9758-85addde511ce2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Sun, 04 Dec 2022 15:26:18 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 30 Nov 2022 08:34:54 GMT
x-rgw-object-type: Normal
etag: W/"cf17456fe0401ed248dda555f4021356"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Sun, 04 Dec 2022 16:26:18 GMT
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.000
ar-cache: HIT
ar-request-id: fb8b98322b72791261e5172e887b5189
content-encoding: br
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/105.f36f6d25fc7e25189ab2.js
200 OK 0 B URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/105.f36f6d25fc7e25189ab2.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /public/chunk/minified/105.f36f6d25fc7e25189ab2.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Cookie: gearbox_ad_token=4e77faec-c00ba-a121e-e9758-85addde511ce2; analytics_global_token=4e77faec-c00ba-a121e-e9758-85addde511ce2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Sun, 04 Dec 2022 15:26:18 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 30 Nov 2022 08:34:54 GMT
x-rgw-object-type: Normal
etag: W/"6f410aa994e04b66a6e45c56a85e4e9b"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Sun, 04 Dec 2022 16:26:18 GMT
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 1fe9910e6930ffc39c318195aaba8356
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202201104015
200 OK 0 B URL HTTP/2 cdn.yektanet.com/rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202201104015
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202201104015 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 15:26:16 GMT
content-type: application/javascript; charset=utf-8
cache-tag: ua_D138M2Bm,ua
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Tue, 18 Oct 2022 09:48:05 GMT
x-rgw-object-type: Normal
etag: W/"483e3c65d46da98a641fddb5d5ec97c5"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/footer.bfd8764144380485185d.js
200 OK 0 B URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/footer.bfd8764144380485185d.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /public/chunk/minified/footer.bfd8764144380485185d.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dl80.rzb.ir/
Cookie: gearbox_ad_token=4e77faec-c00ba-a121e-e9758-85addde511ce2; analytics_global_token=4e77faec-c00ba-a121e-e9758-85addde511ce2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Sun, 04 Dec 2022 15:26:18 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 30 Nov 2022 08:34:54 GMT
x-rgw-object-type: Normal
etag: W/"df720023140bf329daee625d31687072"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Sun, 04 Dec 2022 16:26:18 GMT
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.000
ar-cache: HIT
ar-request-id: e1fdedfdb9e90b97fb1c7a34c0baeab7
content-encoding: br
X-Firefox-Spdy: h2
79.127.127.68
23.36.77.32
217.23.10.44
93.184.220.29
34.117.237.239
0.0.0.0